Estimated safety rating

ghostpress.exe may be a dangerous application, according to an automatic analysis of the program's operation. It triggers many of the "possible danger" flags described bellow. It is not yet known if ghostpress.exe is a virus or an ok program that doesn't cause harm your PC. We recommend you to be careful with this program.

Executable file path

This program is usually stored on disk in C:\Users\UserName\AppData\Roaming\Ghostpress\Ghostpress.exe.

MD5 hash of the executable file

The MD5 fingerprint for this file is 3997b99329f9f9dd23f2812030f9c71a.

Is running as a service

This application does NOT run as a Windows service. This is usually a good sign.

Is a 32 bit executable file

This application runs in 32-bit mode. It can not exploit the full set of features of modern PC CPUs. This is quite normal because the publishers did not bother to upgrade it to use the x64 instruction set.

File description

The description written in the file is Ghostpress.

File version

File version 1.0.376.

Manufacturer

Maker Hendrik Schiffer.

Copyright

Legal copyright notice Copyright © Hendrik Schiffer 2015-2016.

Has valid windows

ghostpress.exe appears to have a visible user interface. This is good because it doesn't work in a kind of stealth mode. Its activity is clearly displayed to the user.

Is an encrypted file

The code of this exe seems to be compressed or encrypted so it can not be easily hacked.

Potentially dangerous functions

Some dangerous functions of Windows have been used, such as functions for tapping the keyboard. We advise you to read more about this program.

Digitally signed

ghostpress.exe is digitally signed. Nowadays the large majority of serious software applications are digitally signed.

Valid digital signature

The digital signature is not valid. This indicates the program may be a virus and that somebody probably tampered with it after the signature was applied. We advise extreme caution!

Certifier name

Digital certificate name: Hendrik Schiffer

Issuer name

Certificate's issuer name: Hendrik Schiffer

Can be uninstalled

This executable does NOT have an uninstall routine stored in registry.