home

PDFStudio_v8_3_2_win.exe

PDF Studio

Qoppa Software, LLC

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Qoppa Software  (signed by Qoppa Software, LLC)

Product:
PDF Studio

Version:
8.3.2

MD5:
5c624edd1d552f3fde69e2c033f0afd4

SHA-1:
961b011ac7499955545bbac89728d27292d6162f

SHA-256:
9df2e85c540ff93aa75fc3b3562036f8598e83475188f4945b24ab4010731685

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 7:55:20 PM UTC  (today)

File size:
52.4 MB (54,916,632 bytes)

Product version:
8.3.2

Copyright:
Qoppa Software

Original file name:
PDFStudio_v8_3_2_win.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\pdfstudio_v8_3_2_win.exe

Digital Signature
Signed by:
Qoppa Software, LLC

Authority:
VeriSign, Inc.

Valid from:
11/6/2013 1:00:00 AM

Valid to:
11/7/2014 12:59:59 AM

Subject:
CN="Qoppa Software, LLC", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Qoppa Software, LLC", L=Atlanta, S=Georgia, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4036E6269966649F00FFD34D98BE8048

File PE Metadata
Compilation timestamp:
3/25/2013 3:49:05 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:1+cM7RIHNd6UUHji/L6hIUAWOkkUD6vDP3qaLTdU3Dw0HYGXKNYUb6j5x8c1c7KW:PIR9H+/LUgb6ast4QKNzmrUAE

Entry address:
0x1A334

Entry point:
E8, DD, AC, 00, 00, E9, 78, FE, FF, FF, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A4, 01, 00, 00, 81, F9, 00, 01, 00, 00, 72, 1F, 83, 3D, 50, 6A, 44, 00, 00, 74, 16, 57, 56, 83, E7, 0F, 83, E6, 0F, 3B, FE, 5E, 5F, 75, 08, 5E, 5F, 5D, E9, F8, 47, 00, 00, F7, C7, 03, 00, 00, 00, 75, 15, C1, E9, 02, 83, E2, 03, 83, F9, 08, 72, 2A, F3, A5, FF, 24, 95, B4, A4, 41, 00, 90, 8B, C7, BA, 03, 00, 00, 00, 83, E9, 04, 72, 0C, 83, E0, 03, 03...
 
[+]

Entropy:
7.9958  (probably packed)

Code size:
172.5 KB (176,640 bytes)

The file PDFStudio_v8_3_2_win.exe has been seen being distributed by the following 6 URLs.

http://gsf-cf.softonic.com/961/b01/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73344&instance=softonic_fr&type=PROGRAM&Expires=1483505517&Signature=UoA81mtyXVuMGntzZljvsPeHSgPnvHfWDAGLZEZQOUtmiRzCxGigliHN0HJHBfnJcmPj-nZUEBizJhrr9IOk-5GVIMh4GKdCvn0GLc1X4kO4qxfyGAB-VRHZlp3CMh7tlvLrkSA--gC~n46kEIOmuoqr4aJVQeyxzsx2k~4-o6U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFStudio_install_win.exe

http://gsf-cf.softonic.com/961/b01/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73344&instance=softonic_es&type=PROGRAM&Expires=1477034483&Signature=VoifGXJhqWxr3YRCxldtdeum4fX3B5uXpQPLd-K2v8I4zNEfzjuZ~oxLmMhuGknp-FCFunSiaKdjYXPl1HGOWs8JVsbpY1tlyii-a6nMOkVBcbDgzumXg4bM9vKUhwUBIFLs-cyFIn~XS0RJ-TXoSf8Ba4xK~sxb~uW8e6JmIPg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFStudio_install_win.exe

http://gsf-cf.softonic.com/961/b01/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73344&instance=softonic_fr&type=PROGRAM&Expires=1441179603&Signature=TsCSWzlcYKvHbqXyjpXMrfGpo6HIDeh1n-yrwzsneoemWMMjrDEokxOhSoSzQg4awbZDsCFz16GozfUSmabinH~jml3E0MQsNP1plGfh-ZtkINo~Ls~MJy1ize7m0norxoiotQCDfGtOHv1L9Da6H-jfi7kmvg8iWfMRcU1l52A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFStudio_install_win.exe

http://gsf-cf.softonic.com/961/b01/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73344&instance=softonic_fr&type=PROGRAM&Expires=1425094196&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=YHtFst0G8YZJvVGCiIUf~IeLT-Xrwiau857im8RU-HXl3Unxq7MK8ur4dDBWFkxXHJv3524Kqaxe5y-KCQ9EQ7GYyl-mCb1Pj2ZKH89yXMNYfs6GmeWcWgjcsxMDzfyCG4gNstRYUd5zHi7q2LBEFEoZTkKjV-UFDuV8bglX~Cs_&filename=PDFStudio_install_win.exe

http://gsf-cf.softonic.com/961/b01/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73344&instance=softonic_fr&type=PROGRAM&Expires=1453947609&Signature=DHuW08SXoHz0ameZMSZT-6if6SDsgRe2ELy5sfiKT6zfxgGw7KglsDI-HjkdD~EW-VsBnAf8hoevyGJNRVvQI5MT2Ul3Thq3F4NhAAeJRFqaXIkGKyTSLnsdpdY2Zt7cpOx1GOWoIME4f8UDxDgGQh-kE39h2h33tm69Pc861CY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFStudio_install_win.exe

http://www.qoppa.com/files/pdfstudio/demo/downloads/.../PDFStudio_v8_3_2_win.exe

Scan PDFStudio_v8_3_2_win.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.