» absee_setup.exe
Overview
Analysis
File Details
Downloads (7)

absee_setup.exe

ABsee Free Image Viewer

zxt2007.com

The application absee_setup.exe, “ABsee Free Image Viewer Setup ” has been detected as a potentially unwanted program by 2 anti-malware scanners. This is a self-extracting archive and installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from absee-free-image-viewer.en.softonic.com and multiple other hosts.

File name:

absee_setup.exe

Publisher:

zxt2007.com

Product:

ABsee Free Image Viewer

Description:

ABsee Free Image Viewer Setup

Version:

4.0.2

MD5:

0f37a6e83015cd6ce516008fb7f34bdb

SHA-1:

5160f3ce317ad04a3dc8841d0369385dd2160ccf

SHA-256:

07753de5818a61e5bd82d9a24e12eaf006958cff7db4ec4ef143c46189d74291

Scanner detections:

2 / 68

Status:

Potentially unwanted

Analysis date:

11/27/2024 9:34:38 AM UTC (today)

Scan engine

Detection

Engine version

AegisLab AV Signature

Packer.W32.Black

2.1.4+

Reason Heuristics

Adware.Downloader.zxt2007.Installer.Meta (M)

16.7.8.10

File size:

2.1 MB (2,172,885 bytes)

Product version:

4.0.2

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\absee_setup.exe

File PE Metadata

Compilation timestamp:

7/16/2015 8:24:20 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:mJ9/ZT6QNBQ2Vpg5HY0dN6v7Pv5oKMGeMRa7:AdhNHVW40dqv5oATi

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86... 
[+]

Entropy:

7.9668

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file absee_setup.exe has been seen being distributed by the following 7 URLs.

http://absee-free-image-viewer.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOwqNtVyBU9aGYixY/iNIyoeSDWNieMJyZIYt yUUVa9v97q3shOvzbec BKqS8LIh6/LtaMbcxFpQQto4jeJ9ADK13jaseabSAl8j6T86c3NT/aAlRffXbJMzXh CItfhLwAjAfiQwOn7BqfKIxD2uTfBOhsctEyI5rKLPgksoy47PKvlld4apk sIyQdli98MctrDcUv4zypph XnxrURs4nk1YwI2CHdpgOTQodxeZxgZciF1TNYfQ2b4HG2qAC5SBWL7 eE873FiJ1hc 0H3CI/fvcEATF7smB p5qJPguRQoEHZJ AgmVIzl5ONTgCbe VRNMIwbaRWiPpD/5y2 /w0Xyhho77OPzFjMXPKLri0tQiZiK9VpBZKPjGTNNgkreL6fSsOjzSTjqtUSxqRBVplkdanAI7rw1VPVmxzAm1rRHlRU5hqTdc1nBETX/qVj YJzKFphwWtjCfHcc/5mgq/fC8dNzq/ 5vpAHJTYu8/.../z6u4qfHEc8qd4iKBWgLbCs UL4X7TpZlvWnDB9pA D6gYwWgbepH8aFV8QTtZWskolrOCJ7tUSwXGjseQaWZgujkqHFAVaKzLBG20NWPBubQtVaNuHpklr05M=

http://absee-free-image-viewer.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOwqNtVyBU9aGYixY/iNIyoeSDWNieMJyZIYt yUUVa9v97q3shOvzbec BKqS8LIh6/LtaMbcxFpQQto4jeJ9ADK13jaseabSAl8j6T86c3NT/aAlRffXbJMzXh CItfhLwAjAfiQwOn7BqfKIxD2uTfBOhsctEyI5rKLPgksoy47PKvlld4apk sIyQdli98MctrDcUv4zypph XnxrURs4nk1YwI2CHdpgOTQodxeZxgZciF1TNYfQ2b4HG2qADNX4hGla3L30Bn8rx2zjq8CSqImldxxYj FLJi7mIGD/j6I94AqEKk7O aYklb7kgns4iQGer3bvGrkHIG2Lqmco8EHXne73cAnTTBLyQmmZU6GbhqteT2Ovigcb1YlubICYjZpbE6PkautApslX7e0 tZ/r4YvgK2CXgKXAnAt6r4vHLzw4AMfuLGVZq/quIK9ON6ke8fYLaQCaUk5gG/UxudJgrIGWLAsEUPgH6IELtfjr47Vj A50ihAT/.../GhWJSWXwiRDB9pA D6gYwWgbepH8aFV8QTtZWskolrOCJ7tUSwXGjseQaWZgujkqHFAVaKzLBG20NWPBubQtVaNuHpklr05M=

