home

3dconverter.exe

MD5:
0eaed2c62ab6a84e6763b460f1017376

SHA-1:
d19caf1a4e47cc77db8abed49f15dc083f3a7dc2

SHA-256:
0999c0c516f546c6acd8cd32eeba59ac66e30b25a0e9ea43a8d3ee94bb85ed94

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:14:50 AM UTC  (today)

File size:
2.9 MB (3,088,388 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\3d object converter 4.80\3dconverter.exe

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:u91lkEHhKLISGp0mOARCDL6aVZXym7oj95+KD82d9AGYs+4lPUyD3hTiQJyhE1zn:+VHqWOARCNXym7ACKDTWHm3RTiAdI+I6

Entry address:
0x28740C

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 6C, 70, 68, 00, E8, A7, 06, D8, FF, 8B, 1D, 00, D4, 68, 00, 8B, 03, E8, 52, 20, DE, FF, 8B, 03, 33, D2, E8, 55, 1C, DE, FF, 8B, 03, 83, C0, 50, E8, 27, E0, D7, FF, 8B, 0D, B8, CE, 68, 00, 8B, 03, 8B, 15, B0, 00, 67, 00, E8, 44, 20, DE, FF, 8B, 0D, D4, D8, 68, 00, 8B, 03, 8B, 15, 04, 42, 4A, 00, E8, 31, 20, DE, FF, 8B, 0D, F8, D1, 68, 00, 8B, 03, 8B, 15, 98, 0A, 57, 00, E8, 1E, 20, DE, FF, 8B, 0D, 9C, D0, 68, 00, 8B, 03, 8B, 15, 78, E4, 66, 00, E8, 0B, 20, DE, FF, 8B, 0D, D0...
 
[+]

Entropy:
6.7722

Developed / compiled with:
Microsoft Visual C++

Code size:
2.5 MB (2,647,552 bytes)

The file 3dconverter.exe has been seen being distributed by the following URL.

http://s5872.chomikuj.pl/File.aspx?e=Wr-2Rc9lDoxm2HqiDEFnSs9tSZ2tF1YXEcr8fXmLyWT2kmtnIlWMwqlQ1Z1Ab5ULjbGoHFry7AFYHnh1w1uWVl5Zz69cECv08aS5LQCYQtKGZt-z1JyLSwgKbxNoN-GmnGVknz3Fq8HA-zIj6QxHBg&pv=2

Scan 3dconverter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.