home

expert_pdf_10_installer.exe

eXpert PDF 10 Installer

Avanquest UK Ltd

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program eXpert PDF 10 by Avanquest Software Limited. The file has been seen being downloaded from downloads.upclick.com and multiple other hosts.
Publisher:
Avanquest Software  (signed by Avanquest UK Ltd)

Product:
eXpert PDF 10 Installer

Version:
10.0.4.26940

MD5:
8f4c2bab752aa1eea96407b12557288c

SHA-1:
80eb169f83a4940b2c1621ab6ff952116800b6ed

SHA-256:
8e3942dc06d0ecacfb5c60ed6b17c31bf93341358abfa1ed370e1f13653602e8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 2:35:56 PM UTC  (today)

File size:
5.2 MB (5,485,432 bytes)

Product version:
10.0.4.26940

Copyright:
Copyright © 2016 Avanquest

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\ProgramData\application data\expert pdf 10\installation\expert_pdf_10_installer.exe

Digital Signature
Signed by:
Avanquest UK Ltd

Authority:
COMODO CA Limited

Valid from:
11/24/2015 1:00:00 AM

Valid to:
11/24/2016 12:59:59 AM

Subject:
CN=Avanquest UK Ltd, O=Avanquest UK Ltd, STREET=Sheridan House, STREET=40-43 Jewry Street, L=Winchester, S=Hampshire, PostalCode=SO23 8RY, C=GB

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
457AD89C345946B31114D1D6644C6CC6

File PE Metadata
Compilation timestamp:
2/11/2016 3:45:03 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:ouf8Zw8JMyPD4/nqwDLeLTU1WKIincF8uBcsGP6CLJPtUgTqGt7SbEclhN4cMUBx:b0GiPaqWLkJKIPF8i+7FUCt5eBCjBiY4

Entry address:
0x95C1C0

Entry point:
60, BE, 00, 90, 82, 00, 8D, BE, 00, 80, BD, FF, C7, 87, 4C, CB, 5B, 00, 65, FC, 32, 97, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:
5.2 MB (5,455,872 bytes)

Program Uninstaller
Program name:
eXpert PDF 10

Display publisher:
Avanquest Software Limited

Display version:
10.0.4.26940

Uninstall string:
C:\ProgramData\eXpert PDF 10\Installation\eXpert_PDF_10_Installer.exe /uninstall


The file expert_pdf_10_installer.exe has been seen being distributed by the following 8 URLs.

https://downloads.upclick.com/download.aspx?id=22d441f1-f55a-4cc3-bfef-8b6b796d7d17&cmp=TRANSFORMER_DOCUMENT_PDF_EN_WORD&key1=transformer un document pdf en word&key2={placement}&mkey1=AQ_FR_PP_MS_SE_EXPDF_CONV_WORD&mkey2=AQ_FR_EXPDF&uid=1013455&wid=5809

https://downloads.upclick.com/download.aspx?id=f1c3c25a-2d0f-4f99-b8aa-b3a231f1b811&mkey1=AQ_IT_EM_EXPDF10_0416_UPG1&mkey2=AQ_IT_EXPDF_UPG&uid=1013455&wid=5809

http://downloads.upclick.com/Publishers/.../a319f4f2-3d28-4f3d-bb66-0582550ee819_eXpert_PDF_10_Installer.exe

http://downloads.upclick.com/Publishers/.../bb5d6899-5e6b-4d74-b4a8-9b19ce83a701_eXpert_PDF_10_Installer.exe

http://downloads2.upclick.com/Publishers/.../a7fe033f-24a3-4718-a6dd-86158c9868d1_eXpert_PDF_10_Installer.exe

https://downloads.upclick.com/download.aspx?id=94190318-865e-4afc-9c16-e275d7c1547b&cmp=TRANSFORMER_PDF_EN_WORD&key1=transformation pdf en word&key2={placement}&mkey1=AQ_FR_PP_MS_SE_EXPDF_CONV_WORD&mkey2=AQ_FR_EXPDF&uid=1013455&wid=5809

http://dl.microapp.com/.../default.aspx?id=805437&uid=3DDEACB7-926F-0054-BBD72A02B17156DD&ok=1

http://dl.microapp.com/.../default.aspx?id=806865&uid=661C05AA-DD71-56C7-A11563781FB9E0B5&ok=1

Scan expert_pdf_10_installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.