invertedimage_setup.exe

Inverted Image

Ye Yizhou

The application invertedimage_setup.exe, “Inverted Image Setup ” by Ye Yizhou has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from www.softonic.com and multiple other hosts.
Publisher:
zxt2007.com   (signed by Ye Yizhou)

Product:
Inverted Image

Description:
Inverted Image Setup

Version:
2.3.9

MD5:
b5e08abe87cd482bb10ed94af82214d1

SHA-1:
3b615b464d04a2dc29d9ddd6199c6b2a73ea716b

SHA-256:
88e1bbb17b62efc9c4b67a746f9f7b071251d1457e0c33411bf9c44087c12c3b

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/28/2024 11:11:49 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Bundler.YeYizhou.Installer.Meta (M)
16.7.8.10

File size:
1.5 MB (1,608,136 bytes)

Product version:
2.3.9

Copyright:
Copyright 2010-2015 zxt2007.com.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\invertedimage_setup.exe

Digital Signature
Signed by:

Authority:
WoSign CA Limited

Valid from:
9/7/2015 10:00:33 AM

Valid to:
9/7/2016 10:00:33 AM

Subject:
CN=Ye Yizhou, L=Longyou, S=Zhejiang, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:
304E7576E2082A9B6E87C0FFCC4B397C

File PE Metadata
Compilation timestamp:
7/16/2015 8:24:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:Z0kv4I+bhqBUj6wEg/7WtVH2Dl2lKMGeMRaN:GXbhxew3KtVXATo

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Entropy:
7.9459

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file invertedimage_setup.exe has been seen being distributed by the following 50 URLs.

