home

gmadconv.exe

MD5:
327f0cd877627a22ef2f6dfb829066ae

SHA-1:
2a38919f31fe29be4b0502907188695761f81eb9

SHA-256:
14146e6b392681c141b324961023b543938b7f6c964da7426ff6f1797f82ff9f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:24:46 AM UTC  (today)

File size:
9 KB (9,216 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
8/15/2012 9:02:33 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
96:qqNgRTsolHXyv2bTI2/Lzp4KEdVDzlcn/xMp6PsLSxBHSzruVABG6qDCt3:58sowebwcnup64yHSzruVQG6qa3

Entry address:
0x16C7

Entry point:
E8, 7D, 04, 00, 00, E9, B3, FD, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 40, 31, 40, 00, 89, 0D, 3C, 31, 40, 00, 89, 15, 38, 31, 40, 00, 89, 1D, 34, 31, 40, 00, 89, 35, 30, 31, 40, 00, 89, 3D, 2C, 31, 40, 00, 66, 8C, 15, 58, 31, 40, 00, 66, 8C, 0D, 4C, 31, 40, 00, 66, 8C, 1D, 28, 31, 40, 00, 66, 8C, 05, 24, 31, 40, 00, 66, 8C, 25, 20, 31, 40, 00, 66, 8C, 2D, 1C, 31, 40, 00, 9C, 8F, 05, 50, 31, 40, 00, 8B, 45, 00, A3, 44, 31, 40, 00, 8B, 45, 04, A3, 48, 31, 40, 00, 8D, 45, 08, A3, 54, 31, 40...
 
[+]

Entropy:
5.0714

Code size:
3.5 KB (3,584 bytes)

The file gmadconv.exe has been seen being distributed by the following 9 URLs.

https://s02.solidfilesusercontent.com/MjI2NjFkNGY0MTUxNGRjYTI1ODc0ZDIyNjdjNjZkYWI1NGRjYmQ1OToxY0JlTEc6SzFVLVJ3NXpTT2hzTHVOb1k5N2g1aktNNTg4/.../gmadconv.exe

http://download1298.mediafire.com/lfmo9hoyc68g/.../gmadconv.exe

http://download1298.mediafire.com/x2eimgs5yxfg/.../gmadconv.exe

http://dc705.4shared.com/download/.../gmadconv.exe

http://download1993.mediafire.com/i1c8jg8q1v4g/.../gmadconv.exe

http://download1292.mediafire.com/4wodvvpaejxg/.../gmadconv.exe

https://mega.nz/persistent/.../6wcWECLL

http://download1292.mediafire.com/aajx43e6330g/.../gmadconv.exe

https://downloader.disk.yandex.ua/disk/a658bb85c4e9b34176eea46243a17c6caef1f2077fe4a6773b1f3b32e33a2571/56bf2846/Abh8Phjbv-7kg7ln_aSRkkgk--e646B4HhLyPOXPD7uoyQX3T_JVGIj3h-2psGaNfWRyEY_BxZp1a7GUVQ91ag==?uid=0&filename=gmadconv.exe&disposition=attachment&hash=qDDPATLcq/a90MXMiNZUvjqmhLPhV60sDX7uS/.../x-msdownload&fsize=9216&hid=c577117c129fe8c96bd618148a49f712&media_type=executable&tknv=v2

Scan gmadconv.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.