home

ProtectionRemover.exe

PDF Protection Remover

PDFArea

Publisher:
PDFArea

Product:
PDF Protection Remover

Version:
2.00

MD5:
0c8209b3f78a2a8312132a858d947976

SHA-1:
8f44ffa357c27948505952d357065a9bf5ac1db6

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
1/2/2026 10:01:42 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Suspicious
7.1.1

Comodo Security
UnclassifiedMalware
15156

File size:
484 KB (495,616 bytes)

Product version:
2.00

Copyright:
Copyright (C) 2008

Original file name:
ProtectionRemover.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pdfarea\pdf protection remover\protectionremover.exe

File PE Metadata
Compilation timestamp:
10/2/2008 8:15:18 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:tDKpqtxjLHwlbJRkmd8e/jT1TVqlaD0A0TQF:tAqrjrwlbQmd8QzqlaD0T0F

Entry address:
0xB018D

Entry point:
68, DC, 90, 70, E6, E8, 9F, 20, 07, 00, 7C, 60, E3, CD, 48, 42, C2, C2, 34, BC, B3, AC, B0, 2C, E0, 8D, E7, 1F, 35, EA, 96, 2B, 88, 74, E8, 8E, 57, 39, 37, C0, B6, E6, 3D, 34, 1C, 32, B4, 8E, FA, 22, 61, E8, 5A, 13, 4A, 85, 37, 7B, 38, F1, 36, E1, A8, E6, 21, 87, 06, 7C, F0, ED, 6B, 6E, D8, 4F, 48, D0, 4D, CA, 00, 74, 84, D5, 0D, A0, 12, EE, 2F, B4, 97, 6B, 31, 98, 02, 98, 8D, B2, F1, A4, AE, 03, 36, 5E, 9C, 69, EB, C2, BA, EE, B1, 57, 0C, ED, DC, B4, 7A, 7D, 9A, 63, 26, D7, 78, 55, FF, B7, 05, A5, 11, FF...
 
[+]

Entropy:
7.8575  (probably packed)

Code size:
440 KB (450,560 bytes)

Scan ProtectionRemover.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.