home

pdfcompressor.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
a2c49284bcc06507454f2712d21577b4

SHA-1:
d86965e4499a08cbddf964149c0a54e7efc6fe22

SHA-256:
3fe18c0c55e2287c258dc1546e1785ea8a700a2756b3f8768743cf0719fe26ae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 7:41:21 AM UTC  (today)

File size:
288 KB (294,912 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\pdfcompressor.exe

File PE Metadata
Compilation timestamp:
6/20/1992 7:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:ajvHcG28iiX9hTGKDxKUt/sKipDHqrHZkbXY4jitOTQb:abi8iKTt1htkKGqbZkL2b

Entry address:
0xC4680

Entry point:
60, BE, 00, E0, 47, 00, 8D, BE, 00, 30, F8, FF, C7, 87, 0C, 67, 0A, 00, 78, 01, D5, 03, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07...
 
[+]

Entropy:
7.8914

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:
284 KB (290,816 bytes)

The file pdfcompressor.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1444438093&Signature=dmet-sR2md-ylnPlKXr9nOmnXCyr8Pr75GSXEo3~QF7rG2bkojJoDj~WSBxlUGzwm6s6G6Uz8p5mdiqwptu21BXKOHw4KWyUUtst4sf0F8eRqsu3qewCY4riEt7ougZf1Oai~rTzZnphLILwx0-mR-SJ8EWcEuzNJ7WGokG3IL4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_es&type=PROGRAM&Expires=1477570241&Signature=K5wruJJWBlcEeJ7wuHJV2WkVgZnp~pXjLghmf~b7i5IV0L-RNvkSSpeQ40~Fx3bsccpl5cUXn7ZtNKOuAfaUeLZJXRJ2H4Qs2cnzKYmZGUK2VF3mv~dcCAyHgOXjWaLi0ZycW1PExJ388WfuwTLcUZ8u2WowBwTo7m6RX~~Z9i4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://lb.cdn.m6web.fr/d/c/a/955005cbdbadbce134767eb74f187c5c/5834f181/longtail/0066/.../PDFCompressor.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_br&type=PROGRAM&Expires=1434099984&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=EqeIa08HztL8jHzAZHxdUqYsPaKLPH4Dqh4t5WfZYNnr9R42R-MycXxclMutWCsHqE9y8E9gXYWwB3hPFiscQtJ4HcGuhNAwvtDUoPePO19lp9bc1~44w1KHmSfOqY3zSkiq~DraoOoDOy9enf0Nc4ELH1tBfjp3enxD0u4TwR8_&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1439160728&Signature=E~w0b2wKpByaEyebljT3s-2ndRo7odgLss7Xmurh~RSdPNnY1EzhIsOxn2Tcs4BYOlUmqi6sHOC~cPmepbBt9KNv27jwxY3CoCf~DweBUkOeu~tfASD8WCnv7FfPMPevQBNzMFdmnIe0HHcN-8slaSsDBtKjZa8HT~tjPAVFhts_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_es&type=PROGRAM&Expires=1447278972&Signature=NRjUDUPlxsXACpEeM2dVqWjDWQcDxWcpKv0-K-OmfSMDRe6PPuFkxbb9el17UVeVM9f9jyTGNST3LFCtmMQ1NUAw8MmmP958-4J1-2utuV-4SHO1VItW5tQKn3d7TgTzT-hh-U8xHNmj8ujpMCFb9pqOkPQK7RuhwRMDw4v7jD4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1470605327&Signature=AT7Gri-0v7dPpo9MLpsRJXQI1dJT8eDoUksJNXhN6QoVnBGAQCBulVXDIKMeOeqXEUdFlkJHX9HDxqEECGQyigmpfitu4dYxd2fqSXN-SVG0JqbuSPG4bDYPgBB6LvKJiYRnIB-ZMm8ashQ3Q-pLLLUQ-5jMXE1qPO-evrlLD-M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_br&type=PROGRAM&Expires=1477276477&Signature=EF5sPlcgDw-avflHqPcjYMTDbqiQL2cHulW3k35An7fvQ1nSR9BG6jUnYssvIJl~Mc8z~kCI5BYVqlsbg82g9tqbj~wn~c-YotP8KbXhW~Uj9Edd5KaJP84pjTwrW1IX-lEFm1NS18KHi48kSRFRmO2QDfE0ptgfLb3QPji00gw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1471718151&Signature=fgzl3uOg~yh-kZxQOgUYjJ~2ZMH29wzdSv8cxu8vp1Marz8d2RctamxhLquLBXEw2AYFEDJA09F~UvUuUDRp3domPjZSnCE64T85x4xBmvH47I-zQtu7Gt76y3Eg4PaFjo4PATePgK28y1EMG3VyHcGeBjulrvuyyNjExrrnZsU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1476654526&Signature=INWTGtB80UZ-M4daxzC8~h-xGlX3eX7abG3N6HHiyIgK5LUueEf8FSAWxKdqGkZwPUglmvOm~zPS8vL9lRif9ei4bJEZeFprnfAybRZT1J7cRmlh2x~yCk~jGNCBFXWoXMcCS4~AArcsxkFv-dqxHd7lK4uRaoBtupSvvHei7ws_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1476410260&Signature=TAtJkPtbbb44fKUEhYyr5O9UfmGbGhprU3XASa8IuqJ0g1YzGk4VR2NX2ZmV08uw2MMKO9K26vJgfqHctIIM8qa2dLD~VzXNnriLH0wT6wfq5YLJxpAIICORH0vDOPRBVFHfQBDCPWQFW4nD9MINRfJUaISS63-5ViZreUT65GU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_es&type=PROGRAM&Expires=1463495304&Signature=CcoCalRi2AHk-EUk~mobon11ux1OvaTtcy9yxGAtUi3N7w-5OySHkRlEXhZLjt8~9t48HJPlzfZBN~v8MTBi0JBpAWT5aP1NMJY2LWBegOrDNKMiMl0a1YhetUL6nOntlVdtcHGYRGritEjcAj~dMlstrz2YeR9Weyb73t5APrs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1478152895&Signature=clcRRi9X4T7sprgVaKqM8FinlxR1uowgWYlyD~Yf7jfBHKYevhYB14ItCl7W~pUCRMs4BnLhtzRJoz6a-mzy5Gr63AVMMgsPQ5867~pbWvT4JPARSr7SE~~5taYndrk-yWMA7hoGiHPMaiq~WlGG16Q3PNvrHplhyM2cq4TjYfY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_es&type=PROGRAM&Expires=1478652674&Signature=Qv5OfulzP4wo2DVau3QzstxhJXTBM2tDW2RscgkgyPDi-Q7RHkTJrEd-9hPGADr6S~ImxHwEgK61V95n-HyDwOMF3IIXN4NOD~J~UXpmrqCrPv5Bkf6sopEe0-ftjATMTH4nX-haTV4JS~6RaKGDjgTPAAj2z-P0vsszzVsbLsw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_es&type=PROGRAM&Expires=1444505382&Signature=Vh7EoE8IjA9XzXlf3jg8IiVTjfzYznOm9fa3D0Tj-qdOxhhWAYFm4lUye1bRkESYNk9G3bUrOT0XtW7Lv66KGV4mhxfkU~01qRFvXUlxiEw6YwcwRz8-vV1J0LP6i~Y7q7cdFJwYCC1opCv4rIw8EAK3a97hWZ4HNAgvtbCnLc8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1440173047&Signature=KoLMswXI9e4zV-PneLfFI8hVq8IMxfsdgR6zAvjLtY3vq2mp33mEcOxhk2jmNRlxe29s5AmMPZuw9s2IKNjjnOuaMKAEBWzMFhsj7m5IBJoBIM01OEl-KmAIVoO4wS9Cb3SJHjRu3jJ2ZnWcCIeY0IVJLldW1tcwzNw5TWiafGU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://longtail.archive2.clubic.com/files/fdba0182c5c232e6357ca51987cc751c/52e1864b/longtail/0066/.../PDFCompressor.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1445268707&Signature=Svntv5Aw1etYBGfMjx~mUVOw1teUl5GNfKWYMnRIK5Ft5Oo39xW9aEnnyDSv3jUw2zO87kW58L6hPs4kBQBv9ZeSGnsoM4y-~nBTYQIXUsAaccdL88cl8fkfE~PLaIfqy~1M9BvKaH3FBlRITlhRWhqsuioKgKSQlLFOU0JISZU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

