jPDFViewer-windows.exe

jPDFViewer

Qoppa Software, LLC

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Qoppa Software  (signed by Qoppa Software, LLC)

Product:
jPDFViewer

Version:
v6.50

MD5:
f40d3fc4d6e49be2affb675aa53c4960

SHA-1:
7dcfc416ccd0197c3822411fa0b67b78722bf9fa

SHA-256:
5c9e40e31cdcba2342ebddefba312bba42dbe0ac2502e8298fa9003de8583e76

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 5:49:41 PM UTC  (today)

File size:
25.6 MB (26,806,304 bytes)

Product version:
v6.50

Copyright:
Qoppa Software

Original file name:
jPDFViewer-windows.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Digital Signature
Authority:
The USERTRUST Network

Valid from:
10/28/2010 8:00:00 AM

Valid to:
10/28/2013 7:59:59 AM

Subject:
CN="Qoppa Software, LLC", O="Qoppa Software, LLC", STREET=675 Seminole Ave, STREET=Suite 108, L=Atlanta, S=GA, PostalCode=30307, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
483A2EF09AAD4743069ED149C42C7DBA

File PE Metadata
Compilation timestamp:
7/27/2012 9:23:00 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
786432:XOVynmfNUkWfwsV2FQycYmDemx2hOJmVTqY3+fw:+SoBWfw62FvcTx2UYJFb

Entry address:
0x11F8

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9974  (probably packed)

Code size:
181.5 KB (185,856 bytes)

The file jPDFViewer-windows.exe has been seen being distributed by the following 8 URLs.

http://gsf-cf.softonic.com/7dc/fc4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48505&instance=softonic_en&type=PROGRAM&Expires=1446569766&Signature=ca2tc77v~6pu3qo0e2BL~~UP1wiF~9ajtsouVj0dMYJQz5ajI~MshKBk4luujQ7-iFks4STxrByOms-frT1Cnu3O8FsiivXwx9O2qAR-t8D9V92yZqer2FcisOAhD6ZeTVrI7ZLxrUJX2KmltM0oBwzRxURbAkkOtA5UjilWtVs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=jPDFViewer-windows.exe

http://gsf-cf.softonic.com/7dc/fc4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48505&instance=softonic_en&type=PROGRAM&Expires=1473047217&Signature=AhFZjfP8RXHLGj~rHwucsSk7s0C2PgkUKb4JeFZqyOQ57c1X4IkUr75an1ifyE7C3nRS7VSW7wtRn0RLZoXiNBWpPxlKuhwNvdmVdf33BxwzxXwJdlvhsG5nPliboxNV2gUyx~tP9GHwqnajkYpno~4gUeflJtTo6ggFQOkHCdM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=jPDFViewer-windows.exe

http://gsf-cf.softonic.com/7dc/fc4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48505&instance=softonic_en&type=PROGRAM&Expires=1449609257&Signature=fcL99kaeFUyh6WUPrT9vcSXc1aFH6ncy0iRsPcQnLO1mxzOK7bDrJ4AyKUnHuDoO2cSCXTcrOMTBF5DI~pBnEhI5lgtlzQMKsMV3dr46LVDttUTn5tKYg~BRHRIL10AlyTih3crBy4kTReSTJilM1i-~2UG5sudBnrfmseoGZ64_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=jPDFViewer-windows.exe

http://gsf-cf.softonic.com/7dc/fc4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48505&instance=softonic_en&type=PROGRAM&Expires=1434956580&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=LFNemVsXhMI5lgmJ7KJNnWTv2hV49NOVtTsdDAmwom0uldwjwuuIjsI7StiWNKP3lTnYoRta2N-MteIZ0ti22F4i9ASzez78BGzEdyUGUr9Shicfa1G8O4rZcW4QjeAxI0jL32e2Vw-nguopoYtSLSCqmGm6WCpEZ0Wsnl26nZ8_&filename=jPDFViewer-windows.exe

Scan jPDFViewer-windows.exe - Powered by Reason Core Security