EchoTrail

PdfCraft 0.9.0

by Learning Machines LLCinstaller signed by Learning Machines IncValid

Sources: observed in the EchoTrail lab on Windows 11 on October 29, 2026.

The install

Installer
pdfcraft-0.9.0-windows-x64.msi
Installer type
msi
Installed through
a type-detected silent switch
Install directory
C:\Program Files\PdfCraft
Launched
pdfcraft.exe
Windows
Windows 11
Date
October 29, 2026
Executables dropped
2

installer sha256 372a80ff736b0e1f242f7001a2157de081fa5fdb2192d001b1cbbf7f53739f4b

The lab used PdfCraft for 2 minutes, changed a setting, ran its update check, then rebooted and watched what came back.

On screen

Frames from the lab session, cropped to PdfCraft's own windows.

PdfCraft 0.9.0: First window
First window. PdfCraft welcome screen is shown with the All tools panel and recommended tools.
PdfCraft 0.9.0: Main window
Main window. PdfCraft main window with the Menu dropdown open showing File, Edit, Pages, View and Help submenus.
PdfCraft 0.9.0: Settings
Settings. The Display theme submenu is open with Light gray selected, offering Use system setting, Light gray, Dark gray.
PdfCraft 0.9.0: Worth a look
Worth a look. A Check for updates dialog says version 0.15.0 is available, with Later and Download buttons.

What it dropped

Executables

  • pdfcraft.exesigned by CN=Learning Machines Inc, O=Learning Machines Inc, L=Atlanta, S=Georgia, C=USValidran during the lab session
    C:\Program Files\PdfCraft\pdfcraft.exe
    sha256 0be87df873ad69d00554ae21b62375a79b6c558d34a26f293441b2eb72adf9e0
  • pdfcraft-cli.exesigned by CN=Learning Machines Inc, O=Learning Machines Inc, L=Atlanta, S=Georgia, C=USValidran during the lab session
    C:\Program Files\PdfCraft\pdfcraft-cli.exe
    sha256 149c8b55364fde4da332fed5cba3b31c084402867e5e5f8655fd05a69e995f60

After the reboot

Autostart entries

  • service: MicrosoftCopilotElevationService"C:\Program Files (x86)\Microsoft\Copilot\Application\156.0.4314.50\elevation_service.exe"

What it talked to

Destinations

  • 140.82.113.6:443asked by pdfcraft.exe

DNS

  • api.github.comasked by pdfcraft.exe