home

ar405.exe

PackageForTheWeb Stub

Adobe Systems, Incorporated

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from www.lodziana.pl and multiple other hosts.
Publisher:
InstallShield Software Corporation  (signed by Adobe Systems, Incorporated)

Product:
PackageForTheWeb Stub

Version:
2.02.001

MD5:
0b7e6d34ece24e225d1f3edbf731ea95

SHA-1:
d199783d5e6dedda2441ab0708b71b066a2acd2b

SHA-256:
ec44a3ecbd663d7bcb996dc9ea14606aeab8155b74a5ff3abdc9c16782d2644a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 7:19:33 AM UTC  (today)

File size:
5.5 MB (5,762,256 bytes)

Product version:
2.02.001

Copyright:
Copyright © 1996 InstallShield Software Corporation

Original file name:
STUB32.EXE

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
Inglise (Ameerika Ühendriigid)

Common path:
C:\Program Files\eidos interactive\io interactive\hitman - codename 47\ar405.exe

Digital Signature
Signed by:
Adobe Systems, Incorporated

Authority:
VeriSign, Inc.

Valid from:
10/19/1999 3:00:00 AM

Valid to:
10/19/2000 2:59:59 AM

Subject:
OU=Acrobat Engineering, CN="Adobe Systems, Incorporated", L=San Jose, S=California, C=US, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU="www.verisign.com/repository/CPS Incorp. by Ref.,LIAB.LTD(c)96", OU=VeriSign Commercial Software Publishers CA, O="VeriSign, Inc.", L=Internet

Issuer:
OU=VeriSign Commercial Software Publishers CA, O="VeriSign, Inc.", L=Internet

Serial number:
197F08D7B6219B2D28061A3DBEF09A15

File PE Metadata
Compilation timestamp:
3/26/1998 4:31:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:O0E3BvPH4ER64BcwNFBe6jCkK0Gyo9VOGzma43a14Vw1S9USos/E5CJWNcf:slPz64//Be6ej+o9Tf1k9UHDYLf

Entry address:
0xC110

Entry point:
55, 8B, EC, 6A, FF, 68, 40, 21, 41, 00, 68, 68, EC, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, A8, 53, 56, 57, 89, 65, E8, FF, 15, 58, A4, 41, 00, 33, D2, 8A, D4, 89, 15, 38, 74, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 34, 74, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 30, 74, 41, 00, C1, E8, 10, A3, 2C, 74, 41, 00, E8, 94, 01, 00, 00, 85, C0, 75, 0A, 6A, 1C, E8, 39, 01, 00, 00, 83, C4, 04, C7, 45, FC, 00, 00, 00, 00, E8, EA, 27, 00, 00, E8, D5, 27, 00, 00, FF, 15, 5C, A4, 41...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
67.5 KB (69,120 bytes)

The file ar405.exe has been discovered within the following programs.

Dell Picture Studio - Dell Image Expert  by Jasc Software, Inc.
www.jasc.com
18% remove it
Deus Ex New Vision  by DaveW
About 7% of users remove it
Deus Ex: Game of the Year Edition  by Eidos Interactive Limited
Publisher's description - “Real role-playing from an immersive 3D, first-person perspective. The game includes action, character interaction and problem solving. Realistic, recognizable locations. Many of the locations are built from actual blueprints of real places set in a near future scenario.”
www.eidosinteractive.com/games/info.html?gmid=50
6% remove it
Deus Ex: Revision  by Ion Storm
www.dx-revision.com
About 2% of users remove it
Hitman - Codename 47  by Eidos Interactive Limited
www.eidos.com
8% remove it
Hitman Blood Money  by Eidos Interactive Limited
Publisher's description - “Hitman: Blood Money brings back the world's greatest assassin, Agent 47. A series of hits have eliminated a number of assassins from the ICA, Agent 47's contract killing firm.”
www.eidosinteractive.com
6% remove it
Hitman: Codename 47  by Eidos Interactive Limited
Publisher's description - “As the enigmatic Hitman, you must use stealth and tactical problem solving to enter, execute and exit your assignment with minimum attention and maximum effectiveness.”
www.eidosinteractive.com/games/info.html?gmid=82
6% remove it
OmniPage Pro 11.0  by ScanSoft, Inc
Publisher's description - “OmniPage Pro 11 is the fastest, easiest way to turn paper documents into digital files that you can edit. It features superior accuracy and the ability to convert PDF files into Microsoft Office documents.”
www.scansoft.com/products/omnipage/pro
About 2% of users remove it
RMS SOLUTIONS  by RMS ON-LINE
www.RMSON-LINE.com
About 2% of users remove it
 
Powered by Should I Remove It?

The file ar405.exe has been seen being distributed by the following 3 URLs.

http://www.lodziana.pl/.../ar405eng.exe

ftp://ftp.adobe.com/pub/adobe/acrobatreader/win/.../ar405eng.exe

http://www.canwestdhi.com/.../ar405eng.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.