DS-Setup.exe PUP DownStudio - 扫描报告
| 在线病毒检测器 | v.1.0.186.174 |
| 数据库版本: | 2024-09-07 17:00:23 |
PUP.Win32.DownStudio.mz!c
| File | DS-Setup.exe |
| 已检查 | 2024-09-07 15:04:50 |
| MD5 | aa839c4ce778f6c5b7ed3b7421d03c46 |
| SHA1 | da3b42365aa4bc0187d07d923d27b8bf7c12383e |
| SHA256 | 72edf2df847b2ef47a4c048f9fa0cd6acf18065d6ee62959628afe9d92d6e384 |
| SHA512 | 7e8c05dcebada0996ea4427d21d09fe2a9eba98302a7485092bad84a1c9107255f497b2b1aaf355abb9568af1fee2af1e8a5ba52371b49d109588360f561a453 |
| Imphash | c8d5713e748ddf15d7fa0d940d367580 |
| File Size | 75922872 bytes |
PUP.Win32.DownStudio.mz!c 移除
Gridinsoft能够识别并消除PUP.Win32.DownStudio.mz!c，无需进一步的用户干预。
- 首先下载Gridinsoft反恶意软件到您的计算机。
- 双击gsam-zh-install.exe文件，并按照屏幕上的说明安装程序。
- Gridinsoft反恶意软件安装完成后，程序将在扫描屏幕上打开。
- 点击"标准扫描"按钮。
- 扫描过程完成后，点击"立即清除"以移除检测到的威胁。
- 如果需要，重启系统以完成移除过程。
文件版本信息
| Build | rv158 |
| CompanyName | Download Studio Project |
| FileDescription | Download Studio Setup |
| FileVersion | 1.21.0.0 (rv158) |
| InternalName | DS-Setup.exe |
| LegalCopyright | 2024 (c) Download Studio Project |
| OriginalFilename | DS-Setup.exe |
| ProductName | Download Studio Setup |
| ProductVersion | 1.21.0.0 |
| Translation | 0x04b0 0x04b0 |
可移植可执行文件信息
 |
3d3e538a4fda132994634c0c5960a012 8ddde8a305c798f73cfc7b053d57e6a5 8c3af8b8e8e43a8c |
| Image Base: | 0x00400000 |
| Entry Point: | 0x004039c0 |
| Compilation: | 2024-06-24 18:33:21 |
| Checksum: | 0x0486abbe (Actual: 0x0486abbe) |
| OS Version: | 5.1 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | Chain verification from 1.3.6.1.4.1.311.60.2.1.3=UA, 2.5.4.15=Private Organization, CN=GRAND MEDYA\, TOV, 2.5.4.5=39638734, O=GRAND MEDYA\, TOV, L=Odesa, C=UA (serial:1134515227303628590318727680469764066, sha1:2f0ffe2afbff5c9d40bd8b6832997a322df7fcb0) failed: Unable to build a validation path for the certificate "Incorporation Country: UA; Business Category: Private Organization; Common Name: GRAND MEDYA, TOV; Serial Number: 39638734; Organization: GRAND MEDYA, TOV; Locality: Odesa; Country: UA" - no issuer matching "Common Name: SSL.com EV Code Signing Intermediate CA RSA R3, Organization: SSL Corp, Locality: Houston, State/Province: Texas, Country: US" was found |
| Sections: | 6 |
| Imports: | ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32, |
| Exports: | 0 |
| Resources: | 13 |
区块
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x00007828 | 0x00007a00 | a177f7e7483883f28f18b6a24bf9be7f | 6.43 |
| .rdata | 0x00009000 | 0x00001ba6 | 0x00001c00 | 08cad3ee3751a51b6e19322ecd6bd9f4 | 5.00 |
| .data | 0x0000b000 | 0x0006ce40 | 0x00000200 | a0da8271cd3d300ee2040875722842e0 | 2.17 |
| .ndata | 0x00078000 | 0x00208000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .rsrc | 0x00280000 | 0x0001df38 | 0x0001e000 | 9316dc7f1c11c23383b80e6f4e5b74d3 | 5.04 |
| .reloc | 0x0029e000 | 0x00000a60 | 0x00000c00 | 7624a6fe5437b783aa792529b12422ba | 2.60 |
