home

imagetopdf_softn.exe

Image To PDF

zxt2007.com

The application imagetopdf_softn.exe, “Image To PDF Setup ” has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from fr.softonic.com and multiple other hosts.
Publisher:
zxt2007.com

Product:
Image To PDF

Description:
Image To PDF Setup

Version:
1.6.0.0

MD5:
5ab19b975c6b790f665f30c7cb143e3c

SHA-1:
ee53dc241350d9d7cb9d47666da8039590e3da01

SHA-256:
5865758f0118b14fbdbb52cc861129bcd1cebf693073b35f7a040a9efa302d07

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
2/25/2025 10:07:34 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Downloader.zxt2007.Installer.Meta (M)
16.7.8.10

Zillya! Antivirus
Trojan.Injector.Win32.326663
2.0.0.2472

File size:
1.4 MB (1,436,242 bytes)

Product version:
1.6.0.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:RGZAZR0RWxUunjQe7CdzYnIqIIKwWEm1JpF8Y48NFlDudw98DU5:RIGUujQe7CF9qfFA8Y90y+C

Entry address:
0x9B34

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 66, 95, FF, FF, E8, 6D, A7, FF, FF, E8, 98, C9, FF, FF, E8, DF, C9, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, EB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, B4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C8, CF, FF, FF, 8B, 55, F0, B8, F4, CD, 40, 00, E8, 17, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, F4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file imagetopdf_softn.exe has been seen being distributed by the following 6 URLs.

http://fr.softonic.com/sads/tracker.php?ev=c&co=BE&sid=379876fd739f9352ae9280dfee041ee1&upv=d23bb10a1f5b537528630369800f0c21&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA3600765A88A1A1A0BC5ACE04B35F63CA588DFC72974F50E440CEDD787720ECDC72ABB6CE1930C886ABD05195E25CECB896CAB6EE298260C4A1B220C4D1D4D3C9D714173D370F873056596B54FB81A038DEBBDD72D1DF2045E6BC3F92049339452726A79AECCB2E0CA031082CA2BB944EC7B3B762101B612A582E7E09D9C06520D0E6C76D72BB23449270D95EC0E21B44&h=F87D1032BB38B2C24CEE55BEF8621823AE436129B9A0B4FAB58F7F17E5F88829&directdownload=1&f=3346679&d=http://en.zxt2007.com/download/.../imagetopdf_softn.exe

http://fr.softonic.com/sads/tracker.php?ev=c&co=BE&sid=51b5f309d5813e52bc40e717d985c2d5&upv=f0f051a7d40cd2a1109ff8dd4485c69d&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA3600765A88A1A1A0BC5ACE04B35F63CA588DFC72974F50E440CEDD787720ECDCD74328D1CB69B815722EB5FB6E94A271BFFB3CC5ADA50A7B1FC179944D339F8E55081D5366882593BC69D8CB5CA61D0D7DC297FC5625A9C549A30C70B3128822B465711A53A5433AC49BE97E615120861EEB097843D81D17BD707003866364E04803A40F554071594EBBF56B4D775EEC&h=C77693200F607EC5B3191AD3F446D49A60B296E0D1DE0979D4CD9F3EF1CB3182&directdownload=1&f=3346679&d=http://en.zxt2007.com/download/.../imagetopdf_softn.exe

http://fr.softonic.com/sads/tracker.php?ev=c&co=FR&upv=47d296edfc17d1107eebeae20745d7d7&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA3600765A88A1A1A0BC5ACE04B35F63CA588DFC72974F50E440CEDD787720ECDC67CF05EBD4253D269F64ED45D90B6D34359DD7A0173AF2BA18BCD0B04EE138614FEFEAC84716DEB88438E4E5AC3290C8A031A5C71514587ECD14DF039B49581C97C2F87B3F150AE3793B94BEF02428B83D90D64ED08423CC2AB29E943A187CFAA6ADB664EE6560C26074EBCC5A66B979&h=DAFD1137ED2D72033DD2FBEBAD9B25D66367CEF25EEF16BD429F35A92F6E1210&directdownload=1&f=3346679&d=http://en.zxt2007.com/download/.../imagetopdf_softn.exe

http://fr.softonic.com/sads/tracker.php?ev=c&co=BE&sid=8f87d44c70b3c2c6696b7d057346ba5c&upv=7d581248b14f28ff7f64778163ca8d5f&z=results&sk=0&abp=1&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA3600765A88A1A1A0BC5ACE04B35F63CA588DFC72974F50E440CEDD787720ECDCAE52D3F4C80F6E770F06BD5148E320C24AF4911CBF3E08A36A34DA63F8DCFA2D669F020576F3D7CB20F2ED7EE69A355C462513386EFBA464802A39B396D3732FDB597DE649BBA49CAEC1B2F33DD4612687C775FDECDCBF0F341151DA6C2FA3048E14010E4215CD29199480616DF0613C&h=B6E956C03E1F26E55CBC9309DB9FCA82E70D5E571B197352F104590D0CD3DED5&directdownload=1&f=3346679&d=http://en.zxt2007.com/download/.../imagetopdf_softn.exe

http://image-to-pdf.softonic.com/descargar

http://fr.softonic.com/sads/tracker.php?ev=c&co=CA&sid=9d244da243947bcc2fe63f07690427cf&upv=591849b782d348fcd0862270f23cf310&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA3600765A88A1A1A0BC5ACE04B35F63CA588DFC72974F50E440CEDD787720ECDCBF6A937BD2ED0D2F70F87823D8117DFB9CCB3711435B2B23313F3EBAF7312D4E309E95E852D4664FF88771F664A9B43F86014A7861EA86BD306213BAEA786F913B87DD512CE237174B7EFC770854E2C67C839F2405D8C2E18808D5BD3CD14E1BDD5609EDD106C627D00752441D4A6B5A&h=0DAEB50D91B3C37088C79B0AB62C73F546F0DB2E24D49D67E0731299471D9299&directdownload=1&f=3346679&d=http://en.zxt2007.com/download/.../imagetopdf_softn.exe

Remove imagetopdf_softn.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.