movietogif_setup_a.exe

Movie To GIF

zxt2007.com

The application movietogif_setup_a.exe, “Movie To GIF Setup ” has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from www.softonic.com and multiple other hosts.
Publisher:
zxt2007.com

Product:
Movie To GIF

Description:
Movie To GIF Setup

Version:
1.2.1.0

MD5:
fd84478e01a3e67ed7096fa0e27152b5

SHA-1:
8f9a86f662b8d91b47cd89bd55c4a3f63ee69138

SHA-256:
0914c4fb60553d88be0a3372c0eeceebebd58f60654ce96a5cf304ba5dc2ffd3

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
12/26/2024 6:29:32 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Downloader.zxt2007.Installer.Meta (M)
16.7.8.10

ViRobot
Trojan.Win32.A.Swisyn.6839129[h]
2014.3.20.0

File size:
6.5 MB (6,839,129 bytes)

Product version:
1.2.1.0

Copyright:
Copyright 2014 ZXT2007.com.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\movietogif_setup_a.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:R4pohFMNhgR+FT5tOsQk9jRN2FO6BZ51NPt3ikilJ64HltUJsPMFYaUwnS7i5yBs:6VNh5fTRN2FO6BZBoDJbFtjHxi5yhoLl

Entry address:
0x9B34

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 66, 95, FF, FF, E8, 6D, A7, FF, FF, E8, 98, C9, FF, FF, E8, DF, C9, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, EB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, B4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C8, CF, FF, FF, 8B, 55, F0, B8, F4, CD, 40, 00, E8, 17, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, F4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file movietogif_setup_a.exe has been seen being distributed by the following 12 URLs.

http://www.softonic.com/sads/tracker.php?ev=c&co=CL&sid=fe6d5536530cfdcde60f6ce1b0b2e964&upv=3c7c4e2ff36066775573978ce5e08fe7&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2088D1DDF44A31A8323E94A795DE32EDB9C4360D1985AF2921AAEBA89A3D0431E7F25E44DF2B39D1CB87F514DF99A2F007C64F2C7145D8571CED4AC3797D7D7BA7E1FA9966B920C40A3BDCF9D82FCDEA6C12C6A53E0B466959A101CC5F106C1CDD438C8229477764992EFC85BC57124058B7D54A0837B57CC24139D9E3EB4D6FC&h=97C586ACAC6496AE862ACA3BC0986061F716D19D8C501E4D1EC40A04A0C4550F&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup_a.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=AR&sid=0c6c641562b13de1ad2d353384651c9c&upv=2543c61bdd80d660c2084b2f74dfe4b7&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2088D1DDF44A31A8323E94A795DE32EDB51FF3F93D187231926243FDCF60ADA9F8A8FAF8508E93F32EC87EFB20B97547CE719F62B06C64148F50B1B79BE5688F134446FA9C6F826DCA2EDE10820EC3261576BD925F7EBC29DCF9EDF40EA99E60CF67A60A9FF4204BE7B24A9624B4F45F75A39A74CEA77DBE49D1B82F71AE47C34&h=5E34DE5B02A00ADBFC4AC8AE887004453EE8EFFDD734FA0D7C1FA5649111ACAA&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup_a.exe

http://en.zxt2007.com/.../movietogif_setup_a.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=fba158cc3e6eb51cf3cda30c7988cf30&upv=44a5a8b132676bd94ead5ebfb526ebdc&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2088D1DDF44A31A8323E94A795DE32EDB9C4360D1985AF2921AAEBA89A3D0431E1EB8E7F2C2FBF9B609DA68BD0927D1341112030BE6DF3C14F1350EDAF525DCD684092DD1AAD7D938685448C9A11711EE6DF83F77EB938B3E169FB91CB81D0E5BEAF74A122C414212E9237BF17AD342BCC2864B72058A12540FB7D10183D38CD0&h=923B0CB8437659546F7AFB168ACAE4FF341BF32130ADABA3785F47F653473A2E&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup_a.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=MX&sid=8ccee66e7a1853a5076d96013c89cb27&upv=36d437c4f14c8a1cde2b7159d3f7887c&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2088D1DDF44A31A8323E94A795DE32EDB6CAE19BE9436DCECBFC42C5D1E27274978D9DF65848E43C8C905B23DC7E106D9494BD5427F09679CC2E864850BA98B476BE2C02591519110BF42FA93D64DE7A11AE349E8F07BA02618FF25B6A3B0A73C9B4949D654F488B42CC44311AFC472BD7E66348B371D5E072704A9FE0CCA5BA1&h=05CA393C6B8B09BBCEAF39267F5164AE87E0310691C5F3BDACE2291C3E9629FD&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup_a.exe

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=09b19d29cb535435242aee65f58dc877&upv=9859b5aa0ac3056ad674aec641d5b344&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA6DDFC07E15CA71849BF2BD7E5BEEEA511CE974B5A857C4BBA9504267B733D246979EAC7491146F34201D6145A0293F6C09EBCDAAF354829940566CFFCE8130193F676C31AF844344308536E275F48585F3317A190F1EC89ABAB7D5CCC9667D780328672C02E6E5B5B015885435C2AEC8A4E8DD9E5CCAFA787980C4AD2BAE5E117883C2CF153093EF76747616B5D97278&h=E911181E6005EC26E5A48D035AB710ED4C1B524789840A66E94C17DA3A6B2B88&directdownload=1&f=69688960&d=http://en.zxt2007.com/.../movietogif_setup_a.exe

http://movie-to-gif.softonic.com/descargar

Remove movietogif_setup_a.exe - Powered by Reason Core Security