Gridinsoft Logo
File Icon

ProduKey.exe PUP Passview Analysis

Updated 1 year ago
Checked by Malware Check
ProduKey.exe

Technical Analysis

File Name ProduKey.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.177.174
Database Version 2024-05-23 19:00:14 UTC
⚠

PUP.Win64.Passview.dd!n

Malware family: Passview

N/A
Detection Rate
114,784
File Size (bytes)
2024-05-23
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
9a074dfa8278bce7b2359a21a75e33bd
SHA1
8bd1b7e22c7dbb9dc2528f3ee5fdb2a427a9aae1
SHA256
7ca5993d43443713f0e41724c84c1aa9ccc54c09ee74c9b488234af92d358fea
SHA512
17f5aacf5fb513dcdef98d3b80f16160fe68bc8c36cd697f0ba6adba164f4ba0473acc14e499cdd94439263770940d9b0945e801122f66bff2d00c7be6afeb8e
ImpHash
82a400b414e8056f21aedfd859b484a8

PE Analysis

Basic Information

▼
Icon
Hash: 7ef9b7a09b352e41238fce1f1c417096
Fuzzy: cfdcf09c47d4099479ecd6cc05160fc1
dHash: 44b2686938d8cc00
Image Base 0x140000000
Entry Point 0x1400128a0
Compilation Time 2014-08-21 08:29:56
Checksum 0x00022d43 (Actual: 0x00022d43)
OS Version 4.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path c:\Projects\VS2005\ProduKey\x64\Release\ProduKey.pdb
Digital Signature SignerInfo.version must be 1, not 0
Imports 11 libraries
Exports 0 functions
Resources 30 Resources
Sections 5 Sections

Version Information

▼
CompanyName NirSoft
FileDescription ProduKey
FileVersion 1.67
InternalName ProduKey
LegalCopyright Copyright © 2005 - 2014 Nir Sofer
OriginalFilename ProduKey.exe
ProductName ProduKey
ProductVersion 1.67
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 73,248 bytes 73,728 bytes 6.16 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C799336C78D0E816D766DE508F8A396C
.rdata 0x00013000 15,386 bytes 15,872 bytes 5.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ AB1C1A8EC42699A39B5F9ABB423C75AE
.data 0x00017000 4,648 bytes 1,024 bytes 0.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 97240998BBD6D03D9B90D98460F5BDCB
.pdata 0x00019000 2,904 bytes 3,072 bytes 4.77 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F07CA2842661345A7968F0CE1654B5DF
.rsrc 0x0001a000 13,344 bytes 13,824 bytes 4.08 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F15E1AAE33E0D18F1F49BD56A140C75C

Resource Analysis

▼
Total Resources: 30 (11,598 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 1 308 bytes
2.7%
RT_BITMAP 3 1,432 bytes
12.3%
RT_ICON 3 1,336 bytes
11.5%
RT_MENU 2 1,934 bytes
16.7%
RT_DIALOG 4 3,652 bytes
31.5%
RT_STRING 11 1,714 bytes
14.8%
RT_ACCELERATOR 1 88 bytes
0.8%
RT_GROUP_CURSOR 1 20 bytes
0.2%
RT_GROUP_ICON 2 54 bytes
0.5%
RT_VERSION 1 696 bytes
6%
RT_MANIFEST 1 364 bytes
3.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

SignerInfo.version must be 1, not 0

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

PUP.Win64.Passview.dd!n Removal

Gridinsoft has the capability to identify and eliminate PUP.Win64.Passview.dd!n without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware