home

Protection_ID.eXe

PiD Team's Protection ID v0.6.4.0

ProtectionID Ltd/GmBH.

Publisher:
[PiD Team] (CDKiller/TippeX)  (signed by ProtectionID Ltd/GmBH.)

Product:
PiD Team's Protection ID v0.6.4.0

Description:
PiD Team's Protection ID

Version:
0.6.4.0

MD5:
405edfc9267873ec6c3383959b250fe0

SHA-1:
19634cc60fac2fe749d57b533fe3abc10a702a72

SHA-256:
dd3ad6a5164e7b66d95ea18604002e87329ed1942299fba7a82c9caaa5b7909f

Scanner detections:
4 / 68

Status:
Clean  (4 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/19/2024 10:06:05 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Clod976.Trojan
1.3.0.4959

Norman
Suspicious_Gen2.UYOWQ
11.20140426

Rising Antivirus
PE:Trojan.VBInject!1.64FE
23.00.65.14424

VIPRE Antivirus
Trojan.Win32.Generic
28194

File size:
1008.2 KB (1,032,416 bytes)

Product version:
0.6.4.0

Copyright:
Copyright © [PiD Team] 2002-2010

Original file name:
Protection_ID.eXe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
ProtectionID Ltd/GmBH.

Authority:
Root Agency

Valid from:
2/11/2007 6:13:36 PM

Valid to:
1/1/2040 12:59:59 AM

Subject:
CN=ProtectionID Ltd/GmBH.

Issuer:
CN=Root Agency

Serial number:
621A414694B40BBC4333FE8BF55EC113

File PE Metadata
Compilation timestamp:
7/8/2010 5:57:24 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:IKq8X/dGOyfXJuGSGu4jPyVYT4w0sfU0ZlQJU51:nq8wOyvJWGNmyTjf3OJ81

Entry address:
0x9241

Entry point:
E9, BA, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, 49, 00, 50, 52, 4F, 54, 45, 43, 54, 69, 4F, 4E, 20, 69, 44, 20, 76, 30, 2E, 36, 2E, 34, 2E, 30, 20, 4A, 55, 4C, 59, 20, 6F, 77, 6E, 61, 67, 65, 0D, 0A, 77, 65, 20, 69, 6E, 6E, 6F, 76, 61, 74, 65, 2C, 20, 77, 65, 20, 64, 6F, 6E, 27, 74, 20, 72, 65, 70, 6C, 69, 63, 61, 74, 65, 20, 6F, 74, 68, 65, 72, 20, 70, 65, 6F, 70, 6C, 65, 73, 20, 77, 6F, 72, 6B, 0D, 0A, 62, 74, 77, 2C, 20, 73, 70, 79, 69, 6E, 67, 20, 6F, 75, 72, 20, 73, 6F, 75, 72, 63, 65, 20, 69, 73...
 
[+]

Packer / compiler:
Xtreme-Protector v1.05

Code size:
370 KB (378,880 bytes)

Scan Protection_ID.eXe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.