» movietogif_setup.exe
Overview
Analysis
File Details
Downloads (14)

movietogif_setup.exe

Movie To GIF

Ye Yizhou

The application movietogif_setup.exe, “Movie To GIF Setup ” by Ye Yizhou has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from www.softonic.com and multiple other hosts.

File name:

Publisher:

zxt2007.com (signed by Ye Yizhou)

Product:

Movie To GIF

Description:

Movie To GIF Setup

Version:

1.2.4.0

MD5:

c0fbb480a7bf86917b35b0d83254db0a

SHA-1:

263849e961b5676aaea203af981942a2660bf72e

SHA-256:

c0be98dd73641cab42523bd3812d4e9efcc05b35f288c131b2c2245c67fbc49b

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/23/2024 12:34:25 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Adware.Bundler.YeYizhou.Installer.Meta (M)

16.7.8.10

File size:

6.7 MB (6,999,288 bytes)

Product version:

1.2.4.0

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\programs\movietogif_setup.exe

Digital Signature

Signed by:

Ye Yizhou

Authority:

WoSign CA Limited

Valid from:

9/7/2015 10:00:33 AM

Valid to:

9/7/2016 10:00:33 AM

Subject:

CN=Ye Yizhou, L=Longyou, S=Zhejiang, C=CN

Issuer:

CN=WoSign Class 2 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:

304E7576E2082A9B6E87C0FFCC4B397C

File PE Metadata

Compilation timestamp:

7/16/2015 8:24:20 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:r5QzkB5Rw2tQbfmIc75V9ulSeWmOfuIRzKYF:lQOjw22bfSdulSess+

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file movietogif_setup.exe has been seen being distributed by the following 14 URLs.

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=3c73ace64541c888205951152e869d4f&upv=eb345c43ea842ee405ed859bb1f174b0&z=download-cpd&sk=716&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2FCD91441EE13E6B009FC4105A6B464116F0E6E806BD20B75ACEB43CA76097F5214E60C6BDA05E990FE99EC7418EADEDE562F9C45A6CF5DA6194DCAD451C02034BAB2681971C90809858E07A17876B95AB9BFC7C97565BC7B435F574375EA6F2FB938AB302376A04D6C84661C9BDF5F08059AA1A5100B7D4CADF88D52C73E6243&h=41D23AB996648F9F3AD807AAF0FD83BC39511ADA760AE60AB4E26793CAFBC531&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup.exe

