» pd1862980b.DLL
Overview
Analysis
File Details

pd1862980b.DLL

ProtectDISC

Protect Software GmbH

File name:

pd1862980b.DLL

Publisher:

Protect Software GmbH (signed and verified)

Product:

ProtectDISC

Description:

ProtectDISC Core

Version:

10,4,0,12003

MD5:

e18edb8210ec5628fe9d3e75e2aac2eb

SHA-1:

35d4055600023cea3685a470849002e5b0ea73b9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/28/2024 4:38:56 PM UTC (today)

File size:

3.9 MB (4,055,536 bytes)

Product version:

10,4,0,0

Original file name:

ProtectDISC.EXE

File type:

Dynamic link library (Win32 DLL)

Language:

Almanca (Almanya)

Common path:

C:\Documents and Settings\{user}\Application data\protectdisc\pd1862980b.dll

Digital Signature

Signed by:

Protect Software GmbH

Authority:

GlobalSign nv-sa

Valid from:

7/18/2011 1:30:33 PM

Valid to:

11/13/2013 11:03:30 AM

Subject:

E=cert@protect-software.com, CN=Protect Software GmbH, O=Protect Software GmbH, L=Dortmund, S=NRW, C=DE

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121D4C609DCCB89F9E370E24902B676D4B8

File PE Metadata

Compilation timestamp:

1/3/2012 12:10:30 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

98304:/GTH2YcThZKVFEZz5Q/MuTRzITqU41iuZTJ/:+D2YcNsbEli/Le0hJ

Entry address:

0x5DCDC0

Entry point:

9C, C7, 04, 24, 99, 79, F0, 27, 60, C7, 44, 24, 1C, 67, 06, C7, 96, 9C, 68, 10, 06, 59, D7, 66, C7, 44, 24, 04, 0D, 69, 89, 74, 24, 04, 8D, 64, 24, 24, E9, CE, F2, 35, 00, AE, D9, 51, D6, E5, 2B, 65, BA, 5A, 1F, 33, 7F, 99, 6A, 3D, F2, 44, 56, 69, CF, 87, 78, 74, 54, 7B, FF, 7A, CE, 23, 51, 55, D5, 64, A9, 85, 5F, 02, 95, BA, 86, 42, A2, AC, 10, 45, 6D, EF, DA, BC, F4, 23, 3D, 08, 22, 83, 9F, 81, 1B, 7A, 18, 6F, 35, 02, 98, 5C, 31, E9, F2, 8C, 73, CD, DA, 07, 57, F1, 6B, 43, B2, 5A, 24, 2C, C2, 26, 9A, 22... 
[+]

Entropy:

7.9175 (probably packed)

Code size:

1.3 MB (1,411,072 bytes)

Scan pd1862980b.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.