» minicadviewer_setup.exe
Overview
Analysis
File Details
Downloads (13)

minicadviewer_setup.exe

Mini CAD Viewer

Ye Yizhou

The application minicadviewer_setup.exe, “Mini CAD Viewer Setup ” by Ye Yizhou has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from files.downloadnow.com and multiple other hosts.

File name:

Publisher:

zxt2007.com (signed by Ye Yizhou)

Product:

Mini CAD Viewer

Description:

Mini CAD Viewer Setup

Version:

3.1.7.0

MD5:

a082f2f3af2f571e4f9dd01c34114a74

SHA-1:

3be480ed4aa6fc0e73962a93509fb4d8d342314d

SHA-256:

9960e5cfd9b315608d0bfd03feebad7e7181dfce9043c98eb4c1736c59513f3a

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

12/28/2024 2:41:10 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Adware.Bundler.YeYizhou.Installer.Meta (M)

16.7.8.10

File size:

6.5 MB (6,809,960 bytes)

Product version:

3.1.7.0

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\minicadviewer_setup.exe

Digital Signature

Signed by:

Ye Yizhou

Authority:

WoSign CA Limited

Valid from:

9/6/2015 10:00:33 PM

Valid to:

9/6/2016 10:00:33 PM

Subject:

CN=Ye Yizhou, L=Longyou, S=Zhejiang, C=CN

Issuer:

CN=WoSign Class 2 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:

304E7576E2082A9B6E87C0FFCC4B397C

File PE Metadata

Compilation timestamp:

7/16/2015 8:24:20 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:YlFrN6TkB/rEMvvLW1UnvN4X64Be5aLK8oLK3qO1IzAMQ8b4dATq:YlFBykB/wMLZNu6RULJD15DC2

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file minicadviewer_setup.exe has been seen being distributed by the following 13 URLs.

http://files.downloadnow.com/s/software/14/73/58/.../minicadviewer_setup.exe

http://nl.softonic.com/sads/tracker.php?ev=c&co=NL&sid=48fbd7c3c23caa174f5041d26fc18ad5&upv=73b4e7a0a2b0f8bb78cc1a97ec9d9649&z=download-cpd&sk=101&abp=0&params=9F10FCF6B2D594C3F61AB784153C18BE3C5DEB78C53A27AC0887304C7DFFBA4BB637C18A573E7CD641478F691529FD5C688072A95E43FE181421722F86C1F4EA05C294AD3288270EEEAD1FEE137822E78DB95F4876C54EFD2A48400937A6BFA7DA73C559230C97C935196F6089D34EA92C40A23508B23590531398256CFD1DACD7C647A1FE4B162FCA08075C748ED045F3C4007ECB29DFC57DB780C6E64BE54A&h=613FCAF984E63ED3774B1396CE609B318F0269C321CEDB4C09A0AF19330FC1F6&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://www.softonic.com.br/sads/tracker.php?ev=c&co=PT&sid=88318e1e17c2ae61447b2b2497235553&upv=cac0d356c9b4b2cd659e92d405b46a37&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAB9D0A325A0C66CC51714148938FC8A6458CD1909AB8AD35767508D05B0657ED1A04947DF3F88E277C7658841D1CE0E6D44B70764F0C4B29EA08973CC74611C667EA74BFBFE695B1D28C51D4D9F748B67A53534C6F466E66A9C0ABCEC4827EEB0D5544C3FA18A82CC9FDA44A55E5FF43E6AD3AD65B71A2AFE58F7A6619442C429034099F534C63B5AE2056067EBC3B03284196BD36AE87D4F7BE2C943FB63645A&h=044BFA22F6F57699B8C00DA45960E999FE591061B017F25D6BA28FE0E3402A74&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup_ad.exe