http://software.thaiware.com/download_url.php?id=1775

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=27fd9b6b9fc8d6f7c58cb25ea661d3a6&upv=867f713aabd9793ea33bc929406f9d70&z=download-cpd&sk=721&abp=0&params=F39B2A32BFC101987B1458170C278E031176ABDE618A400FC6FF30446D94EAB6F26CC2F4E7E73A3DD168F99D29262AE34DC0B52DB868A077AC41AC8CAEF0BB14B97A8ED977C64A9B59CDF68DD3BF6DC0C6AF9E0688C1FAB29ECA734515A6E9DC20729FA5FAE3A77EF71EC5E9301887E2453A527A6030D22A8B44797F6134A77403C134AE3BDF52A07926D00C1577CAFBA15F6B1A8412F2B8ACA9138ADC57D567&h=4A158BDBDA54BA8A5FD1228E10917E196462911AA3CE23AF03FB20A0BE76FB62&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=ID&sid=e7006525bae59ac23c0704cf9971b0d3&upv=aa422453df9e235f605fb185565ff10c&z=download-cpd&sk=722&abp=0&params=F39B2A32BFC101987B1458170C278E031176ABDE618A400FC6FF30446D94EAB6F26CC2F4E7E73A3DD168F99D29262AE34DC0B52DB868A077AC41AC8CAEF0BB14CD6A3E1C65DA9FE41DA3B44A9A0ACC78CC7CB4BDD74725F1142A596D62F2F2613352C786A428108CCEF9737A39AAB9550568255154562BDA526749F188D543B38A081925FB2DDC1241EE925504FFC873B1BE445ED5FFB27A835F20B6A0DF8F07&h=D934ECCD661DECF2F830A1E54975904B1FE29898E6872A87815678D1FF7B36D8&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=MY&sid=1c228b2bc7b9b4f5e4e1a4756bb6c277&upv=cbd3a5c18c4333bb58f02d5e02b11df5&z=download-cpd&sk=716&abp=0&params=F39B2A32BFC101987B1458170C278E031176ABDE618A400FC6FF30446D94EAB6F26CC2F4E7E73A3DD168F99D29262AE34DC0B52DB868A077AC41AC8CAEF0BB14B97A8ED977C64A9B59CDF68DD3BF6DC02B99664951F0DCAEC3C132AC3E52850370FF6BFAD9938F8FEDDD51B9BB8AC2A580E171C95742969DC5E4068E74D50E7FE8796CF9690A55FE44C396445D5D225A653BA52964078598C6B5528D93801FD6&h=910613031507A05EEDCD6E236AA623D35EEEF572FAE610F990C7978DCE770282&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=AR&sid=47a87717841c9cca0ee03dbeab826ece&upv=4c8a9909a24a2c0f8a3c962bf1d54d84&z=download-cpd&sk=716&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2FCD91441EE13E6B009FC4105A6B464116F0E6E806BD20B75ACEB43CA76097F5214E60C6BDA05E990FE99EC7418EADEDEE929072980A971AF3C1641C93C47F4EE876103D81F128F4120F52BE39C67D50417E41462E1F2E7897F4CFB01B1DCEDDB1EFB53CD558E1127F1BF3A99BCA4354747EEDDFE6F01F71CFA93AD3133902A9E&h=DBA8273377C1D02205BF2DD7934DFB691439DF487F8ACA5904A47C295FC3A36D&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=MY&sid=29c6ff2fad54490d8d6f25f17cad3269&upv=a134684f271eb5ce6319805c6993ce88&z=download-cpd&sk=720&abp=0&params=F39B2A32BFC101987B1458170C278E031176ABDE618A400FC6FF30446D94EAB6F26CC2F4E7E73A3DD168F99D29262AE34DC0B52DB868A077AC41AC8CAEF0BB14CD6A3E1C65DA9FE41DA3B44A9A0ACC78DE3295F46F36C8FC96C7E68B5590E3B92B752D23126FE67F675451FF8E7BD691E296DF81F7720D01F9830ECD89827D50C4B74DD68AF4EF27A3FA6F6D88CCA9EE8329004E56DDC9E1A6A353BDEFE0584A&h=0D205877E5ADE46319EDD5E3EE03FC3FDCE003DCD5B25D05EA92581CAF278D40&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=5517405bcd838fc5dae780c8cc6d7e75&upv=fab9aa7b2ac023c15e7feb0e2fee3b1a&z=download-cpd&sk=722&abp=0&params=F39B2A32BFC101987B1458170C278E031176ABDE618A400FC6FF30446D94EAB6F26CC2F4E7E73A3DD168F99D29262AE34DC0B52DB868A077AC41AC8CAEF0BB14CD6A3E1C65DA9FE41DA3B44A9A0ACC7891EBFA1A165F9278BCDD10AAF78F5F7424A75E40A8866DA427CAC1F90A7D5B754BF158ED7884F7204760309D1DF1610B8F6B82BA6CDD5E88FB943F0B2BEBA851BD816D0C2E875E3117B3C11B02C3B883&h=2A1BBDA33AAA2A2A02C908E0C96EE5EC6FB3A644579EA796D749F47C92D8B6A8&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=AR&sid=4cb37496cff460ae80383adbb01e73c1&upv=473728e24fd1906e0d217587930557a4&z=download-cpd&sk=718&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2FCD91441EE13E6B009FC4105A6B464116F0E6E806BD20B75ACEB43CA76097F525F8CCB91D24DC4A24A3F6137B6008C139B46D07C54C4B1F21A426FC51B4B1B82C954E12564AD7F3F17708D8FA60D95B8CF313F430DE38916EC5A8AA7473FF151BEC8575EB287890A0C96B9F22AF730567C2D7C6B27245ED74E2DECC4980708C1&h=584CBFCD1980011B0EF163351116409F9A240BCB209B90884BEB2E54B2010E61&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=aeba480d4c859a5eac1a27d843ab8fdc&upv=9338f9edf9868ac069aa4b8eb273a68c&z=download-cpd&sk=716&abp=0&params=F39B2A32BFC101987B1458170C278E031176ABDE618A400FC6FF30446D94EAB6F26CC2F4E7E73A3DD168F99D29262AE34DC0B52DB868A077AC41AC8CAEF0BB14CD6A3E1C65DA9FE41DA3B44A9A0ACC781B426B152EB0AAE855F843A9000AF7364B94FFEDF1842F3F3321A4190F2E900B5D0B21FB3B7C5505F64A0DFA4DDDD05512AD60EE03F4820B427C08BEF8A3316D0C5FCA7962AD1C938064DA538E6E4062&h=C00871267DBA3872622EFC9C14C7750990FD4B8703E797134D48425342E7065F&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup.exe

http://movie-to-gif.en.softonic.com/download

http://en.zxt2007.com/.../movietogif_setup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=MY&sid=b7d8600ef1e5205d914575fd46e2487e&upv=0428995c0e97536c1fc63862c54bc7c7&z=download-cpd&sk=716&abp=0&params=F39B2A32BFC101987B1458170C278E031176ABDE618A400FC6FF30446D94EAB6F26CC2F4E7E73A3DD168F99D29262AE34DC0B52DB868A077AC41AC8CAEF0BB14CD6A3E1C65DA9FE41DA3B44A9A0ACC78EB2958F24240C178E9855178A6ED9D614B17B931A7FEBAA850F66951C1AC872BC6F1E4EC096E1D6C3A7CBB738A345FCA91283B8129C9239CCE983048C733F423ABAB409251546ECB235EB7075B3655CE&h=0E186EAF1ED0AC64FCB8D054613DB13A0FDFE046683AF6C6E66E535A0574C676&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=950e75c30652e7fc133804a1c0f37ef6&upv=491ae005bffd0c16023b4daec191bf20&z=pp_warning&sk=706&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2FCD91441EE13E6B009FC4105A6B464110897BDB3D4E22688B3F6168CD2C55D80094514223F6A5CC4CBC6F2E9A614CD1C9EA5DA969E9361EF062A632218DDC591CAE5B6E79094A075D606CEAA61FFCDDDB9F95ADB71D041C4177D649A822781BC55BCC3238186C77E47B9CA929F4FE3E62D4912D0437C0AF46DF95E7B19EE92EC&h=1907A9F77369ABA40A2F0DE6D6C9D5314B98D7E505D06DC330E4F0376254E977&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup.exe

Remove movietogif_setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.