home

pdfwriter.exe

TSPrint

Terminal Works Ltd.

Publisher:
Terminal Works Ltd.

Product:
TSPrint

Version:
2.0.3.8

MD5:
dec52aca7edc8b413916d68298c73107

SHA-1:
5d845b270bcd0168def4b03759881643ff44d220

SHA-256:
fcfd2c79a8b19c6443f8aebf3eb6ad061636f06b9192dbb567dcdf961883e6f5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:28:32 AM UTC  (today)

File size:
1.5 MB (1,531,392 bytes)

Product version:
2.0.3.8

Copyright:
Copyright © 2015 TerminalWorks

Original file name:
pdfwriter.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\pdfwriter.exe

File PE Metadata
Compilation timestamp:
5/20/2015 11:51:19 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:ZlnUYkJ7cVVjQjBo/pmpgCzUEQTblzZm94lf/jN25qs6cxqEO4lf3jNo5qs6c:3UJ7V2AKCk90ed45IGVu5

Entry address:
0x12C6CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.4428

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.2 MB (1,222,656 bytes)

The file pdfwriter.exe has been seen being distributed by the following URL.

http://api.256file.com/.../45209_pdfwriter.exe

Scan pdfwriter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.