home

imageconverter_setup.exe

Best Free Image Converter

Ye Yizhou

The application imageconverter_setup.exe, “Best Free Image Converter Setup ” by Ye Yizhou has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from fr.softonic.com and multiple other hosts.
Publisher:
zxt2007.com   (signed by Ye Yizhou)

Product:
Best Free Image Converter

Description:
Best Free Image Converter Setup

Version:
4.9.1

MD5:
418cd1840d132eee72dc461f2da13e00

SHA-1:
89d190675894aab101f123a398edeadbc9fa7679

SHA-256:
4dffb966a1008dee184b2986517ec4244c4f3e14499d8b3314641e9bd4aa9526

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/9/2024 3:39:11 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Bundler.YeYizhou.Installer.Meta (M)
16.7.8.10

File size:
2.1 MB (2,154,888 bytes)

Product version:
4.9.1

Copyright:
Copyright 2009-2015 ZXT2007.com.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\programs\imageconverter_setup.exe

Digital Signature
Signed by:
Ye Yizhou

Authority:
WoSign CA Limited

Valid from:
9/7/2015 10:00:33 AM

Valid to:
9/7/2016 10:00:33 AM

Subject:
CN=Ye Yizhou, L=Longyou, S=Zhejiang, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:
304E7576E2082A9B6E87C0FFCC4B397C

File PE Metadata
Compilation timestamp:
7/16/2015 8:24:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:Lwt/RQB09RTFEAu3SxURonmTifS0PnKphpGbfoqePkvKMGeMRaB:80QQAu3HWywS0fAhpG0nPuAT0

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file imageconverter_setup.exe has been seen being distributed by the following 6 URLs.

http://fr.softonic.com/sads/tracker.php?ev=c&co=BE&sid=7e98f1118e4b1bfa45ed490304f4a2b7&upv=3c1b7f32c1f0a6750600dc0f5e708fc0&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA272E24B5BEA2153FF67E879C5DAE087EF9EC4ECE53ACB8B5E2D42C5B0A88617D8272BAD620C3297C4BB5752C9ED8AC1271D15DC91E0B7915198F55F7C8E0265839AD067D27D1A8B1C5C27AEE42735CB2DDEB8DDABDF8046D14D6FD0B8A0A4F88201BE1C8BB22706EB3868FFE94B1548656B29DF800CC73BC2FB6BD4F0B761CFCDBE68779764B3520E068C34E0D94F7E2&h=E701EFE2978BC3DED6EDDAC5399A90B2AD9C15D505559E1C5C46DDE0CEAA984C&directdownload=1&f=329910&d=http://en.zxt2007.com/.../imageconverter_setup_a.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=PL&sid=2d1d88a3d4f4301dbd93d8be492f8417&upv=b482511230e06634eaa7aff6ae480b86&z=results&sk=0&abp=1&params=F39B2A32BFC101987B1458170C278E036A7429FC97A687EEDC1ACB4A47341C011790242883FC805AB1802CC7110313A5454ED680D5572D63A7574F142827C9B4E1A213E66122A0A543648BE2F3E2753932B69C39DBDBF8D6A97D3A6E130F72F116D1B699B7F50AC7979564D4C64D7921B387AC9C89E38A247B0B0A805FAC00878C9F899AE59CF76FF6FD6BBBBE5D41BFD3D689D8BC1F036A08EA947F6962EF52&h=C28B9BAFC44F3C3E777C4F2B440310FA7444E464AD1419CF69583F11AC17C3E5&directdownload=1&f=329910&d=http://en.zxt2007.com/.../imageconverter_setup_a.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=1c1698dee5d585dc3cca2a463afc0cf3&upv=e876b7811a463db9d98192c241d4dee3&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA972524DDAA9D211BD74222385D1084E0DCD8FC1B793DFF09EDED59A7C773372425DF7A83D55CE329D0F6C82C05FB0A52F27B11E314F3E06D0633A26D2D517EACD637F8467749C209C1E50C3FA73D7B02B3B2C6F44E98D98A6C87134D8E50C4B323C339BFB35F4B9292634AF4E35F5414E56385D764CB322A0C0F096B291FAB1837BADAABAB8416C93DE89CE58BA7CBCD&h=21E492A44841C2DDA9CC3C6E541DD8EF8F1F0F86F9430F74B572F9860ED1788F&directdownload=1&f=329910&d=http://en.zxt2007.com/.../imageconverter_setup_a.exe

http://best_free_image_converter.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWt0sI8aa3KPl0C9oyM84N0MfBu0Uc p0awMca3IyQxMJtXAzbr/RZdzspphhZGqq5pquXHLfy3hxRYfHvlBh3t/.../FwXGBOToyCWf9c=

http://best_free_image_converter.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPNbFIbvPqwG59DNzhKGKPopOS/16MIOzRwqccoV7ljLrect25BwYv5 8B6DmB31WczN1si2Sv/Xa/.../f5HXfIMWJdE=

http://www.softonic.com/sads/tracker.php?ev=c&co=CL&sid=a91cd5f13b836c4321be36f8f6fe3f7a&upv=852feca60f28d122e03df64896f0addb&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA972524DDAA9D211BD74222385D1084E0DCD8FC1B793DFF09EDED59A7C7733724A09089045B9C6A4C946D45F43DE8C9FF481C88B5F20FA334D6BEE0D3B5E66F7DCA7CB8DD0083BA0F5060BD5E624E91763B4EE236E6D8967F23AA386125EBD0E653607FDB3E4C2AAEB951B5B3569469EB778C35239A82CB2567A3201E4E4C59DA04D12DD2F8263F66E75D6365B0EB6D69&h=51ED551A1554A83F23456E4B9072DB9EE0A4A93D3E10DC0E94C023BC35B3975D&directdownload=1&f=329910&d=http://en.zxt2007.com/.../imageconverter_setup_a.exe

Remove imageconverter_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.