expert_pdf.exe

eXpert PDF UK

AVANQUEST SOFTWARE

This is a setup program which is used to install the application. The file has been seen being downloaded from webtools.expert-pdf.com and multiple other hosts.
Publisher:
AVANQUEST SOFTWARE  (signed and verified)

Product:
eXpert PDF UK

Version:
10.0.0.0

MD5:
07cb6ed78f4346d76089738c1c50bf92

SHA-1:
955e1e80faa4a8cfc6e696600bec8f861b4440ae

SHA-256:
bb90ba82d9392f4b00479bc86f23250245ac4e70944dc2cb9ecc7048795be6e7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 2:33:52 AM UTC  (today)

File size:
1.8 MB (1,889,128 bytes)

Product version:
10.0

Copyright:
Copyright © Avanquest Software 2016

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\expert_pdf.exe

Digital Signature
Authority:
Symantec Corporation

Valid from:
2/13/2015 12:00:00 AM

Valid to:
3/6/2017 11:59:59 PM

Subject:
CN=AVANQUEST SOFTWARE, O=AVANQUEST SOFTWARE, L=Paris, S=Ile de France, C=FR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
6720EB953FB3B3DD5351FF987A4D7CD7

File PE Metadata
Compilation timestamp:
3/21/2016 2:08:38 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
49152:oT85R5F59oi+fJs/TcgQFFqEUqYB5dJt8:mw1oJ6TcgQvUqYdU

Entry address:
0x6EA3B

Entry point:
E8, 68, DD, 00, 00, E9, 7F, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04, 2B...
 
[+]

Code size:
529.5 KB (542,208 bytes)

The file expert_pdf.exe has been seen being distributed by the following 27 URLs.

