home

StWrIV.exe

StyleWriter 4

Editor Software (UK) Ltd

Publisher:
Editor Software (UK) Ltd  (signed and verified)

Product:
StyleWriter 4

Description:
StyleWriter 4 MFC Application

Version:
4, 0, 4, 15

MD5:
1b2e476ebad01ff9296d0d09a4a63d21

SHA-1:
1db4faa17ab568fca31078683b83e3316060746e

SHA-256:
75dda91c189c5dbf21369f417f37c57ebd8b83ef19baa46690a3c508a9655e89

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/19/2024 10:39:49 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.XPACK-LNR/Heur!1.5594
23.00.65.14908

File size:
2 MB (2,131,808 bytes)

Product version:
4, 0, 4, 15

Copyright:
Editor Software (UK) Ltd © 2013

Original file name:
StWrIV.exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\Program Files\editor software\stylewriter 4\stwriv.exe

Digital Signature
Signed by:
Editor Software (UK) Ltd

Authority:
VeriSign, Inc.

Valid from:
5/14/2012 7:00:00 PM

Valid to:
5/28/2014 6:59:59 PM

Subject:
CN=Editor Software (UK) Ltd, OU=Digital ID Class 3 - Microsoft VBA Software Validation v2, O=Editor Software (UK) Ltd, L=Dursley, S=Gloucestershire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
564FBF0331C01C161D15A655FDC21DF4

File PE Metadata
Compilation timestamp:
1/2/2014 2:16:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:NXKSkbm/6NovHmcTtyhsWEiQri8aJyKPuI6RU/Ii:YdbmTmcTURt8aJyKGI6Kl

Entry address:
0xBE3D4

Entry point:
8D, 05, B6, A3, A5, 42, E8, 06, 00, 00, 00, 75, E0, D1, 03, 9E, 45, 58, 8A, C1, EB, 08, 4B, 0B, BF, A0, D3, A2, 9C, 6A, 60, 0F, BA, E5, 2C, E8, 02, 00, 00, 00, 40, FA, 5A, 0F, BD, FA, 0F, B6, D0, 86, D7, C6, C2, 53, BD, 69, 00, 00, 00, 49, C1, D8, 6F, 0F, C8, 68, CF, 32, 8B, 0C, 8D, 15, AF, E5, F1, 82, C6, C1, 86, 0F, A5, F9, 58, E8, 01, 00, 00, 00, 00, 5B, 86, D5, 0F, AC, DE, DB, 68, 5E, AE, 4A, EB, 5F, F6, D2, 38, CA, FF, CA, B9, F7, 10, 06, 00, 4A, F6, C1, A0, 1B, D7, 03, DD, 69, EE, FB, 42, 11, B7, C1...
 
[+]

Entropy:
7.9175  (probably packed)

Code size:
544 KB (557,056 bytes)

Scan StWrIV.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.