http://nl.softonic.com/sads/tracker.php?ev=c&co=NL&sid=98e2f00af1ebc794cff7f8f3ff882bbf&upv=74dccb3b1a89a6c14e23ec0906cb53d2&z=download-cpd&sk=99&abp=0&params=9F10FCF6B2D594C3F61AB784153C18BE3C5DEB78C53A27AC0887304C7DFFBA4BB637C18A573E7CD641478F691529FD5C688072A95E43FE181421722F86C1F4EA05C294AD3288270EEEAD1FEE137822E7B1D2979E37643F3DAB1896E5D30B712AEB9B48F68CD77AC76AB79FF633CD5BEC333A3C2E5EB7273C0ED1D958143BDD40B624A946D3511A625EE9A4E4C7C190D38E07191840A7764C157B61966F51D724&h=CFCDABEFAE13C406F601AE686AA09F76E109EB9BD3E44343A40D1E14A49C3864&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=MX&sid=6be1dc6d07af8477c5853f4f1395817d&upv=eaf0391717d9c97ccf3c7a93aa62d43a&z=download-cpd&sk=3199&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA7FE917710277AEF83A648D20D7E66B48DBEEA5E5F5E792EBC6E4E80A656386773FC37119BBC8A448D85CF3C0652603310B5CCBC4D63273C08243BFB00DD2C592D6214AA94ADC0EB6D1DB4097A6012B5570BBC73E12DC2B446A15456A4D5CDDC318B00F66BA283F9EE605CD3280673766044E07FAA820639616A64427FD7026E295D8A0753FC822D2CF765894DE1FEE63&h=995141B54461D76936799996C968CBC78871B98A3D22E24B500B7465993AB2C5&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=78bf38269e91244ee159a4ce26088374&upv=67ce5eba49c846a01a015e2662c3b47e&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA7FE917710277AEF83A648D20D7E66B489C65325446C801DA79DF67D6429FF5036D591047E6DA2BC8E366F06CAB03DCBB60403091CE142BDB7C0520EBF4B24631B05EE7ADEF154FBF90172E9786D0D88EAE70FDDD846291D1161A5E56D150B5DBC8A3E6FB76635B7700330220B0C36BCFA38BFCC0B92DB1487AD564F945B64F3AACB9EC37A0EFFB8BB0741428B0D632F643DDD0ADDFD3FCA0219A8253C512F3B1&h=8130852ECC541EBEB3003039DB79153C14B77DAAF7050342B231D7FCAF491353&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://it.softonic.com/sads/tracker.php?ev=c&co=IT&sid=0449c37f7ccb481facad1e3650fdaee4&upv=c6e8aba43e0458fd394dff1d08e1f439&z=download-cpd&sk=143&abp=0&params=0AD273D27321422AABDECB0441027EAE1B8E3671DA1CDF7C8D7F301DCCDB982A9D04A6B0D932D60032E9281B6F384C2C0370ABE824D452B64020D5D1449F68C05A6E4C53F5ECD941C00F74BB993A8A6AEC7367751DC62A2ABFFE6F7A553E42B3DDF255C69346F8C05651F2C21030794261D8C6A9B9C8C4EA70A07E4EBDEC16A0458FAC93C65DD830206EB97BE558FDF33689171BF0710E535628C25574E5CCCC&h=E3A9F0AAA0C80410B73DC715C024E906272C89D80D200999EC760DE169E7D01E&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://en.zxt2007.com/.../minicadviewer_setup_ad.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=BR&sid=6e22f0cc8548cfca6b124372a464efa2&upv=00d60993e0d849395bd072c5bfd6648a&z=download-cpd&sk=20&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA7FE917710277AEF83A648D20D7E66B48DBEEA5E5F5E792EBC6E4E80A656386773FC37119BBC8A448D85CF3C0652603310B5CCBC4D63273C08243BFB00DD2C592DB98FF80DAAE50EC11066125C62629CE91615F6F8315DEA2F69CC15A077C00026733F757BF4FB95DCCB72E8605AF5B592802BC6AA7ACEB194C84CE3CF5E166DA617400CEA0E4D70BA2A3E4F2A38305AB&h=DA145636C150EC4BB4C92951662467631EA5D60A55906ADFB1C70E2AA2B2072D&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=MX&sid=26246b377249765550cb4b727fdd16a5&upv=0d5c280ee32bbcc5beee7451af93cc29&z=pp_warning&sk=3179&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA7FE917710277AEF83A648D20D7E66B48DBEEA5E5F5E792EBC6E4E80A656386779AD64E0C5AB2E86E7961316C85525BE1A5CD954676A9E431E29172741CD2B74024800072123B04FE707BADADFF900905561F53264033E1A60EECCFD765B2385FD3BCE9A01913A5906BD0FCBA3D48B0F082874039A757A564F8F1C1564D9F7E15414CBCBAB22B3947021D5C22F98C1EB7&h=2E74166F42FEF593112D026D83602B8FF60B3DEA8F3EA03175DA6AA3F22153E2&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://software.thaiware.com/download_url.php?id=11819

http://www.softonic.com/sads/tracker.php?ev=c&co=CL&sid=2dd369605d843684de8d1f3929689abd&upv=e66ad5100a2ff8d5ecb07a2fa7b59eac&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA7FE917710277AEF83A648D20D7E66B489C65325446C801DA79DF67D6429FF503E6781FD96651D2AC542CB2C94DCBBC58888326A055D9C8FAC90DBC6D5C843745006020CFAD32BC18580DEC026C5F28367887CE1C5BB58A254BC0E38462756B6249D23D5D205784C00D3BF06DCE5464E68E9830F37B8C445DDB678D4F3FD8451B8D4792CE238F8EFB2F66556C058AA499AE649106B4B80F94DFECFD7813B9563E&h=66A49177FE9FC274C87600ADF71D8D0B1FAD5164D13E61866DBB11BAD0C5F39F&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://en.zxt2007.com/.../minicadviewer_setup.exe

Remove minicadviewer_setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.