home

avsimageconverter.exe

AVS Image Converter

Online Media Technologies Ltd.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Online Media Technologies Ltd.   (signed by Online Media Technologies Ltd.)

Product:
AVS Image Converter

Description:
AVS Image Converter Setup

Version:
3.1.1.275

MD5:
70ea867877993ddf9f97c900ef3c9dcc

SHA-1:
641701886e69b62243dd90fa9559c2ff5accfe09

SHA-256:
63117e5408d3f227ff19418d493871742135c7e806a9cd1e8e69dd81f4b827aa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 12:30:48 PM UTC  (today)

File size:
21.6 MB (22,652,744 bytes)

Product version:
3.1.1.275

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\avsimageconverter.exe

Digital Signature
Signed by:
Online Media Technologies Ltd.

Authority:
Thawte, Inc.

Valid from:
3/25/2013 1:00:00 AM

Valid to:
5/30/2015 1:59:59 AM

Subject:
CN=Online Media Technologies Ltd., O=Online Media Technologies Ltd., L=London, S=London, C=GB

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1EDFD6F0F249457CCDF5AD781E7DA8A8

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:mDKHk6rBFCE/KjQxaC7xB7Z2CsyMaHBIDkDwi/KvCN+6zVFmMtQ3WwoiB3eaf3gY:mArBdyy7DZ2CpHKwZFmeSZJfg0I+

Entry address:
0x9B24

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, A2, 95, FF, FF, E8, A9, A7, FF, FF, E8, D4, C9, FF, FF, E8, 1B, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, DB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 04, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 53, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file avsimageconverter.exe has been seen being distributed by the following 21 URLs.

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_it&type=PROGRAM&Expires=1437878646&Signature=N1jjYaxRO9wOpFs95GpZrRqY~WiCLblMcEotm0wJfSvoZT-xiqjXZH~ZyRYM9rP7~ay9WoFDnkHLoDcwH~nUkX3axehs2XoFQaRVMYuuuATvkIZ7KpxbXURhFtUduqPOuDavsySdwIFcmXy924EHdIWLVFPvgnwCpOCv2ZUoRSI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_it&type=PROGRAM&Expires=1463798825&Signature=E2CRoc8GpA6VtZZFyN8PhSEjBmciYVeH51Fbi1-d1W-TnxEozGB6w-spvfQ6l7xvxDRkrcv~LaMBl5Hzq6~jLQt0EupAgyx5RI6KooZnzJW2vLOa4ZNKGCvyG2hqZ61Ny7OHR1kilBq~gtt2QZLI3tmxxdvrQnNdz8RfdIE6saQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_es&type=PROGRAM&Expires=1474179404&Signature=V5AbSFYdsOvFb52W6uwX1CBAnY83tSQU9UEbYJIDwcBxKvBIQMUke7isk5gLq4Mmx9r7uR7zuX0mGlqMQ3YecO3WCE7ZpNfnpNkUtYhOzgzmv03Z~JQzTKrpEvNiHizfbyqCB1NRhB6fCU4e6XBZUgjEmWTupk1oYVP3w8uiBuQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_fr&type=PROGRAM&Expires=1474711216&Signature=BRHjRg-wa7J3r4qa9GCLWi9sW3xaYCywSe6~-imaC-Qap6AuSfBzbS20UMwqF84WPChrlvZZGskKdzr9XA296TyfMBOX-g1lZsf6U7rwjXHSyQ2Iwswxkv9IcXwznae2PlDaGp2-E5Gpz9m16Oyr5EvBtN0tTkNPduvaBHWTpuA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_br&type=PROGRAM&Expires=1482326101&Signature=fHzFgaxeY4QVg1BrL~3nAGl8ZLwuS2gdWOlkXFnfQeqvRx1371-oClihmnaM4ROl1GRpwcZTQMa0zx2VPrcAuGLWld8xYlyfSD1MgFpq8gDCwX9faRIUGYBF03-4bug0VsAKq2GOzYJ-R2Qj8LIRC4GAVzLGBStKijL6n~rwjMU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_it&type=PROGRAM&Expires=1437072389&Signature=RkjNj6YZTbrkKsMuP~kQtiSteQPz4QLATjjlf6vH~Ap5qcFjER8GHjwXUQjZUhaKVxkH1Te9160dxbHv39CSnc-SspebuyuQKJNtyjx39M5Mv82ao71aJ3OQT1XBgCTgMdQ-PWg1wAz-2ktz8RhPYqks5jU1c1URDf0qL7YwbGY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_fr&type=PROGRAM&Expires=1475310956&Signature=FnD1aWwtralwdNykewZMnI36DZxZLyfcHF0eMJJxaGGWWh8EE9IVp7jDJNNND8F0VyJmGR6cTmk9cwz8cnwsSa90eRxAVZoyULasiPJe5x7UHT9ZgflpyzzVeJwlkfTwwE-ERGb7AZhCApcS-PX2bXnXqi6K2XBvTOD7Jt0TnoY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_en&type=PROGRAM&Expires=1442461075&Signature=Ys~6yp0HwAFvaoLmjr3fANtwEIDQs9TRTM5nJL3YNDqNp0SHBjnYtFUCg5Rt14Ni7RgqaHXNtMx1P98DDMYaIfwBpnQpglML8cV6RocSuQjvuWM0OzYcIRwMvh~myUo54~St8W5eTWT1xoJyXe4LvKhcPMUef0WlQBTrC2QjZJM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_br&type=PROGRAM&Expires=1475159539&Signature=Bsh478aFYb0q3qfvwY4Zg985ibZz1OWkx~3ggZ5gwzkTXEA75Gq~8vcTYDAMfR3RKit6DNrUHHOJ2TOzPEAhnKmBpnlGZ1P2ACrX-6iLJA9NNujHyX~LHpmQwCfbh2ay61PleH~6xDKS3E1l5Gw3Ga1XigDCWSb-FEeOHIM-BpY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_en&type=PROGRAM&Expires=1460779257&Signature=XyO3jk32DgClvQ28Yl5hIcthwiIZdfNuarVM2xusrJ96SACs6OoMmRrUDLwv09lnid01rIJl3chJrCy3laChKdsiOEyGMZ0d0wp9GEzAGx-5LYSNZThB9jCQ55Tr~ntH0Csakn16olAZrCpDGfRnU6HUawbKrMoePlOggdvTu9k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://global-shared-files-lw.softonic.com/641/701/.../AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_fr&type=PROGRAM&Expires=1462767467&Signature=gsceBLQ1kjOltqRN~QdrzyfsDz6LGv9rVpbNtaQWOGybo710uJISSK~EZbiKdYch7YpUJ9PPXr5D5T3O14e0dwMCV6Qy09mJ1Y4NohPot19aHqUO6HxjjxhBNqkkJk1KQMpxKLdjaMhpBLu7prYFAHqkx5oil4OBMVAxK~iOVnc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://www.creamsoft.com/download-avsimageconverter.html

