home

jpegcrops0.7.5b.exe

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Description:
JPEGCrops Setup

MD5:
98f5d6d8d559f93a46c910263fee1bed

SHA-1:
5c72c2d2ea33bc239287324bb800f110f702ef9a

SHA-256:
1b959d055f745501216524d0ffdbfa050433e1ad089a3e80d33f09f8bf5e874f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 4:29:23 PM UTC  (today)

File size:
795.3 KB (814,405 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\jpegcrops0.7.5b.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:7I39doSGV3IVC5ib3CByrKPBQYrhgebVKo0Ld8:76dZKIV5+B7PBHNVbv4e

Entry address:
0x97F0

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, D6, 98, FF, FF, E8, DD, AA, FF, FF, E8, 00, CD, FF, FF, E8, 47, CD, FF, FF, E8, 3E, F3, FF, FF, E8, A5, F4, FF, FF, 33, C0, 55, 68, 9A, 9E, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 50, 9E, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 5A, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C0, D1, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, 87, 99, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file jpegcrops0.7.5b.exe has been seen being distributed by the following 19 URLs.

http://gsf-cf.softonic.com/5c7/2c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64578&instance=softonic_en&type=PROGRAM&Expires=1477240906&Signature=Bpssi8Pf9q3-T636jAOoIQfhopTI7yOeCC77NpaOEixB51wjUiOzXHXMPX9m3Wh~khBEoM3~GBQBK9roqorVSVUBWOHGc0dLqw7YjCznmcfu4rzjZ9OdjpIW-u54~zmri8f9wKPG4NIBqE-UoT05SE6CMqem27F7Q-6qzkiZSNM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=JPEGCrops0.7.5b.exe

http://gsf-cf.softonic.com/5c7/2c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64578&instance=softonic_en&type=PROGRAM&Expires=1444070251&Signature=ebi0ZnrC2POxqEpNZau7FRyHCm13Q8r3G-E2vsQAB5hgcNc0--sNv2f7CanQXnUVL1Uk8jbR30BQh8qx9wbE6qMHY~Xc5ROE9uy8XkrvaLeu-~9m7vaWD0DulpZpoK8bILlwmQ-S5i2~lNuna-lYau3R~XnLZC~dKjQhxNVnZzk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=JPEGCrops0.7.5b.exe

http://jpegcrops.en.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPkyA8Y74Uvmh fTtY7pUIyLLVFzGIioS7lEPo2PUs9Ga5ufDtHblbjGeefUI R7EZNLq6LyrGlFYylH86jq72pD9C3586xm3zaEwAcXDUJXtuaM9Z086tqhaFocBMOoSRONTOjjSFLAJpQdk8FHWJ1VmuwV8Tf9u OrthZYtCOfQ==

http://gsf-cf.softonic.com/5c7/2c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64578&instance=softonic_en&type=PROGRAM&Expires=1483533827&Signature=RdKezvAIPPlZWFxk8~DMsHtHSiB~AkNWWJhqiRUR33DsDBzwes1c5bIfTYJAeBQKoVJPuodZ1Iw4dN2GA7VQCP2qeUJo~QmLcwi~pt3BXZw7BDlhcXU3nyvMxGMtQpFT2aSG4vrMTVBxfAuH3klCcIfzODowXUd92kDs6gAU8bk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=JPEGCrops0.7.5b.exe

http://gsf-cf.softonic.com/5c7/2c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64578&instance=softonic_es&type=PROGRAM&Expires=1473841289&Signature=hyrieiDK78O5WViImo9UCS4~xmdIncgIMgyZ7yeEP6-kuE-8QLVfWMwQWL6UqHNi~PHwu~Ey33l-W4r-Q8qRY6MtIn0I3Q0JraGc-8px2iMqgUz25xMlgjNXRc7T~7qg-b~9ZwoCWQ0~h6t-XTDilnDFDoKyBh98mkR~BkWqrsc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=JPEGCrops0.7.5b.exe

http://www.ekot.dk/programmer/JPEGCrops/.../JPEGCrops0.7.1b.exe.

