PDFCreator-1_6_0_setup.exe

PDFCreator

Chinery & Heindoerfer GbR

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dl2.filehippo.com and multiple other hosts.
Publisher:
pdfforge GbR  (signed by Chinery & Heindoerfer GbR)

Product:
PDFCreator

Description:
PDFCreator is the easy way of creating PDFs.

Version:
1.6.0

MD5:
fa29d6515094324dfb496789f3310ae7

SHA-1:
0c7e1f8eb63f9f1c75eb08a156e54a7349853eff

SHA-256:
750d6ced96d7bee8421acaa4f6acc34b46ba694c15c8e555cd58674d9f5316cb

Scanner detections:
3 / 68

Status:
Inconclusive  (probably just false positive detections)

Analysis date:
4/25/2024 2:53:14 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
7.9257

Reason Heuristics
PUP.OpenCandy.Installer (L)
16.11.28.22

Rising Antivirus
PE:PUF.OpenCandy!1.9DE5
23.00.65.131223

File size:
16.7 MB (17,491,880 bytes)

Product version:
1.6.0

Copyright:
© pdfforge GbR

Original file name:
PDFCreator-1_6_0_setup.exe

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Digital Signature
Authority:
Thawte, Inc.

Valid from:
5/30/2012 2:00:00 AM

Valid to:
5/31/2013 1:59:59 AM

Subject:
CN=Chinery & Heindoerfer GbR, O=Chinery & Heindoerfer GbR, L=Hamburg, S=Hamburg, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
65596CEC842F63B39F082AFBD5D9EAE1

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:joWyKVuVEJywRNT6sySAHiLL/9axaumTdNRiOYaWF2N/X:joWwWT/AiTcxTmpD1YaWG

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Code size:
37 KB (37,888 bytes)

The file PDFCreator-1_6_0_setup.exe has been discovered within the following programs.

PDFCreator  by Frank Heindörfer, Philip Chinery
PDFCreator is an application for converting documents into Portable Document Format (PDF) format on Microsoft Windows operating systems.
www.sf.net/projects/pdfcreator
23% remove it
 
Powered by Should I Remove It?

The file PDFCreator-1_6_0_setup.exe has been seen being distributed by the following 18 URLs.

http://dl2.filehippo.com/.../PDFCreator-1_6_0_setup.exe

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ4NjI4NjI2NTtzOjI6ImlkIjtpOjEzOTAwO3M6NDoiZmlsZSI7czo0MzoicGRmY3JlYXRvci0xLTYtMC1QREZDcmVhdG9yLTFfNl8wX3NldHVwLmV4ZSI7czozOiJ1cmwiO3M6NTA6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy9wZGZjcmVhdG9yLTEtNi0wIjtzOjQ6InBhc3MiO3M6MzI6ImU5MDJkZGRmNjFkNDFlMDYyMDQyMmZlZGI3MmQ1YzgwIjt9

http://192.168.8.1/upanew/.../PDFCreator-1_6_0_setup.exe

http://dl.cdn.chip.de/downloads/.../PDFCreator-1_6_0_setup.exe

Scan PDFCreator-1_6_0_setup.exe - Powered by Reason Core Security