» PPSSConv.exe
Overview
Analysis
File Details
Behaviors (1)

PPSSConv.exe

PowerPoint Slide Show Converter

DzSoft Ltd

It runs as a scheduled task under the Windows Task Scheduler.

File name:

PPSSConv.exe

Publisher:

DzSoft Ltd (signed and verified)

Product:

PowerPoint Slide Show Converter

Version:

3.2.1.1

MD5:

901ae3cd2e7aea81cd6df3b13a117982

SHA-1:

bd24037fdc418614eb6feb86e5079ed6ab0e64d2

SHA-256:

a74da3b44e612718a41efa48d0fbf20bfdce5fdf925bda729459c39b2f21d83c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 8:49:59 AM UTC (today)

File size:

4.3 MB (4,459,720 bytes)

Product version:

3.2.1

Trademarks:

PowerPoint® is a registered trademark of Microsoft Corporation. DzSoft® is a registered trademark of DzSoft Ltd.

Original file name:

PPSSConv.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\dzsoft\powerpoint slide show converter\ppssconv.exe

Digital Signature

Signed by:

DzSoft Ltd

Authority:

The USERTRUST Network

Valid from:

5/15/2008 2:00:00 AM

Valid to:

5/16/2011 1:59:59 AM

Subject:

CN=DzSoft Ltd, O=DzSoft Ltd, STREET="Gogolya, 12/21, k.9", L=Kremenchuk, S=Poltavska oblast, PostalCode=39605, C=UA

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

0089757E55BA07F3A4ADB9DA4C14A3E6B4

File PE Metadata

Compilation timestamp:

1/14/2010 6:32:35 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:VVmADe6Tzyzu7r/X0wFCuBBSe0xVn5Ab0gbMqjg4+t5Jn:b/C6zhr/XMuBse0xj7f5Z

Entry address:

0x1000

Entry point:

68, 01, E0, 97, 00, E8, 01, 00, 00, 00, C3, C3, 58, C5, 98, 4C, 28, 3D, 8F, 17, 0A, 00, 07, 00, EC, 55, 44, CF, 17, 44, 5D, B0, 1F, C3, 1C, BE, EE, F1, AE, B0, 41, 49, 36, 96, 85, 98, F3, 9B, BC, 78, AF, 25, A7, 65, AF, 2A, 3F, BF, 4A, 06, A0, D3, A9, 1A, 2A, 3B, F1, BF, 12, 13, 51, 29, C3, E0, 04, 45, 6A, 18, BD, D2, 4F, A7, 21, 15, 8C, A7, A8, 44, D9, F3, 95, 5D, 2D, 61, 59, 6A, 8F, B8, C2, 5D, B4, 79, 81, 3A, C9, AD, AA, 1A, 84, F7, 66, B4, DA, E9, 67, 6F, 75, 58, 39, 3D, 8C, 06, BE, 0D, 6F, 1F, 15, D6... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.5 MB (1,527,296 bytes)

Scheduled Task

Task name:

{8F4F24DB-0CE1-4EFC-88D6-389988AB9835}

Trigger:

Registration (Runs on registration)

Scan PPSSConv.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.