home

pppeuser.exe

PowerPanel Personal Edition 1.5.2

Cyber Power Systems, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PowerPanel Personal Edition User Interaction’.
Publisher:
Cyber Power Systems, Inc.  (signed and verified)

Product:
PowerPanel Personal Edition 1.5.2

Description:
PowerPanel Personal Edition User Interaction

Version:
1.5.2

MD5:
e47cddaa1cae1c52287f0e5fada9ce2c

SHA-1:
49030e787f59ac6538cfc51a4bfedd8fbb045fc4

SHA-256:
054da624d1662d6fe3c08f1aa5c13b2da46c00c505a84b18dfb18cabdd1a5fad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 3:03:21 PM UTC  (today)

File size:
370.4 KB (379,280 bytes)

Product version:
1.5.2

Copyright:
Copyright 2005-2015 Cyber Power Systems, Inc. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Cyber Power Systems, Inc.

Authority:
VeriSign, Inc.

Valid from:
8/13/2013 8:00:00 AM

Valid to:
11/8/2015 7:59:59 AM

Subject:
CN="Cyber Power Systems, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Cyber Power Systems, Inc.", L=Taipei, S=Taipei, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
33C8362D06DB8EFA431A4525B47BFDD8

File PE Metadata
Compilation timestamp:
6/8/2015 5:44:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:5HPau/oVbriF6aVIpa+Sw42qdkSRcAd6e:VPasiaVIY2HSRFN

Entry address:
0x2A9B1

Entry point:
E8, D3, 67, 00, 00, E9, 16, FE, FF, FF, 8B, C1, 83, 60, 04, 00, 83, 60, 08, 00, C7, 00, 10, 67, 44, 00, C3, 53, 8B, 5C, 24, 08, 56, 57, 8B, F9, C7, 07, 10, 67, 44, 00, 8B, 03, 85, C0, 74, 26, 50, E8, B9, 2A, 00, 00, 8B, F0, 46, 56, E8, 8E, 53, 00, 00, 85, C0, 59, 59, 89, 47, 04, 74, 12, FF, 33, 56, 50, E8, 1B, 68, 00, 00, 83, C4, 0C, EB, 04, 83, 67, 04, 00, C7, 47, 08, 01, 00, 00, 00, 8B, C7, 5F, 5E, 5B, C2, 04, 00, 8B, C1, 8B, 4C, 24, 04, C7, 00, 10, 67, 44, 00, 8B, 09, 83, 60, 08, 00, 89, 48, 04, C2, 08...
 
[+]

Entropy:
6.3112

Code size:
264 KB (270,336 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PowerPanel Personal Edition User Interaction

Command:
C:\pppeuser.exe


Scan pppeuser.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.