home

PDF_Compressor.exe

LuraTech PDF Compressor Enterprise

LuraTech Imaging GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PDF Compressor’.
Publisher:
LuraTech Imaging GmbH  (signed and verified)

Product:
LuraTech PDF Compressor Enterprise

Description:
LuraTech PDF Compressor User Interface

Version:
7.4.2.19

MD5:
6967da16bf1f270e10eabd3c3aa43160

SHA-1:
8fc0b2f2d6c28a0e66e7c7fb1880edd9a4b6adfd

SHA-256:
c68ed330c6a7f05fb01059240ca14538bb030fca1c77ebea4e702a7872f4c93b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/3/2025 2:25:31 AM UTC  (today)

File size:
1.3 MB (1,351,496 bytes)

Product version:
7.4.2.19

Copyright:
Copyright © Luratech Imaging GmbH 2015

Original file name:
PDF_Compressor.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\luratech\pdf compressor enterprise\pdf_compressor.exe

Digital Signature
Signed by:
LuraTech Imaging GmbH

Authority:
thawte, Inc.

Valid from:
11/20/2014 1:00:00 AM

Valid to:
1/13/2017 12:59:59 AM

Subject:
CN=LuraTech Imaging GmbH, OU=ENTWICKLUNG, O=LuraTech Imaging GmbH, L=Remscheid, S=Nordrhein-Westfalen, C=DE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
1909E1601EF3C796ADCC55D8297322A5

File PE Metadata
Compilation timestamp:
5/2/2016 11:04:12 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:kHF0L/KxmmweK+XvPtxcAK15BXOmoXzbsRYpZlxQjyKlLtWcuG:ksSxmmwWvlxcLXOmoXaYXuuG

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
1.3 MB (1,327,616 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PDF Compressor

Command:
"C:\Program Files\luratech\pdf compressor enterprise\pdf_compressor.exe" -hidden


Scan PDF_Compressor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.