» GCONVERT.EXE
Overview
Analysis
File Details
Programs (1)

GCONVERT.EXE

GConvert

G.D.G. Software SARL

This file is installed with the program GConvert.

File name:

GCONVERT.EXE

Publisher:

G.D.G. Software (signed by G.D.G. Software SARL)

Product:

GConvert

Description:

GConvert: extract, manage, edit and convert icons

Version:

5.2.0.0

MD5:

14a9b636194df48d153e6e5ee17290b3

SHA-1:

beffb839f0a9dd81b1a3cc8819a7540b3314fffa

SHA-256:

572e11078fffc2dbccb567764f8e76a9dd5ebe3001a350e4015182fe0108d017

Scanner detections:

3 / 68

Status:

Clean (3 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/23/2024 1:11:27 PM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Packed/RLPack

7.1.1

AhnLab V3 Security

Win32/MalPackedB.suspicious

2015.04.14

ViRobot

Trojan.Win32.PSWDelf.229690[h]

2014.3.20.0

File size:

1.7 MB (1,773,056 bytes)

Product version:

5.2.0.0

Trademarks:

GConvert

Original file name:

GCONVERT.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\gconvert\gconvert.exe

Digital Signature

Signed by:

G.D.G. Software SARL

Authority:

The USERTRUST Network

Valid from:

4/14/2009 7:00:00 PM

Valid to:

4/14/2012 6:59:59 PM

Subject:

CN=G.D.G. Software SARL, O=G.D.G. Software SARL, STREET=6 rue de la Vire, L=Marly, S=Lorraine, PostalCode=57155, C=FR

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

7A4615F6B5637619592C6A8ACB45A19B

File PE Metadata

Compilation timestamp:

7/22/2009 8:03:07 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.12

CTPH (ssdeep):

24576:LGh0iLiTdIWaWUXKYK/Dk1bsvtyDf2A8d9soazKJ4EWxVJSDeZQFns5y8o+Nvp:LGh0iL9ivj/D4bIUOndQG4PPSPnuE+NB

Entry address:

0x1000

Entry point:

57, C7, C7, 72, AF, B4, DF, 8D, 3D, 5F, BA, 58, 1A, FF, CF, 0F, AC, F7, F2, 0F, BD, FE, F7, C7, 5C, DC, 30, 27, 0F, BA, F7, 33, 0F, BB, F7, 0F, CF, BF, 64, A9, 09, DB, 85, F6, 81, DF, AC, 19, 46, 48, F7, DF, 0F, A3, F7, C7, C7, 41, BC, 79, A0, 85, F7, D1, CF, 0F, B3, F7, 0F, AF, FE, C7, C7, 10, 6E, 5F, 55, 81, C7, B1, C9, 4B, 85, 85, F7, F3, 0F, BA, F7, 92, C7, C7, 58, 57, 03, 7B, 8B, FE, 64, 0F, BB, F7, F3, F7, C6, D9, 4C, D2, 3E, D1, FF, 09, F7, FF, C7, 87, FF, 0F, AC, F7, 1A, F2, 87, FF, 0F, AF, FE, 8D... 
[+]

Entropy:

7.5978

The file GCONVERT.EXE has been discovered within the following program.

GConvert by G.D.G. Software

Publisher's description - “GConvert is a full-featured icon toolkit that lets you extract, create, edit, manage, compile and convert icons. It reads any icon resource file (EXE, DLL, ICL, OCX, NIL, CPL, SCR, RSRC, ICNS...”

www.gdgsoft.com/gconvert

3% remove it

Scan GCONVERT.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.