home

gs871w32.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from downloads.ghostscript.com and multiple other hosts.
MD5:
c815b2079e5aa322f517fcbac3036552

SHA-1:
65b35e7a5d5bfb589eac163a31bf80108a1e5853

SHA-256:
9b8c2d44c10e1df6fa06e753bdd762a5694c2769a6cf131c4c6978e2b56305f1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 3:49:38 PM UTC  (today)

File size:
15.6 MB (16,357,376 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\ghostscript\gs871w32.exe

File PE Metadata
Compilation timestamp:
1/9/2001 5:09:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
393216:/53J3xvy7FxoyAQZY4hG3ZeFRXSlRovtIJ1Nj8QUEL6cWn:h7oFyyAQZph04XeyiN4C6cWn

Entry address:
0x3F8F

Entry point:
53, FF, 15, 4C, 70, 40, 00, B3, 22, 38, 18, 74, 03, 80, C3, FE, 8A, 48, 01, 40, 33, D2, 3A, CA, 74, 0A, 3A, CB, 74, 06, 8A, 48, 01, 40, EB, F2, 38, 10, 74, 01, 40, 52, 50, 52, 52, FF, 15, 50, 70, 40, 00, 50, E8, 9E, F3, FF, FF, 50, FF, 15, 54, 70, 40, 00, 5B, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 55, 8B, EC, 51, A1, 88, 94, 40, 00, 83, 0D, 00, 93, 40, 00, FF, 56, 33, F6, 39, 35, 40, 8E, 40, 00, 89, 35, 34, 94, 40, 00, 89, 35, 84, 94, 40, 00, A3, 24, 97, 40, 00, 75, 05, E8, 9D, D2, FF, FF...
 
[+]

Entropy:
7.9991

Packer / compiler:
WinZip, 0x32-bit SFX v8.x module

Code size:
21.5 KB (22,016 bytes)

The file gs871w32.exe has been discovered within the following programs.

Android Magazine App Maker  by A-PDF Solution
www.appmk.com
About 3% of users remove it
Android Magazine App Maker Professional  by A-PDF Solution
About 4% of users remove it
A-PDF Office to PDF  by A-PDF Inc.
www.A-PDF.com
About 1% of users remove it
A-PDF To Image  by A-PDF Solution
Publisher's description - “A-PDF Image to PDF is an utility that lets you convert photos, drawings, scans and faxes into Acrobat PDF documents.”
8% remove it
A-PDF Word to PDF  by A-PDF Solution
Publisher's description - “A-PDF Word to PDF is a fast, affordable utility to allow you to batch convert Microsoft Word 2000, 2003, 2007 documents into professional-quality documents in the PDF file format. Supports files format: .docx, .doc, .rtf, .txt, .wri, etc. Support hot directory monitor.”
www.a-pdf.com/word-to-pdf
About 9% of users remove it
Boxoft Free DjVu to PDF Converter  by Boxoft Solution
Publisher's description - “Boxoft DjVu to PDF Converter is totally freeware to batch convert DjVu documents into portable PDF format. Because the DjVu files are less popular, if you want to share your DjVu files with others, you could better save the files as PDF format first.”
www.boxoft.com/djvu-to-pdf
3% remove it
eFlip Professional  by FlipBuilder Solution
www.pageflippdf.com
About 7% of users remove it
Flip HTML - freeware  by Flip PDF Studio
Publisher's description - “FlipHTML5 is a free Flip Book Maker designed to convert PDF, MS Office, OpenOffice and Images to HTML5 & jQuery based page flip eBook, making PDF files more interactive.”
fliphtml5.com
About 1% of users remove it
Flip Office  by FlipBuilder Solution
www.flipbuilder.com
About 1% of users remove it
Flip Printer  by A-PDF Inc.
About 3% of users remove it
 
Latest 20 of 14 programs
Powered by Should I Remove It?

The file gs871w32.exe has been seen being distributed by the following 9 URLs.

http://downloads.ghostscript.com/.../gs871w32.exe

http://www.appmk.com/.../gs871w32.exe

http://www.flippagemaker.com/.../gs.exe

http://grindeq.com/store/.../gs871w32.exe

http://hivelocity.dl.sourceforge.net/project/ghostscript/GPL Ghostscript/.../gs871w32.exe

http://downloads.sourceforge.net/project/ghostscript/GPL Ghostscript/.../gs871w32.exe

http://autocad.compago.it/.../gs871w32.exe

http://www.a-pdf.com/.../gs.exe

http://www.3dpageflip.com/.../gs.exe

Scan gs871w32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.