draftsight.exe

Win32 Cabinet Self-Extractor

Dassault Systemes

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed by Dassault Systemes)

Product:
Microsoft® Windows® Operating System

Description:
Win32 Cabinet Self-Extractor

Version:
6.00.3790.0 (srv03_rtm.030324-2048)

MD5:
be1e4f6d4d0dea273273566c5955ffed

SHA-1:
2fb28035ddc1c150b40c876c3c3293be1c395ba8

SHA-256:
bd49a0032ce15154721f110f76bd5b2c700464f3643803973013cc97b91aa4ae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 12:05:36 PM UTC  (today)

File size:
63.7 MB (66,745,728 bytes)

Product version:
6.00.3790.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
WEXTRACT.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
4/6/2011 9:00:00 PM

Valid to:
4/6/2014 8:59:59 PM

Subject:
CN=Dassault Systemes, OU=Digital ID Class 3 - Software Validation v2, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Dassault Systemes, L=Velizy, S=Yvelines, C=FR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2F056DFCA7319DA6FF77AF37792BA52B

File PE Metadata
Compilation timestamp:
3/25/2003 4:08:18 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
1572864:0U0A5M4Wa9SZ1+e6lrinSizDnJLuTVbVMZgdS99YTBgn1NT7EsbyD:6uMfa9C6lO5LuZbSZL9uA3T4sbc

Entry address:
0x5D3C

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 5C, 11, 00, 01, 8B, F0, 8A, 06, 3C, 22, 75, 12, 46, 8A, 06, 84, C0, 74, 04, 3C, 22, 75, F5, 80, 3E, 22, 75, 13, EB, 10, 3C, 20, 7E, 0D, 46, 80, 3E, 20, 7F, FA, EB, 05, 3C, 20, 7F, 07, 46, 8A, 06, 84, C0, 75, F5, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 58, 11, 00, 01, F6, 45, E8, 01, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF, 15, 54, 11, 00, 01, 50, E8, 35, FF, FF, FF, 50, FF, 15, 04, 11, 00, 01, CC, 55, 8B, EC, 83, EC, 10, A1, CC, A2, 00, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
36 KB (36,864 bytes)

