» nuancepdfreader_efgdis.exe
Overview
Analysis
File Details
Programs (2)
Downloads (9)

nuancepdfreader_efgdis.exe

Nuance PDF Reader

Nuance Communications, Inc.

This is a self-extracting archive and installer. This is installed with multiple programs including Nuance PDF Reader. The file has been seen being downloaded from safedownload.co and multiple other hosts.

File name:

nuancepdfreader_efgdis.exe

Publisher:

Nuance Communications, Inc. (signed by Nuance Communications, Inc.)

Product:

Nuance PDF Reader

Description:

Setup Launcher Unicode

Version:

7.00.0000

MD5:

c23edd256e4c61337a6e934e816eedb9

SHA-1:

8b66d58b8404abf2cf7f11959883e2eaf0ffde76

SHA-256:

1673fa69c3a8a9fa01c762f452cbd327ba5de7544b0eae7f1e19c7c87038c229

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/10/2024 7:30:12 AM UTC (today)

File size:

31.5 MB (33,001,712 bytes)

Product version:

7.00.0000

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\ProgramData\temp\nuance\documentation\nuancepdfreader_efgdis.exe

Digital Signature

Signed by:

Nuance Communications, Inc.

Authority:

VeriSign, Inc.

Valid from:

6/2/2008 2:00:00 AM

Valid to:

7/6/2011 1:59:59 AM

Subject:

CN="Nuance Communications, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Nuance Communications, Inc.", S=Massachusetts, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6FDDA609F2175F715F1C3CCCDDD30CA3

File PE Metadata

Compilation timestamp:

9/22/2009 6:59:30 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

786432:fc00pLlnh20sbQGtTt3OyM3vbw2KL/0mLKCsWxF9fdj:Nkf20sbdt9OyM3vbwXcmLKzWxFb

Entry address:

0x56683

Entry point:

55, 8B, EC, 6A, FF, 68, F8, 7E, 47, 00, 68, 60, 72, 45, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 7C, 61, 47, 00, 33, D2, 8A, D4, 89, 15, 30, 87, 49, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 2C, 87, 49, 00, C1, E1, 08, 03, CA, 89, 0D, 28, 87, 49, 00, C1, E8, 10, A3, 24, 87, 49, 00, 6A, 01, E8, 44, 3E, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C2, 00, 00, 00, 59, E8, D9, 1A, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B1, 00, 00, 00, 59, 33, F6, 89, 75... 
[+]

Entropy:

7.9962 (probably packed)

Code size:

465.5 KB (476,672 bytes)

The file nuancepdfreader_efgdis.exe has been discovered within the following programs.

Nuance PDF Reader by Nuance Communications Inc.

Publisher's description - “Get ready to rethink your choice of free PDF reader. Nuance PDF Reader enables you to do much more than just view PDF files. You can convert PDF files to Word, Excel, and RTF via a hosted web service.”

www.nuance.com

3% remove it

Toolwiz TimeFreeze by ToolWiz

www.toolwiz.com/products/toolwiz-time-freeze

About 8% of users remove it

The file nuancepdfreader_efgdis.exe has been seen being distributed by the following 9 URLs.

http://safedownload.co/.../pdfreader.exe

http://downloadme.co/.../pdfreader.exe

http://files.downloadnow.com/s/software/11/67/22/.../NuancePDFReader_English.exe

http://gsf-cf.softonic.com/8b6/6d5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=93568&instance=softonic_pl&type=PROGRAM&Expires=1444851602&Signature=b0JbWE39E3Mb~~j5yVxzlghSCzPKwN8Na918YCp4KlKsQdmT~1IQ-q2rEdE7j3AAjJx05QtUDyftdtXYTVCx7EHxLzP2h5Z2jcXTAPk4EJQwG95Ra~3kHvUD4RaMGdJEDqDIMAC8vdnk-47nJgHu7sbp~u83xnR8vTj9fvXjUSY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NuancePDFReader_English.exe

http://cdn.portalprogramas-download.com/d/.../Nuance-PDF-Reader

http://imagingcontent.nuance.com/.../NuancePDFReader_EFGDIS.exe

http://ezdownload.co/.../pdfreader.exe

http://imagingcontent.nuance.com/.../NuancePDFReader_English.exe

http://software-files-a.cnet.com/s/software/11/67/22/.../NuancePDFReader_English.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.