How to remove produpd.exe
- File Details
- Overview
- Analysis
produpd.exe
The module produpd.exe has been detected as Trojan.Carberp
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
d75acebfb74d46255552190fcd2a261b |
| Size: |
596 KB |
| First Published: |
2017-06-07 18:05:49 (6 years ago) |
| Latest Published: |
2017-11-09 10:15:12 (6 years ago) |
| Status: |
Trojan.Carberp (on last analysis) |
|
| Analysis Date: |
2017-11-09 10:15:12 (6 years ago) |
| %appdata%\vdi\shared\product updater |
|
56.3% |
|
|
34.4% |
|
|
3.1% |
|
|
3.1% |
|
|
3.1% |
|
| Windows 7 |
93.8% |
|
| Windows Vista |
3.1% |
|
| Windows 10 |
3.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0002bfbb |
| Name |
Size of data |
MD5 |
| .text |
430080 |
21e8e6d8c8fc0aa10bafb6c619fb2714 |
| .rdata |
110592 |
ab18ace04f37e3d5c2154e950f1c8f82 |
| .data |
15360 |
c0660cc911983f766d48f20355f97c4d |
| .tls |
512 |
1f354d76203061bfdd5a53dae48d5435 |
| .rsrc |
28160 |
101066b7c57364adb9ecfa57871a4117 |
| .reloc |
25088 |
5871cc87372e9acdc64d351868338ca7 |
