home

PDFAnnotator.exe

PDF Annotator

GRAHL software design

Publisher:
GRAHL software design  (signed and verified)

Product:
PDF Annotator

Version:
3.0.0.333

MD5:
0cec119840df072fc5b4e8279a1da622

SHA-1:
9b7d8a954e497b1a9e1b8efd20c7645f601d6d9b

SHA-256:
6edcadd39e69c07f71bba267d7bfb7a967de1a016b69c729b0fe54332708ba16

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/26/2024 8:58:19 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
Win.Trojan.PCRat-1
0.98/21511

Trend Micro House Call
TROJ_GEN.F47V0222
7.2.9

File size:
10 MB (10,436,232 bytes)

Product version:
3.0.0.333

Copyright:
Copyright 2004-2011 by GRAHL software design

Original file name:
PDFAnnotator.exe

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\pdf annotator\pdfannotator.exe

Digital Signature
Signed by:
GRAHL software design

Authority:
COMODO CA Limited

Valid from:
6/21/2011 2:00:00 AM

Valid to:
6/21/2016 1:59:59 AM

Subject:
CN=GRAHL software design, O=GRAHL software design, STREET=Seligenthaler Str. 54, L=Landshut, S=Bavaria, PostalCode=84034, C=DE

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00975D0661A97D6285C3E8253319B4321E

File PE Metadata
Compilation timestamp:
11/30/2011 4:39:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:+xYvp9ydy55pCSoXRL+bZSTagq/Nq/W4aiyBSD:4Yvpcdu5DkLCsT5yE

Entry address:
0x1000

Entry point:
68, 01, F0, 35, 01, E8, 01, 00, 00, 00, C3, C3, 6C, B7, 17, 32, B8, 96, 84, C3, 6E, 2D, 80, 91, 9A, 71, FC, CD, E4, C7, 0A, E0, AE, C3, 85, 6E, 73, 00, 9A, F6, DA, 6E, 16, EC, 8D, 90, 55, 5A, F1, 25, 64, 89, A8, 58, E5, A1, D5, DC, 6C, F9, E9, 0A, 92, EE, 0A, 6B, 1B, 73, FB, E5, 40, FC, B4, F4, 7E, 57, 00, 3A, 66, 66, B5, 6C, 24, 97, 92, 23, 73, B6, 24, 6D, A8, 5F, 89, 6F, 45, 00, E2, B4, 82, 8A, 6C, 4E, F0, 16, 7D, C9, D8, 56, 3D, 28, 93, D1, 90, D2, D6, 00, 6E, 4D, 7B, 7B, 77, 87, 15, 7A, 01, 25, D5, 2E...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
7.5 MB (7,823,360 bytes)

Scan PDFAnnotator.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.