» absee_setup.exe
Overview
Analysis
File Details
Downloads (16)

absee_setup.exe

ABsee Free Image Viewer

Ye Yizhou

The application absee_setup.exe, “ABsee Free Image Viewer Setup ” by Ye Yizhou has been detected as a potentially unwanted program by 2 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from en.softonic.com and multiple other hosts.

File name:

absee_setup.exe

Publisher:

zxt2007.com (signed by Ye Yizhou)

Product:

ABsee Free Image Viewer

Description:

ABsee Free Image Viewer Setup

Version:

4.0.2

MD5:

d37b5593eacfc3b03897042e9bf81fae

SHA-1:

dbdbf84450ccae9a73f7d5fe1aada1ffef7540df

SHA-256:

7c80b70ec9763e45b74afcf0bc30dddad64777d57dc4cd7c1d6176f22281d7c0

Scanner detections:

2 / 68

Status:

Potentially unwanted

Analysis date:

11/27/2024 4:57:31 AM UTC (today)

Scan engine

Detection

Engine version

AegisLab AV Signature

Packer.W32.Black

2.1.4+

Reason Heuristics

Adware.Bundler.YeYizhou.Installer.Meta (M)

16.7.8.10

File size:

2.1 MB (2,178,064 bytes)

Product version:

4.0.2

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\programs\absee_setup.exe

Digital Signature

Signed by:

Ye Yizhou

Authority:

WoSign CA Limited

Valid from:

9/7/2015 4:00:33 AM

Valid to:

9/7/2016 4:00:33 AM

Subject:

CN=Ye Yizhou, L=Longyou, S=Zhejiang, C=CN

Issuer:

CN=WoSign Class 2 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:

304E7576E2082A9B6E87C0FFCC4B397C

File PE Metadata

Compilation timestamp:

7/16/2015 2:24:20 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:/J9/ZT6QNBQ2Vpg5HY0dN6v7Pv5oKMGeMRal:vdhNHVW40dqv5oATm

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86... 
[+]

Entropy:

7.9668

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file absee_setup.exe has been seen being distributed by the following 16 URLs.

