home

installer.exe

ProtectDisc

Protect Software GmbH

Publisher:
Protect Software GmbH  (signed and verified)

Product:
ProtectDisc

Description:
ProtectDisc Driver x64 Driver Installation Helper

Version:
11, 0, 0, 11

MD5:
4bf94daa7e382fde14cfa8f65e296216

SHA-1:
03348ae97a91fb819db9ab2f09b7b4a8ba95c659

SHA-256:
b8e4cf0f53a8098a066b0291bdc932c01eeab2f941bb387555394178e5adc9f8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 3:19:27 PM UTC  (today)

File size:
395 KB (404,440 bytes)

Product version:
11, 0, 0, 11

Copyright:
Copyright (C) 2007-2008 Protect Software GmbH

Original file name:
setup.exe

File type:
Executable application (Win64 EXE)

Language:
German (Germany)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\installer.exe

Digital Signature
Signed by:
Protect Software GmbH

Authority:
GlobalSign nv-sa

Valid from:
11/7/2007 4:26:12 AM

Valid to:
11/7/2009 4:26:12 AM

Subject:
E=cert@protectdisc.com, CN=Protect Software GmbH, O=Protect Software GmbH, C=DE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000011619A54DF2

File PE Metadata
Compilation timestamp:
7/30/2008 4:23:18 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
6144:XGB4N08NzgeD0iOWM2RfMLk9b51RgQ/B65w4kIYDjloN9OCp3lQNsZWh:WiWzWM6kjQ/BE6+NdeNsQh

Entry address:
0x1EB4

Entry point:
48, 83, EC, 28, E8, 4B, 35, 00, 00, 48, 83, C4, 28, E9, 56, FE, FF, FF, CC, CC, 48, 8D, 05, B9, 84, 00, 00, 48, 89, 01, E9, 81, 36, 00, 00, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8D, 05, 9F, 84, 00, 00, 8B, DA, 48, 8B, F9, 48, 89, 01, E8, 62, 36, 00, 00, F6, C3, 01, 74, 08, 48, 8B, CF, E8, 39, 12, 00, 00, 48, 8B, C7, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, C3, CC, CC, CC, 40, 53, 48, 83, EC, 20, 48, 8B, D9, E8, B6, 35, 00, 00, 4C, 8D, 1D, 5F, 84, 00, 00, 4C, 89, 1B, 48, 8B, C3, 48, 83, C4, 20, 5B...
 
[+]

Entropy:
6.3092

Code size:
36 KB (36,864 bytes)

Scan installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.