home

pdfsty.exe

PDF Complete

PDF Complete

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PDF Complete’.
Publisher:
PDF Complete Inc  (signed by PDF Complete)

Product:
PDF Complete

Description:
Sentry for PDF

Version:
3.5.113.2102

MD5:
f1c8b7dbdad4fe8d28941758d9406e1d

SHA-1:
4ccc8ecf029b6f13eda674b188d84f5045c5de16

SHA-256:
525351da71356554c4f60cb25fc1d8e3e9d959be39cac19298f02929f934d9db

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 7:50:04 AM UTC  (today)

File size:
550.5 KB (563,736 bytes)

Product version:
3.5

Copyright:
Copyright © 1998-2008 PDF Complete Inc.

Trademarks:
PDF Complete® PDF Vista® are registered trademarks of PDF Complete, Inc.

Original file name:
pdfsty.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pdf complete\pdfsty.exe

Digital Signature
Signed by:
PDF Complete

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
2/7/2009 10:22:23 AM

Valid to:
2/14/2011 3:55:35 AM

Subject:
CN=PDF Complete, OU=Secure Application Development, O=PDF Complete, L=Austin, S=Texas, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
7B777C3D4812084488116AEDF01C57BE

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:hAtut9WvvF34WL60qGyaGUbsfDrIEPep9KK0:dLWl3X+06L/fvDwKK0

Entry address:
0x70BD8

Entry point:
55, 8B, EC, 83, C4, F0, B8, C8, 08, 47, 00, E8, DC, 60, F9, FF, 33, C0, 55, 68, 0E, 0C, 47, 00, 64, FF, 30, 64, 89, 20, E8, 6D, F4, FF, FF, E8, 18, 3B, F9, FF, 33, C0, 5A, 59, 59, 64, 89, 10, 68, 15, 0C, 47, 00, C3, E9, 45, 35, F9, FF, EB, F8, E8, 26, 3A, F9, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6130

Developed / compiled with:
Microsoft Visual C++

Code size:
447.5 KB (458,240 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PDF Complete

Command:
C:\Program Files\pdf complete\pdfsty.exe


Scan pdfsty.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.