avsimageconverter.exe

AVS Image Converter

Online Media Technologies Ltd.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Online Media Technologies Ltd.   (signed by Online Media Technologies Ltd.)

Product:
AVS Image Converter

Description:
AVS Image Converter Setup

Version:
3.1.1.275

MD5:
70ea867877993ddf9f97c900ef3c9dcc

SHA-1:
641701886e69b62243dd90fa9559c2ff5accfe09

SHA-256:
63117e5408d3f227ff19418d493871742135c7e806a9cd1e8e69dd81f4b827aa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 8:33:21 PM UTC  (today)

File size:
21.6 MB (22,652,744 bytes)

Product version:
3.1.1.275

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\avsimageconverter.exe

Digital Signature
Authority:
Thawte, Inc.

Valid from:
3/25/2013 1:00:00 AM

Valid to:
5/30/2015 1:59:59 AM

Subject:
CN=Online Media Technologies Ltd., O=Online Media Technologies Ltd., L=London, S=London, C=GB

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1EDFD6F0F249457CCDF5AD781E7DA8A8

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:mDKHk6rBFCE/KjQxaC7xB7Z2CsyMaHBIDkDwi/KvCN+6zVFmMtQ3WwoiB3eaf3gY:mArBdyy7DZ2CpHKwZFmeSZJfg0I+

Entry address:
0x9B24

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, A2, 95, FF, FF, E8, A9, A7, FF, FF, E8, D4, C9, FF, FF, E8, 1B, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, DB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 04, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 53, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file avsimageconverter.exe has been seen being distributed by the following 21 URLs.

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_it&type=PROGRAM&Expires=1437878646&Signature=N1jjYaxRO9wOpFs95GpZrRqY~WiCLblMcEotm0wJfSvoZT-xiqjXZH~ZyRYM9rP7~ay9WoFDnkHLoDcwH~nUkX3axehs2XoFQaRVMYuuuATvkIZ7KpxbXURhFtUduqPOuDavsySdwIFcmXy924EHdIWLVFPvgnwCpOCv2ZUoRSI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_it&type=PROGRAM&Expires=1463798825&Signature=E2CRoc8GpA6VtZZFyN8PhSEjBmciYVeH51Fbi1-d1W-TnxEozGB6w-spvfQ6l7xvxDRkrcv~LaMBl5Hzq6~jLQt0EupAgyx5RI6KooZnzJW2vLOa4ZNKGCvyG2hqZ61Ny7OHR1kilBq~gtt2QZLI3tmxxdvrQnNdz8RfdIE6saQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_es&type=PROGRAM&Expires=1474179404&Signature=V5AbSFYdsOvFb52W6uwX1CBAnY83tSQU9UEbYJIDwcBxKvBIQMUke7isk5gLq4Mmx9r7uR7zuX0mGlqMQ3YecO3WCE7ZpNfnpNkUtYhOzgzmv03Z~JQzTKrpEvNiHizfbyqCB1NRhB6fCU4e6XBZUgjEmWTupk1oYVP3w8uiBuQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_fr&type=PROGRAM&Expires=1474711216&Signature=BRHjRg-wa7J3r4qa9GCLWi9sW3xaYCywSe6~-imaC-Qap6AuSfBzbS20UMwqF84WPChrlvZZGskKdzr9XA296TyfMBOX-g1lZsf6U7rwjXHSyQ2Iwswxkv9IcXwznae2PlDaGp2-E5Gpz9m16Oyr5EvBtN0tTkNPduvaBHWTpuA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_br&type=PROGRAM&Expires=1482326101&Signature=fHzFgaxeY4QVg1BrL~3nAGl8ZLwuS2gdWOlkXFnfQeqvRx1371-oClihmnaM4ROl1GRpwcZTQMa0zx2VPrcAuGLWld8xYlyfSD1MgFpq8gDCwX9faRIUGYBF03-4bug0VsAKq2GOzYJ-R2Qj8LIRC4GAVzLGBStKijL6n~rwjMU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_it&type=PROGRAM&Expires=1437072389&Signature=RkjNj6YZTbrkKsMuP~kQtiSteQPz4QLATjjlf6vH~Ap5qcFjER8GHjwXUQjZUhaKVxkH1Te9160dxbHv39CSnc-SspebuyuQKJNtyjx39M5Mv82ao71aJ3OQT1XBgCTgMdQ-PWg1wAz-2ktz8RhPYqks5jU1c1URDf0qL7YwbGY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_fr&type=PROGRAM&Expires=1475310956&Signature=FnD1aWwtralwdNykewZMnI36DZxZLyfcHF0eMJJxaGGWWh8EE9IVp7jDJNNND8F0VyJmGR6cTmk9cwz8cnwsSa90eRxAVZoyULasiPJe5x7UHT9ZgflpyzzVeJwlkfTwwE-ERGb7AZhCApcS-PX2bXnXqi6K2XBvTOD7Jt0TnoY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_en&type=PROGRAM&Expires=1442461075&Signature=Ys~6yp0HwAFvaoLmjr3fANtwEIDQs9TRTM5nJL3YNDqNp0SHBjnYtFUCg5Rt14Ni7RgqaHXNtMx1P98DDMYaIfwBpnQpglML8cV6RocSuQjvuWM0OzYcIRwMvh~myUo54~St8W5eTWT1xoJyXe4LvKhcPMUef0WlQBTrC2QjZJM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

http://gsf-cf.softonic.com/641/701/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94270&instance=softonic_br&type=PROGRAM&Expires=1475159539&Signature=Bsh478aFYb0q3qfvwY4Zg985ibZz1OWkx~3ggZ5gwzkTXEA75Gq~8vcTYDAMfR3RKit6DNrUHHOJ2TOzPEAhnKmBpnlGZ1P2ACrX-6iLJA9NNujHyX~LHpmQwCfbh2ay61PleH~6xDKS3E1l5Gw3Ga1XigDCWSb-FEeOHIM-BpY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVSImageConverter.exe

Scan avsimageconverter.exe - Powered by Reason Core Security