home

pdfrider0.6.1-setup.exe

PDF Rider

Francesco Tonucci

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from f35.softwaretop.net and multiple other hosts.
Publisher:
Francesco Tonucci

Product:
PDF Rider

Description:
PDF Rider Setup

MD5:
95476364299c94ea8ab38b11e8a487ad

SHA-1:
0d731595946755ac38dc60e622563da0b188f9b2

SHA-256:
5434769c1611edf0ccdbfff8ef1756d3feaa33c0fce02b414fcf15c87793d7f3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:41:50 PM UTC  (today)

File size:
2.2 MB (2,343,672 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\pdfrider0.6.1-setup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:5aAITZtchjELT4UNSVWYxPyaJD0iK1Fly6cLyQdWsXinXBgJ:Q7Tsj24UsA80bjybSRgJ

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file pdfrider0.6.1-setup.exe has been seen being distributed by the following 15 URLs.

http://f35.softwaretop.net/2107tmp/cf/soft/2013/9/ba/.../pdf-rider_061.exe

http://f51.y8top.net/2107tmp/cf/soft/2013/9/ba/.../pdf-rider_061.exe

http://download-codeplex.sec.s-msft.com/.../Release?ProjectName=pdfrider&DownloadId=331792&FileTime=129717864584500000&Build=21024

http://download-codeplex.sec.s-msft.com/.../Release?ProjectName=pdfrider&DownloadId=331792&FileTime=129717864584500000&Build=20999

http://download-codeplex.sec.s-msft.com/.../Release?ProjectName=pdfrider&DownloadId=331792&FileTime=129717864584500000&Build=20988

http://download-codeplex.sec.s-msft.com/.../Release?ProjectName=pdfrider&DownloadId=331792&FileTime=129717864584500000&Build=21028

http://f51.softwaretop.net/2107tmp/cf/soft/2013/9/ba/.../pdf-rider_061.exe

http://files.downloadnow.com/s/software/12/80/84/.../pdfRider0.6.1-setup.exe

http://software-files-a.cnet.com/s/software/12/80/84/.../pdfRider0.6.1-setup.exe

http://download-codeplex.sec.s-msft.com/.../Release?ProjectName=pdfrider&DownloadId=331792&FileTime=129717864584500000&Build=21031

http://download-codeplex.sec.s-msft.com/.../Release?ProjectName=pdfrider&DownloadId=331792&FileTime=129717864584500000&Build=20959

http://download-codeplex.sec.s-msft.com/.../Release?ProjectName=pdfrider&DownloadId=331792&FileTime=129717864584500000&Build=20928

http://download.codeplex.com/.../Release?ProjectName=pdfrider&DownloadId=331792&FileTime=129717864584500000&Build=19031

http://download-codeplex.sec.s-msft.com/.../Release?ProjectName=pdfrider&DownloadId=331792&FileTime=129717864584500000&Build=20509

http://download-codeplex.sec.s-msft.com/.../Release?ProjectName=pdfrider&DownloadId=331792&FileTime=129717864584500000&Build=20779

Scan pdfrider0.6.1-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.