home

ProtectDISC.EXE

ProtectDISC

Protect Software GmbH

Publisher:
Protect Software GmbH  (signed and verified)

Product:
ProtectDISC

Description:
ProtectDISC Core

Version:
8, 1, 5, 305

MD5:
abf2edf74f9ac0b7838a253dc9887d50

SHA-1:
653575d111ccb34660d42c7319f2c92a62dad11a

SHA-256:
e1ba59049852509a01240cd7e1ec21cf17aea5bd3013e762e52ccaba0c7bdaf6

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 7:22:14 AM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Packed.PECompact-1
0.98/18155

File size:
2.3 MB (2,460,632 bytes)

Product version:
8, 1, 0, 0

Copyright:
Copyright (C) 2005-2008 Protect Software GmbH

Original file name:
ProtectDISC.EXE

Language:
German (Germany)

Common path:
C:\users\{user}\appdata\local\temp\a0083c2.tmp

Digital Signature
Signed by:
Protect Software GmbH

Authority:
GlobalSign nv-sa

Valid from:
11/7/2007 3:26:12 AM

Valid to:
11/7/2009 3:26:12 AM

Subject:
E=cert@protectdisc.com, CN=Protect Software GmbH, O=Protect Software GmbH, C=DE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000011619A54DF2

File PE Metadata
Compilation timestamp:
3/5/2008 7:18:36 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:O+VCQCcy4Q3yefz3TED0Xp/8427HFUOpIwnh:Oakk4mFNl

Entry address:
0x11A9CF

Entry point:
B8, 88, 46, 6F, 02, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, CC, C8, CC, DF, A3, B5, 9F, C9, 68, 7F, 46, 92, 29, 00, 3A, DD, 35, A4, C1, 18, 8C, 5D, C8, E9, 70, 32, 30, 8E, BF, F3, 60, 3B, 0C, F2, C6, 93, 8D, BA, 2B, 79, 99, 4F, 86, 1E, 65, 89, CA, 09, A7, 17, D8, 35, F1, E2, 65, F5, 46, 3A, 77, 63, 71, 4F, 18, 0C, F4, 62, 82, E3, F3, A1, AF, C2, 84, E5, 19, B1, 0B, 17, FF, 05, 74, 52, 8A, 5E, 8B, 48, 1B, 40, 8B, B1, 3C, 68, 06...
 
[+]

Entropy:
7.9984

Packer / compiler:
PECompact v2

Code size:
1.2 MB (1,277,952 bytes)

Scan ProtectDISC.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.