http://absee-free-image-viewer.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOwqNtVyBU9aGYixY/iNIyoeSDWNieMJyZIYt yUUVa9v97q3shOvzbec BKqS8LIh6/LtaMbcxFpQQto4jeJ9ADK13jaseabSAl8j6T86c3NT/aAlRffXbJMzXh CItfhLwAjAfiQwOn7BqfKIxD2uTfBOhsctEyI5rKLPgksoy47PKvlld4apk sIyQdli98MctrDcUv4zypph XnxrURs4nk1YwI2CHdpgOTQodxeZxgZciF1TNYfQ2b4HG2qACFd8/G4Fx2KRxLHCmMJWwCVzhHQmdvmgf1uTI4LpLot EwZYCNxUzZYwLTp//yA4pOT0NJHXKoN1s8AYif2gSwYPtfJK3gdKqh3gVitHYbT0ONAvyFRun40S qHRQaufcC//8VcYpgwE5kg5RCFeBmDHUZ9QPnL9N H4NIzkh94iWPScych0DKywC2z1lPK7UF8jQLaOFLyjp7cS 7nKOUGMlwyou1PidiuNi7/RW1XIerhTCfaFtjNvsQSHLgSwyl/.../37XZ6SzGlfjB9pA D6gYwWgbepH8aFV8QTtZWskolrOCJ7tUSwXGjseQaWZgujkqHFAVaKzLBG20NWPBubQtVaNuHpklr05M=

http://absee-free-image-viewer.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOwqNtVyBU9aGYixY/iNIyoeSDWNieMJyZIYt yUUVa9v97q3shOvzbec BKqS8LIh6/LtaMbcxFpQQto4jeJ9ADK13jaseabSAl8j6T86c3NT/aAlRffXbJMzXh CItfhLwAjAfiQwOn7BqfKIxD2uTfBOhsctEyI5rKLPgksoy47PKvlld4apk sIyQdli98MctrDcUv4zypph XnxrURs4nk1YwI2CHdpgOTQodxeZxgZciF1TNYfQ2b4HG2qADZrmQeGMhLwGD385/AMtJGF7JZqbdvlzhYE6T67JIWRaLuuXf RVfo12SGGyLQ qehX7vDjqWWFIIg7pjT2eqjQ1Y1Mbk1dk9YInRhHYJ56tv8Ckt7BP6gvwX30hrmKWOqtcdtCPNgEgct4cPgfxFdKAYtFO6/5aiqTUcy1MyYCyvOF2mrdx/EGKEQ/9tXlAagVyTAS1J1hmM3whbZ8AqkLJ/.../44 OJF6B06ebFT3mSLRAmyZXCQvE8S7DmlDFKioaU8V T0TlZ9FXvnCW HDm5c7qIjhyT44jB9pA D6gYwWgbepH8aFV8QTtZWskolrOCJ7tUSwXGjseQaWZgujkqHFAVaKzLBG20NWPBubQtVaNuHpklr05M=

http://gsf-cf.softonic.com/516/0f3/.../absee_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=ID&sid=f4c4e27702f3d25f55232c279660e632&upv=7c43b860f238d0bf304f139f4cdc2849&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B3BE683F311B3C8C13BE0889845A7CDFAF84840AFBC7A172044BD34E8E948BB0C92818766DA6F3DF49A5401ECCC9D5CE7A7102B0EFFB8849AAE79941C0B21BB0B0FE1770A41F9CE4F8E95EF0752CDBF17EE33118DD619DBAF76DCF62264DBD3D6D30668B9E3FD8D27BAC5E29EB95C7265&h=37DC8C84B8D4431C7F2B4FA46D84F8AF8CF4A13AAE2124CE9AFB7E52AA1E5070&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=PH&sid=f6f3675eb0ed255fde6176375fbe9bb9&upv=308adeaec069c752f36befa64cf99328&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B04B52786021F2B943C2A75D735E7DC920971F3E1E22AAB199A9D8AE9B2822B1476A96774D93CE6AF82B55D2D1C38C21109D19038B1A8002DA54C5E7EC528B7E84C952BA3F286FCEC96664E4D0026E2ECDE426F0559F450F6873743F0DEB101B1472867468180029171BB65E6C9612257&h=FEE938B1AB71435B9C517A06541F215A725A241E7298F317C4AF11A56515B349&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

Remove absee_setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.