home

pdfcreator-0_9_3_gplghostscript.exe

Frank Heindörfer, Philip Chinery

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dl-web.dropbox.com and multiple other hosts.
Publisher:
Frank Heindörfer, Philip Chinery

Description:
PDFCreator is the easy way of creating PDFs.

Version:
0.9.3

MD5:
d4a23b7aed85039100cb246120ce2f63

SHA-1:
8154c7011c972af5fa59f0f3aad848135d08d34f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 3:37:15 AM UTC  (today)

File size:
12.6 MB (13,256,032 bytes)

Copyright:
© Frank Heindörfer, Philip Chinery

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\Program Files\alibre design\pdfcreator-0_9_3_gplghostscript.exe

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:Tdmo4UvPkwKsymVDMtUwqRZDOGXXJVuDAhuBIxhm:TdmC09LmVMpQXJVuDB

Entry address:
0x98BC

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 0A, 98, FF, FF, E8, 11, AA, FF, FF, E8, 3C, CC, FF, FF, E8, 83, CC, FF, FF, E8, 0A, F3, FF, FF, E8, 71, F4, FF, FF, 33, C0, 55, 68, 66, 9F, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 1C, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 26, FA, FF, FF, 8D, 55, F0, 33, C0, E8, FC, D0, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, BB, 98, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9998

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file pdfcreator-0_9_3_gplghostscript.exe has been discovered within the following programs.

Alibre Design  by Alibre, Inc.
www.alibre.com/products/ad.asp
About 1% of users remove it
FileStream Image Broadway  by FileStream, Inc.
Publisher's description - “Speed Image Broadway offers you better performance compared to others. It starts up faster, it finds, opens, and imports images faster, it fixes and refines photos faster, and it saves and prints faster. The Darkroom is entirely intuitive.”
www.filestream.com/ib
About 9% of users remove it
Systematic Rental Management Client  by Texada Software Inc
www.texadasoftware.com
About 9% of users remove it
 
Powered by Should I Remove It?

The file pdfcreator-0_9_3_gplghostscript.exe has been seen being distributed by the following 5 URLs.

https://dl-web.dropbox.com/get/.../PDFCreator-0_9_3_GPLGhostscript.exe

https://community.bps.go.id/.../d.php?p=UERGL0NyZWF0b3Iv&f=UERGQ3JlYXRvci0wXzlfM19HUExHaG9zdHNjcmlwdC5leGU=

http://ict.anamai.moph.go.th/ict/freeware1/programs/.../PDFCreator-0_9_3_GPLGhostscript.exe

http://s10095.chomikuj.pl/File.aspx?e=xslzKZzz5aewxKCm3GkMayg_7OMn05eZ3TcErMDQdb3DIGIQ1-jO11FEfu7wFXi4-Dzzaiqy_eDbGPD-Fk1E5Hir6PeR8YdUmW1kUQP39pr_V6TJpN_m7s5lL-LANw0tVmqKtKiuoeI6s5TNvmpCAnMh5xIxu6jBZAotid7kh7s&pv=2

http://download959.mediafire.com/szldxx86l2jg/.../PDFCreator-0_9_3_GPLGhostscri' 'pt.exe

Scan pdfcreator-0_9_3_gplghostscript.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.