home

ppconv3242.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from powerpoint-slide-show-converter.en.softonic.com.
Description:
Slide Show

Version:
0.0.0.0

MD5:
3b843c66f9072e043621b83e2a438514

SHA-1:
91eef2cf7b808d5e2dd6bfa7a81d4670b8326644

SHA-256:
5c40154de72ab917173b9b51a5b3621d57493b50b51a13e71a3c41ff1c67286b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/18/2024 1:14:44 PM UTC  (today)

File size:
3.3 MB (3,459,822 bytes)

Product version:
n/a

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\ppconv3242.exe

File PE Metadata
Compilation timestamp:
11/7/2011 10:34:59 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:hNglSMuXjW81y8T0Jdz0/W5pHHFqR1HaFkBTp:DMuzpy8TGzBHlkE65p

Entry address:
0x1000

Entry point:
68, 01, 60, A4, 00, E8, 01, 00, 00, 00, C3, C3, CA, 36, D3, 0A, A5, C6, DA, 00, 2C, B5, 8E, FD, EB, 75, 6B, FD, 1C, 0B, 19, 81, 54, 30, A5, 33, 6E, 56, 29, 18, BB, F2, 79, B3, 10, DC, B8, 2A, 55, 52, BB, C4, 94, 42, 16, 1B, B8, 50, D3, 18, 5D, D1, 1A, 52, 1E, 15, 0A, D9, E6, 4B, 9B, FE, A8, 07, AD, B8, E3, 8B, DF, 9E, 8F, B3, F0, DE, 07, 32, D6, B2, 6D, 30, 43, 56, 2A, 26, 39, D6, B2, 11, B5, 23, FD, ED, B0, A9, E0, 92, 68, C5, 8B, 6C, 0D, D8, E5, 7D, AA, F3, 07, B5, 17, 60, E5, 15, 5F, D3, 4F, 01, 7D, 0D...
 
[+]

Entropy:
7.9935

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
104.5 KB (107,008 bytes)

The file ppconv3242.exe has been seen being distributed by the following URL.

http://powerpoint-slide-show-converter.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPxJrO1TsV2ZQoV4i4Pnuvz5BfvcJF5YcB ioRo OYiFbz2V/WVufH SVsC37xkwVk4rfjko1GvD4kjyRc/.../3uyAHC6jDv7mvxh1NxGpiX4Y=

Scan ppconv3242.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.