home

pdfcreator.exe

PDFCreator

Chinery & Heindoerfer GbR

The program is a setup application that uses the Inno Setup installer. This file is installed with the program PDFCreator. The file has been seen being downloaded from garr.dl.sourceforge.net and multiple other hosts.
Publisher:
pdfforge GbR  (signed by Chinery & Heindoerfer GbR)

Product:
PDFCreator

Description:
PDFCreator is the easy way of creating PDFs.

Version:
1.4.1

MD5:
d775cf3c97b1859f3c91a79c4e328a20

SHA-1:
d95d9d4c326367e108067c058ce51e1d5c451024

SHA-256:
1862b0de0a6a9f2f4ec065b8e6ac41a058f02b7c7ac0d0ba20d5e2a50cef5494

Scanner detections:
3 / 68

Status:
Inconclusive  (probably just false positive detections)

Analysis date:
4/24/2024 11:42:34 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

ESET NOD32
Win32/OpenCandy
8.9372

Reason Heuristics
PUP.OpenCandy.Installer (L)
16.11.29.7

Rising Antivirus
PE:PUF.OpenCandy!1.9DE5
23.00.65.14204

File size:
17.8 MB (18,691,416 bytes)

Product version:
1.4.1

Copyright:
© pdfforge.org

Original file name:
PDFCreator-1_4_1_setup.exe

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\nego\pdfcreator.exe

Digital Signature
Signed by:
Chinery & Heindoerfer GbR

Authority:
Thawte, Inc.

Valid from:
5/30/2012 2:00:00 AM

Valid to:
5/31/2013 1:59:59 AM

Subject:
CN=Chinery & Heindoerfer GbR, O=Chinery & Heindoerfer GbR, L=Hamburg, S=Hamburg, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
65596CEC842F63B39F082AFBD5D9EAE1

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:d1KVuVuudCf4J3JaXowLNJCw//WyiDXwHJq:dTBdHJaXJJV/eynpq

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file pdfcreator.exe has been discovered within the following program.

PDFCreator  by pdfforge
Publisher's description - “PDFCreator is an open source application that can create PDF files from just about any program that prints using windows printers.”
www.pdfforge.org
5% remove it
 
Powered by Should I Remove It?

The file pdfcreator.exe has been seen being distributed by the following 8 URLs.

http://garr.dl.sourceforge.net/project/pdfcreator/PDFCreator/.../PDFCreator-1_4_1_setup.exe

http://freefr.dl.sourceforge.net/project/pdfcreator/PDFCreator/.../PDFCreator-1_4_1_setup.exe

ftp://6a45d2bef4e2aae57acfe45d9fc1d059:1340917905@ftpclubicb9b.clubic.com/.../pdfcreator_pdfcreator_1.4.1_francais_11085.exe

http://www.transportadoraroma.com.br/suporte/.../PDFCreator-1_4_1_setup.exe

https://docs.google.com/uc?authuser=0&id=0B-AtjX6ueDxxS0dyRGl4dDZjV0k&export=download

http://yellow.download.pdfforge.org/pdfcreator/.../PDFCreator-1_4_1_setup.exe

http://blue.download.pdfforge.org/pdfcreator/.../PDFCreator-1_4_1_setup.exe

http://green.download.pdfforge.org/pdfcreator/.../PDFCreator-1_4_1_setup.exe

Scan pdfcreator.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.