home

arpdn.exe

StepWare, Inc.

The program is a setup application that uses the Wise Installer installer.
Publisher:
StepWare, Inc.  (signed and verified)

MD5:
4e90e3998e73ad6fc0d88a3be6b8d023

SHA-1:
e8ab38804ee81a773154963e1c5813997c5c7ce3

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/5/2024 11:08:56 AM UTC  (today)

Scan engine
Detection
Engine version

NANO AntiVirus
Trojan.Win32.Is.coxkft
0.28.2.61148

File size:
3.1 MB (3,206,464 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Wise Installer

Common path:
C:\Documents and Settings\{user}\My documents\(d) disk1\софт для развития интеллекта\программы\скорочтение\ace reader\arpdn.exe

Digital Signature
Signed by:
StepWare, Inc.

Authority:
Comodo CA Limited

Valid from:
12/6/2004 4:00:00 AM

Valid to:
12/7/2006 3:59:59 AM

Subject:
CN="StepWare, Inc.", O="StepWare, Inc.", STREET=320 Dakota Drive, L=Grand Junction, S=CO, PostalCode=81503, C=US

Issuer:
CN=Comodo Code Signing CA, O=Comodo CA Limited, C=GB

Serial number:
2439F92B83DEEE17FBE1792202A98B5C

File PE Metadata
Compilation timestamp:
4/9/1999 12:24:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:ZTMpzgSfsJmMWSZf+kcvj0y48iZJUTZJ9k1UXaXKKo6WI0aNnOWDCNcT:ZmzlfsJl2kc70ybPZJj3PI00h5T

Entry address:
0x1000

Entry point:
55, 8B, EC, 81, EC, 78, 05, 00, 00, 53, 56, BE, 04, 01, 00, 00, 57, 8D, 85, 94, FD, FF, FF, 56, 33, DB, 50, 53, FF, 15, 34, 20, 40, 00, 8D, 85, 94, FD, FF, FF, 56, 50, 8D, 85, 94, FD, FF, FF, 50, FF, 15, 30, 20, 40, 00, 8B, 3D, 2C, 20, 40, 00, 53, 53, 6A, 03, 53, 6A, 01, 8D, 85, 94, FD, FF, FF, 68, 00, 00, 00, 80, 50, FF, D7, 83, F8, FF, 89, 45, FC, 0F, 84, 7B, 01, 00, 00, 8D, 85, 90, FC, FF, FF, 50, 56, FF, 15, 28, 20, 40, 00, 8D, 85, 98, FE, FF, FF, 50, 53, 8D, 85, 90, FC, FF, FF, 68, 10, 30, 40, 00, 50...
 
[+]

Packer / compiler:
Wise Installer Stub

Code size:
512 Bytes (512 bytes)

Scan arpdn.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.