» proxydet.ppl
Overview
Analysis
File Details

proxydet.ppl

Kaspersky Anti-Virus

Kaspersky Lab

File name:

proxydet.ppl

Publisher:

Kaspersky Lab (signed and verified)

Product:

Kaspersky Anti-Virus

Description:

TRANSPOR

Version:

11.0.0.1245

MD5:

c0139cc560b0afb8db60cd67ed29c7d6

SHA-1:

61dd35a8526845e8c3cb8bf500277f9f3926e0ae

SHA-256:

cdec3f0461d3743f73f38ed1b36b167a067ea7ef0d02c399e4c692296f368801

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 10:14:31 PM UTC (today)

File size:

52.2 KB (53,440 bytes)

Product version:

11.0.0.1245

Trademarks:

Kaspersky™ Anti-Virus ® is registered trademark of Kaspersky Lab.

Original file name:

TRANSPOR.PPL

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\proxydet.ppl

Digital Signature

Signed by:

Kaspersky Lab

Authority:

DigiCert Inc

Valid from:

2/22/2013 7:00:00 AM

Valid to:

4/28/2015 7:00:00 PM

Subject:

CN=Kaspersky Lab, O=Kaspersky Lab, L=Moscow, C=RU

Issuer:

CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0226E6BDA76DAE711E3DB2321E3B5308

File PE Metadata

Compilation timestamp:

3/31/2011 1:03:00 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

768:SMAlQ3wcjFOc6gQsRcHr2PRArBOgPu/4WnbciFg:S3y3pOPgQs6HyA9OgPuvciFg

Entry address:

0x3406

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 22, 04, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, CD, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 08, 7A, 63, 6D, 89, 0D, 04, 7A, 63, 6D, 89, 15, 00, 7A, 63, 6D, 89, 1D, FC, 79, 63, 6D, 89, 35, F8, 79, 63, 6D, 89, 3D, F4, 79, 63, 6D, 66, 8C, 15, 20, 7A, 63, 6D, 66, 8C, 0D, 14, 7A, 63, 6D, 66, 8C, 1D, F0, 79, 63, 6D, 66, 8C, 05, EC, 79, 63, 6D, 66, 8C, 25, E8, 79, 63, 6D, 66, 8C, 2D, E4, 79, 63, 6D, 9C, 8F, 05, 18, 7A, 63, 6D, 8B, 45... 
[+]

Entropy:

5.6128

Code size:

12 KB (12,288 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.