home

pdfsty.exe

PDF Complete

PDF Complete

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PDF Complete’.
Publisher:
PDF Complete Inc  (signed by PDF Complete)

Product:
PDF Complete

Description:
Sentry for PDF

Version:
4.0.54.2001

MD5:
28233fff198177937913658c629858d9

SHA-1:
124466feb022c1ced1a8e90181c2cf0ac7ed7b95

SHA-256:
736906037a7b642850e614915d351307b09212c4c80a9b35d6d4140e3bb6e41c

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/19/2024 2:23:25 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
Win.Worm.Runouce-878
0.98/23132

File size:
643 KB (658,424 bytes)

Product version:
4.0.54.2001

Copyright:
Copyright © 1998-2011 PDF Complete Inc.

Trademarks:
PDF Complete® is a registered trademark of PDF Complete, Inc.

Original file name:
pdfsty.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pdf complete\pdfsty.exe

Digital Signature
Signed by:
PDF Complete

Authority:
Thawte, Inc.

Valid from:
2/16/2011 1:00:00 AM

Valid to:
2/16/2013 12:59:59 AM

Subject:
CN=PDF Complete, OU=Secure Application Development, O=PDF Complete, L=Austin, S=Texas, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
36B5AA8C6D1C8A92D4128D120FE4DDFC

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x31B74

Entry point:
55, 8B, EC, 83, C4, F0, B8, DC, 19, 43, 00, E8, 2C, 4F, FD, FF, 33, C0, 55, 68, AA, 1B, 43, 00, 64, FF, 30, 64, 89, 20, E8, 4D, F6, FF, FF, E8, 20, 2A, FD, FF, 33, C0, 5A, 59, 59, 64, 89, 10, 68, B1, 1B, 43, 00, C3, E9, 4D, 24, FD, FF, EB, F8, E8, 2E, 29, FD, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
195 KB (199,680 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PDF Complete

Command:
C:\Program Files\pdf complete\pdfsty.exe


Scan pdfsty.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.