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_ZA_PP_GO_SE_EXPERT_PDF_WORD&keyword=convert pdf to word&campaignid=GEN_PDF_TO_EXCEL&gclid=,Cj0KEQiAvNrBBRDe3IOwzLn6_O4BEiQAmbK-Djbl5e5k73V4BuS2kfDPl4LNBPyN7qdc-y20_8HQe5kaAqTg8P8HAQ&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_NL_PP_GO_SE_EXPERT_PDF_WORD&keyword= pdf to word&campaignid=GEN_PDF_TO_EXCEL&gclid=,CJXHoN3g6c8CFaIy0wodOIQE0Q&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_PP_GO_SE_EXPDF_AQUK&keyword=convert pdf to word&campaignid=PDF_TO_WORD_PHRASE&gclid=,CKTEt5b8xtECFdEy0wodPr8GXA&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_ZA_PP_GO_SE_EXPERT_PDF_WORD&keyword= pdf word&campaignid=GEN_PDF_TO_EXCEL&gclid=,Cj0KEQiAh4fEBRCZhriIjLfArrQBEiQArzzDAZjbTsKbwIgLGK3pOV7nSvmujU61UhB6zGqcpAps0ekaAnrs8P8HAQ&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_ZA_PP_GO_SE_EXPERT_PDF_WORD&keyword=pdf to word&campaignid=GEN_PDF_TO_EXCEL&gclid=,Cj0KEQjwnKzABRDy2pb7nPSazdsBEiQAI4lZQJRYySK3Xbw34ZNXuSziWB_VWnJo36aMl9PJXq_4SR8aApXx8P8HAQ&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_ZA_PP_GO_SE_EXPERT_PDF_WORD&keyword= pdf word&campaignid=GEN_PDF_TO_EXCEL&gclid=,CPWJj7O8_tACFbMW0wodAI8D5g&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_NOR_PP_GO_SE_EXPERT_PDF_WORD&keyword=convert pdf to word&campaignid=GEN_PDF_TO_EXCEL&gclid=,CLKmq-vyrdACFaH4cgodypsO_A&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_NL_PP_GO_SE_EXPERT_PDF&keyword= convert to pdf&campaignid=GEN_PDF_CONVERSION&gclid=,CLf9tq_p7c8CFYafGwodEVkK1A&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_ZA_PP_GO_SE_EXPERT_PDF_WORD&keyword= pdf word&campaignid=GEN_PDF_TO_EXCEL&gclid=,CLr-rZaa89ACFQw4GwodtxEKPQ&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_ZA_PP_GO_SE_EXPERT_PDF&keyword= convert file powerpoint to pdf&campaignid=GEN_PDF_TO_POWERPOINT&gclid=,CjwKEAjwy8bABRD5osXMovTHpmQSJACfZY0FWZsYZxnxt-RWK9D9wFkbABWGfWRKnYxiObz_3ILbhxoCporw_wcB&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_PP_GO_SE_EXPDF_AQUK&keyword= convert pdf to excel&campaignid=PDF_to_Excel_Broad&gclid=,Cj0KEQiAvNrBBRDe3IOwzLn6_O4BEiQAmbK-Dm_6SSBE5SA4Aha590JfScByF4qVD3eW23uyONw5mlcaAnFt8P8HAQ&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_ZA_PP_GO_SE_EXPERT_PDF_WORD&keyword= pdf word&campaignid=GEN_PDF_TO_EXCEL&gclid=,CjwKEAiA9s_BBRCL3ZKWsfblgS8SJACbST7DyRLLDmiNsfHje8_p_o2lqlsQh1fD8wwnylKee7qm7hoCo_fw_wcB&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?filter={placement}&tracking=AQ_UK_PP_BI_SE_EXPDF&keyword=pdf expert&campaignid=EXPERT_PDF_9_EXACT&msclkid=70d78ee8b79c46e9a2495f2b4a08e264&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_PP_GO_SE_EXPDF_AQUK&keyword=convert pdf to word&campaignid=PDF_TO_WORD_PHRASE&gclid=,CMvQ77Cs888CFdAW0wod6CcBSA&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_NOR_PP_GO_SE_EXPERT_PDF_WORD&keyword=convert word to pdf&campaignid=GEN_PDF_TO_EXCEL&gclid=,CJqUpOH-qNACFQ8tGQoddRwOSw&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_DE_PP_GO_SE_EXPDF_NGSC_AQDE&keyword=pdf bearbeiten&campaignid=PDF_bearbeiten&gclid=,CMfCrI-35s8CFS8o0wodfS0M3w&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_ZA_PP_GO_SE_EXPERT_PDF_WORD&keyword= pdf word&campaignid=GEN_PDF_TO_EXCEL&gclid=,COWHuajm488CFaMK0wod9OcAkw&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?filter={placement}&tracking=AQ_UK_PP_BI_SE_EXPDF&keyword=convert pdf to word&campaignid=PDF_TO_WORD_EXACT&msclkid=6c756be962ec494c83f440aa7a256325&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_ZA_PP_GO_SE_EXPERT_PDF_EXCEL&keyword= pdf to excel&campaignid=GEN_PDF_TO_EXCEL&gclid=,CjwKEAjw7svABRCi_KPzoPr53QoSJAABSvxflW1VVOVIvpR9klGmtQ6cjDoAiwzqjEmnEuWOr-XK9xoCsszw_wcB&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?filter={placement}&tracking=AQ_UK_PP_BI_SE_EXPDF&keyword=pdf to word&campaignid=PDF_TO_WORD_EXACT&msclkid=2f7b48c5cc014cfea584a8da1655a859&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_PDF_Untrack&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_NL_PP_GO_SE_EXPERT_PDF&keyword= convert to pdf&campaignid=GEN_PDF_CONVERSION&gclid=,CjwKEAiAr4vBBRCG36e415-_l1wSJAAatjJZHzTVjXFXgta-Mcr_Y-ge4Zlc1FxCfn3RyNLZEo_xjBoCevfw_wcB&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_NL_PP_GO_SE_EXPERT_PDF_WORD&keyword=convert word to pdf&campaignid=GEN_PDF_TO_EXCEL&gclid=,CjwKEAjw-uDABRDPz4-0tp6T6lMSJADNoyPb1R_JUinNrr3pcILAkwbTONFjw-XCQgEj-klknhw5XhoCtpfw_wcB&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

http://webtools.expert-pdf.com/download.cfm?tracking=AQ_UK_ZA_PP_GO_SE_EXPERT_PDF_WORD&keyword= convert word to pdf&campaignid=GEN_PDF_TO_EXCEL&gclid=,CjwKEAjw1qHABRDU9qaXs4rtiS0SJADNzJisX6Bd5j1VhlgJzovxk2a6O3Ruw4VzVm-Pii-xQ_pGmRoC1Gvw_wcB&go=http://fastcdn.avanquest.com/Expert_PDF/.../Expert_PDF.exe

Scan expert_pdf.exe - Powered by Reason Core Security