The file draftsight.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_es&type=PROGRAM&Expires=1440034833&Signature=UVgqKFps9Ycp4VVKb2HSorOnbzcp7cQjFVxwp0Ad5a5d-loXyyC5vz3OFF5~TlKhDZ~klYPw5pkrWtoQ3seXI8Ykgbl4vJjgw48L14ov~gWuekkRhzHDFn5y9wl3wvaWpM4VDbnZmAczv9Hsh-c3xCUBwqy53BMj-OP16QCbqVY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_es&type=PROGRAM&Expires=1448046857&Signature=EMbe08VVE4ZYbcmd1PWmwKDN3juk~GIRqs1x~hFUhX3OKnpySSU6k-wNgRvcL5iQ0jKWV3EjqnwHuUNhfiOl2hUqVcZsjf56TfLhpfed3cPjBtCFCYCwzU~N1UGYHKAPofMpwLK8EazDCekfagwrK4MKnrmDnU~yWVpoFZzBHIA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_br&type=PROGRAM&Expires=1431663616&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=IaC-ijSP~CdGFWgiemcVwqA5cwt1u71zgtwuo~n~fTeOw4qDuEOwqfBS2dWKf~UtYbgZZESLIXAL97TjpHUZrPxHWZE7jx-IJyK8q3hfApE1ijmWMFrDgNcTcwfCba3aRaNnUTfSC03Y5W5eoX3PFpCorEnImqSX6Q8yQIYdR8E_&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_en&type=PROGRAM&Expires=1446720802&Signature=erqW9v7nEwfT1SffESXk~BTFlD2Fz1JHXeXRF1k2bK-a0BsBsHBmPdypF49DojuuwU8cZDWMtUz~X~ETYQVj9RYgUtT41EwMCih7EhUgrb-mc-a6KpLgRe0O2yqhZxnF5X868EGKz7wGyHG7Z6lZjHZFrANOJe-F7rA9fvAKS1M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_br&type=PROGRAM&Expires=1429090896&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=HG60gjr~MQDvyDs8VJ~Zb8DD-Q6yCHbWYClW6ihUpbhiejh2iA9xs8pfdYhnpnsSufApQeDIXIQ4zze9xUK3gUYkdURMGlahaWrUO5QBQ~yNW6764NBl7JJ1FOYViaDynzK0KUcFZlvTLNdhJ0QFoH5x1JbXpevOXWjyWHXah5k_&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_en&type=PROGRAM&Expires=1429817341&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=YQHrLHxjLGz0ptGEq6CCiCOgfOt1dh73neUVVVHTI-vjVQ0pzCmJZgq1MzJgiPDn3aIdecp2EJNyZu2fDJuZJBDQiTyvmZmu16gSr9ljOaMOD2HjlEv6UqO3ef2WranTSEQp3ynglaqFnarYBV2i7M9M8zcF1WsltZOQ-DJM8yw_&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_en&type=PROGRAM&Expires=1441531297&Signature=LnUz3IZZOFO6TKKvstaYWPMRchhTtwVhhvBZHRN9jDDh5Pgh1H8b1ii1mzL6tfEeVqpuT5Tl1xrhbaBDgzg-n6nZBHrjgmNcBM6A1AaC9SuxihiK6O6n0gRQRFXOPWPdWtbxPN6HUzUjOR9Ps9Pgv7LTG8j6GStL53gBM3LdGlA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_es&type=PROGRAM&Expires=1425985437&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=JEkOhps9dZHCWp7x2ScwmljaeuCQJCUC76~2iJH4LG~4W1KhhatuV3tvIxaXhs1C3brE8kGS7m2pxDwY64G4wbSJvdqNaoA8d4GAzmPC3792D5jpVfShBBtA91f8VNbGVJyLUguBQT5m8poenk-E4EJGz0odSw2wZU67F-k~n9w_&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_es&type=PROGRAM&Expires=1441303674&Signature=NI8jRicp~hTKmcP-1Ug7~Hyuua-hv7la1Bj8V0Ie1mrHDoWVbMvsinHhyvjTyjfWldvmRwETBVbV-SHIYXkP4V22vNST8Ol8EdJgA92YGI2eos~Qm4fz-1ktqkhQraYRGxpwbJijE740BxIZxRLWdw7G2sq3PArBW~Bpshy5dl8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_es&type=PROGRAM&Expires=1448348000&Signature=c8x8n8z4h3OClgUrMZQHnM5v~s-wXeS03lh5P5tJV6Akg46ml27~g8CQlkp4eEHqC821XEJsBxWcuHqMxF2cx1B-omByiLWygLvR6oOIZC4OlDCQijYCfQgVUfuGqLpyT9VtvA-L5U~219fZ72TfRJQ~gsso~jnELLZKEgTSd8g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_en&type=PROGRAM&Expires=1422681943&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=J9mQoVVSASIXhEPiiT-LzkS-qdQnfqLOKv7I0c0fBWidHvz5AV0jxVW5J7E7IAxviiOm4x0q1lvrc3vExwLEY2rmYJTXioScwEzfOlcBopQvVfevYWCyzXpmjjqRUfjn3NtRA-KcliC-LiQ41abN9t7WKvGy7o6l87Sxb~-wGHQ_&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_it&type=PROGRAM&Expires=1432696581&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=h3UerKFdfqoJgCYKswUvxsYITcJnrIaQamZbHZIoMiaRnjjkNz-BwqyffCsKH5PbyAOPdZ98HlWY82pchlc6zDbrWqrhCkcCbAq6QV8rQwkkW~BYi6jkt1hz-zICazGENH8IKjWDkoyKDrK~AvlPcep7PGmdJ8wm~rMUvYr78n8_&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_en&type=PROGRAM&Expires=1448706355&Signature=K98fFA71tUU7cKkyj9C8LYWU5L9Cv3bBsfMVtlQ0rvVeRe0~8aveEt1CBAUSJL1ljRmhEquQmsZOx7nDM5yigUeIfuozC08MCgrHGUU43LOj07woaEw3NUp-8cdmyvLkvhDChLyXzV0O4y2wfMxi46M-bYWufdI9taiyTcJPC8s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_en&type=PROGRAM&Expires=1447630096&Signature=Nl8CynrTLRoFOID8PmHGTmBA9baglBUIMvoJzOsr572fLSNkoNvy6KmWDxvyzKcfCz0evWfVK1HN-VWONIxWcdz9bOtwbk3SeY4faARz3bg1srbMrOl2WvZrOhVmYPVA1dZSvmZ9zxB-wHyBehatl7TdOnBUMYPv9-s~x3TuLBI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_it&type=PROGRAM&Expires=1435535700&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fw2eOtEyO5qjijv9w93~cnY8VQk2ZQjI-CA-prgbQK6lSVxxYvHyvX0JGce-xNCT5K1PvyLawbe2akeBdWQp2lq3Wre4zsrv72PIHR6AkosJTfYF3k4yRmeWm4PmbjxJlZsD~h0BG7EAYSRDO1BM3LjeK5s1S4foDOvX6hmsQWo_&filename=DraftSight.exe

http://gsf-cf.softonic.com/2fb/280/.../file?SD_used=0&channel=WEB&fdh=no&id_file=317159&instance=softonic_en&type=PROGRAM&Expires=1427968537&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=T6DuwLvody4NkHf1kNkO8-3dVSxX6sZo6RM5ulY-ahW1T2EyBNkHZf~6rpQuBJaj6Df5XvrzEQAD~XKAed9sHHKiTkm1hGvxwclA0D2PSmSS4LCWw4jPS3Rkee1tkLz0hW4sjf4NG66fxWLe5b1cA2fKIsR3JB~eSAIEz5cZhfA_&filename=DraftSight.exe

Latest 30 of 64 download URLs

Scan draftsight.exe - Powered by Reason Core Security