anyprotect.exe

The application anyprotect.exe has been detected as adware by 3 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler named APSnotifierPP1 triggered by a time event.
MD5:
7a0709fd6ae472ffb42f31c1f54feced

SHA-1:
114be8861de24df6bbb8809636b8cb822db7bb8e

SHA-256:
c241ce2df07324492d67b5c50b9d10f47ad44b045bdb4112bc2cb1bf9a4547c3

Scanner detections:
3 / 68

Status:
Adware

Analysis date:
4/19/2024 12:35:53 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Adware Generic_r.WQ
2014.0.4235

ESET NOD32
Detection.Undefined
7.0.302.0

Reason Heuristics
PUP.CMIAnyProtect.Task.K
14.12.22.7

File size:
4.6 MB (4,849,664 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\anyprotectex\anyprotect.exe

File PE Metadata
Compilation timestamp:
11/5/2014 6:54:31 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:X0RXrigPfQFJ8Qdc/G5x8Imn/9al2NoguUukdTACTVSILA2h33KaWZFWcE6fprjC:sXrhPwufYlydTACRS92h3mkcXrjC

Entry address:
0x185783

Entry point:
E8, 90, 98, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 70, 61, 68, 00, 75, 02, F3, C3, E9, 17, 99, 00, 00, 8B, C1, 83, 60, 04, 00, C7, 00, B0, 55, 63, 00, C6, 40, 08, 00, C3, 8B, 41, 04, 85, C0, 75, 05, B8, B8, 55, 63, 00, C3, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 57, 8B, F9, 74, 2D, 56, FF, 75, 08, E8, 7F, 5D, 00, 00, 8D, 70, 01, 56, E8, A3, 2D, 00, 00, 59, 59, 89, 47, 04, 85, C0, 74, 11, FF, 75, 08, 56, 50, E8, CC, 99, 00, 00, 83, C4, 0C, C6, 47, 08, 01, 5E, 5F, 5D, C2, 04, 00, 8B, FF, 56, 8B, F1, 80, 7E, 08, 00...
 
[+]

Code size:
2.1 MB (2,154,496 bytes)

Scheduled Task
Task name:
APSnotifierPP1

Trigger:
Time

Description:
Performs maintenance tasks for the APS subsystem


Remove anyprotect.exe - Powered by Reason Core Security