home

aconv.exe

Autosomal DNA Converter

Personal

Publisher:
Felix Jeyareuben  (signed by Personal)

Product:
Autosomal DNA Converter

Version:
1.0.0.0

MD5:
f2a213563fa035bd13bd5881632abc36

SHA-1:
2394a0f1257dc72d675a33acc7e049f6c6449cdf

SHA-256:
5dffa459f42a262f729b42ff42f77bd83bb250354217ac607187bd1668a8feca

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 11:47:10 PM UTC  (a few moments ago)

File size:
17 KB (17,400 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Felix Jeyareuben 2013

Original file name:
aconv.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\aconv.exe

Digital Signature
Signed by:
Personal

Authority:
Unizeto Technologies S.A.

Valid from:
8/26/2013 9:03:47 AM

Valid to:
8/26/2014 9:03:47 AM

Subject:
E=i@fc.id.au, CN="Open Source Developer, Felix Jeyareuben", O=Personal, C=AU

Issuer:
CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
3EFC4B5BB95108618789E91476A36846

File PE Metadata
Compilation timestamp:
9/24/2013 9:01:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:7lEx+xAEVQ5tl3AWlyBWeNLI4Ijz207bXoTMC+:5YEVMtl36bLI4Ijz207bXo4F

Entry address:
0x441E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8671

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
9.5 KB (9,728 bytes)

The file aconv.exe has been seen being distributed by the following 4 URLs.

https://doc-14-7g-docs.googleusercontent.com/docs/securesc/vcnj89hqv3bahka3j5nop7a5e0qna0dt/e6596cg1jh315abjg06rhodean2rgjg5/1415923200000/17396975046139617009/.../0B7vzRsRM2aOQUWMycjdLZlRFTTg?e=download&nonce=ens4si285johg&user=18321958799450724834&hash=18ghcn4bfl4ri2h9haqp9uo6cgknrqdu

https://docs.google.com/nonceSigner?nonce=ens4si285johg&continue=https://doc-14-7g-docs.googleusercontent.com/docs/securesc/vcnj89hqv3bahka3j5nop7a5e0qna0dt/e6596cg1jh315abjg06rhodean2rgjg5/1415923200000/17396975046139617009/.../0B7vzRsRM2aOQUWMycjdLZlRFTTg?e=download&hash=4lsju24ju0ilmud527deleffqq65npnp

https://doc-14-7g-docs.googleusercontent.com/docs/securesc/vcnj89hqv3bahka3j5nop7a5e0qna0dt/e6596cg1jh315abjg06rhodean2rgjg5/1415923200000/17396975046139617009/.../0B7vzRsRM2aOQUWMycjdLZlRFTTg?e=download

https://drive.google.com/uc?export=download&id=0B7vzRsRM2aOQUWMycjdLZlRFTTg

Scan aconv.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.