PDFCreator-1_7_0_setup.exe

PDFCreator

pdfforge GmbH

The program is a setup application that uses the Inno Setup installer. This file is installed with multiple programs including PDFCreator. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
pdfforge GbR  (signed by pdfforge GmbH)

Product:
PDFCreator

Description:
PDFCreator is the easy way of creating PDFs.

Version:
1.7.0

MD5:
d4ce9cdb38cb8914061ccfedc799169a

SHA-1:
d0357617961bf3d526befaab0048cbb983ea4df9

SHA-256:
4f4ed42e40856d8e347c97b68747bd6e89932de752b25c6a903bb3467b535881

Scanner detections:
3 / 68

Status:
Inconclusive  (probably just false positive detections)

Analysis date:
11/16/2024 6:29:14 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
7.9190

Reason Heuristics
PUP.OpenCandy.Installer (L)
16.11.28.20

Rising Antivirus
PE:PUF.OpenCandy!1.9DE5
23.00.65.131208

File size:
16.7 MB (17,502,040 bytes)

Product version:
1.7.0

Copyright:
© pdfforge GbR

Original file name:
PDFCreator-1_7_0_setup.exe

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\pdfcreator-1_7_0_setup.exe

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
3/14/2013 8:00:00 PM

Valid to:
3/15/2015 7:59:59 PM

Subject:
CN=pdfforge GmbH, O=pdfforge GmbH, L=Hamburg, S=Hamburg, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
710765BE0E0B40112C8A61F0D99623C2

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:2eyKVuVEJytlxCfynwDWWB+9mp63cofngdYifHcualcd:2ew9u8wNwUpW9Pg+iURlcd

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9774  (probably packed)

Code size:
39.5 KB (40,448 bytes)

The file PDFCreator-1_7_0_setup.exe has been discovered within the following programs.

OneNav+  by Honeywell Inc Aviation Services
About 1% of users remove it
PDFCreator  by pdfforge
Publisher's description - “PDFCreator is an open source application that can create PDF files from just about any program that prints using windows printers.”
www.pdfforge.org
5% remove it
 
Powered by Should I Remove It?

The file PDFCreator-1_7_0_setup.exe has been seen being distributed by the following 44 URLs.

https://dw.uptodown.com/dwn/Ur5W9BTF7lXQ5QYBMql9nzjgHvCB04Mpg1BMfLsFuUyjO3YaAgLrH6LpmlwFEy8esQI4JSlwmOjzHOES4tRE-3-1apXyHeKPKTojYh03v2SVDz-Bfv9mLMNFcou6D0Df/K4kPP5EoF_JiO0FjGK0cuXIlRbUmBX5p2ylAr977wJfibh9hpxRbfwzK5EgFRyudSL6-7mEIngd1gWFDdje2_q9-J3ZGYCQkXe5bFZ6lJOBqFyqXOAINPK3qa5ByoAGM/nc1AeNiD10GuTWxdN7GCXc_gYoyoCqh-SJtsH3h2cKNZ96YhmQJLtN85vZR3U_qZTGOzClptggFFcoyGI_rR1LSKNHNfnDcVJ_QzZ9rxuzzQuFo0pOzGTMvB6rvzSy2X/.../

https://dw.uptodown.com/dwn/BoGV0dJqCzlYMJhFJx2wI2b2kpa-0UjVhjtXR5SN-AgDC41zAiBB0PdHYEq0TOdz9MLTKojRonN4eUQGRXbbwrDiLRzFgznP6J3yMP0iDhSmrerlBoxjD9RdI1jcY-84/xp6jBd9XOwMuueTzlM99QP0cNJI_PYqO6CUfP0is-nu_t_iMSw0cV4txNV8qTQztXBxmbux-IYDTNVuDUzVwIWDTV4iWBY7qfSFgxrbhlWYD-Ye2HMRQCMPhV3-gZcDh/Q-KrXY_RU3VyBlYBFmQ5v8mNTN6ywq4G0SLQ3X0_0hde8zz6IgYZgUhcMNHMezQJk6ZSu56GxiFYJC6g1Gd9zwLzxOHlZnQjMm4HHL21g7L7buDICX2JkRL_t5sqFCzB/.../

https://dw.uptodown.com/dwn/k5Bgx8e6WTZ_8OIcESuDQTr2vrWMGdhYRUXV42gJrhKpCRP3SmwRu7xdhFyPMJiIqJCHzEtAtk7kVHjoQtmgX4pybXbL7XHTWnvH4IeaR-CLKxwvZ2Gy2dB_3u0Ox9wd/F1EWhOH3GfCUY7KWim88NC2-y1IVpi5TA8RgPIpob_xLTmSc42KtH7D2Cig-8jYNYVl76GPwH_qvxvX_jTDqGSmkcgppcZyKLa1wwaBS0tcdqpDdy76FJ-KlyGusLKbl/NBJm3EaQ_Kuq3ihG_YwgBF4sQH4EgOPVrNutAR5KUY4TsAnY8LHwvRw2fvcTvhVyQrCj9jIZKDGmPE8AwsXEa7Zvj3lFURVlAdHc0wnWANpOM81fBifeqrCTxfyea5ZF/.../

