home

abbyy_pdf_transformer_plus.exe

ABBYY Production LLC

This is a setup program which is used to install the application. The file has been seen being downloaded from abbyy-pdf-transformer.softonic.com and multiple other hosts.
Publisher:
ABBYY Production LLC  (signed and verified)

MD5:
52e9729da3324ea59c04bff41e2c35c0

SHA-1:
d09fcad01b6f1f9b78f2a1718b99bfda398b65a4

SHA-256:
93c31b353ffac9deafa04c40a2563a275863118397b63272a7cc665fbb58280c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 5:16:21 AM UTC  (today)

File size:
418 MB (438,316,400 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\abbyy pdf transformer +\abbyy 1132 27 1133 27\abbyy_pdf_transformer_plus.exe

Digital Signature
Signed by:
ABBYY Production LLC

Authority:
Entrust, Inc.

Valid from:
1/13/2014 10:45:55 AM

Valid to:
1/13/2016 9:00:24 PM

Subject:
CN=ABBYY Production LLC, O=ABBYY Production LLC, L=Moscow, C=RU

Issuer:
CN=Entrust Code Signing Certification Authority - L1D, OU="(c) 2009 Entrust, Inc.", OU=www.entrust.net/rpa is incorporated by reference, O="Entrust, Inc.", C=US

Serial number:
4C17678A

File PE Metadata
Compilation timestamp:
6/9/2012 2:19:49 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12582912:7cMjidePXT3BLoTaoHmFo8cSdgtvQmRc6DiSP3pIRIXHhnN1S:7cEuWLO4o8c0guB6ZIiXtO

Entry address:
0xAC87

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, 9F, 30, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, 8F, AB, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 24, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 24, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, 0E, B1, FF, FF, C3, 56, 8B, F1, 8B, 06, 85, C0, 74, 07, 50, FF, 15, C4, 40, 41, 00, 83, 26, 00, 83, 66, 08, 00, 83, 66, 0C, 00, 5E, C3, 56, 8B, F1, 80, 7E, 04, 00, 75, 34, 68, F4, 44, 41, 00...
 
[+]

Entropy:
7.9974  (probably packed)

Code size:
73 KB (74,752 bytes)

The file abbyy_pdf_transformer_plus.exe has been seen being distributed by the following 48 URLs.

https://abbyy-pdf-transformer.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWuMAYGg202ukXToZcfA7pShq1Uc/.../zCXjdoqiXRL5GVb2I 4xEbpbRimaqi0SCEQvN8Rpc5XXTmtIxZ4TvabknsvMU=

http://dlp-ru.abbyy.com/?linkId=6602a2fa-e71b-4abc-acfb-569379fadb27

https://www.google.com/url?hl=th&q=http://.../?linkId=1aa16814-acb2-41c7-90fc-b502b22ba447&source=gmail&ust=1484559371391000&usg=AFQjCNHa3Ek_LM52GDH2MvV1uKBWgfHNpg

http://dlp-ru.abbyy.com/?linkId=7d904851-2ec4-47c5-91fd-63069daa57b7

http://dlp-ru.abbyy.com/?linkId=a649fb15-ba7d-4a53-8285-59a4a4b190b2

https://abbyy-pdf-transformer.it.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPfKtnB1uXSupsCcTiN8syf7rYPShcHHE/.../fb4KY3vDqs8kHDOlbaB4PcN5ghFQFPr6zV59GRCc=

http://api.eptimum.com/.../download.php?cmd=BC-3861282&pass=7T5UNLM2&fichid=50614

http://mailme.abbyy.ua/lt.php?c=513&m=393&nl=3&s=bad97c655476f96a390a72c05a742011&lid=3756&l=-http--www.abbyy.com.tr/.../PDFT_PLUS.exe

http://abbyy-pdf-transformer.softonic.it/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPfKtnB1uXSupsCcTiN8syf7rYPShcHHE/.../fb4KY3vDqs8kHDOlbaB4PcN5ghFQFPr6zV59GRCc=

