» invertedimage_setup.exe
Overview
Analysis
File Details
Downloads (12)

invertedimage_setup.exe

Inverted Image

Ye Yizhou

The application invertedimage_setup.exe, “Inverted Image Setup ” by Ye Yizhou has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from www.softonic.com and multiple other hosts.

File name:

Publisher:

zxt2007.com (signed by Ye Yizhou)

Product:

Inverted Image

Description:

Inverted Image Setup

Version:

2.3.9

MD5:

b6c82eb57728dbf9616852ca32abaeaf

SHA-1:

70f61aa3758524df10496f92d2d545d8168f91e1

SHA-256:

5b70edbe6a647792a80efe07965e212915e2abc111c59ffaa5e5d5937ab7dc67

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

12/27/2024 2:53:12 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Adware.Bundler.YeYizhou.Installer.Meta (M)

16.7.8.10

File size:

1.5 MB (1,610,816 bytes)

Product version:

2.3.9

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\invertedimage_setup.exe

Digital Signature

Signed by:

Ye Yizhou

Authority:

WoSign CA Limited

Valid from:

9/7/2015 8:30:33 AM

Valid to:

9/7/2016 8:30:33 AM

Subject:

CN=Ye Yizhou, L=Longyou, S=Zhejiang, C=CN

Issuer:

CN=WoSign Class 2 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:

304E7576E2082A9B6E87C0FFCC4B397C

File PE Metadata

Compilation timestamp:

7/16/2015 6:54:20 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:6Vkv4I+bhqBUj6wEg/7WtVH2Dl2nKMGeMRao:wXbhxew3KtV1ATN

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86... 
[+]

Entropy:

7.9460

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file invertedimage_setup.exe has been seen being distributed by the following 12 URLs.

http://www.softonic.com/sads/tracker.php?ev=c&co=AR&sid=cbe6c57abf01dde83256ec2849fd681e&upv=5e1c447e8045563b69b2c9d0af36364c&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6EF32228744EF29F1D08FE018F3150A851BAA462BD818E5C5705C46432BDD287728172C5B4AD3526F5C8B258FC3E2D1909EDF9C7A4F3ABE52FBFA5FC5990085BA02AECC27ECF97B67214FF84A7EF8EFEB4D34E97F002484D95F4374F3708DAF3BBADAD4096525F1747F1A0DD7D2764B586B5646991C7892D21AA4AFBD3B39112B&h=BF0B49305A5DC25101B9C7976B5C09202DD7C1CB66550DBC459E5A876BF3D32A&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=AR&sid=58fbc6770d4219720321a5e46975a05d&upv=37ee4f1341604180da93e068902fe0ec&z=download-cpd&sk=116&abp=1&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6A2EB914B6A3F0B760E5BCA65E849C22E3CA98DD5D1F7ED5FEC9ACE758265422EB3298FE3057BF58FBEFCEEC64B6BD9AF896D310149CF25A1A47BBDB7A678C3108A0362888A081C10E096187CD1ACBA06F25A9A3AB8D5BE12BE6089D56ADA9015263632BFCFEC892EC0FFF3485CBC1D96196FFA27CBCA54F3479B3510005BF162&h=0E1D337D7FD7438F3512833099DEA670170505E83F5245831DD08B854B022116&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://inverted-image.softonic.com/descargar