http://files.downloadnow.com/s/software/14/41/55/.../AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_br&type=PROGRAM&Expires=1452840534&Signature=B9QjsIAL3gmYZqIGa6onM3RZTh71xhs5AV3maeP36MsN~t4I7fEOQz9xiHpGlh~8UtmyxuSY7c0lSALaN-Ib0aTcLo26luTugl7Wx0D3YKAAir685Z1Km8Dquhiv91-nMqaigTLVC4Bxo6vqaSdwGy8bNYy9RwnsVYi-8tZGbcc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_it&type=PROGRAM&Expires=1454404829&Signature=ggii5Wx7k1o7kcvaXCo~dR52OjuGwoXxZNpjgKf2IFHqRDdxMmI3b~PRYgVxROT0jQWBDZfzeKL30puvA3B6a6MGZtdHaXg5Izt9SoIZYQX-d2DMG5zfZTeiTtrBQx1-soF3olRGtO7KhTjZbWEp5THKLf9ewWJI96Ia8tC8WTY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_fr&type=PROGRAM&Expires=1445920433&Signature=UIZ3N1CNKyphkGKZhnK0xygxIjzZbv3gJS4x9RxPFDkFuW6ojR5Ep-8YrD3nPtpiCeHVcjtgeo8ClFvF8HZcBNu58daIastrFcQaxk7vnt4SHTJegYI~g17meBMj4s1MBnISz0ZvNQMzVv4GNZrXeKP16Xmsh8HGKs3ArpBz9dU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://www.avs4you.com/.../AVSImageConverter.exe

http://download.regiobizz.de/dlmServer/dlroute.php?pid=0011&userip=193.159.7.46&cache=off&browser=Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/.../537.36&orderid=1389281123.1738^~^&id=8676

http://www.regiobizz.de/.../get_download.php?id=8676

http://download.avs4you.com/.../AVSImageConverter.exe

Scan avsimageconverter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.