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=9c5d57bf1b5aa46334d08ae8b54cb8d1&upv=f15b942be3edc2eadc55fa8146080012&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B8F0250BA24FBBBA1B6B3852F5F37AB57613E5438CA2BB74A307DB2A5958B40E3C005D686F79B95FD127D02994D9739861C6053185783C8D322D3141F3625989EC1F52F07DD3119666FF1B8C11DC0C0A7AA7CEF47120C4B385832BCDE967A8404FD66A72A0043CC551B42372E5E3FDC11&h=B816FCFE638D62AC941420099F5B6579D0C6E629220B326765EC6FCAC4B46EA9&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=BR&sid=0fc19622d2a84efb940a43bd348a840e&upv=babf329baf650cfa274d2d604ca9a4eb&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B4D73B93074C3571F2107F6A92DA7E7F6819FE7698664379C35F61CD11840F22D725E26B247D1F667A2F4600B07549B2A468FCC4704914EF3D8F0B04E8263CE741F8A9351ABC81FBB232A1EBE18B91FD0B41394E12422290A9A7441F09945B8FFC653EF67DDC422812C00D50C1AA49480&h=1BB6E9961CFC3369D5562C46E171A20820A6D8AC6BB8F01442361E754D47C93F&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=PH&sid=de681f3f1be21018f9d9cef5f3e763f8&upv=fef14b349bf4c48d1a6d02926a36dc83&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B8F0250BA24FBBBA1B6B3852F5F37AB57613E5438CA2BB74A307DB2A5958B40E3D7825B0A4F06162E58A73FE4AE9D12295D40018D11ED89FCF46434972E87C4E2B4BCA8512B5070FFD2F107DB279B1306550A2794DA19566B7156B49F2524E02EFC45D671A26A2A2856C6B130B06AFC85&h=7B37447712FAF2D9AF83222001D5F22A88252326A4DA4B1BAFE3AD1EDE070063&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=TR&sid=11b92aa94fe135307065ebb0f1ea1280&upv=8758d6a3dd7cad3c198a8ec832c0e6e9&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B3BE683F311B3C8C13BE0889845A7CDFA97A37F07512AF25997C2396DB14719E441DDF809AA0A610FFC4A6130D349B7F8DFEBEC20764AF2108DDF41817C9D8F2EB41B5E21AC0A7D33622F82495483C93E02AF540D9CD5B41F5BBA71FE16E7082CD191AFE1BBDD51C69AE32B7747CF558B&h=21FC87232C681AAEA879930D4FB2B461FB2D4B915E80FFC637D408A73E4282DB&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=PH&sid=547966df624ca8ef957fc47277b5fa23&upv=5b9fe4e34a247f7fe0fe8509e05364cf&z=results&sk=0&abp=0&abt=2&eid=SWH-2097EN&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B814992560C985FD3E74F924AEB0C0D7727BAAF33BD412E5D58DF7D285E62443D256DD7464D3BC21FA9990A2C230BBFBFF81A27D2DA0C59B399CA3EC58181883BB2317C5CDA493C6DA54842136FDA502E1372185295951BA17AF918108B9D341198AB324D605E6985E4D070CC67F4893B&h=D9116AFA45565154B1C61BB9A1F44F958350E6BAA020E8D9C5E937121A68989B&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=ID&sid=7429c2c9be11da4bcf9d9b3aed3eaced&upv=348348ac78e4fd968c3b1b0bcc00ecdc&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B814992560C985FD3E74F924AEB0C0D7727BAAF33BD412E5D58DF7D285E62443DB67146C655A532428A8C4364C31F66AAFFCE118129ECE007611EAE7A2D134B3D65BC4904FD403F2C0D6E51B9A83EA6CFF30AC382DDB9F1F4598F31DCCFAD00F90BFBA3ED687FBE2493F4918CFEA3A4BE&h=5A65A583D41DADE91B8381278722AF59CB042F0CB06FD4D0E820CEC980C2B07E&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=b76642a5516eddc6e4708d12f9e18553&upv=de1d6f3230be0b7b625675a3e93def50&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B8F0250BA24FBBBA1B6B3852F5F37AB5788C573828A6388330041DB32FBDD4AAF06F6AA4A19F52A67E465C3DC3FCBB6614CBBC696EB3BA3A8F1321A9635C072F72163EA3B2ACA76D5361C978B5615C2B7F712144CDFA99751E3F816D778E6C4E1288CD641F72FEBBD947863B5D81A1901&h=0E94DB444DE8E0E829ECB91E679D22786EC1B5813B9B5B691E3B1FB926D46D9C&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=acc88510340b118adb4be03affd2775e&upv=ffef7b1fcaef5791d208dc384cdae6e0&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B8F0250BA24FBBBA1B6B3852F5F37AB57794F4B77B91B6EEA261F246484823865D1DEE4E25D67D056393327708C21E54493CD5DC7C35D6825BDD66FB6F9363308E8703E9D03DAE27C485311C577CD8837FC9C9E013489EA6CB22976A675AD67A637789314694488CF0937CB1BE5F63054&h=A345CCE5C447C37176CF123D61038280C3075FE3CF63EB964B9447CC5CCA733C&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=ID&sid=a0a26979790131340ad624acf7bdbc0d&upv=d6554617a81657cfa4e5c885c4a873ad&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B814992560C985FD3E74F924AEB0C0D7727BAAF33BD412E5D58DF7D285E62443DF43DC647084791CAFF070EC6BA0ED79E4DC00708A2A0D65DDB028B7783BC9BE04F73966B786EED72C0D6AD94C7B90D91BD54BAFD239039A94D40A38717CF5455B98005B2C37013425733655D11385F42&h=DB9DB95BBF8585D346E002DB6A38BA31394D8EEAC13DEEBE6A46B249975DE0C8&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=ID&sid=73e3c6f370140d6217e4069430a4a52f&upv=a03e0de8e2197f3503adc56ee38fe145&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B8F0250BA24FBBBA1B6B3852F5F37AB57794F4B77B91B6EEA261F246484823865717716ED6191D9091C9F8CFD55EEF515A812898BFA67A905897BDED636F1C4C4EC544F278B56FCDD706000019D9440D5BE28FFC069510838E621FC9509F6AE30140541C603986C42106C57E0E1CF0F30&h=AF6B70F40CF71489B3FD30B43A0FBE7488972DC317D9BEAE593C2A80181C5C84&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=ID&sid=a364d79c103b2cbf35848596c6b6f9ca&upv=891e1dfa8ee68151d349dd395c17fa1f&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762BAE6CBAEAF914955E4200CDEC3149FA447BE675B9EAC38E81FF3C37AD36232E9DCB766D2916C5018D62119A84D5A1E6A426147ADC10D6400133DB2B375B154F59D11F74B97B02C587FA7CAC77C6FFB09BE090C3780B412E364702DB37BCA89AADAA3A5990D66955772102CA6E1D11FB4A&h=56F8B1FD5952D86AC3F29DE7ABF57F130E3A46397372F691AFC42D87F5CE0C03&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://en.zxt2007.com/.../absee2_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=ID&sid=2cac327ac71fd5d214416fa2416860ac&upv=b465c5f0f1af7be163e74b342009c0ed&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037AB11A0B03B5DB923F4BA22DE9C77B35C0FA3A08532B8FD4F56AA0D838AB762B121DB6C5525BE151918DE8A81B6A1B95F18079569FAFE6F1ABA2F410E7CE4C501BD35051ACF8CD9AB24C5505A42C9B1D801CE40758F2A0B629708AC2681175D9E5A48FCE7EBA048BA5AC85A6F2D28363C0C8FC44CB67ABF0079F2A1EBBDB1B3B8BDEB9DFCB09E3266FC43A3FF105CB50&h=0EB10706EFBC2F9A51A05D4FBC4B9AAA36F0FEFD0790881DB986E3D9FE68AABB&directdownload=1&f=3349000&d=http://en.zxt2007.com/.../absee_setup.exe

http://absee-free-image-viewer.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOLABCJUHMcXeByXKvHXUR6qKdc0V0C1jtNrWBmTxvP/.../JMjGXMq5tFBccAXnarFrlS0OSU35oLSuA1k0kkLaATr1krDrvxs GZdFLSjN9BFhC5S3jfewQdbx4=

http://absee-free-image-viewer.en.softonic.com/download

http://en.zxt2007.com/.../absee_setup.exe

Remove absee_setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.