home

pdf24.exe

PDF24 Creator

Geek Software GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PDFPrint’.
Publisher:
Geek Software GmbH  (signed and verified)

Product:
PDF24 Creator

Version:
6.0.1

MD5:
2070798e2c0fcd03074c014497e5b0de

SHA-1:
8c65a857d8884b95a0b408009e67b7249413aec9

SHA-256:
62ae6820e3273fe7e996ffea038c65b4240f2bd89bb168ac08e30186980c329f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 12:45:55 AM UTC  (today)

File size:
181.5 KB (185,896 bytes)

Product version:
6.0.1

Copyright:
Geek Software GmbH

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\pdf24\pdf24.exe

Digital Signature
Signed by:
Geek Software GmbH

Authority:
Thawte, Inc.

Valid from:
9/17/2013 2:00:00 AM

Valid to:
9/18/2014 1:59:59 AM

Subject:
CN=Geek Software GmbH, OU=Secure Application Development, O=Geek Software GmbH, L=Berlin, S=Berlin, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4243F5483BA6CFBC6FC858EE33CBF7A4

File PE Metadata
Compilation timestamp:
10/28/2013 3:03:25 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:KIQax2fqHomOrpxTkv0JOW0wlfqT0iPDT:pQax4qcp9JOW0wlM/7

Entry address:
0x6661

Entry point:
E8, 2D, 06, 00, 00, E9, 6B, FD, FF, FF, CC, FF, 25, 84, 91, 40, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, 90, 91, 40, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, 3D, 48, 27, 41, 00, 00, 74, 2D, 55, 8B, EC, 83, EC, 08, 83, E4, F8, DD, 1C, 24, F2, 0F, 2C, 04, 24, C9, C3, 83, 3D, 48, 27, 41, 00, 00, 74, 11, 83, EC, 04, D9, 3C, 24, 58, 66, 83, E0, 7F, 66, 83, F8, 7F, 74, D3, 55, 8B, EC, 83, EC, 20, 83, E4, F0, D9, C0, D9, 54, 24, 18, DF, 7C, 24, 10, DF, 6C, 24, 10, 8B, 54, 24, 18...
 
[+]

Entropy:
5.1073

Code size:
29 KB (29,696 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PDFPrint

Command:
C:\Program Files\pdf24\pdf24.exe


The file pdf24.exe has been discovered within the following program.

PDF24 Creator  by www.pdf24.org
About 3% of users remove it
 
Powered by Should I Remove It?

Scan pdf24.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.