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=48390793344991fcd23aa5cde3eaced6&upv=ef11666a93700d45a55c81d8e18f68ac&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6EF32228744EF29F1D08FE018F3150A851BAA462BD818E5C5705C46432BDD287728172C5B4AD3526F5C8B258FC3E2D190C58B40849BA4BD604D5457408D179CFB85BAB5508D5F57ACF8F3CABF87AB561EB30CAE3D9C1150B222161D2E666A4D278AFCCE92B81E5EFB6EA88A1E26E85AD9A792A630BEDA0FB8FADA5E5759966FFC&h=0E4B098C1588F778BC4A51F6CFDB8B2AEB93856BB1440DF095C22DBE4AE45D45&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=dd370d679447b4aa6ad885c42dcccd5e&upv=a791abff1de13246ee8265856d6c5b21&z=results&sk=0&abp=1&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6EF32228744EF29F1D08FE018F3150A851BAA462BD818E5C5705C46432BDD287728172C5B4AD3526F5C8B258FC3E2D19069B0F67FDB5D22A37E901AD88C92660D96C42675C478B35367A2E92364779785C71C750C63E3CDEDCA805FBA6588A33916088EE0DC4318119FDEF0996E27BEC44B64AED5EA76B0AD89FE40A09B6CA914&h=5C481856058E57B8A615493936F849729333C034186BA814A15D22A7D7A912FB&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CL&sid=0a9fe1a1f1e90bdf1e54ebf3f6411d5d&upv=6652c3279b57b9d872d7dc14ce9e1e2c&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6EF32228744EF29F1D08FE018F3150A8563E14B7D991CD119F34933DD954FA89412318D308A1433B10F3B4733599D5F5285D19278FC2847DE4667CDCA777548F3483C5FD53CAE054FACAA205F1CB4E5B8F317DF18EB51AF7F4A60E07D3476D2F63206F4449BFD76A2A52B348569CACFD483830108E4E940B45B16EF4FFFC988A1&h=47F97B17C00796B9B4C21EAE5E10AB9DB7C83FF56F77E44CC1D31F4E2A756686&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=BR&sid=d526e11dcb6b1c8c03c2f1004803adfa&upv=f7375ee9c52ae23d2e86380ddb9f90ab&z=download-cpd&sk=116&abp=0&params=F39B2A32BFC101987B1458170C278E03694B89739CDEB7C9475D0307A07EBCA9ED8C3A3813EA566A88558F03C343A278C2A0F08B9175C446C07CB694AC7BA40770996E9A14CFECAFD1DB3E84D4AE02FE53D49CEFB95701B2B7CEB465BF6A474B336F25678CACADCD5D8E9EDBE7807C8837599EC48731055D086DF71AE5020A7223A1C1CFFD34C89A5AA04FE714900150F9E0C75FBEFE729C7F30477A7EF0C7AA&h=E3AAA576DEAAC664C3A618D11A0C9E91A785AE7C8D3B1A0D01808D92AB70D00F&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=0959480a32a6a13149d8a669089936ab&upv=43da2e8bc4c26ae6b9edc27fa0c68fbe&z=pp_warning&sk=116&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6A2EB914B6A3F0B760E5BCA65E849C22E4A202F27B050DBA81A1AC89B274B441E05CA6CFA91BE337718ECF0AC20044E834F2CAFC41C837A3819BBBC283B38F4ACA7BF5C1A78324881DC3281BA1AC7246008595A8D647B5D5FE0A16B64EB6A584B2F41171CC4F6E935ECD3ED8F16972C8C5E1397D8D41ADE93F048346CDDE18980&h=1E94A49B26C6CB9605F585F2F8DB70AEC03A385113F0F82106286874D95C5120&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=AR&sid=54316058f4647bce377c422b42c71412&upv=8f614577f6a584ca8b7f602c39826192&z=download-cpd&sk=115&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6A2EB914B6A3F0B760E5BCA65E849C22ED4252750AF5E4D6BD5918666FEE780C05BE858303CF820AF0224D04791198696C6E98D90BC1335D31E2E2389EA441864EC9671DD8974F781E67ED131AF85D4FEA09276E4351FF110A44E4661641D06CB4E1CF1E01DE392485C13F6620A55BC01881B98E7CC5BAF23BDD067B982FA7556&h=3ED1F948F473422FCE09776418942ACF15C2B36DDADF7069DCDE8EB45C9EF5A3&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=AR&sid=d9534df3ab8742c911b9a8b7f4b85ca0&upv=e8658f78c543606b2a385a2b11b653c3&z=results&sk=0&abp=1&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6EF32228744EF29F1D08FE018F3150A856B265411146147FC6906C8C9EAA799ABDFE51F19A4A9E283759F81D27AAD6CBD71CE2174E7D10CCBAD67249EEDD6AD0AD3CF966BDD7D93D5C8018716709C393E181C25243168F1B7ECFD5E5FBA543659D43E1951BF02F483A1911E7214548757AE15AFB042FF0EFE098FE41307B5E938&h=2BB03B0BDFE98D4AB720C3FD56EB99E5D04ED7198A6E66887A26B3F51E009440&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CL&sid=15e1b18a0c6bf4af72d58f9383d4ac22&upv=7e3bedbf80053daf554c5452b350dd2c&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6EF32228744EF29F1D08FE018F3150A85DB6B52554CF5AD769E5BF34829899F2AE797BFBC1F25C935A32CE2C7EC41F83D1447F918387610CA5A32AF54E5EAF8C27AC6DF4BF53DFA411B5AE54A9288F41B5491B43FE6E76AEF4B187496F04177B5C9B13C7EE616E1F8F3BA3545FED5212DE2028D6699276FDC4C6FCB29B4049B7E&h=1306CA343EA6D7BDC10EF767BC7A6F4D38D22B59B38F281A4785E392483761E0&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=fc068dce