home

TDWatch.exe

TrustPort Disk Protection

TrustPort a.s.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TrustPortDiskProtectionWatchDog’.
Publisher:
TrustPort, a.s.  (signed by TrustPort a.s.)

Product:
TrustPort Disk Protection

Description:
Disk Protection WatchDog

Version:
5.0.0.4085

MD5:
2a402e25363e807bc96eeb1cd0b39eb0

SHA-1:
adaf53cb65af0664973522e6a0052d31fafe2076

SHA-256:
890ff09ef57cffe80fc139f0ef8eea0d7baef008eed80d7c4dd7801870b05a62

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 11:35:05 PM UTC  (a few moments ago)

File size:
159.9 KB (163,688 bytes)

Product version:
5.0.0.4085

Copyright:
Copyright © 2010 TrustPort, a.s.

Original file name:
TDWatch.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\trustport\disk protection\bin\tdwatch.exe

Digital Signature
Signed by:
TrustPort a.s.

Authority:
GlobalSign nv-sa

Valid from:
3/24/2009 11:18:07 AM

Valid to:
3/24/2010 11:18:07 AM

Subject:
E=support@trustport.com, CN=TrustPort a.s., O=TrustPort a.s., C=CZ

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001203904CD98

File PE Metadata
Compilation timestamp:
1/20/2010 4:37:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:aUHSmjNxhNC0diJrE+OqLsDq0n/2nTKBQcntVEM2it:1fCMiJrElq8RnuTKCkEMtt

Entry address:
0xA87B

Entry point:
E8, 8C, 61, 00, 00, E9, 16, FE, FF, FF, 6A, 0C, 68, 80, 13, 42, 00, E8, 27, 54, 00, 00, 8B, 75, 08, 85, F6, 74, 75, 83, 3D, 5C, 61, 42, 00, 03, 75, 43, 6A, 04, E8, 6E, 63, 00, 00, 59, 83, 65, FC, 00, 56, E8, DC, 63, 00, 00, 59, 89, 45, E4, 85, C0, 74, 09, 56, 50, E8, F8, 63, 00, 00, 59, 59, C7, 45, FC, FE, FF, FF, FF, E8, 0B, 00, 00, 00, 83, 7D, E4, 00, 75, 37, FF, 75, 08, EB, 0A, 6A, 04, E8, 5C, 62, 00, 00, 59, C3, 56, 6A, 00, FF, 35, 74, 4E, 42, 00, FF, 15, 08, E1, 41, 00, 85, C0, 75, 16, E8, 1C, 09, 00...
 
[+]

Code size:
116 KB (118,784 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TrustPortDiskProtectionWatchDog

Command:
"C:\Program Files\trustport\disk protection\bin\tdwatch.exe"


Scan TDWatch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.