» ptdirprn-setup.exe
Overview
Analysis
File Details
Programs (1)
Downloads (9)

ptdirprn-setup.exe

Karen's Power Tools

KarenWare.com

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with Karen's Directory Printer. The file has been seen being downloaded from download.softpedia.com and multiple other hosts.

File name:

ptdirprn-setup.exe

Publisher:

Karen Kenworthy (signed by KarenWare.com)

Product:

Karen's Power Tools

Description:

Karen's Directory Printer Installer

Version:

5.3.0.2

MD5:

87216853f1931e66c92dc974f72d4919

SHA-1:

32b01e89abb15951b5de883fc7e9dccec6484691

SHA-256:

e1f2336f7cec7c3c327b52e625ac7421457a4a2f6b4efc623035b1a0e6d7d224

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/27/2024 5:13:53 AM UTC (today)

File size:

1.2 MB (1,295,704 bytes)

Trademarks:

'Karen's Power Tools' and 'Karen's Directory Printer' are trademarks of Karen Kenworthy

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\ptdirprn-setup.exe

Digital Signature

Signed by:

KarenWare.com

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

2/23/2009 7:25:37 PM

Valid to:

2/26/2011 6:55:48 PM

Subject:

CN=KarenWare.com, OU=Secure Application Development, O=KarenWare.com, L=Broken Arrow, S=Oklahoma, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

69B55624150D51731C244B8B6581680E

File PE Metadata

Compilation timestamp:

6/6/2009 2:41:59 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

24576:PiK0DTtiyDEDyHWeE3VP7KX/WTlbbqvUrNOQmuFswJ83SfhM0LKr4wi9eRa993zK:P0jDEDyDyZtTFbp8Qmuf83Spae9J9932

Entry address:

0x30FA

Entry point:

81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00... 
[+]

Entropy:

7.9885

Packer / compiler:

Nullsoft install system v2.x

Code size:

23.5 KB (24,064 bytes)

The file ptdirprn-setup.exe has been discovered within the following program.

Karen's Directory Printer by Karen Kenworthy

Publisher's description - “No more fumbling with My Computer or Windows Explorer, wishing you could print information about all your files.”

www.karenware.com

11% remove it

The file ptdirprn-setup.exe has been seen being distributed by the following 9 URLs.

http://download.softpedia.com/dl/a547eac1ad1a99c6fa4d1401cb2d81f4/57de6383/100023905/software/.../ptdirprn-setup.exe

https://download.heise.de/software/7119965489f90f4a857531614b0f51e2/577cff13/.../ptdirprn-setup.exe

http://download.softpedia.com/dl/0e7b05b8c13f0d54094939fafccc8e72/5840714f/100023905/software/.../ptdirprn-setup.exe

http://d110.cdn.m6web.fr/soft/.../karen-s-directory-printer_5-3-2_en_257928.exe

http://software-files-a.cnet.com/s/software/11/67/20/.../ptdirprn-setup.exe

http://files.downloadnow.com/s/software/11/67/20/.../ptdirprn-setup.exe

http://storebox3.info/.../?installer_file_name=setup&affiliate_id=1_exe

http://storebox3.info/.../?installer_file_name=setup&affiliate_id=1_exe&uuid=LHhJcEgz0dQkCfatzwUWkFGgPtP67N1Z0doG1gBMUGY4P0iqdOwWSjwnILAUPoPGXrtWsYYFOzYpgZnjJoNtThlFuhJu82HmzL7j2M7WNOqwoPNq5NCH0vCjGZAxtFmThzCbJFDcv4QYwLOgdRXMQpYBt4uiBdSTR1FG12I0OUpP4aYNi6RuyFNplINoj94FZ6rWRIc8OUoYUIOHARyWmROI5We5U37PN3OGKdAbIxgZ4S1XVTcOnfuLh3IIlxkpctRhfL8yOCAWyNqXjnwtxlzvdxqPSo3QRYiRexO3OYvGTK8Iv3neDHYC387bjtUHz1p2x9SUiwOo8eswakQ6Y5bV06IeCq6IeWBaSAfaTn222E0eN0nKVnuOvAS4mxk6gmlgJMhka06BCNcelDQwQ6VdlXnYSCSIMpLEae6NIH8RowXFR9nDXZic6hUTsMB9r9JIhcj7NWptLrs0UfcSuxSwGfFO2RPVEByiPcoXfpxrhNzzjy2dmrb1XeZT7i6W0DSLL4h8mdpyddaistxHjAPo3aTu4f2i2gMvz4mkaCrvo4oZK6RYX2wrpE29IweVtuhPc1e1mlJrE7FoSnEC1bV3blaQ7dW9nZhXkZaCD15blWaQFIOsauhd8NOLfuhni6mbBMyxBzb2mGiEX3Iap8jdxBubuXjHxSuQxodgQDWEuO92KcaWpYTO76LYT6mL3EfOL0ao4rLfpNI20dE1I0LnmAHNYMly6xOx7RWvwpUKRjeAhxdvvANrkG3v4XfSecot6C3tq2r7r3M6SQBoXFLtLEBuK3XU3lMCdIIzXl4VpeqLnjW3Urgyux1rVUTXxleACsesJ6fnI6TDGK7g817x99pQMmwCBzmOwZEXSGGSvSVHL4OPZOQhjBw2zedSF6tgmAgyFRN11xHY5SOtiux2bi

http://www.karenware.com/.../ptdirprn-setup.exe

Scan ptdirprn-setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.