home

saveaspdf.exe

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Version:
12.0.4518.1014

MD5:
d8d249be34ed98e4baa6fd16fb8ff3a0

SHA-1:
475abd12cde9bcde730ca12e628b50062203fe55

SHA-256:
3b9d741aa842b30b6339eb4f6e4aa50c15ad544bd9f857ba1615601b1ecf62ed

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/23/2024 10:30:45 AM UTC  (today)

File size:
914.2 KB (936,168 bytes)

Product version:
12.0.4518.1014

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\saveaspdf.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/4/2006 9:43:46 PM

Valid to:
10/4/2007 9:53:46 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61469ECB000400000065

File PE Metadata
Compilation timestamp:
10/26/2006 11:02:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:VpMdSgZp7pHbPuW3vBimpEZL7dShka23GYqJS:zbURh3Zimpq7gEZ

Entry address:
0x56405

Entry point:
E8, 26, 48, 00, 00, E9, 16, FE, FF, FF, 51, C7, 01, 70, B9, 00, 30, E8, A9, 48, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, F6, 04, 00, 00, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, EA, 48, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, 44, 24, 04, A3, 74, 8A, 08, 30, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, BC, 3F, 08, 30, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00...
 
[+]

Entropy:
7.2895

Code size:
510.5 KB (522,752 bytes)

The file saveaspdf.exe has been seen being distributed by the following 34 URLs.

ftp://172.24.15.81/ftppermenant/.../SaveAsPDF.exe

ftp://192.168.3.5/Office_Aplications/MS_Office/.../SaveAsPDF.exe

http://ucoonline.in/upload/.../SaveAsPDF.exe

http://masterintra.jogjakota.go.id/.../SaveAsPDF.exe

http://f51.y8top.net/2107tmp/cf/soft/2015/6/ba/.../microsoft-save-as-pdf.exe

http://dc538.4shared.com/.../FL9iW0m3ce?tsid=20150627-103127-7a52c4e8&dsid=ch7to0.22f7738584a29e2bb549908a41d24906&sbsr=3638dd1b82463aabe71e47507da6f24e56c5766f66d2748f&forDownloadHelper=true&lgfp=8000&dsid=ch7to0.22f7738584a29e2bb549908a41d24906

https://www.dropbox.com/s/.../SaveAsPDF.exe

https://www.microsoft.com/downloads/info.aspx?na=90&p=&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=f1fc413c-6d89-4f15-991b-63b07ba5f2e5&u=http://download.microsoft.com/download/b/5/3/.../SaveAsPDF.exe

http://f51.x8top.net/2107tmp/cf/soft/2015/6/ba/.../microsoft-save-as-pdf.exe

http://c236.y8top.net/2107tmp/cf/soft/2015/6/ba/.../microsoft-save-as-pdf.exe

http://download609.mediafire.com/f7vtguo56ihg/.../SaveAsPDF.exe

https://doc-14-7s-docs.googleusercontent.com/docs/securesc/8ftumog0m31rtqbhe1kkv338gu968e3l/t57259rv0ke04fbft59g2a96l21rqjcv/1478577600000/03220618756995414561/.../0B_z1TWPDyVSmYVdCMDA5amdvdkU?e=download

http://coolbar.pro/tracker/go?url=http://f51.y8top.net/2107tmp/cf/soft/2015/6/ba/.../microsoft-save-as-pdf.exe&cid=29

http://dc745.4shared.com/download/.../SaveAsPDF.exe

&onid=18483&oid=3001-18483_4-10742065&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=biz-soft/office-suites&topicbrcrm=&pid=10742064&mfgid=50119&merid=50119&ctype=dm&cval=NONE&devicetype=desktop&pguid=08df79a371910b63a70d8758&viewguid=Zo6Ov4SWRSWln2yRL16YhRy-f9rb1u5g6UI3&destUrl=http://files.downloadnow.com/s/software/10/74/20/.../SaveAsPDF.exe

http://113.171.224.173/.../SaveAsPDF.exe

http://c236.x8top.net/2107tmp/cf/soft/2015/6/ba/.../microsoft-save-as-pdf.exe

http://www.compexpert.ge/downloadRedirect/.../

http://c36.softwaretop.net/2107tmp/cf/soft/2015/6/ba/.../microsoft-save-as-pdf.exe

http://f51.softwaretop.net/2107tmp/cf/soft/2015/6/ba/.../microsoft-save-as-pdf.exe

https://docs.google.com/a/.../uc?authuser=0&id=0B6MRD5yf-ynDdzBVaGZUT1RBM2c&export=download

http://www.banoo1.com/wp-content/uploads/2011/.../SaveAsPDF.exe

http://downloads.ziddu.com/downloadfiless/.../SaveAsPDF.exe

temp:SaveAsPDF.exe

ftp://ftp.anycar.vn/Software/Office/.../SaveAsPDF.exe

http://link.vforum.vn/wg0rp

http://113.171.224.204/.../SaveAsPDF.exe

http://113.171.224.244/.../SaveAsPDF.exe

https://www.dropbox.com/sh/ik0jbbzu8x5wgmw/.../SaveAsPDF.exe

http://www.microsoft.com/downloads/info.aspx?na=90&p=&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=f1fc413c-6d89-4f15-991b-63b07ba5f2e5&u=http://download.microsoft.com/download/b/5/3/.../SaveAsPDF.exe

Latest 30 of 34 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.