https://dw.uptodown.com/dwn/zxl20oLOPhjaxsuC6qnUBLTX2Vqy3pNnCDpZdlKtboMd1-hM-YaoBX-5JiZNPY8rYKxkqiNGNJyxg2-dNrB0Yn35ldOslw37Hoj2mtWJvNeDa73yZ-qMWca4wPNQhxr1/qtk3OMYI61LXxYZDUQVdfOwrtytxcujyRgs_bSy6q9COeNW55bITeyjjjD3-qlhvjMUDOnbCoeurj8wfyZtL8FqxWO8mNCvoJwc9aNpNbuZWqmL6aF1U7mXEq9WE15Xz/vI4ydKQW4RyKGE4A7aoY9kgadjNBO3mfExZj3QluhJO_3NLV_cib_WHsrfgbnRhlDOVsIyF3J6yjD05xcyzOg1Y5ugUiqJ-r-zbNz-QOYbZGAIw4NpJPlVN2Vg0ZTP2r/.../

http://www.filehippo.com/download/file/.../

http://soft.archive2.clubic.com/files/1245ddb38d684275e877fd00052f11f1/51db2763/.../pdfcreator_1.7.0_fr_11085.exe

https://dw.uptodown.com/dwn/wQXdhnqYVzr4Hl4JuSGqN_ThSwFwXFS0shCkV72T898ZrdfWAst0PbMf840kpiP2XclFEoUHsgDwHB-DHFSnle7TmjpYCMON-5gkvdjRY-4BIYuYkLTbM1CYkBx-8ZmL/lnVr-sLsRlFAei3ywj7nvIRhy81eLwVK-bKuT2A2Or_44wef0vTOezN9HvlkitvugbtF75HMlLAqlXnD4XivxH1KEp-nlOtAl_E3wmEqHvm63EW7i9GN2wgXWt4_D4HD/bkPaydHbPKIRNoP_Pb4lXx3NHL1i4S8sNgy9nSC7queIzNwivk6dp2plIxm-KtYAJijmWiB9NhXvjpGm_3fUe5rP-asjdH5HQGq0__KruDBHUeBzpJYInzw2hftvva9d/.../

http://www.mamkomputer.info/wp-content/uploads/2013/.../PDFCreator-1_7_0_setup.exe

https://dw.uptodown.com/dwn/jMPwCPwzBdT_naRWUk-3ghk9JowL0GR7gXH_C73bpvYCN4hMO-IxL0bJag61XquH7A9aPNlUOd9V_CXHxMgeQAnQX_v7dwhImwJyFUK6aemxeEBStXe4v8cqtP98prTa/QsA5za8P1Dp7V4nJteioE-6jDlID_paB9N-lI4e0g8KQux6CLN6PpmXVJVoXB2B91nVCl9SPuStytY9l16buy0M9613Z684qaYwFuGJ2mPCXAhFnjiJGMdf-IBR2PSVe/gO9hMp8MrWwW4O_DM22Ol72xril50oPb9MoOedKkmCqIwDIpUO_CelebCaYwDRC5pneU6h8mSY7EyKddaGrvfururHt_Q0fCUWaX_tn8UFveC10cvjfQnAA4C1Sh5CiF/.../

http://dw.uptodown.com/dwn/fL1Sp6z3JBrbX_kulr2GMLKN6uPpNmYmiKE_rEfmMX7O31l5BTWLQ8LbQTV_utOiVI1KJ5ilEJ7dCnPQJDVydQdP2mYQmGcx8k1c1GUjCpr45PsPd1zrnVkMbU9fb80t/920kgl6NTdggt2lZJ3vpLrjHUKfrNxPkcdquTPxCnAiF7DzZKjxlCFuChD_oqGGLKiFFgMWVnB9H6UojPR2Kox4BxJdE85twycHK-aDWFhd4wW5bkjVhOe9DFwiFgA_K/.../

https://onedrive.live.com/download.aspx?cid=D7D361262F926895&resid=D7D361262F926895!38288&canary=Dq9qQy4tnmOC8GyOPOtx0sJaKhHCgt3BECb8VaIugEg=7&ithint=.exe

https://dw.uptodown.com/dwn/GECWNRSxnHYGOCxZjccUTfBTt20TSfxN2wHCZii0xnmwkzEnXsi4-df3k8NRLSe-fJ70KHLt5EK8wp3ma8ZOJLJB-QtXkax6og_-_x4SL5g2eS_hBIfI78MOvFV4ZcO5/tTVIo-yIumf3sWHcS5dBadRLJNrCLJ6FKZt-lfWzPy7QMjphg9HDkx_dZHL8EdKFVjv9bFlLcqjS19njHhjyA8CscyLnOkNWts2CWROarxI2_cTxeWLONG2uKa5lw80B/QDWLKnOCPXWcHtq1PThFLMxJk86DeifvLHm6skqxV32HVjyy2XKxyxI17KDCCU7LnOEpcpUfydenat5ZF4BCK3vv6xbXB5NjsBh8kzH8TCo-NDif_IQnpX67t_ABmGjb/.../

