home

pdfprolicenseactivation.exe

Workshare PDF Professional License Activation Monitor

Workshare Technology, Inc

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PdfProLic’.
Publisher:
Workshare  (signed by Workshare Technology, Inc)

Product:
Workshare PDF Professional License Activation Monitor

Version:
1.28.700.0

MD5:
5f57ad5c23f294900699bc3154b2d1c6

SHA-1:
37a04c1f31356cb745690b326da8c69635e11df1

SHA-256:
c36e53ac5f50480ed6cb2edabb913a8b013a22ce91ca1cc525adb68483905112

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 6:43:51 PM UTC  (today)

File size:
109.3 KB (111,880 bytes)

Product version:
1.28.700.0

Copyright:
Copyright ©1998-2011 Workshare

Original file name:
PDFProLicenseLicenseActivation.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\workshare\workshare pdf professional licensing\pdfprolicenseactivation.exe

Digital Signature
Signed by:
Workshare Technology, Inc

Authority:
The USERTRUST Network

Valid from:
6/7/2009 8:00:00 PM

Valid to:
6/7/2012 7:59:59 PM

Subject:
CN="Workshare Technology, Inc", O="Workshare Technology, Inc", STREET=208 Utah St. Suite 350, L=San Francisco, S=CA, PostalCode=94103, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00BF4B64773358A0E66DC9A806F2782D88

File PE Metadata
Compilation timestamp:
9/29/2011 10:31:16 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:wNQ+SFedGOLMupkvAlE1dHtUCp4CEdgZbA4:wNykIOAuYYE1dHtUCp4CEdgZh

Entry address:
0x3C77

Entry point:
E8, 03, 1F, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, B0, A0, 40, 00, 57, FF, 35, 4C, FD, 40, 00, FF, D6, FF, 35, 48, FD, 40, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 38, 20, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, C6, 1F, 00, 00, 59, 59, 85, C0, 75, 16, 8D, 43, 10, 3B, C3, 72, 3E, 50, FF, 75, FC, E8...
 
[+]

Entropy:
5.6157

Code size:
33 KB (33,792 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PdfProLic

Command:
"C:\Program Files\workshare\workshare pdf professional licensing\pdfprolicenseactivation.exe"


Scan pdfprolicenseactivation.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.