» ProtectDISC.EXE
Overview
Analysis
File Details

ProtectDISC.EXE

ProtectDISC

Protect Software GmbH

File name:

ProtectDISC.EXE

Publisher:

Protect Software GmbH (signed and verified)

Product:

ProtectDISC

Description:

ProtectDISC Core

Version:

8, 1, 1, 207

MD5:

e4aebe6efe23a956463be05d34171c69

SHA-1:

7a71000204633f402f6e5778aed1b141342b213d

SHA-256:

77b3fa033b4f5ae392f6e739686a9013e59037c666928d43d09dd78bbd7c3716

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/25/2024 11:41:36 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.PECompact-1

0.98/17411

File size:

2.1 MB (2,246,616 bytes)

Product version:

8, 1, 0, 0

Original file name:

ProtectDISC.EXE

Language:

German (Germany)

Common path:

C:\users\{user}\appdata\local\temp\a0083cc.tmp

Digital Signature

Signed by:

Protect Software GmbH

Authority:

GlobalSign nv-sa

Valid from:

11/7/2007 5:26:12 AM

Valid to:

11/7/2009 5:26:12 AM

Subject:

E=cert@protectdisc.com, CN=Protect Software GmbH, O=Protect Software GmbH, C=DE

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000011619A54DF2

File PE Metadata

Compilation timestamp:

2/8/2008 2:50:15 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:SX1tmjhTtfKpfsmZlQlgLs+hkpZcl/hlvsti4vcDen:SXXmj3RmQe3ka0E40Den

Entry address:

0x105FCF

Entry point:

B8, C0, 16, 6A, 02, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 96, 28, 37, 8E, 2C, 32, 27, D3, 8D, 78, 80, 70, 1D, F4, 73, 9D, 42, EF, 5E, 6D, 40, 6B, 1B, 47, 84, 4E, AC, C7, 32, 10, AC, 97, 2A, 73, FF, 15, 0D, 8D, 1E, E6, 17, 17, E9, 7C, 46, C7, 14, ED, 0C, F5, 1E, 0C, 8F, 96, 2D, 4C, 8E, 6A, 2D, 47, 77, 12, 6E, ED, 11, C9, 45, 9F, BF, 33, 7E, F1, 1D, C9, B5, 4E, 95, 05, 22, C9, 41, 66, D2, 3E, 3F, 5A, 5C, 45, A9, 55, AA, 38, 17... 
[+]

Packer / compiler:

PECompact v2

Code size:

1.1 MB (1,196,032 bytes)

Scan ProtectDISC.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.