home

diamondmultimedia117win7vista_16858.exe

Pantaray Research

This is a self-extracting archive and installer.
Publisher:
Pantaray Research Ltd.  (signed by Pantaray Research)

Description:
Setup/Uninstall Engine

Version:
10.0.0.0

MD5:
11a79703d95d62acd9e63f7ea6c32ad2

SHA-1:
2dabcf83557b0a02c6614addadcdf1c79f8d71b6

SHA-256:
e3a8104da3f9fb6ac0e2c05fa4bca41cc82582abcc25dfbcf7e69dece6518050

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/19/2024 11:21:15 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Flg!1.66BE
23.00.65.14125

File size:
508.6 KB (520,848 bytes)

Product version:
10.0.0.0

Copyright:
Copyright (C) 2002-2010, Pantaray Research Ltd.

Original file name:
Engine.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\diamond 11.7 2400-6900 win7vista\diamondmultimedia117win7vista_16858.exe

Digital Signature
Signed by:
Pantaray Research

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/26/2009 4:00:00 PM

Valid to:
2/28/2011 3:59:59 PM

Subject:
CN=Pantaray Research, OU=SECURE APPLICATION DEVELOPMENT, O=Pantaray Research, L=Natanya, S=Israel, C=IL

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
2FAAE648CF6E717911FBC4439EEC5F35

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:J/7Yzg9DWrfX7Q16NDoYf+eywki31B9Ux9VOZO2XrRiQo2djiI:p+jLNDhGeyw9dmmO2b12I

Entry address:
0x190330

Entry point:
60, BE, 00, 50, 51, 00, 8D, BE, 00, C0, EE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11...
 
[+]

Entropy:
7.8989

Packer / compiler:
UPX 2.90LZMA]

Code size:
496 KB (507,904 bytes)

The file diamondmultimedia117win7vista_16858.exe has been discovered within the following programs.

Dupehunter Professional - Computerbild Edition  by Carsten Heidtke Software
www.dupehunter.com
About 3% of users remove it
FairUse Wizard 2  by FairUse Wizard
fairusewizard.com
About 4% of users remove it
GOM Player  by Gretech Corporation
GOM Player (Gretech Online Movie Player) is a 32/64-bit media player for Microsoft Windows, distributed by the Gretech Corporation of South Korea. It is the primary client player for South Korean GOM-TV, and is more popular in South Korea than any other media player.
player.gomlab.com/eng/support/supportcenter
24% remove it
TrueCrypt  by TrueCrypt Foundation
Free open-source disk encryption software for Windows. Creates a virtual encrypted disk within a file and mounts it as a real disk. Encrypts an entire partition or storage device such as USB flash drive or hard drive.
www.truecrypt.org
10% remove it
 
Powered by Should I Remove It?

Scan diamondmultimedia117win7vista_16858.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.