home

PBTray.exe

ProtectBURN Trayapp

ACE Gesellschaft für Daten- und Kommunikationstechnik mbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ProtectBURN Video’.
Publisher:
Protect Software GmbH  (signed by ACE Gesellschaft für Daten- und Kommunikationstechnik mbH)

Product:
ProtectBURN Trayapp

Version:
1.0.3.6

MD5:
5094d54c9fa7528eb2fa8e6708744a87

SHA-1:
f3a6637d0513d6387a03a2ec715f9c03f8086ddf

SHA-256:
3fdc4fb47629ddbc2a0cca1af044bbceb4eea2b70a1652b673029e79adb00574

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 11:53:18 AM UTC  (today)

File size:
2.7 MB (2,796,416 bytes)

Product version:
1.0.3.6

Copyright:
(c) Protect Software GmbH. All rights reserved.

Original file name:
PBTray.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\common files\protectburn\pbtray.exe

Digital Signature
Signed by:
ACE Gesellschaft für Daten- und Kommunikationstechnik mbH

Authority:
StartCom Ltd.

Valid from:
2/3/2016 7:47:40 AM

Valid to:
2/3/2019 7:47:40 AM

Subject:
CN=ACE Gesellschaft für Daten- und Kommunikationstechnik mbH, O=ACE Gesellschaft für Daten- und Kommunikationstechnik mbH, L=Dortmund, S=Nordrhein-Westfalen, C=DE

Issuer:
CN=StartCom Class 3 Object CA, OU=StartCom Certification Authority, O=StartCom Ltd., C=IL

Serial number:
4AC15897ABA804472182504750922637

File PE Metadata
Compilation timestamp:
12/19/2016 3:02:03 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x5B3DC3

Entry point:
EB, 08, 0D, F0, 06, 00, 00, 00, 00, 00, E9, 00, 8D, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 48, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 84, BD, 54, 00, 30, 3E, 9B, 00, 1C, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 60, 02, 00, 0B, 61, 02, 00, 20, 65, 02, 00, 88, DD, 02, 00, 78, 64, 03...
 
[+]

Entropy:
7.7956  (probably packed)

Code size:
2.3 MB (2,434,048 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ProtectBURN Video

Command:
C:\Program Files\common files\protectburn\pbtray.exe


Scan PBTray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.