home

USBProtect.exe

USB Protect

AxBx

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘USBProtect’.
Publisher:
AxBx  (signed and verified)

Product:
USB Protect

Description:
USB Protect : protection antivirus temps réel des périphériques USB

Version:
1.0.0.0

MD5:
b320120b7ce18ee2f52b84586e11d7b1

SHA-1:
1be47bccacac321a152adad350a12e39a6c71db9

SHA-256:
8f896807afc4525a498e483bc279f2dba603e858ce96b758656d9fa8c0076d07

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:42:08 AM UTC  (today)

File size:
1.1 MB (1,204,536 bytes)

Product version:
1.0.0.0

Copyright:
© 2009 AxBx.

Trademarks:
AxBx

Original file name:
USBProtect.exe

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\Program Files\axbx\usb protect\usbprotect.exe

Digital Signature
Signed by:
AxBx

Authority:
VeriSign, Inc.

Valid from:
3/2/2009 1:00:00 AM

Valid to:
3/9/2010 12:59:59 AM

Subject:
CN=AxBx, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=AxBx, L=Paris, S=Paris, C=FR

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6B3D3F86D9B6E9C75D9A72B65AD6373D

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0xC8D18

Entry point:
55, 8B, EC, 83, C4, F0, B8, 40, 8A, 4C, 00, E8, 6C, DE, F3, FF, A1, F4, A6, 4C, 00, 8B, 00, E8, A8, A2, F9, FF, 68, DC, 8D, 4C, 00, 6A, 00, 6A, 00, E8, EA, DF, F3, FF, E8, A5, E0, F3, FF, 3D, B7, 00, 00, 00, 75, 29, 68, E8, 8D, 4C, 00, 68, 2C, 8E, 4C, 00, E8, 4F, E6, F3, FF, 85, C0, 76, 0F, 6A, 00, 6A, 00, 68, 0A, 04, 00, 00, 50, E8, 7C, E9, F3, FF, 33, C0, E8, 1D, B9, F3, FF, A1, F4, A6, 4C, 00, 8B, 00, BA, 44, 8E, 4C, 00, E8, 60, 9E, F9, FF, A1, AC, A6, 4C, 00, 8B, 00, BA, 44, 8E, 4C, 00, E8, 8F, 94, F7...
 
[+]

Entropy:
6.8953

Developed / compiled with:
Microsoft Visual C++

Code size:
800 KB (819,200 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
USBProtect

Command:
C:\Program Files\axbx\usb protect\usbprotect.exe


Scan USBProtect.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.