home

pdfcopypastesetup.exe

PDF Copy Paste

Wondersoft

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Wondersoft

Product:
PDF Copy Paste

Description:
PDF Copy Paste Setup

Version:
1.0.1.1002

MD5:
d3c102bd7d4cbcb54ca4ecbb4d66c5e7

SHA-1:
5b5694339784ed29d92bc2e4f935bd9b7284329c

SHA-256:
6dc322e234a7222c414b5406de0d5cb1bda376a159c1028b9e03863b2df03ac3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:14:58 PM UTC  (today)

File size:
2.1 MB (2,181,838 bytes)

Product version:
1.01

Copyright:
Copyright © 2010-2013 Wondersoft

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\pdfcopypastesetup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:5ahSmxGOgMfJmoVhQwmCL7ch0GJVLgokxelTP:QomiMfJzVGVCLQWqLg5xYTP

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file pdfcopypastesetup.exe has been seen being distributed by the following 9 URLs.

http://gsf-cf.softonic.com/5b5/694/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668462&instance=softonic_en&type=PROGRAM&Expires=1432613998&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=LbfwfcFsezc8SwACPtcUoSEGrcqnhlWaWBVUOx9sqrXmNUIBoI7Iv5h8jCfsEvOveSnzCRrf1uUsFvWPJAfGuVS7Bf4efTXikP1bLDUJ3j6k~kRpMgoPFM-O7zSTj-j6u4KvVOApv~Ywr3uIzIvMhh2qkQbjNLPCgBai~z7CSyE_&filename=PDFCopyPasteSetup.exe

http://gsf-cf.softonic.com/5b5/694/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668462&instance=softonic_en&type=PROGRAM&Expires=1477385609&Signature=KQBiBIc5DkW4OIGxnTXF6jDw-g3BAj-mMCju8dHjOIr5Bu2S~KJyrbl5Pey0kVI8VWvjpiL92XwMKndmpWJ23C65c~RWkSdW0O74dKfHo6Ll18eX2Tq5D-UYSYg9ugiZbu7KleLhBcfZqlaFzC9FfbgAjRjcFLD7EvL9gpzLLgA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCopyPasteSetup.exe

http://gsf-cf.softonic.com/5b5/694/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668462&instance=softonic_en&type=PROGRAM&Expires=1445266535&Signature=hIVa8-NoUe1xOic9C3JFH57hh84OBq9tCEWjsOdE6SqDwt772G-ViHGjbdaqg58QaN7KiPBfocny56Xw4UmEbtDqL40aDzg~xBfKrqjoX9V~8lMxP8mmVtJ1jv6CVDdsOWB54IFGV~ayX37Alz~fMPHHKU7~Xv8edmRkeUhfUKY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCopyPasteSetup.exe

http://gsf-cf.softonic.com/5b5/694/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668462&instance=softonic_en&type=PROGRAM&Expires=1444878881&Signature=eCfqL7DNODu3dEB0akkkUU3FeWH0wIWN-z7upJ2c6lXxzxAn~sAYfTILzI9nZrKy7mTS9pgAA5fdYgCPdEOPoHruSjB6rnRDcAQtGsjMkxKfYcnSMfOvY8NegyGW5CfHZOteN92bDMa1e-2~pXstsUwFR184g4jWtyOWexWOStg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCopyPasteSetup.exe

http://gsf-cf.softonic.com/5b5/694/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668462&instance=softonic_en&type=PROGRAM&Expires=1441427809&Signature=Gu5z8r6qEzJDulMzsKOUcrVEBHCXdygP6WD-NQKliCBbNp3cFSTztxrvOibnSw8NgpUaWEwK0OeCuqBz9cG9NicH0wzTJQtwSNWDZg6ELhtblOaudSH~KQ-ijt4D9RyaTSMlA9Nalfc25xlKgn7AQAVJh8I53pJMgLchJDehrrU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCopyPasteSetup.exe

http://gsf-cf.softonic.com/5b5/694/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668462&instance=softonic_en&type=PROGRAM&Expires=1441771317&Signature=gIPjhs1QVFB1ISG8nc6mIOu3qI6Du2xo-lRSBlZ9XhCnCZSvSgTB2tZx~dbH6FKsvR4VBnWYRWnMHjbjNLHIYh-CUWvNWmWMRa5K~hzongAzQ9bl-dxp9pgvG8iCiNmWdnvpzrlGeDbX8fxQBPYjibv1F-0r4RqTOWF6SCukQtE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCopyPasteSetup.exe

http://gsf-cf.softonic.com/5b5/694/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668462&instance=softonic_en&type=PROGRAM&Expires=1447271908&Signature=RjOkpiIEYWYy106nly0WZTMeZWkoPiKZYZButy9LLwi0oYSSp4Dx9HyLqGSAXvl9DmmTevTR4SM0c0ihdFupF9pDF8GfaosRAPshEqHwJuSYWGEyfb77H3P6q0OMTZfBMXTzXG7nk9iF8CbsqqSH1XbQUYCp7TlKXF7QcEj8gUo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCopyPasteSetup.exe

http://gsf-cf.softonic.com/5b5/694/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668462&instance=softonic_en&type=PROGRAM&Expires=1456545569&Signature=VwS~AckX6hl-DgV7hadQADd~KQ0-ylRonrNwsVJ-XYz-PKaGDv~MiIGGzsFrUAR4qGwWVFir8Nc1B0F1jqxA35Xw5MMNulQG-RNiWKh6l70TwDF0U0-KumGr8a6p1dEXJ0~eYGYZPalE1GwqF-n63IlN2XQxim1tZh7bf3rCacY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PDFCopyPasteSetup.exe

http://pdfcopypaste.com/PDFCopyPasteSetup.exe

Scan pdfcopypastesetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.