home

ar405esl.exe

PackageForTheWeb Stub

Adobe Systems, Incorporated

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from web.seducoahuila.gob.mx.
Publisher:
InstallShield Software Corporation  (signed by Adobe Systems, Incorporated)

Product:
PackageForTheWeb Stub

Version:
2.02.001

MD5:
a45167e136aed3f87d794ce07a131cc2

SHA-1:
d4eaffde25ff7197173c783d3c9a8d5620cb7258

SHA-256:
b0f4929c6c3d3a93ab4564ba9cdadad1cbe6fd63d6b4903c287d08bb7eb2415c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 3:07:19 AM UTC  (today)

File size:
5.7 MB (5,963,952 bytes)

Product version:
2.02.001

Copyright:
Copyright © 1996 InstallShield Software Corporation

Original file name:
STUB32.EXE

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Digital Signature
Signed by:
Adobe Systems, Incorporated

Authority:
VeriSign, Inc.

Valid from:
10/19/1999 2:00:00 AM

Valid to:
10/19/2000 1:59:59 AM

Subject:
OU=Acrobat Engineering, CN="Adobe Systems, Incorporated", L=San Jose, S=California, C=US, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU="www.verisign.com/repository/CPS Incorp. by Ref.,LIAB.LTD(c)96", OU=VeriSign Commercial Software Publishers CA, O="VeriSign, Inc.", L=Internet

Issuer:
OU=VeriSign Commercial Software Publishers CA, O="VeriSign, Inc.", L=Internet

Serial number:
197F08D7B6219B2D28061A3DBEF09A15

File PE Metadata
Compilation timestamp:
3/26/1998 3:31:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:H0eiSSHlSK5vUNDcExaEdp27NF9YF9iEld0/7aYS7DauYc7MQnDjk39i9ac92W:HreSK56Dc4aEdp249hHUSSuHAQnDo39k

Entry address:
0xC110

Entry point:
55, 8B, EC, 6A, FF, 68, 40, 21, 41, 00, 68, 68, EC, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, A8, 53, 56, 57, 89, 65, E8, FF, 15, 58, A4, 41, 00, 33, D2, 8A, D4, 89, 15, 38, 74, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 34, 74, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 30, 74, 41, 00, C1, E8, 10, A3, 2C, 74, 41, 00, E8, 94, 01, 00, 00, 85, C0, 75, 0A, 6A, 1C, E8, 39, 01, 00, 00, 83, C4, 04, C7, 45, FC, 00, 00, 00, 00, E8, EA, 27, 00, 00, E8, D5, 27, 00, 00, FF, 15, 5C, A4, 41...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
67.5 KB (69,120 bytes)

The file ar405esl.exe has been discovered within the following program.

OmniPage Pro 11.0  by ScanSoft, Inc
Publisher's description - “OmniPage Pro 11 is the fastest, easiest way to turn paper documents into digital files that you can edit. It features superior accuracy and the ability to convert PDF files into Microsoft Office documents.”
www.scansoft.com/products/omnipage/pro
About 2% of users remove it
 
Powered by Should I Remove It?

The file ar405esl.exe has been seen being distributed by the following URL.

http://web.seducoahuila.gob.mx/.../acrobat45.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.