home

PDF_Compressor.exe

LuraTech PDF Compressor Enterprise

LuraTech Imaging GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PDF Compressor’.
Publisher:
LuraTech Imaging GmbH  (signed and verified)

Product:
LuraTech PDF Compressor Enterprise

Description:
PdfCompressorGUI

Version:
7.1.0.4

MD5:
f5f4431eca13168cd3d631eb66d51831

SHA-1:
bd6f144b857fc355b5c2d60eca71e62b179614eb

SHA-256:
be23db75ef202a6cd8c9fccf759e82b547980258408e867b7c92097f59ec3aa7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/3/2025 2:47:44 AM UTC  (today)

File size:
1.2 MB (1,275,496 bytes)

Product version:
7.1.0.4

Copyright:
Copyright © Luratech Imaging GmbH 2014

Original file name:
PDF_Compressor.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\luratech\pdf compressor enterprise\pdf_compressor.exe

Digital Signature
Signed by:
LuraTech Imaging GmbH

Authority:
Thawte, Inc.

Valid from:
11/28/2012 1:00:00 AM

Valid to:
1/14/2015 12:59:59 AM

Subject:
CN=LuraTech Imaging GmbH, OU=ENTWICKLUNG, O=LuraTech Imaging GmbH, L=Remscheid, S=Nordrhein-Westfalen, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2DC8D421B96C6117D70BD7E9A34FE1C7

File PE Metadata
Compilation timestamp:
7/21/2014 4:27:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:91AGCmOBpqaH3fffPiV6JqbmbsUYNmmYmomoy2uxvChxckK15M95BtV+J6tWZyyI:9sTYNmmYmomoyLv+xcq9XiJNo

Entry address:
0x1339BE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 58, 00, 00, 80, 10, 00, 00, 00, 70, 00, 00, 80, 18, 00, 00, 00, 88, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.2 MB (1,251,840 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PDF Compressor

Command:
"C:\Program Files\luratech\pdf compressor enterprise\pdf_compressor.exe" -hidden


Scan PDF_Compressor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.