http://gsf-cf.softonic.com/5c7/2c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64578&instance=softonic_en&type=PROGRAM&Expires=1427012110&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=P115R2s1QGV3Af20luu9HaeVwJPDVma6QnQzP6kUEe~7ieIWn9WaOiPj7yXg0aJviUIS~4epx0hRjl73HO6~3BeOnudXg~NMZzt0gy7X3~tyY3xXTHSNasMJFyu4IuOsHs7lehS~IX4iS~9om5JS5yn4aNMLhoknAzI~8npjCs0_&filename=JPEGCrops0.7.5b.exe

http://gsf-cf.softonic.com/5c7/2c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64578&instance=softonic_en&type=PROGRAM&Expires=1475686437&Signature=Qdk~6O1tGv8IMVwBSa5ksD-u9RdRWWCslPg9W7HUUzrC79MW15NAKf3gEsivYD~cSDUNScVzqwmgbMm0UNtaYMeQ8UfA~n5JBS26CsQRJnsNNoPGo8wk5l5~LecFAojbuOEMOlOnbQjoW9A9o8hyrkEjf0EVKKPLlYq6v90W3jQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=JPEGCrops0.7.5b.exe

http://download.nf.pl/Download/857/JPEGCrops-0-7-5-beta-PL/kadrowanie-jpg-obrot/Pobierz/.../

http://xxx.nazwa.pl/odbitkionline/.../JPEGCrops.exe

http://ekot.dk/programmer/.../JPEGCropsLatest.exe

http://fotohit.com.pl/sites/default/.../JPEGCrops0.7.5b_0.exe

http://gsf-cf.softonic.com/5c7/2c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64578&instance=softonic_en&type=PROGRAM&Expires=1442282922&Signature=ctiPKXdfJNZol87ZEGGm8DyI2GRPCXBzn6XinMVoYdaEPpMiPLC9KX8S~7UYHMoSHEXpOfybZDdOngZANhOw7CN3shyRKR52YbbkANp1aXYAZxiJiIi0LXZC46OMVBQVnOfaO2qChVVkilunPToYL41yoNXuBWJ1khZHGBxyF~o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=JPEGCrops0.7.5b.exe

http://www.programosy.pl/.../pobierz,jpegcrops,4.html

http://gsf-cf.softonic.com/5c7/2c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64578&instance=softonic_en&type=PROGRAM&Expires=1444342446&Signature=AUYVzPs3q3kISZiogBz0W0CfhzkcZOqfNiflUrprZC86AxISspVHCtaGZTuW3KGSaf0I-yHX-4kijBh5EpOi370FN3VDrTE9ARoMiGxoTGCA8rOaeG-IoCXlG29FktnAXPQyM7jFfzUjHTEo7gQal7fFmZK3QZDuAJtG~aHmxX0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=JPEGCrops0.7.5b.exe

http://gsf-cf.softonic.com/5c7/2c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64578&instance=softonic_en&type=PROGRAM&Expires=1449796026&Signature=S-8ldGPBkfojJC49ZdxqW8bOzjXA66TeOqAELFCPsUePbL-q2k2e04nS2eI~3xLCRz7TMOK7cbpDJpCjRUVyQqLqGErK6yXl5izJ40~dtGJCzc5H6YkjCs1Sffy55i6rqBvWAhh64U76bvT9M71DDzt1FmbpTeZ2EHqIGwGbDxw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=JPEGCrops0.7.5b.exe

http://gsf-cf.softonic.com/5c7/2c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64578&instance=softonic_en&type=PROGRAM&Expires=1446215691&Signature=YMJmnj9XZfenXFK5MZ~rpZhZI5Mx5LnOcdlqZDvkrGvc73ojYhItCSZ-eauXr5PYTfv8A4T25E48Rm1lYa-CAFM0Oe0qajb1GLQ~iNC4wXxq6luqCV0T8Au7682C4nTE7FQKppz8TqkV8BN1xtJUxkj7m-zfikCbFJ4~J1e53oU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=JPEGCrops0.7.5b.exe

http://ekot.dk/programmer/JPEGCrops/.../JPEGCrops0.7.5b.exe

http://download.heise.de/software/9c4f879a47a074c54b5b69983f65c168/52d96614/.../jpegcrops0.7.5b.exe

Scan jpegcrops0.7.5b.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.