home

converter.exe

The program is a setup application that uses the WinZip SFX installer. The file has been seen being downloaded from fileshare1040.depositfiles.org and multiple other hosts.
MD5:
64cfbc94d91422a749f56d29f2c4bf89

SHA-1:
8390ceb7819114c758bf579d7ee80c12ffbe24af

SHA-256:
04222b70fd9f4c49ec6234c955adc9a411346e209e016fe0c64639d490fe7560

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 9:09:04 AM UTC  (today)

File size:
5 MB (5,254,656 bytes)

File type:
Executable application (Win32 EXE)

Installer:
WinZip SFX

Common path:
C:\users\{user}\appdata\local\temp\converter.exe

File PE Metadata
Compilation timestamp:
1/9/2001 2:09:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
98304:tL+Od93eDLh+2JAnBnyC2e819YZYfWvnTPvr8ELthR9ICkae:dTd93eDLhQQC2BzYjIGp9P

Entry address:
0x3F8F

Entry point:
53, FF, 15, 4C, 70, 40, 00, B3, 22, 38, 18, 74, 03, 80, C3, FE, 8A, 48, 01, 40, 33, D2, 3A, CA, 74, 0A, 3A, CB, 74, 06, 8A, 48, 01, 40, EB, F2, 38, 10, 74, 01, 40, 52, 50, 52, 52, FF, 15, 50, 70, 40, 00, 50, E8, 9E, F3, FF, FF, 50, FF, 15, 54, 70, 40, 00, 5B, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 55, 8B, EC, 51, A1, 88, 94, 40, 00, 83, 0D, 00, 93, 40, 00, FF, 56, 33, F6, 39, 35, 40, 8E, 40, 00, 89, 35, 34, 94, 40, 00, 89, 35, 84, 94, 40, 00, A3, 24, 97, 40, 00, 75, 05, E8, 9D, D2, FF, FF...
 
[+]

Entropy:
7.9991

Packer / compiler:
WinZip, 0x32-bit SFX v8.x module

Code size:
21.5 KB (22,016 bytes)

The file converter.exe has been discovered within the following programs.

PDFCreator  by Frank Heindörfer, Philip Chinery
PDFCreator is an application for converting documents into Portable Document Format (PDF) format on Microsoft Windows operating systems.
www.sf.net/projects/pdfcreator
23% remove it
 
Powered by Should I Remove It?

The file converter.exe has been seen being distributed by the following 38 URLs.

http://fileshare1040.depositfiles.org/auth-1484867826eba2a205e314223680ce36-181.112.105.182-92645057-155437347-guest/.../converter.exe

http://www.epictia.es/Descargar.aspx?Info=De2HTu3RYgXOXNIv1cphRTTQtvHEzTdPoeb6WWGuSOU37pRjZPedT2boVeeSmrLuXVP1J4NpBBddPTTMKHWcpA==

http://fileshare1040.depositfiles.org/auth-14805905137a0309135a23e22a041a9c-186.29.180.56-52973611-155437347-guest/.../converter.exe

http://fileshare1040.depositfiles.org/auth-1465330929756f8288d4b178058b3ceb-187.246.31.66-2586970415-155437347-guest/.../converter.exe

ftp://suporte.infortron.com.br/Outros/Drivers/.../converter.exe

http://fileshare1040.depositfiles.org/auth-147655734639cee3e1c85d8cb580ec48-190.149.44.237-12397244-155437347-guest/.../converter.exe

https://drive.google.com/uc?id=0B44rttKSrEvqTG51dHh4bFgwQk0&export=download

https://doc-14-00-docs.googleusercontent.com/docs/securesc/8n21ukaf6aqulu7scoai3f6pmnb5515v/itjd15eobldnv1939ekefko2n0p5kakc/1472544000000/.../09012960052201601489/0B11liRD2v-8-MmJMU21Fd2tGcWc?e=download

ftp://202.62.80.142:1/.../converter.exe

http://www.cutepdf.com/mwg-internal/.../progress?id=uuQxT-7u9vTkjg9P6LF22gS7jGPI9lCy7HSvS3JrgMY,&dl

http://fileshare1040.depositfiles.org/auth-14736251597a1b479901839572d3f674-189.174.19.36-2679036932-155437347-guest/.../converter.exe

ftp://186.251.23.235/Softwares/.../converter.exe

http://fileshare1040.depositfiles.org/auth-14624097370d1ebd4764c35373ab5ee5-191.109.45.238-2553480809-155437347-guest/.../converter.exe

https://www.google.com/url?hl=pt-BR&q=http://www.cutepdf.com/.../converter.exe&source=gmail&ust=1473953587831000&usg=AFQjCNELAuV_9fIMG87uxjK5MLKdglmgDA

http://fileshare1040.depositfiles.org/auth-147706604611c87ed14b2f8f23432de8-187.241.201.115-17391794-155437347-guest/.../converter.exe

http://fileshare1040.depositfiles.org/auth-1475448539f4ff4be3b17be9b57efe1b-181.64.161.19-1186703-155437347-guest/.../converter.exe

ftp://ftp.uconn.edu/huskypc/windows/.../converter.exe

http://fileshare1040.depositfiles.org/auth-14416726978358506bc4f785e117daa1-190.122.42.201-2265038475-155437347-guest/.../converter.exe

http://fileshare1040.depositfiles.org/auth-146803338158c5b12b5b461b4d0009bb-190.233.206.122-2616238871-155437347-guest/.../converter.exe

http://soft.rba.com.bn/Others/.../converter.exe

https://downloader.disk.yandex.com.tr/disk/1cf7c28041e072a19ad25c6f7c73b9d34a5036dba9fd5028119c26ba39c7ab63/56241d3a/u5Jq2ahDNZqpGKpTKRg_UaU5YL4n5ueDLksgqgEcR7fljN-mYN2vPDccn8HiFbkTc3hut1pMb6ctm7xxzY7OTQ==?uid=0&filename=converter GPLGS8.15.exe&disposition=attachment&hash=3ZbccqkZyTHST2/IUi9Hqh4glo1GqIEuqekrFlNBh5o=:/.../x-msdownload&fsize=5254656&hid=19d4707b9267d7a94797660c3bb82c02&media_type=executable&tknv=v2

http://www.himgym.dk/.../converter.exe

http://fileshare1040.depositfiles.org/auth-14645769663ba4c5d928ea32c4acbcc8-187.156.38.244-2578402706-155437347-guest/.../converter.exe

http://dc201.4shared.com/download/.../converter.exe

https://onedrive.live.com/download.aspx?cid=78551554F4802E63&resid=78551554F4802E63!2250&canary=JPjWnH B1tJ0BjwkufidPhNxPAEJUJ2B3rv0tdyrDiU=5&ithint=.exe

http://www.sukhothailocal.go.th/.../converter.exe

ftp://192.168.2.21/update/MY ASTROFLASH 5.2 23.08.2014/TOOLS/PDF/.../converter.exe

ftp://172.21.1.40/3. Aplikasi_Intaller/.../converter.exe

http://www.surat-local.go.th/modules/.../converter.exe

ftp://ftp.workanywhere.se/Citrix program/.../NaviPro PDFWriter/Converter.exe

Latest 30 of 38 download URLs

Scan converter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.