iprotectorservice.exe

It runs as a separate (within the context of its own process) windows Service named “Internet Protector System Service”.
MD5:
4d1f6bfeacda83afa13a5512e58b0211

SHA-1:
4f285681d9c94e7268c0787ac898bd3570194af7

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
5/15/2025 9:16:36 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Suspicious
10686

Sophos
Sus/Madcode-A
4.71

File size:
716.5 KB (733,696 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\inet protector\iprotectorservice.exe

File PE Metadata
Compilation timestamp:
6/20/1992 2:52:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:OgGSHwTUNTb7DXrMk2ll+VEyEyOA7ZwMoXA7Rn7pQgYj01URkwE4:OC/NTvDBCEVYpMJ7qgYj01ULE

Entry address:
0x9F328

Entry point:
55, 8B, EC, 83, C4, F0, B8, 80, F0, 49, 00, E8, B8, 75, F6, FF, 33, C0, 55, 68, 69, F3, 49, 00, 64, FF, 30, 64, 89, 20, E8, A5, 1D, F8, FF, 85, C0, 74, 07, E8, 64, F6, FF, FF, EB, 05, E8, A9, F6, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, 68, 70, F3, 49, 00, C3, E9, CA, 4A, F6, FF, EB, F8, E8, B3, 50, F6, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6735

Developed / compiled with:
Microsoft Visual C++

Code size:
633 KB (648,192 bytes)

Service
Display name:
Internet Protector System Service

Service name:
InternetProtectorService

Description:
Part of iNet Protector

Type:
Win32OwnProcess

Group:
TDI


Scan iprotectorservice.exe - Powered by Reason Core Security