https://dw.uptodown.com/dwn/ydTvz3fxsENllcR-cgeal67De5O7XqXg8KRzbHPb9uGwB_M7jeCgSIw_EKQKpWxKWg-VZ9pXM44_K5bD91fxzKMahtPTvbjji5IvSgBOQSXARjcIw21XUM9CDq3B0RCP/2Gjz-DVMrF0GnQtqQ_aWo_VJLBAyJOJhb4cUfe2uUuMip82XE2fMUfKcfLHbV6q0_0piQHft_3WePk0w4kVYHbaZAHPayS5iYzS9PCawpA3gtpUEsK_TQUqZZGUIVyjm/U8F_ZYBGiiMMSmRukObvj4L7M5m43u18EXRvXRQnN2yQD3-Qzr5_vawjSVOcdRUR4FOqvoD43p4BpzSyWMJYjGj_NOD90FaeZEcd3v127TbwH177zdixyc0JDb0mbSbM/.../

https://dw.uptodown.com/dwn/P9oiVxlVpqRpkAZqchmqU5rqxk0-K8pjk86uswNnP69Vy5c6FwjquyMfmSpmdyAz7Bs1J43x1iAFK7JNm4KJE_sPGfmKe-uD80W1_vEhkJMEKzOlTKblJ52rK52sTKhQ/mqskWu-r05d7bO8c4wwekGhNVbGiXbsv9VWHPi04--BJFMoqhqazm_k32c-rCruTb_LwjxxQC853NCT3BxBz7AoQ9EsN1YHzAnxrjD5Ne0HXbApiB7tOHpaHagNfpxp7/r_IdZvmFWAIaM_aftfK9B_4JfMjozCZuwtmot2XM_9EwE1dzZdSQuFDlHmjBlKSJFCB3ojsrEoVtUJoiM-ZcuonKDyWr6KI1Yuho6ei4T1ujRWlV15x55zt2ckJsSB9_/.../

https://dw.uptodown.com/dwn/mNzz8tguthH4Rq1qt3QPLTYDjSH2QT0Cjy3O5Kjd3snlk4u3ysQnMn4_oHznGB8yTT42B1DuwttUD6nk67yckSbeichpP3dh2Q3EgxUgwpEBD1Z4vidcoL5TNNJcFkUj/vFUtD__yFg5OA7FCdJEpIkYZAzk469fkPuHHkCbMgR-04dDW0o-7bF2lB0u7g32z_4_Dl4dot-Qvql4PzDUcrsLpX4IfAwjZF6tGK5PMq5B2P3grqVH90Su7QvMbsmEA/n31Vf9UpV2vglEflftUngLMbp_T1XQ0XIu80rjmP0EL_8Tw1gCdsUV_Dt7_NIRg-wRZPQkrEfipnjcSlrBCGEPJ3e3cDZ6W0cjNI0KQbZuw2jE2bBHIL7eY7plY3eq_j/.../

http://dw.uptodown.com/dwn/fR_20MVxtERGfiLGMmuexL1UayguRLpliUjGNEUrMPP6wXig_StXuFj8CdVPs_HM_cb0Q6vFIC07vcMeiJaafjpl49tsYNnwMMJr7KFCJVRnP8ztB5aLBRi-iEztIVKq/FjUWg6vMUT01gYD1XtZYOarmm-6U3RiZzHCJPNuz7bIs-fOHapyAGiBl31tnpbav62_N5l_yTEuE5_Y0DSOw-l6PGexTsMsaab9iUjolILMMytUEp3h-ybb6PbEhMzar/.../

http://www.sistemafaemg.org.br/.../PDFCreator-1_7_0_setup.exe

http://dw.uptodown.com/dwn/OvWHJbkzDwt4u5CrwxHrkmVcOzM73GrOvkZmDKv6AavJm1A7mc4VWk2isOrZKT-9Au0UzZglMRgW6an0uPIAfE_2fNYeXRQm_jYNRLUke68OEb1GJ0QzzHaMuSDlUKl9/Xe9D7NqfyDcVIa_S2GlKieef-NrphVeDeP2UGoZ3YaoTg_juKBBiIKBR0_BJRV-j2y2lMRnc2XowhxgJ23anejVDKJXYdg-_UgyLjjmVOT6BbqMf6nEfnZjsHysTijsd/.../

Latest 30 of 44 download URLs

Scan PDFCreator-1_7_0_setup.exe - Powered by Reason Core Security