home

un_pack_sinaweb_02_817.exe

Pantaray Research

This is a setup and installation application.
Publisher:
Pantaray Research Ltd.  (signed by Pantaray Research)

Description:
Setup/UnInstall Engine

Version:
10.0.0.0

MD5:
22751b003950327fbba45e8d2e1955d9

SHA-1:
9b319cd6522713693424389b4201f37e3b43d093

SHA-256:
e7f7da53ae490d99c148c569ef4da5d3ab7a42e64bd9509982386cc795483a0e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 11:45:39 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Rising Antivirus
Suspicious
23.00.65.14202

File size:
498.1 KB (510,096 bytes)

Product version:
10.0.0.0

Copyright:
Copyright (C) 2002-2009, Pantaray Research Ltd.

Original file name:
Engine.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\شركت فراسيستم نوين\un_pack_sinaweb_02_817.exe

Digital Signature
Signed by:
Pantaray Research

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/27/2009 3:30:00 AM

Valid to:
3/1/2011 3:29:59 AM

Subject:
CN=Pantaray Research, OU=SECURE APPLICATION DEVELOPMENT, O=Pantaray Research, L=Natanya, S=Israel, C=IL

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
2FAAE648CF6E717911FBC4439EEC5F35

File PE Metadata
Compilation timestamp:
6/20/1992 1:52:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:E34Ko/7jQ/jCBNYlOq+ONe9NfDiJkMAmljz2tRc3A62h1X6dh:2VPbXHJNebfDc3Amdzj3R2Kz

Entry address:
0x188970

Entry point:
60, BE, 00, 00, 51, 00, 8D, BE, 00, 10, EF, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11...
 
[+]

Entropy:
7.8989

Packer / compiler:
UPX 2.90LZMA]

Code size:
484 KB (495,616 bytes)

The file un_pack_sinaweb_02_817.exe has been discovered within the following programs.

InPage 3 Professional  by InPage.com
www.InPage.com
About 9% of users remove it
KVT100A  by Black Box
blackbox.com
About 6% of users remove it
Password Vault  by CodeWonders
About 9% of users remove it
Pro Evolution Soccer 2013  by Konami
Publisher's description - “Pro Evolution Soccer strides back onto the pitch to showcase dazzling new skills. Pro Evolution Soccer 2013 returns to the roots of football with unique levels of control plus major emphasis on the individual style of the world’s best players.”
www.konami.com
2% remove it
Thoosje Toolbar  by Conduit Ltd.
Thoosje Toolbar is a 'Community Toolbar' from Conduit, that plugs into the various web browsers such as IE, Chrome and Firefox.
Thoosje.OurToolbar.com
81% remove it
Thoosje Windows 7 Logon Editor  by Thoosje
Some versions of Thoosje Windows 7 Logon Editor include a branded version of the Conduit Toolbar, which delivers search based advertising and results. During installation the user is presented with the option to install the toolbar.
www.thoosje.com
About 5% of users remove it
Thoosje Windows Sevenbar  by Thoosje
Some versions of Thoosje Windows Sevenbar include a branded version of the Conduit Toolbar, which is a web browser extenstion that delivers search based advertising and results. During installation the user is presented with the option to install the toolbar.
57% remove it
Thoosje Windows Vista Tweaker  by Thoosje
Some versions of Thoosje Windows Vista Tweaker include a branded version of the Conduit Toolbar, which is a web browser extenstion that delivers search based advertising and results. During installation the user is presented with the option to install the toolbar.
About 4% of users remove it
Thoosje Windows XP Quick Optimizer  by Thoosje
Some versions of Thoosje Windows XP Quick Optimizer include a branded version of the Conduit Toolbar, which is a web browser extenstion that delivers search based advertising and results. During installation the user is presented with the option to install the toolbar.
About 13% of users remove it
USB Crash Cart Adapter  by StarTech.com
startech.com
About 9% of users remove it
 
Latest 20 of 12 programs
Powered by Should I Remove It?

Scan un_pack_sinaweb_02_817.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.