home

msaardk13.exe

Active Accessibility 1.3

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from dosbox95.darktraveler.com.
Publisher:
Microsoft Corporation

Product:
Active Accessibility® 1.3

Description:
Microsoft® Active Accessibility® Redistribution Kit

Version:
4.2.3130.0

MD5:
415697dc785289eaeaff02dc0fbb0294

SHA-1:
1d008596bbe9959fd591d43ae98e439820689f7d

SHA-256:
8daa10e19da70750f42a8e15d1d507fe752deef216d10e8d4c91f61e361bb186

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 10:23:40 AM UTC  (today)

File size:
1.5 MB (1,586,320 bytes)

Product version:
4.2.3130.0

Copyright:
Copyright (C) Microsoft Corp. 1994-1999

Original file name:
MSAARDK

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\msaardk13.exe

File PE Metadata
Compilation timestamp:
7/15/1997 6:48:12 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:B8d3BhHmMjNtE952hfax+PsTiRbrr4aQTztTbWWds:MB1mMZi2NvPsTugaOtTbWWO

Entry address:
0x2723

Entry point:
0F, AF, F3, BB, C1, 11, 64, 11, F7, C1, BC, B0, EF, ED, EB, 05, 8A, F3, 0F, B7, D8, 85, D6, FE, CE, 8D, 15, E5, 60, A9, 20, 8D, 0D, 55, 20, 56, EF, F3, 81, FF, 72, 30, 8E, 66, 81, EE, 68, 37, DC, CA, 57, F7, C6, C2, 02, D7, D9, E8, 00, 00, 00, 00, 85, E8, F6, C7, F7, FF, C0, 85, DE, 78, 08, 69, D6, A3, 2A, 90, 15, 2B, FE, 69, E8, CD, 9C, AA, 3C, 8B, D0, 8B, FA, 8D, 1D, 01, 8B, 9F, CF, B3, AC, 69, DD, E2, 3D, D0, 95, 4B, 8B, C7, 0F, AF, ED, 88, D7, 00, F3, FE, CB, 8D, 10, 0F, AF, FF, 2A, DE, 28, D3, 8B, F2...
 
[+]

Code size:
36 KB (36,864 bytes)

The file msaardk13.exe has been seen being distributed by the following URL.

http://dosbox95.darktraveler.com/.../msaardk13.exe

Scan msaardk13.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.