home

arduino-1.0.6-windows.exe

Arduino LLC

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from doc-0c-2g-docs.googleusercontent.com and multiple other hosts.
Publisher:
Arduino LLC  (signed and verified)

MD5:
4c152fdac58cf7b0923117e2471eed58

SHA-1:
a3aef05b94633b306431104f114c79347101604a

SHA-256:
686c5c1da96a0f9c3524dab3b2c67ec9cdd71a2f77506310591c5d50155b6f02

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 10:25:20 AM UTC  (today)

File size:
52.6 MB (55,139,088 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\arduino-1.0.6-windows.exe

Digital Signature
Signed by:
Arduino LLC

Authority:
GlobalSign nv-sa

Valid from:
12/12/2013 3:25:31 PM

Valid to:
1/18/2017 8:46:35 PM

Subject:
CN=Arduino LLC, O=Arduino LLC, L=Somerville, S=Massachusetts, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112163D5CF472F1FE809342364D52610AECB

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1572864:LFW0tSuivy+efyxM1YBaTlc4tR2F7t/5yGn4tT:LFW0kra+53ETlnRe8T

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9983

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file arduino-1.0.6-windows.exe has been seen being distributed by the following 17 URLs.

https://doc-0c-2g-docs.googleusercontent.com/docs/securesc/pim2s8ls4v16niilcpgk8rehdcesj8a1/akl8df85055kbdfv44j3e5qli9fk1kgn/1469858400000/15604437838768465845/.../0B8nTqECsreX4QkxrMi1EOVh2RDA?e=download

http://santgervasi.docus.info/mod/.../view.php?id=16398

http://www.ranchsendgift.com/LYN olMSjLLc81XSWiIeMTBBN5GkfcuDnnCb3Q5uzgurqF0 FIdt3ozQ5QihRBqQ7MIVFWQv70UBTxo11rFc2pkS_9U4Ww5G_7FxG7kbDn5vdFUbDNlc KznavFIvgdfmkzCyCdF8t2Qda0kqLrKI8_Q2vJv L7UQv1Hme9DXfGHfomolmsK_Q5gXK28bBdosBL0XHnYpl7IdTgpDB_jp7 P4Wa5cg==-GzQAAARkbjFxoNC6Q4JFN5mbsAEHTmWQD4B3gIEpaqzoN POt_YhU1lxjJC1QE39Ag==

https://download.wetransfer.com/wetransfer-eu1/.../arduino-1.0.6-windows.exe

https://docs.google.com/uc?export=download&confirm=jGc1&id=0B3jY5m-ty2usSVEyLTE0czZHR0U

http://goo.gl/xfTk6f

http://www.ranchsendgift.com/dGys5vvb7U9kckuwM7ONoZIj2Bo91CNibXBMmTjaffsO4KyEMcsIEv4KeIweJwDhrlmt9sAjRC3WN7LUTyXkO_liTWZaNq14JGUXUeTCKFesvlMpwdNLnximl xOVaCDNmJ4nelrBamlB5TB_3gHb87ZrUtqNLK6TEoTmNKvzBLhw7Npmtojcok5D_SW14 u0mWkPes0oFZuDsUqZblyuOkClH3ChA==-GzQAAARkbjFxoNC6Q4JFN5mbsAEHTmWQD4B3gIEpaqzoN POt_YhU1lxjJC1QE39Ag==

https://tg3ds-my.sharepoint.com/personal/jac_hsieh_tg3ds_com/_layouts/15/download.aspx?SourceUrl=/personal/jac_hsieh_tg3ds_com/Documents/Shared with Everyone/Dobot/.../arduino-1.0.6-windows.exe

ftp://10.61.201.222/arduino-1.0.6-windows.exe

https://downloads.arduino.cc/arduino-1.0.6-windows.exe

https://www.arduino.cc/download_handler.php

https://onedrive.live.com/download.aspx?cid=FE0F1EEEA31FCF9F&authKey=!APnkMO6pHTv08_Q&resid=FE0F1EEEA31FCF9F!9340

temp:arduino-1.0.6-windows.exe

http://downloads-02.arduino.cc/arduino-1.0.6-windows.exe

http://downloads-01.arduino.cc/arduino-1.0.6-windows.exe

http://arduino.cc/.../arduino-1.0.6-windows.exe

http://downloads.arduino.cc/arduino-1.0.6-windows.exe

Scan arduino-1.0.6-windows.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.