File scan report
Verdict Safe
Is Images
A validly signed installer that none of the 69 antivirus engines that checked it flagged, whose sandbox activity matched an ordinary application and Windows service installation.
Read the whole reasonShow less
Strong evidence · A verified publisher signature, and no engine flags it.
This installer can be used if it was obtained from the vendor or another trusted source. Keep your security software enabled while installing it.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 69 flagged
- Flagged 0
- No detection 69
- No result 5
- Code signing Shanghai Sixunited Intelligent Technology Co.
- Test run Completed
- First seen 2y ago
Chapter 02
Why we think so
3 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
It carries a valid signature from Shanghai Sixunited Intelligent Technology Co. and has circulated for over two years. In the sandbox it installed an application folder and registered its own Windows service, which is typical installer behaviour.
None of the 69 antivirus engines that checked it flagged the file, and 17 major antivirus engines explicitly reported it clean. The code signature is valid and names Shanghai Sixunited Intelligent Technology Co., although our records hold little history for this publisher. The recorded processes show a standard setup program that unpacks files into Program Files, then installs and starts a service named ImagesShowService. Two direct IP connections were noted, but no host-reputation result is available for them, so they remain unexplained context rather than hostile evidence.
What We Detected
None of the 69 antivirus engines that checked it flagged this installer. Its signature from Shanghai Sixunited Intelligent Technology Co. verifies correctly. The file was first seen more than two years ago and has been submitted by 25 different sources.
Threat Behavior
The sandbox runs showed a standard installer. It extracted program files, including Qt image libraries and runtime DLLs, into its own folder, then used Windows tools to install and start a service named ImagesShowService. Two direct IP connections were recorded, but no host-reputation result is available for them.
What To Do Now
If this software came from the vendor or a source you trust, it can be installed. Keep your antivirus enabled. If you no longer use the application, remove it through Windows' uninstall settings.
Where this verdict could be wrong1 caveat
- The publisher has very little history with us, and no host-reputation result is available for the two direct IP addresses the sandbox recorded.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 69 antivirus engines that checked it flagged the file
- Valid code signature from Shanghai Sixunited Intelligent Technology Co.
- Sandbox activity matched an ordinary installer setting up its own service
- Circulating for more than two years across 25 submitters
- The publisher has very little history in our records
- The installer registers a background Windows service that starts automatically
- Two direct IP connections were recorded without a reputation result
6 sources checked · 5 complete · 1 partial. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 37sandbox rule tags
- 9spawned processes
- 2network contacts
- 40filesystem & mutex artifacts
Includes 37 mapped techniques, every process, file, registry and network entry and 9 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 69 antivirus engines that checked it flag it; signed by Shanghai Sixunited Intelligent Technology Co..
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 partial. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Sep 7, 2026, 1:48 PM UTC
- SHA-256
5e7521c113795c0cab68b4173d16af1ac5a6b220ee79ab6deca139c413b89c52- SHA-1
0c0a7e487ee33822068bd91d00f1035776cbdc69- MD5
8cefb9d3a08faaab21d9187429465a5d
About this file
ImagesShowSetUpOSDV2.4_20231221(4).exe is a Win32 EXE file of 29.4 MB.
- Type and size
- Win32 EXE · 29.4 MB
- Signer
- Shanghai Sixunited Intelligent Technology Co.Valid code signature.
- First seen
- Mar 5, 2024On VirusTotal.
- Submitted by
- 25 distinct sources
- Packer
- None detected
- Entropy
- 8.00 of 8
First scanned Updated
Verdict history
- Suspicious
- Safeafter a re-check of the saved evidence
Ratings change when antivirus engines, our checks or MalwareTips staff learn more about a file.
Includes every engine result (74), 2 matched signature rules, PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is ImagesShowSetUpOSDV2.4_20231221(4).exe safe?
What is ImagesShowSetUpOSDV2.4_20231221(4).exe?
How many antivirus engines detected ImagesShowSetUpOSDV2.4_20231221(4).exe?
Is ImagesShowSetUpOSDV2.4_20231221(4).exe digitally signed?
What is the SHA-256 hash of ImagesShowSetUpOSDV2.4_20231221(4).exe?
Is it safe to run ImagesShowSetUpOSDV2.4_20231221(4).exe?
How up to date is this analysis of ImagesShowSetUpOSDV2.4_20231221(4).exe?
Community
Member reviews and reports for this exact file hash.