home

PPTBC.EXE

Protector Plus for Windows

Proland Software Pvt. Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Protector Plus Taskbar Control’.
Publisher:
Proland Software   (signed by Proland Software Pvt. Ltd.)

Product:
Protector Plus for Windows

Description:
Protector Plus for Windows System tray component

Version:
8, 0, 68, 1

MD5:
e0606e29ed91720863b3bc096a8e6cc9

SHA-1:
7e7de9f1f1d0bc99b59149a7e44e2d50285bd462

SHA-256:
a22b027ab0b32d34497077ea91b43fdd42dffab5489c16a5eccf40115b05e3c9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:57:10 PM UTC  (today)

File size:
1.2 MB (1,278,632 bytes)

Product version:
8, 0, 68, 1

Copyright:
(c) Proland Software, 1991 - 2008

Trademarks:
Protector Plus

Original file name:
PPTBC.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Proland Software Pvt. Ltd.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
12/7/2006 12:00:00 AM

Valid to:
12/6/2008 11:59:59 PM

Subject:
CN=Proland Software Pvt. Ltd., OU=Secure Application Development, O=Proland Software Pvt. Ltd., L=Bangalore, S=Karnataka, C=IN

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
245198671971936C4AC247EFB1F201A9

File PE Metadata
Compilation timestamp:
8/25/2008 11:50:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:DJ5gNp4FqDfELcCY4baZ0lfC1MbismgUVws:DJ5gNQ6CY4b9fyG

Entry address:
0x23D51

Entry point:
55, 8B, EC, 6A, FF, 68, E8, 73, 44, 00, 68, 20, 2F, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 3C, 22, 44, 00, 33, D2, 8A, D4, 89, 15, 28, EA, 45, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 24, EA, 45, 00, C1, E1, 08, 03, CA, 89, 0D, 20, EA, 45, 00, C1, E8, 10, A3, 1C, EA, 45, 00, 6A, 01, E8, 55, 30, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 4B, 20, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
260 KB (266,240 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Protector Plus Taskbar Control

Command:
C:\protec~1\pptbc.exe


Scan PPTBC.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.