home

pdfxvwer.exe

PDF-XChange PDF Viewer

Tracker Software Products (Canada) Ltd

This is a self-extracting archive and installer. The file has been seen being downloaded from dw.cbsi.com and multiple other hosts.
Publisher:
Tracker Software Products Ltd   (signed by Tracker Software Products (Canada) Ltd)

Product:
PDF-XChange PDF Viewer

Description:
PDF-XChange PDF Viewer Setup

Version:
2.5.317.0

MD5:
cc77c99942dabade9577b53055130925

SHA-1:
df27ee55ca4a992c256f0ca15a5758e2ba426e48

SHA-256:
6c6622255133a7e68b5fcfe93bcb6bb6d6b3a5cb24fb6f952325cc203b200a31

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 1:57:36 PM UTC  (today)

File size:
17.1 MB (17,934,008 bytes)

Product version:
2.5.317.0

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\programs\pdfxvwer.exe

Digital Signature
Signed by:
Tracker Software Products (Canada) Ltd

Authority:
COMODO CA Limited

Valid from:
9/9/2014 7:00:00 AM

Valid to:
9/9/2017 6:59:59 AM

Subject:
CN=Tracker Software Products (Canada) Ltd, O=Tracker Software Products (Canada) Ltd, STREET=9622 Chemainus Rd, L=Chemainus, S=BC, PostalCode=V0R 1K0, C=CA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0B6DE0A1B910529ED0179BEB38DC384C

File PE Metadata
Compilation timestamp:
1/15/2016 3:22:50 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:SPGVzYNwAIe4qnWx/fwhQFVoGtzEcsWMoib1Wl5ey8RNfl:SPMzYyMM/fYevzEc4t05g

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Entropy:
7.9993

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file pdfxvwer.exe has been seen being distributed by the following 20 URLs.

http://dw.cbsi.com/redir?ttag=visit_site_btn_click&lop=link&ptid=3000&pagetype=product_detail&astid=2&edid=3&siteid=4&destUrl=http://www.tracker-software.com/downloads/.../doc-management&topicbrcrm=&pid=14504286&mfgid=65666&merid=65666&ctype=dm&cval=NONE&ltype=dl_dlnow&spi=f4c605899081edec7cf710324cd01345&devicetype=desktop&pguid=d7dd8ae207897090533c4cb7&viewguid=b06ztwKBwlRHxO3b79cHEUeDOmKp8mAgJNBQ

http://dw.cbsi.com/redir?ttag=visit_site_btn_click&lop=link&ptid=3000&pagetype=product_detail&astid=2&edid=3&siteid=4&destUrl=http://www.tracker-software.com/downloads/.../doc-management&topicbrcrm=&pid=14504286&mfgid=65666&merid=65666&ctype=dm&cval=NONE&ltype=dl_dlnow&spi=1505c79236fca2ede3dd6cfb02afa8e7&devicetype=desktop&pguid=2634aac024d57f90ebee92a0&viewguid=cA5lbN4ZoR1cF6YCCjrof4a-BHPKVsA@dIq0

http://ftp-stahuj.centrum.cz/dl/c808f5ca3c5d540301b78a4865594f2c/57a967e1/stahuj/download/software/secured/p/pdf-xchange-viewer/25317/.../PDFXVwer.exe

http://c1236872.r72.cf0.rackcdn.com/PDFXVwer.exe

http://lb.cdn.m6web.fr/d/c/a/895d3d13beeb47989f80e4399b6751b1/56fd9832/soft/.../pdf-xchange-viewer_2-5-317_fr_76372.exe

http://d110.cdn.m6web.fr/soft/.../pdf-xchange-viewer_2-5-317_fr_76372.exe

http://lb.cdn.m6web.fr/d/c/a/5043aa3152b66ddd7ab01a5547c0b4a3/57187351/soft/.../pdf-xchange-viewer_2-5-317_fr_76372.exe

http://lb.cdn.m6web.fr/d/c/a/b787f44d4e6b70b37f589f616724f242/570ca767/soft/.../pdf-xchange-viewer_2-5-317_fr_76372.exe

http://download.forest.impress.co.jp/pub/library/p/pdfxchange/.../PDFXVwer.exe

http://dw.cbsi.com/redir?ttag=visit_site_btn_click&lop=link&ptid=3000&pagetype=product_detail&astid=2&edid=3&siteid=4&destUrl=http://www.tracker-software.com/downloads/.../doc-management&topicbrcrm=&pid=14504286&mfgid=65666&merid=65666&ctype=dm&cval=NONE&ltype=dl_dlnow&spi=4e5f273371dd3c26a6eb9f4eb132fcb9&devicetype=desktop&pguid=8d83f37d0f417aa52e55016e&viewguid=cGBQBonnF6LHs77HpeXzf6U5YcskfoxhmG2e

https://download.heise.de/software/6f2d96868a8b117a5391d7699b979562/570132e4/.../pdfxvwer.exe

http://www.filepuma.com/file/1461621562c10978/pdf_xchange_viewer_2.5.317.0/.../0/

http://34e34375d0b7c22eafcf-c0a4be9b34fe09958cbea1670de70e9b.r87.cf1.rackcdn.com/PDFXVwer.exe

http://lb.cdn.m6web.fr/d/c/a/930c0503471130ef7050bb7979f6aeb6/5705044e/soft/.../pdf-xchange-viewer_2-5-317_fr_76372.exe

http://lb.cdn.m6web.fr/d/c/a/fc7e3b6611c9c38ddc0347f6e62e8aaa/571606ea/soft/.../pdf-xchange-viewer_2-5-317_fr_76372.exe

http://telechargement1.pcastuces.com/temp6bs2/.../PDFXVwer.exe

http://telechargement2.pcastuces.com/temp6bs2/.../PDFXVwer.exe

http://dw.cbsi.com/redir?ttag=visit_site_btn_click&lop=link&ptid=3000&pagetype=product_detail&astid=2&edid=3&siteid=4&destUrl=http://www.tracker-software.com/downloads/.../doc-management&topicbrcrm=&pid=14504286&mfgid=65666&merid=65666&ctype=dm&cval=NONE&ltype=dl_dlnow&spi=76f7206affac7214f523a18efd517962&devicetype=desktop&pguid=afcd467e6bc7d9a8e261a868&viewguid=b@Z48iW4WrHFSgiv6rq5@sj5XvKmSeOtn6@O

http://lb.cdn.m6web.fr/d/c/a/2af19c130144f1692b54f4578f7391c6/56fa84c6/soft/.../pdf-xchange-viewer_2-5-317_fr_76372.exe

http://www.tracker-software.com/.../PDFXVwer.exe

Scan pdfxvwer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.