PAPRPORT.exe
PaperPort by Nuance Communications (Signed)
Warning 10 antivirus scanners has detected malware in various versions of PAPRPORT.exe.
Overview
There are 11 versions of paprport.exe in the wild, the latest version being 14.1.11528.2007. paprport.exe is run as a standard windows process with the logged in user's account privileges. The average file size is about 1.36 MB. The file is a digitally signed and issued to Nuance Communications by VeriSign. Numerous variations of paprport.exe have been installed with both PaperPort Anywhere 1.1.4310.24706 powered by OfficeDrop and PaperPort Anywhere 1.1.4269.39023 powered by OfficeDrop. During the process's lifecycle, the typical CPU resource utilization is about 0.0002% including both foreground and background operations, the average private memory consumption is about 112.71 MB with the maximum memory reaching around 146.09 MB. Addionally, typically read and write I/O disk operations is about 2.35 MB per minute for reads and 978 Bytes per minute for writes.
What is paprport.exe?
PaperPort is designed to help users to organize digital documents and files. As a document management system, PaperPort is useful for working with scanned documents. PaperPort can use its built-in optical character recognition to create "searchable" PDF files that allow efficient 'index and search' with appropriate software, such as Microsoft's Windows Search.
Details |
File name: | paprport.exe |
Publisher: | Nuance Communications, Inc. |
Product name: | PaperPort |
Typical file path: | C:\Program Files\nuance\paperport\paprport.exe |
Certificate |
Issued to: | Nuance Communications |
Authority (CA): | VeriSign |
Effective date: | Monday, May 9, 2011 |
Expiration date: | Friday, July 4, 2014 |
Programs installed in
(Note, the programs listed below are for all versions of PaperPort.)
“See for yourself why PaperPort Professional 14 is the most productive desktop document management solution available. And now, PaperPort Professional 14 delivers anytime-anywhere access to files store...”
Behaviors
(Note, the behaviors below are for all versions of paprport.exe, select a unique version for details.)
Autoplay handler
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
- Handler name 'PaperPort11AutoPlay'
Malware detections
Based on 40+ industry antivirus scanners, 10 of them detected the following malware.
Antivirus engine | Engine version | Detection | File version |
ByteHero |
1.0.0.1 |
Trojan.Exception.gen.101 |
14.1.11528.2007 |
ByteHero |
1.0.0.1 |
Trojan.Exception.gen.101 |
12.1.10159.100 |
ByteHero |
1.0.0.1 |
Trojan.Exception.gen.101 |
14.0.11477.100 |
ByteHero |
1.0.0.1 |
Trojan.Exception.gen.101 |
14.0.11372.1829 |
ByteHero |
1.0.0.1 |
Trojan.Exception.gen.101 |
12.1.11402.100 |
ByteHero |
1.0.0.1 |
Trojan.Exception.gen.101 |
12.1.10118.100 |
Clam AntiVirus |
0.97.0.0 |
PUA.Packed.Armadillo |
11.2 |
Comodo Internet Security |
8488 |
Heur.Packed.MultiPacked |
11.2 |
Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.F47V0725 |
12.1.11402.100 |
Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.F47V0828 |
12.1.10118.100 |
All file variations of paprport.exe
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
52.94% |
|
Windows 7 Ultimate |
11.76% |
|
Windows 7 Professional |
11.76% |
|
Windows 8 Pro with Media Center |
8.82% |
|
Windows 8.1 |
5.88% |
|
Microsoft Windows XP |
2.94% |
|
Windows Vista Ultimate |
2.94% |
|
Windows Vista Home Premium |
2.94% |
|
Distribution by country
United States installs about 64.71% of PaperPort.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Hewlett-Packard |
25.00% |
|
Acer |
25.00% |
|
ASUS |
20.00% |
|
Toshiba |
10.00% |
|
GIGABYTE |
10.00% |
|
Dell |
10.00% |
|