ChromsteraPublic PUP Chromnius Analysis

PUP Chromnius

Updated on 2023-09-18 (1 year ago)

Online Virus Checker	v.1.0.139.174
DB Version:	2023-09-18 14:02:12

PUP.Win32.Chromnius.dg!c

Chromnius is a browser hijacker application that uses a customized version of Google's Chromium-based browser, claiming to enhance online security by blocking pop-ups and tracker cookies. However, it often redirects users to a fake search engine called Chromnius Search, which ultimately relies on legitimate search engines like Yahoo for search results, potentially compromising users' privacy and online experience.

File	ChromsteraPublic
Checked	2023-09-18 11:56:04
MD5	4bb331ead48449e15ff9aa51fee8fa25
SHA1	113bffa93601f83ea002317c2f9dd055640cf56c
SHA256	2ab2a97ce09791d77c39da25b974384da6ad9c61f63f4beabfe2f0eddecd73ff
SHA512	8e76046d447b1319cc1503a61e6c54baba6b09233b07a4ef51c04969c874781d41a1eb26e534eb061e9cbfe564512225f4b331fb0a74aaf3379bd30d1ad6e80d
Imphash	21314122cd4542a6b9b297f52a87acbe
File Size	7262528 bytes

PUP.Win32.Chromnius.dg!c Removal

Gridinsoft has the capability to identify and eliminate PUP.Win32.Chromnius.dg!c without requiring further user intervention.

Start by downloading Gridinsoft Anti-Malware to your computer.
Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
Click on the "Standard Scan" button.
After the scanning process is finished, click on "Clean Now" to remove any detected threats.
If prompted, restart your system to complete the removal process.

Signers

GlobalSign	GlobalSign nv-sa (BE)
GlobalSign Code Signing Root R45	GlobalSign nv-sa (BE)
GlobalSign GCC R45 CodeSigning CA 2020	Dragon Boss Solutions LLC (AE)
Verification	OK

File Version Information

CompanyName	Chromstera Browser
FileDescription	Chromstera Browser Installer
FileVersion	1.0
InternalName	ChromsteraPublic
LegalCopyright	Copyright (C) 2023 Chromstera Browser
OriginalFileName	ChromsteraPublic.exe
ProductName	Chromstera Browser
ProductVersion	1.0
Translation	0x0409 0x04b0

Portable Executable Info

	5e172c0dc3b3b45ca039c9e793a07b29 a0944f9361276e2a5e874864a5c88639 f8e2eae6b696c6cc
Image Base:	0x00400000
Entry Point:	0x005e0862
Compilation:	2023-07-27 09:36:39
Checksum:	0x006f2bc4 (Actual: 0x006f2bc4)
OS Version:	6.0
PDB Path:	C:\ReleaseAI\win\Release\stubs\x86\ExternalUi.pdb
PEiD:	PE32 executable (GUI) Intel 80386, for MS Windows
Sign:	OK
Sections:	5
Imports:	KERNEL32,
Exports:	0
Resources:	44

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Entropy
.text	0x00001000	0x0026acb6	0x0026ae00	6609ee5ad35366535f89171104fd9407	6.45
.rdata	0x0026c000	0x0008f55a	0x0008f600	82a48c8eed166a4419b55b922166495d	4.60
.data	0x002fc000	0x0000d240	0x00003c00	624471f60c55363d0bdc9e3921a90c7e	4.77
.rsrc	0x0030a000	0x000298b4	0x00029a00	0541a6101798a79b746007837d07f229	5.19
.reloc	0x00334000	0x00028bec	0x00028c00	7704ec72484064d3d713def4a99cb43b	6.51