916960995ba0c799063e86de&upv=50c4bac06c9ffc854e90a34b18e002f9&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6EF32228744EF29F1D08FE018F3150A85F1396E70168BFECE4EC3F7389663EFED26F39C0FF1E2A1D2C62786569F506995AAAB1EC8B7742A552FBB75EA52BEADBDBF9C0A9ACA0BA23C4FD20B785BD932EA2833A1A72641D054D68421B3EDCF6591CA7F70612330B449F07419B314369D419FD187A21E0E95E9A98DAC1CA9B268EB&h=A81145301B5DA8E0DDA3BCD1012A730B98F217057F105C82B06BC0201AC588A3&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=732e16d2b5d69f5bca4553d8d02b19ca&upv=25fe1b9a4e8ca5b82989b888ed9e9ff3&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6EF32228744EF29F1D08FE018F3150A851BAA462BD818E5C5705C46432BDD287728172C5B4AD3526F5C8B258FC3E2D1904C1472E11147ED05B1551C3E1090F803CCEE63390CA069423AA046C853549834D529BB8FA8BCA0E28726C3C2E3808C9683F0E5C4A18AEFE02F27345D5C851CFD0703665EF6A591AE94AA6E71D5E0FAE5&h=E16E1006DBB313F0B3B95FEEFE3D098673D1EF287C4964A3DC91196CE2FFA70F&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=US&sid=27b06e7616bf23a899078c93ad8b02a8&upv=11fbdcfcf124551345d06b00475f992b&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C627F46C114EA24464A2689E356480188C530FB08E399F5B5449963B4A28A989A8AEAE4B1545E744A18AA1C6A5A9C4E5DA96B8D4B8BF0BCB3E53F0CEA520CBEB01B57D2625710285914DA09FB2F74830B44C6299DFC5FFD37C8018D62DF483B1248EF5B7B9BEB57F1C8B066D39498FD901CD5AB4B8C9E45D033DAC2556D5C4B0CC&h=1448A0BF400BBB804FAB41B8B9D1B9C71454051DD29A8D509162027B8A8AEF17&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=SE&sid=fabe9716982b8e8e1453fef7af583876&upv=a41cd98e1fd7cfd1a2ac383bca9055a2&z=download-cpd&sk=97&abp=0&params=F39B2A32BFC101987B1458170C278E03694B89739CDEB7C9475D0307A07EBCA9ED8C3A3813EA566A88558F03C343A278E225AD6687E3954175E79872CA607093FF424810B4DBAAB4489B6C5BA10C56836DDE28DCCFE5EDD0A39F67FF22238091F25C67E970CCF06B1EEE17DFDFC0C67FB645730ABA94E95E8BA7C8648648B48E6A99A5DA3BF0D09C5A721A3C08CBD5FDB163D0FCE73B9C9BB6CEABF817ED8A31&h=01EC6D98774D7FDE0E2A6AE171DDE64BA9D63E2B416D1F93DAFFB61515420A0E&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=73e823fd1ee7142de4dd540d95354001&upv=aeff45d791c8c25f9cf255811c39945c&z=results&sk=0&abp=0&abt=5&eid=SWH-2097ES&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C627F46C114EA24464A2689E356480188CE95A762AF1BE2DBE5FAADE085759297817EAE8BB8E4D67D009FDCF5841E38CE29CA13D4DC9E03AE19C8F2465D6697CBA896A3AF38C3B3EAF03E547D5EA7787D8C356DAF33D8E8D55CA2D014D74F934270262440C87182F4867D73D1CCC27FDDECB1B0CC36386945294E2004FB88BF5B8&h=35B6A56B1D0C43F4F2C947F483DE39B5D26ECB73C8B1B147292B41370D54040A&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=61969fb2ff35b914b6b4d2058136b91b&upv=f67c8d1db0b50d19d537e23f7ebf49f8&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E03694B89739CDEB7C9475D0307A07EBCA9385E283FC2F83C6EB8881AAD8085BA2F276C90DE12C800CDF4C01C95C8F52D1E13F19178FA8B5E9D1212B76CDF411441817DCA9539D92490D6BDB9FDDF764A36E6CEF46F04B8372233DFFB426B69D8F066EF5A60ED6887858FA7CCF5F4D34B3510D4C9C636D3E8A3597B19B5B069F9C247D228C9F7C4EC352200303EBFE02706&h=CB39940E542EDB44B56D7CC5DEE564181B5F6C3989ACE1C0B7AA2A9DD9CA0F00&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=7f40237f77b4569f2e8b82bd1925b908&upv=3f6e2c6dea296f693300ecc727bd4fae&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6EF32228744EF29F1D08FE018F3150A850BA0E0F2F7387F021A52287013DA2DB2DC8C10D6E804A7C1A47C8DE5B0938B8BEDD0AA2FB3844463523AC9E26EAABE92F9F24649FE7635FEC3BE2B056E131716BCD0F6236456762AED3497CBD28D83F3730DE0E602E93472CE4040D6B8B37C4CF18597B6C2DF76C205202C37128A4B2E&h=0DE7DA1B1EB6FD52EF1047E49E66FD0A8641BABBB72D082AEE8A605C9E96897F&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=b7b86e2cb4a7a81fbada57ad66460a5d&upv=d4b614f08b9e416887c80c2f78925ff8&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6EF32228744EF29F1D08FE018F3150A851BAA462BD818E5C5705C46432BDD287728172C5B4AD3526F5C8B258FC3E2D190FB27773100E679DA3D79F6F18A6AA8BE00AC93D16A5ADDBB69B0DD7AAF835BCE7D5433AF128F20F1F4E5693107C148D8D6F409F26228C8D5D1A805448B3CA4EE93512E964AA3893831E803EF214FB7C9&h=9832E5E3887E398267D9155589399C3F994F4F5CB4A36EDE9151B5900FAA44D1&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

Latest 30 of 58 download URLs

Remove invertedimage_setup.exe - Powered by Reason Core Security