home

pe17eb4bb6.dll

ProtectDISC

Protect Software GmbH

Publisher:
Protect Software GmbH  (signed and verified)

Product:
ProtectDISC

Description:
ProtectDISC Core

Version:
9, 2, 6, 0

MD5:
defd401960eb3c63e9e8515575af9b6f

SHA-1:
657f2a9b16a8c547c23c425d3cf8b454d65aed79

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/19/2024 11:55:27 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dropper.Gen
7.9.1.92

File size:
3.7 MB (3,837,568 bytes)

Product version:
9, 2, 0, 0

Copyright:
Copyright (C) 2005-2009 Protect Software GmbH

Original file name:
ProtectDISC.EXE

File type:
Dynamic link library (Win32 DLL)

Language:
German (Germany)

Common path:
C:\Documents and Settings\{user}\Application data\protectdisc\pe17eb4bb6.dll

Digital Signature
Signed by:
Protect Software GmbH

Authority:
GlobalSign nv-sa

Valid from:
10/13/2009 11:03:35 AM

Valid to:
10/14/2011 11:03:31 AM

Subject:
E=cert@protect-software.com, CN=Protect Software GmbH, O=Protect Software GmbH, L=Dortmund, S=NRW, C=DE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001244D4657B6

File PE Metadata
Compilation timestamp:
11/12/2009 3:09:24 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:3SdT6S69yPUZlBnmRlJZtYw+FBTm02WY7R:sOS6cY/QZ7+rmuu

Entry address:
0x8168C5

Entry point:
E9, FE, 75, F8, FF, B9, 03, 00, 00, 00, D3, E2, 8D, 44, 90, 08, E8, 1E, D2, 0C, 00, 59, C3, FE, C8, 88, 7C, 24, 0C, 9C, 60, 66, 0F, BA, E5, 09, F6, D0, 9C, F8, 66, C7, 04, 24, EE, 3A, 04, B5, 68, A3, 42, 92, 78, C0, C8, 07, 88, 44, 24, 08, E9, 35, D9, 0C, 00, 34, 17, B6, 39, 49, 69, EA, 75, 56, 7A, 5F, 12, A1, 28, 7B, DE, 3D, BC, EF, CA, 05, BC, 47, DF, FF, 02, 2E, 3E, A3, D1, 89, 1A, BD, 20, 4C, 9E, 1D, 72, 5A, B5, F2, 12, 1D, 80, E3, 3F, E6, 46, AA, 92, 41, 3D, DF, 87, 8C, AC, F7, 09, BF, 11, 7D, 2C, 51...
 
[+]

Packer / compiler:
Xtreme-Protector v1.05

Code size:
8.9 MB (9,330,688 bytes)

Scan pe17eb4bb6.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.