http://indir.gezginler.net/i/5542/.../

https://shop.abbyyusa.com/order/.../BUbQ==

http://goo.gl/EqQofq

https://www.google.com/url?hl=ro&q=http://mailme.abbyy.ua/lt.php?c=512&m=392&nl=15&s=9d2b8283c64a0719e2f0ecb05841cbad&lid=3752&l=-http--www.abbyy.ro/.../PDFT_PLUS.exe&source=gmail&ust=1463667910582000&usg=AFQjCNGJaRLMRluTRjajmpRUhXGRYJObrw

http://dlp-ru.abbyy.com/?linkId=cfc4e881-26c0-4ef4-adfb-d1cb30e7994e

ftp://product:RlsiKphxc7wL.@ftp.abbyy.co.kr/.../ABBYY_PDF_Transformer_Plus.exe

https://www.google.com/url?hl=iw&q=http://mailme.abbyy.ua/lt.php?c=566&m=422&nl=48&s=9efa3a295d5f4cd2a41c25003919223a&lid=4117&l=-http--il.abbyy.com/.../PDFT_PLUS.exe&source=gmail&ust=1469790701922000&usg=AFQjCNHHt2gaxiQzDx8va4sWaI8x9XFOxQ

http://dlp-ru.abbyy.com/?linkId=191fa3ea-ab68-46e7-9cdd-338aa2e8458f

http://abbyy-pdf-transformer.it.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPfKtnB1uXSupsCcTiN8syf7rYPShcHHE/.../fb4KY3vDqs8kHDOlbaB4PcN5ghFQFPr6zV59GRCc=

https://www.google.com/url?hl=th&q=http://.../?linkId=e30dfe64-e80d-46cc-bf51-102745e85709&source=gmail&ust=1472965759997000&usg=AFQjCNEZNeLEz_zvSQDPWaDY2LpIw4T9aQ

http://dlp-ru.abbyy.com/?linkId=b03d9594-dc11-41ac-8f6f-5fa71ef3ff6c

http://mailme.abbyy.ua/lt.php?c=566&m=422&nl=48&s=11583de170fdf83f0278e3d201131ce6&lid=4117&l=-http--il.abbyy.com/.../PDFT_PLUS.exe

http://mailme.abbyy.ua/lt.php?c=512&m=392&nl=15&s=fa8d531f82a8f19c3fde71e815e9e267&lid=3752&l=-http--www.abbyy.ro/.../PDFT_PLUS.exe

http://dlp-ru.abbyy.com/?linkId=3a368bf6-f263-46d1-ad4c-e0579ab7b0b0

http://download1214.mediafire.com/261k6bq6vdyg/.../ABBYY_PDF_Transformer_Plus-12.0.104.225-sigmapc100.exe

http://dlp-ru.abbyy.com/?linkId=515b5340-1be7-4d16-b188-c9aa0cc14726

https://www.google.com/url?hl=th&q=http://.../?linkId=31742b79-836d-4723-a5e1-af0dd39dca29&source=gmail&ust=1471159678070000&usg=AFQjCNGp-AHCemnE4r1oGvKQhJvC1UFDCQ

http://fcdn.softcdn.ru/4.html?sect=1469663476&parameter=AbbyyPDFTransformer_Rus_Trial_Setup.exe&secl=MgF_7os-zjA8xlC7ekL94A&clr=1

https://www.google.com/url?hl=el&q=http://.../?linkId=59cbb3d1-300f-4b06-8873-ab5ab82f429d&source=gmail&ust=1466850857361000&usg=AFQjCNF5WPAvFw3sv0GVrXXo5WfOUJ58Vw

http://dlp-ru.abbyy.com/?linkId=35337d95-5268-4e62-94da-871c9d0d023a

https://www.google.com/url?hl=iw&q=http://mailme.abbyy.ua/lt.php?c=566&m=422&nl=48&s=bfec5fe7d66201bd4b225645ef60571e&lid=4117&l=-http--il.abbyy.com/.../PDFT_PLUS.exe&source=gmail&ust=1470996856566000&usg=AFQjCNEhKm__oDJQFHkNdbKIz9kJv2oR_A

Latest 30 of 48 download URLs

Scan abbyy_pdf_transformer_plus.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.