&onid=2250&oid=3001-2250_4-10420962&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=utilities/file-compression&topicbrcrm=&pid=10420963&mfgid=6273907&merid=6273907&ctype=dm&cval=NONE&devicetype=desktop&pguid=cdf476081b21ea8857c9202a&viewguid=e2wCInTtzpQDiHexPbKg2oi6Q0l0u@b-MIPx&destUrl=http://files.downloadnow.com/s/software/10/42/09/.../PDFCompressor.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_it&type=PROGRAM&Expires=1449874479&Signature=H4B7GPpT4EpWOxw7Yp8WbMMavnExRK0Ch64yldvquuU2Q-iuGaEc45ns9WGpkEGf82t7FSGAzy9sYZXTEgl~g6sAaRgvXRImdas-5vTl7-4s243PgIrgo0GqxWJuo0UKffwiDS8ScvbcyPdvWj7xv3vdKPWSU5OnsbcY9vWxdLY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1430425681&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=OH7zzM6GD-fZtu3AYqRA2DjMDuE6FZgjRMIbDmS5ZlN96FPKFxOBP5N~ygv9axp6C6M3fWYDWio-QseZuhtsJjjtz0Qnpju8rPcNyKOLHxB5NaOyyfqhsSWeWCuLyM3j1y8tzgcqoG98HHcf~qyvroJsBiDOLj6LOhxzTuXYRcA_&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1471811886&Signature=IR7C2k17RggxhCbVKiixzo7FBnMMxlK9ti2LPRoGBRFA4awEdJbC9q2agwx0NyTYb-RW3o73HiTEsOjRn3pQgTmhBNgqO1qz3TerltHIQAhDjil7MpxdV~YxqFr-abqFGk3CrfppMbeR0VIVh803Q6ln4Wl0JmZI0k3yg3LMdWs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_es&type=PROGRAM&Expires=1443593155&Signature=WOFpbm5qFCB943DMYc1GCP4j8zhA7Q2xO72yMo0t8awh3zmt7987jyZu3FKkEpkVft6YhMUD2bJOpPzfrOR2GX81dw6WRpihzPhY6PfIsxTH-IoZj~exoSVn96WdVXnzVycF0bDPHgk5Fr9KLIPTnZF6jRcAEfVEyPXZlag-m9A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_br&type=PROGRAM&Expires=1463534654&Signature=Ut9F0JNz2-6q0MkSrxUBZCUuQcBMyrA2u9rHvECO7GEAp8ZFRbLh6DLbe0Fb-Lgx~qAqhxi4pys-t1xp4r4pw1p5ysdxMtERlWdJE3AEpByAg-hxQLTYDP-TboiExaFZ9WG00~kEPcf6O3sKnXlK4ng1VEdwYs7up2M3InKzoQY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1426086202&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=PNFojtuKPFRMKXAoi4QqQ6UoEGUdV801HmKwziYKrBKZl8DVdxEwdZ9SUlw3oVyNMYNkluMLOqIY6RfEYDTd78xPdbQzZPqwjrGN6WehgGVr5TW~VhVi3ybKR2dCjPUbBGNabkZmxmyqk4lQ95cNRsq7boVMoQBLBJ8oCHZHOjs_&filename=PDFCompressor_1.12.exe

http://ec.ccm2.net/www.commentcamarche.net/download/.../PDFCompressor-1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_es&type=PROGRAM&Expires=1455103519&Signature=cMtv6RB-HrqREnqFPBma5YRWUvQ9bpI3rXTQlztED8G~GcLiOSl9KZiCtZCCIycr~vwdT7N7~Rafarwwr7VgLgcx5~n3Xy68fAl7QtDsfbLOpsI85l0guuXm4oN2FntqCugl0lAyVdR43SuMSHwg0-0olkm44nBp6TvB13rmHk4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1460771384&Signature=gqToTsHX1mXInqt3m2hQiFiPdagyZHAsLMWpLh2ezQQ5Os9lLdYvFvCPlkDOuoIdPKD0VLzN3jr~5PybRnNmqi8Nc8Nbm4wztlT5sFlnGoOdlXJpNfthQgwfI1aHH6y1gVz2FDge85mGJR8gwD1lB-flRroWBPUI4w~wqa-2uUI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCompressor_1.12.exe

http://files.downloadnow-5.com/s/software/10/42/09/.../PDFCompressor.exe

http://gsf-cf.softonic.com/d86/965/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71782&instance=softonic_en&type=PROGRAM&Expires=1431938826&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=iu1WMVQlUrWe7~oW-XqzcL24GSWJxQOPPGydvoos0KEGl13KPEV0FW1G3-GLdahqfgxB1m41Fh~mZSxzK4ut851KpVG5nDu9vT9Y2qUtVPFsv-RlKcuL8cXsKSbGhhYBUhkzVEQ1A5GtNoy73XCV4SAxGZCxWdbJK3S6ah8mmCM_&filename=PDFCompressor_1.12.exe

Latest 30 of 66 download URLs

Scan pdfcompressor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.