How to remove ChaDaoCheng.dll
- File Details
- Overview
- Analysis
ChaDaoCheng.dll
The module ChaDaoCheng.dll has been detected as Adware.Funshion
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
a4faaea739218d86f30f9875917ba4e1 |
| Size: |
461 KB |
| First Published: |
2018-02-12 17:11:25 (6 years ago) |
| Latest Published: |
2018-04-23 18:07:57 (6 years ago) |
| Status: |
Adware.Funshion (on last analysis) |
|
| Analysis Date: |
2018-04-23 18:07:57 (6 years ago) |
Overview
| %sysdrive%\system volume information\_restore{ab745cfb-68f6-40e9-b0db-3eb1865a6002} |
| %profile% |
| A0196787.dll |
| ChaDaoCheng.dll |
| Windows XP |
50.0% |
|
| Windows 7 |
50.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x000324a9 |
| Name |
Size of data |
MD5 |
| .text |
326144 |
03ad8e422ba5f94a669bcf0f9821e905 |
| .rdata |
88576 |
dca381fb8ded8ac860084245886e1a54 |
| .data |
14848 |
a20bee34da70288fcef2c7008aded57d |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc |
1536 |
c14b0fc3ded50a6c1972cb881b102822 |
| .reloc |
33792 |
fa887a4882a40c924db4da3ab12b86c6 |
