home

doccreatorclient.exe

gDocCreator

Global Graphics Software Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DocCreatorClient’.
Publisher:
Global Graphics Software Ltd.  (signed by Global Graphics Software Limited)

Product:
gDocCreator

Description:
gDocCreator Client application

Version:
2.0.0.1

MD5:
9c02170eee1135435d4546d159e9ddb5

SHA-1:
4e49ab78f94d7ebc449803a8f03907a168060e17

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 1:26:56 AM UTC  (today)

File size:
277.4 KB (284,056 bytes)

Product version:
2.0.0.1

Copyright:
Copyright (C) 2009 Global Graphics Software Ltd. . All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\global graphics\gdoc\doccreatorclient.exe

Digital Signature
Signed by:
Global Graphics Software Limited

Authority:
VeriSign, Inc.

Valid from:
6/10/2009 2:00:00 AM

Valid to:
6/11/2010 1:59:59 AM

Subject:
CN=Global Graphics Software Limited, OU=Digital ID Class 3 - Microsoft VBA Software Validation v2, O=Global Graphics Software Limited, L=Cambridge, S=Cambridgeshire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
294E90D76C96D2512972880C99273C51

File PE Metadata
Compilation timestamp:
5/20/2010 2:51:34 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:1Youio0xlDUYkfn85PfD+qvX5TgdrOvbrP7ziU1Vd72qORG832io++q:1YouJ0lQYkIfiqvJTHjrPPi2pORGZ9q

Entry address:
0x25442

Entry point:
E8, 8D, 04, 00, 00, E9, 39, FD, FF, FF, FF, 25, 08, 15, 43, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, 10, 15, 43, 00, FF, 25, 14, 15, 43, 00, CC, CC, CC, CC, 83, 3D, 8C, 2A, 44, 00, 00, 74, 2D, 55, 8B, EC, 83, EC, 08, 83, E4, F8, DD, 1C, 24, F2, 0F, 2C, 04, 24, C9, C3, 83, 3D, 8C, 2A, 44, 00, 00, 74, 11, 83, EC, 04, D9, 3C, 24, 58, 66, 83, E0, 7F, 66, 83, F8, 7F, 74, D3, 55, 8B, EC, 83, EC, 20, 83, E4, F0, D9, C0, D9, 54, 24, 18, DF, 7C, 24, 10, DF, 6C, 24, 10, 8B, 54, 24, 18, 8B...
 
[+]

Code size:
192 KB (196,608 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DocCreatorClient

Command:
"C:\Program Files\global graphics\gdoc\doccreatorclient.exe"


Scan doccreatorclient.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.