home

paperport14.5_pro_befigsd_13264.exe

Nuance Communications, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from wgtot62.digitalriver.com and multiple other hosts.
Publisher:
Nuance Communications, Inc.  (signed and verified)

MD5:
5638a6637234d725ffb551a2ab03a5a5

SHA-1:
9d686f18a490095a1a973c60e811bfe61ab39476

SHA-256:
30c088fee413795dc4df088987cc9b661f0a0678ab1ece5bfa3b340ce396379f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 2:21:28 AM UTC  (today)

File size:
632.7 MB (663,415,112 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\paperport14.5_pro_befigsd_13264.exe

Digital Signature
Signed by:
Nuance Communications, Inc.

Authority:
VeriSign, Inc.

Valid from:
5/9/2011 5:00:00 PM

Valid to:
7/4/2014 4:59:59 PM

Subject:
CN="Nuance Communications, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Nuance Communications, Inc.", S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
69A43EA5E38E03B6F842C589FC70D3CB

File PE Metadata
Compilation timestamp:
7/23/2007 10:28:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12582912:uyZv6+6pxGLDH8A04Y8Sr+QOyZxGQYWaiBg0VydvHqQvqO4:uGv6+6p4Lgh8SvOyZMWa6g0KK+4

Entry address:
0x7698

Entry point:
E8, 19, 28, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 10, 75, 20, E8, A4, 15, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 35, 15, 00, 00, 83, C4, 14, 83, C8, FF, E9, 80, 00, 00, 00, 8B, 4D, 0C, 3B, CB, 56, 8B, 75, 08, 74, 21, 3B, F3, 75, 1D, E8, 75, 15, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 06, 15, 00, 00, 83, C4, 14, 83, C8, FF, EB, 53, B8, FF, FF, FF, 7F, 3B, C8, 89, 45, E4, 77, 03, 89, 4D, E4, 57, FF, 75, 18, 8D, 45, E0, FF, 75, 14, C7, 45, EC...
 
[+]

Entropy:
7.9999  (probably packed)

Code size:
56 KB (57,344 bytes)

The file paperport14.5_pro_befigsd_13264.exe has been seen being distributed by the following 14 URLs.

http://wgtot62.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BA00B09F3C55397D0E030997C34358AB21961D4DD6CE38E44077938FB2634324728479AD1794AD58C16F18007D28DFEB8B9A1863B59D95EBEB973DDF971617C6E0A7DE0793B014624647C638FDE4F6D4D/.../PP14.5_Pro_BEFIGSD_13264.exe

http://wgtot04.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B3C35CDB57290E4E802E6F72389C43346808573F74C0C1A2F6ED00D75EED6ADA2D535F4B1B7896EDCE76BC24C64E2372E873C94042B76562B870460F43DCBECA30451C577DBEF2976/.../PP14.5_Pro_BEFIGSD_13264.exe

http://supportcontent.nuance.com/paperport/.../PaperPort_14.5_Professional.exe

http://wgtot35.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BEDDF19CF2907C84887767BD9EBECB024D4E0EADEE4BE4AF84E2D404853C7BEA925863E8EF522D50CD841618D57978B7FEEF7F32060FE9B14BCCF473FD719DDFB5C301D4CF6797C8A/.../PP14.5_Pro_BEFIGSD_13264.exe

http://wgtot62.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BA00B09F3C55397D0B1A3430B90D39EFA2B33001151697EB6DFB52356FA41ACB8D6BBE983A24CCD4C25EF9684F895F6483D9213CDA4BFB1D2F3C5E443951767CE0A7DE0793B014624647C638FDE4F6D4D/.../PP14.5_Pro_BEFIGSD_13264.exe

http://wgtot62.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BA00B09F3C55397D047EE017B2741B7C0CAB7C5353570DE602DE19D388255C72DBEBC214A5A00A43D5D3160C33121458BF3CE65EE1BB53B32F32320AC6AA390820A7DE0793B014624647C638FDE4F6D4D/.../PP14.5_Pro_BEFIGSD_13264.exe

http://wgtot04.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B3C35CDB57290E4E802E6F72389C43346D0EB674F1FD5A6C9A2A6104951069480E83D1C1F920F1731C14EB4AF5988DB2C2078D3EC723422024C80E50EAEB42B2A5C301D4CF6797C8A/.../PP14.5_Pro_BEFIGSD_13264.exe

http://wgtot04.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BB87E03CE76174F4E2B6D2983E0AD920D3D24EA4BB04DEAC23D10D8C5A2356700169C729F3C880D0231E5A9BFFB82C35BC6359485A84CC29CD73DD213173F47AA97A693A7BBF30D56/.../PP14.5_Pro_BEFIGSD_13264.exe

https://docs.google.com/a/.../uc?export=download&confirm=VdrP&id=0B_zH1M6CGV9cTWdUV2xfY2Zpd0U

http://wgtot44.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BDE6D9A304D0948022B6D2983E0AD920D5C76C801A1DD6A31A795FA77D8A55A7616CBB9183234261732D48450B2C0A20609A06F88EB1673956BEEEDFE250A8E788F5DC70B1E40C906/.../PP14.5_Pro_BEFIGSD_13264.exe

http://wgtot04.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B12C37B54FF6019922B6D2983E0AD920DD7C89901C5683A963E2CC045550A6EC6C3B84C6D437C4CC931E5A9BFFB82C35B01EEE88039D6B95C339EBA4A627BC4FA97A693A7BBF30D56/.../PP14.5_Pro_BEFIGSD_13264.exe

http://wgtot22.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B159FED8FAA555EEF2B6D2983E0AD920D19D88FBDA3820691C0AA8B059EDD286F53E6A499C80DD286AA8C1BCE0AB10B90E6C2132E32DE070ECA3E62C13A0C81098F5DC70B1E40C906/.../PP14.5_Pro_BEFIGSD_13264.exe

http://wgtot62.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B5EF54C4E052AB5258D273C5554AF2095CC7A6C9F00209B9689FE898C67713975480DEB3F702324429D3BD66F77E2C1769DDD924CB49920C3812A88BAEC4B230597A693A7BBF30D56/.../PP14.5_Pro_BEFIGSD_13264.exe

http://cl5c0.pogoplug.com/svc/files/XCLDA5YHMN2XYERVYNB6MAH9NA/XCLDA5YHMN2XYERVYNB6MAH9NA/dP5bJZte0M3XH_dT_QxyhQ/.../PaperPort14.5_Pro_BEFIGSD_13264.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.