Question regarding mysterious Extractor.exe of Adobe
Hi all,
I'm trying to understand a file I found on my own machine and can't account for.
On my system I discovered there is the file C:\ProgramData\Adobe\ARM\OnDemand\Acrobat_SCA_Mini_Full\Extractor.exe. Its file properties identify it as Adobe's "7Z Extractor", part of the Acrobat Update Installer, file version 1.824.8.19, signed by Adobe. The file on my machine is dated August 18, 2025 (create date and last modify date are the same, at the same exact time), which lines up with a planned Acrobat update from that date.
I couldn't find much documentation about what this component actually is or when it runs, so I tried to reproduce how it got there. I set up a clean VM, installed an older Reader DC (25.001.20428, i.e. a version from before that August 18 date), and ran Help -> Check for Updates to let it update to the current version, trying to watch the whole process with Process Monitor.
The puzzling part is that the update completed normally (I saw AdobeARM.exe, armsvc.exe and AdobeARMHelper.exe all run, finishing via msiexec), but Extractor.exe never appeared at all. The OnDemand\Acrobat_SCA_Mini_Full folder was never even created during that update. Yet on my real machine, the file is clearly there.
So I'm confused about its origin.
My questions come down to:
- What is this OnDemand\Extractor.exe component actually for, and which process normally places it on disk?
- Under what circumstances does it get staged into that OnDemand folder? Since a normal Check-for-Updates didn't create it, is it tied to a specific update type (full SCA/unified package vs. incremental patch), a specific version jump, or some other scenario?
- Is this mechanism still used in current versions, or is it a leftover from an older update path?
Trying to understand where it came from and whether it's still in active use. Thanks for any insight!
