home

PTLookup.exe

Karen's Power Tools

KarenWare.com

This is installed with multiple programs including Karen's Power Tools and Karen's Discombobulator.
Publisher:
Karen Kenworthy  (signed by KarenWare.com)

Product:
Karen's Power Tools

Description:
Karen's URL Discombobulator

Version:
1.09.0001

MD5:
295e064d6a73abc95ecec5f24e19f239

SHA-1:
cca1947bbe7b5da9d8bf80f415b065369a3d0935

SHA-256:
df8974c4bfb13d8afe00a153ad9f3ebd969ee3c0b31521d6c25c952d6664d5d1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:19:46 AM UTC  (today)

File size:
273.5 KB (280,048 bytes)

Product version:
1.09.0001

Copyright:
Copyright (c) 2000-2003, 2005, 2007 Karen Kenworthy\nAll Rights Reserved

Trademarks:
"Karen's Power Tools" and "Karen's URL Discombobulator" are trademarks of Karen Kenworthy

Original file name:
PTLookup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\karen's power tools\discombobulator\ptlookup.exe

Digital Signature
Signed by:
KarenWare.com

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/28/2007 12:18:51 PM

Valid to:
2/27/2008 2:52:56 PM

Subject:
CN=KarenWare.com, OU=Secure Application Development, O=KarenWare.com, L=Broken Arrow, S=Oklahoma, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
39A4BE53C3FCE1867408F41F82207F7A

File PE Metadata
Compilation timestamp:
7/30/2007 9:30:10 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:HIKwIywV7P4G6zZf3hOenAlp8BX4OZJA5HKK4A8yuopraXtdqUCnq:Z7PQfH6py+5HZ4Agop+x

Entry address:
0x267C

Entry point:
68, 04, 5D, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 60, 00, 00, 00, 40, 00, 00, 00, 6A, 2B, 72, 55, 19, BF, 78, 4B, B3, B2, 3B, DF, FC, 9F, 25, 61, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 2D, 43, 30, 30, 30, 2D, 44, 69, 73, 63, 6F, 6D, 62, 6F, 62, 75, 6C, 61, 74, 6F, 72, 00, 4B, 61, 72, 65, 6E, 27, 73, 20, 55, 52, 4C, 20, 44, 69, 73, 63, 6F, 6D, 62, 6F, 62, 75, 6C, 61, 74, 6F, 72, 00, 6C, 65, 32, 2E, 00, 00, 00, 00, FF, CC, 31, 00, 2D, 36, DA, 29, 6B, 36, BA, 04, 4F, 9E, 86, 5A...
 
[+]

Entropy:
5.7906

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
228 KB (233,472 bytes)

The file PTLookup.exe has been discovered within the following programs.

Karen's Discombobulator  by Karen Kenworthy
Publisher's description - “Lookup the IP address(es) associated with any valid domain name. Or lookup the domain name associated with any IP address (if the owner of the IP address has added the corresponding PTR record in the DNS server authoritative for the IP address range).”
www.karenware.com/powertools/ptlookup.asp
9% remove it
Karen's Power Tools  by Karen Kenworthy
www.karenware.com
About 1% of users remove it
 
Powered by Should I Remove It?

Scan PTLookup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.