invertedimage_setup.exe

Inverted Image

Ye Yizhou

The application invertedimage_setup.exe, “Inverted Image Setup ” by Ye Yizhou has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from www.softonic.com and multiple other hosts.
Publisher:
zxt2007.com   (signed by Ye Yizhou)

Product:
Inverted Image

Description:
Inverted Image Setup

Version:
2.3.9

MD5:
51606ca061d8397fb6e4363c91496ec5

SHA-1:
668a065bc689b134a624a1d937795a6648f73663

SHA-256:
72a5ed268e4f6a014641938483bec13c07a4eb7f97729c35bb5228e7473c2386

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
2/25/2025 9:53:49 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Bundler.YeYizhou.Installer.Meta (M)
16.7.8.10

File size:
1.5 MB (1,607,968 bytes)

Product version:
2.3.9

Copyright:
Copyright 2010-2015 zxt2007.com.

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\invertedimage_setup.exe

Digital Signature
Signed by:

Authority:
WoSign CA Limited

Valid from:
9/7/2015 5:00:33 AM

Valid to:
9/7/2016 5:00:33 AM

Subject:
CN=Ye Yizhou, L=Longyou, S=Zhejiang, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:
304E7576E2082A9B6E87C0FFCC4B397C

File PE Metadata
Compilation timestamp:
7/16/2015 3:24:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:NWkv4I+bhqBUj6wEg/7WtVH2Dl2BrKMGeMRau:gXbhxew3KtVPrATT

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file invertedimage_setup.exe has been seen being distributed by the following 34 URLs.

http://www.softonic.com/sads/tracker.php?ev=c&co=US&sid=3a0db202ee47697616f350d1447d41e9&upv=ae88a4a75d26de502dc6863f607b8acb&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C627F46C114EA24464A2689E356480188CB2293F4FC2BFAD02B69D0DE66D980E358529AC7531080E5DD8987ADBF5D2DF5FB5C676F02C1207ACC6097C7E5EC63075E6C8C232238ACCA183F7DAC05553A38CFCB59908236EF8884D4C1233112B3DFA80D6EDB9B9613E09F23E3ABA1818869BAFB5FE6A4EB61495FFD68AE3C1BF60CF&h=768AE06687C990D600AB2C6491FAB1F35BB38EBE35F0C23C58715907146EE431&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=5458f15b206ec91e625f725bf0aff509&upv=6dc4ab5b2601cf3652d25ffc0edc8648&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6EF32228744EF29F1D08FE018F3150A8525DF4200C239CEC384EEDC9F310BAB09A78ED7D1152581963F90D012560C845425AE82030559548CBB562387D0E4A3907DD083BE7C916A22557DE0402E3C9CEBD19DF26B64033881025266426503B093DD5D1E6126F269D0A8FC9EB7A2D0F97955AD9DE053F7D48B17504B4C699AE3DD&h=31629737AB806176DC49FCB2B6FBD55BA40567DA94EE5188C7AE1B6933A76690&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=8444d757f5fc162c9075d785503a0b6a&upv=bbe4afc3fdccba6463c45608e1b49d03&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C627F46C114EA24464A2689E356480188C9E55824AE979377E5BFF415F7055043059ED0EE7DC088AA9EC24F1286F6B20E4809F309D0E96AE33F07E9F2656EAE1F2DFA7D5D57641D54BEA28416E2805A372B05BFE6D5DAF1E0F0FB307118F8D90955E86CB4613543087EE55DEF0E2AF58F34F9D973FE9212399D4BBE75A05722447&h=BFB7A9A7EFF67607988F70474515295980E314470C37A125DA5FB81A861912C9&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=ee78fb6e8c8db91d023c899a280fa799&upv=54c7382735aae5f0458ddf1818c7be10&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C627F46C114EA24464A2689E356480188CB2293F4FC2BFAD02B69D0DE66D980E35CF7EFCDDA33027213DD9A16DAF3124042D79F184AED55BEA17067817BBC3C19DD6CE274013E6EB5245772921AC79E331A525B8BC79A394DD4FBA6714101416788A0F57CB313C7C11FBD5863D6E86F65A29FF2A4DF8F4F3782DE8905A7F2E658F&h=9D4123350E6739382C0E56C3B8B521BC83A0576477A526DD6833C6EF7E7FE9A0&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

Latest 30 of 34 download URLs

Remove invertedimage_setup.exe - Powered by Reason Core Security