» ptwebupdate-setup.exe
Overview
Analysis
File Details
Programs (1)

ptwebupdate-setup.exe

Karen's Power Tools

KarenWare.com

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with Karen's Web Update.

File name:

Publisher:

Karen Kenworthy (signed by KarenWare.com)

Product:

Karen's Power Tools

Description:

Karen's Web Update Installer

Version:

1.2.0.2

MD5:

8d3b80ef13fadb5625fec40463889ae0

SHA-1:

2a6cfb628b3c2291c82a36e96b12ae9227a0325c

SHA-256:

2818c36998dc158f05e28f2fba101fdcd154c848663312416373152e4fc2ed9a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 10:58:12 AM UTC (today)

File size:

1 MB (1,053,192 bytes)

Trademarks:

'Karen's Power Tools' and 'Karen's Web Update' are trademarks of Karen Kenworthy

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\ptwebupdate-setup.exe

Digital Signature

Signed by:

KarenWare.com

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

2/23/2009 10:25:37 PM

Valid to:

2/26/2011 9:55:48 PM

Subject:

CN=KarenWare.com, OU=Secure Application Development, O=KarenWare.com, L=Broken Arrow, S=Oklahoma, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

69B55624150D51731C244B8B6581680E

File PE Metadata

Compilation timestamp:

6/6/2009 5:41:59 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

24576:iDTtiyDEDyHWeE3VP7KX/WTlbbqvU+HRjO4qtowoKcpC:ijDEDyDyZtTFbp+85sKcpC

Entry address:

0x30FA

Entry point:

81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00... 
[+]

Entropy:

7.9847

Packer / compiler:

Nullsoft install system v2.x

Code size:

23.5 KB (24,064 bytes)

The file ptwebupdate-setup.exe has been discovered within the following program.

Karen's Web Update by Karen Kenworthy

Publisher's description - “Run Karen's WebUpdate and it will quickly examine your installed Power Tools. If newer versions of any installed Power Tools exists (whether or not it shipped with your CD), the update will be downloaded and installed automatically.”

www.karenware.com/powertools/ptwebupdate.asp

8% remove it

Scan ptwebupdate-setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.