home

pdfcreator-1_1_0_setup.exe

PDFCreator

Philip Chinery

The program is a setup application that uses the Inno Setup installer. This file is installed with the program PDFCreator. The file has been seen being downloaded from heanet.dl.sourceforge.net and multiple other hosts.
Publisher:
Frank Heindörfer, Philip Chinery   (signed by Philip Chinery)

Product:
PDFCreator

Description:
PDFCreator is the easy way of creating PDFs.

Version:
1.1.0

MD5:
4228a3a48a5399e43ddb4387c2b83f8a

SHA-1:
157c5f6c76f7a539cb9156e3789fa3d379d04e7d

SHA-256:
e171bd30cac2039efe87be41b11d2bc9233d401fef60f65fc4681805892c5266

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 12:52:30 PM UTC  (today)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Gen:Variant.Zusy.85677
8.14.05.13.12

File size:
16.9 MB (17,698,432 bytes)

Product version:
1.1.0

Copyright:
© Frank Heindörfer, Philip Chinery

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\Program Files\pdfcreator\pdfcreator-1_1_0_setup.exe

Digital Signature
Signed by:
Philip Chinery

Authority:
Root CA

Valid from:
11/10/2010 12:25:52 PM

Valid to:
11/9/2012 12:25:52 PM

Subject:
E=philip@pdfforge.org, CN=Philip Chinery

Issuer:
E=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA

Serial number:
0970B9

File PE Metadata
Compilation timestamp:
6/19/1992 4:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:PKVuVuNgdwntAmmCwmGDwYbRBdnzHq4W2sY5QjW2DHAM+ZBpyC5YW:xNwtAxCwFFTzHq4W2aWM+XptD

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9998

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file pdfcreator-1_1_0_setup.exe has been discovered within the following programs.

PDFCreator  by Frank Heindörfer, Philip Chinery
PDFCreator is an application for converting documents into Portable Document Format (PDF) format on Microsoft Windows operating systems.
www.sf.net/projects/pdfcreator
23% remove it
 
Powered by Should I Remove It?

The file pdfcreator-1_1_0_setup.exe has been seen being distributed by the following 2 URLs.

http://heanet.dl.sourceforge.net/project/pdfcreator/PDFCreator/.../PDFCreator-1_1_0_setup.exe

ftp://192.168.1.29/.../PDFCreator-1_1_0_setup.exe

Scan pdfcreator-1_1_0_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.