http://en.zxt2007.com/.../invertedimage_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=93f16612002ae75003c206b7ec76c1a3&upv=5c0372ed505793664b9ddfa61696ebcd&z=download-cpd&sk=115&abp=0&params=F39B2A32BFC101987B1458170C278E03694B89739CDEB7C9475D0307A07EBCA9ED8C3A3813EA566A88558F03C343A278569A341ABB0DF9CB9F19EE40D484C8E9F986C5460675428E0A11DB77F200F17608DA75AFE91FE07AFEE7861766F496F575BA545A64E9BCD8AF922BCA774EAAEBC090D48002C75CA60665763AA38BBCEA29AF5FDFA005E11495AD380D5A65F9C8E8A014C23CEC5B4483994647554F57C9&h=755A1DA112315452A37F566D6330FC59F35CE761AD38ECABB59073979CC8740B&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=bcba1ad8e8cd463c0fab6cfb762577cf&upv=9798d6c487ffb9774f02405658320f3e&z=download-cpd&sk=117&abp=0&params=F39B2A32BFC101987B1458170C278E03694B89739CDEB7C9475D0307A07EBCA9ED8C3A3813EA566A88558F03C343A278569A341ABB0DF9CB9F19EE40D484C8E9FEC8BC0A7EF83617698A7685D2A8AC32D983CD35B08A074111B96A94709828FB4CD73F0D4C7C2CF6FA0752D9E2562768158E5E7862852DDED8E121F7F737F6F2DA9B763DD69BA56111A8C221F6F609C033719CF5F625AE20CC01892267FA3C59&h=15E260E389FE03A261D1CE4603EEE00EC13CB87A4AB12ECA8AB34141CC21043E&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=AR&sid=8a94e172b4dcbabfda8109167d663089&upv=fdaf0e25ae852e09a4d79b7111b30780&z=download-cpd&sk=121&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6A2EB914B6A3F0B760E5BCA65E849C22E3CA98DD5D1F7ED5FEC9ACE758265422EF4328C6C7166497CA21E6CD4D4969CC6E1AFBDD923945034F97D842D0D769A8E3F52466749DCB832A4947C20DC8CAFCE7E88EBEFDFD7EAECB11864B0E4A3C316630E8B6E386561741D3868ECA413F36253E86284B9484A9D870F81027C72166B&h=F67BE83FC46ACD38FC685E7145CE322E54DD4CE4728EAF6D6FA857ED204F9C24&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=BR&sid=d203c10e5e381221f330ec48fb2b7198&upv=e23912aa82da5310d16a82192f0d3a07&z=download-cpd&sk=116&abp=0&params=F39B2A32BFC101987B1458170C278E03694B89739CDEB7C9475D0307A07EBCA9ED8C3A3813EA566A88558F03C343A278E225AD6687E3954175E79872CA607093FF424810B4DBAAB4489B6C5BA10C56839DC9945DFB57373305746D4728032062C1403A3F3C8CEFCCE4B1FBE9287F7B43750E595D7087A8FC25C4CA2430F3A50067D01E5DC3C3EC6823808071A4A29FD3288C502265D980CAC1FDC7A120FDEE0E&h=C16EA496E55934FB3486FF8709E744CBEC7CEDFF244AAD7A067BA1C1AE45E7F1&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://inverted-image.en.softonic.com/download

http://www.softonic.com/sads/tracker.php?ev=c&co=CL&sid=0fde6a836e4be79d84c31538d5779ae8&upv=dcbfd1e65b806899dc209daffa480c94&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C6EF32228744EF29F1D08FE018F3150A856FE52B7C779846E043F995A149F2BEC9C1C88100580BCD1AC922F50A26D3A82A4E9EC438EA8349C7AA4340D40CD30CE8FE07555E0E52FECE5FC84408E613CB6BBA7FE75F14B041DE57364319C033515C91C40F931AC6B4958083CE5C96F30EC7D4748D725AEFA1EDD9F8584EFDF6694C&h=590C5D0677F5BBB7A3C22703CDECFEAC0A03FC715DBE07D3FBBADBE17707DF69&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=US&sid=d38ab8a1a809f40cfde3820488848053&upv=7d1527ad7e3eb12cb6c30e8fc8479dd1&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA369D08E93DD79E1F46AB27BA8D3310C627F46C114EA24464A2689E356480188C99D0BD6855C89297804EF8BDCFA02CDC08B1D1314C8D7A2482A35FEDB9F96FE1CA70D606D651401A55257CE93735D149A3C79D97574E925CED53195F241830FF054D1C93FE95A72495DEBF34BEB9312055155B6FE14583710B3A54C2874FACCF7B897D2576077BC818677A75B4038614&h=01DD6518D329BD8F3D7EDC22A3B7EF1769694D95C42965395516BAA58CEAF5DC&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=PH&sid=cd67013adacc689b14119ab73adb273d&upv=e901cc688c595913ff4daeedd7c9800c&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E03694B89739CDEB7C9475D0307A07EBCA9385E283FC2F83C6EB8881AAD8085BA2F449A7B5CBC7C6D70157F672078575E96E353A56C357481C30E14FE43749C67B544EA1D047BAAC24A2C2D255419C45501BBA871DF203C8BC26D45C73B32E1089C1BBBD56CE0B8305CB897E166FA86F0684DA0F5F1DDF18479C1B8EF641B12660F8B7705AEF3385C0F02ACFDBF4B69A1F2&h=E238F21219F4D29E64573C118F379AE4D6AE1B731218CAD8D593A02B5380D967&directdownload=1&f=266077&d=http://en.zxt2007.com/.../invertedimage_setup.exe

Remove invertedimage_setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.