home

un_dhprocb_23080.exe

Pantaray Research

This is a self-extracting archive and installer.
Publisher:
Pantaray Research Ltd.  (signed by Pantaray Research)

Description:
Setup/UnInstall Engine

Version:
10.0.0.0

MD5:
74971634d8a4cb07f80bfdfba31161ef

SHA-1:
b4cc31373869fe4914fe30286f2e56198709406a

SHA-256:
0ab0db2736669d425d931e0dc346ae4df90d24cd8666152f99d8534e36a446ea

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 9:59:25 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Flg!1.66BE
23.00.65.14913

File size:
500.6 KB (512,656 bytes)

Product version:
10.0.0.0

Copyright:
Copyright (C) 2002-2009, Pantaray Research Ltd.

Original file name:
Engine.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ch-soft\dupehunter\un_dhprocb_23080.exe

Digital Signature
Signed by:
Pantaray Research

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/27/2009 1:00:00 AM

Valid to:
3/1/2011 12:59:59 AM

Subject:
CN=Pantaray Research, OU=SECURE APPLICATION DEVELOPMENT, O=Pantaray Research, L=Natanya, S=Israel, C=IL

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
2FAAE648CF6E717911FBC4439EEC5F35

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:w3TDKUcR+NBGHBZUCOxTQ1Y+uRNtVqMtV8LIHJuN3EPSQ5j0:iTJG+NmZCQ1Y+uRzrz8LEuNfL

Entry address:
0x18A3B0

Entry point:
60, BE, 00, 10, 51, 00, 8D, BE, 00, 00, EF, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11...
 
[+]

Packer / compiler:
UPX 2.90LZMA

Code size:
488 KB (499,712 bytes)

The file un_dhprocb_23080.exe has been discovered within the following programs.

Dupehunter Professional  by Carsten Heidtke Software
www.dupehunter.com
About 1% of users remove it
Dupehunter Professional - Computerbild Edition  by Carsten Heidtke Software
About 3% of users remove it
Oneeko  by Genomni Inc.
About 3% of users remove it
WinSMS  by Dolsin Business Solutions
Publisher's description - “With WinSMS you can save thousands of rands on unnecessary phone calls by using SMS messaging to communicate with your customers and staff, while dramatically increasing your customer service ratings.”
www.winsms.co.za/?c=dbs
About 5% of users remove it
 
Powered by Should I Remove It?

Scan un_dhprocb_23080.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.