home

pdf24.exe

PDF24 Creator

Geek Software GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PDFPrint’.
Publisher:
Geek Software GmbH  (signed and verified)

Product:
PDF24 Creator

Version:
5.2.0

MD5:
1461b607ffc8d1feeca8026e12ebd9e7

SHA-1:
5d71b99b69ef580197908e0c3262f9ef3bd7b76a

SHA-256:
8becbe40a9fec5e655b4c9c77fba8b1b19cb5a3080b646a34b9c8c8d3474f8d5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/14/2025 10:43:15 AM UTC  (today)

File size:
159.2 KB (163,000 bytes)

Product version:
5.2.0

Copyright:
Geek Software GmbH

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\pdf24\pdf24.exe

Digital Signature
Signed by:
Geek Software GmbH

Authority:
Thawte, Inc.

Valid from:
8/20/2012 9:00:00 PM

Valid to:
9/1/2013 8:59:59 PM

Subject:
CN=Geek Software GmbH, OU=Secure Application Development, O=Geek Software GmbH, L=Berlin, S=Berlin, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
5B5852B7D178EC2C0D3FDF73E2DA44B2

File PE Metadata
Compilation timestamp:
12/12/2012 7:27:32 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:FyH7l6cQINHBrpcuBJOJfwlfqT0iPDTVj:FyH7lfJZ9pNJOJfwlM/7R

Entry address:
0x6361

Entry point:
E8, 2D, 06, 00, 00, E9, 6B, FD, FF, FF, CC, FF, 25, 04, 81, 40, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, F4, 80, 40, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, 3D, 54, B9, 40, 00, 00, 74, 2D, 55, 8B, EC, 83, EC, 08, 83, E4, F8, DD, 1C, 24, F2, 0F, 2C, 04, 24, C9, C3, 83, 3D, 54, B9, 40, 00, 00, 74, 11, 83, EC, 04, D9, 3C, 24, 58, 66, 83, E0, 7F, 66, 83, F8, 7F, 74, D3, 55, 8B, EC, 83, EC, 20, 83, E4, F0, D9, C0, D9, 54, 24, 18, DF, 7C, 24, 10, DF, 6C, 24, 10, 8B, 54, 24, 18...
 
[+]

Code size:
26 KB (26,624 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PDFPrint

Command:
C:\Program Files\pdf24\pdf24.exe


Scan pdf24.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.