» minicadviewer_setup.exe
Overview
Analysis
File Details
Downloads (13)

minicadviewer_setup.exe

Mini CAD Viewer

Ye Yizhou

The application minicadviewer_setup.exe, “Mini CAD Viewer Setup ” by Ye Yizhou has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from fr.softonic.com and multiple other hosts.

File name:

Publisher:

zxt2007.com (signed by Ye Yizhou)

Product:

Mini CAD Viewer

Description:

Mini CAD Viewer Setup

Version:

3.1.7.0

MD5:

27c81dac77fe73aa096b3d70e69105fc

SHA-1:

d7f8d4dc25208e29b9ae8087ef00e4e581359242

SHA-256:

10f5544da37a543029fd36ce8d01b8eb65a5838b0210a0b9841f84c5627cd92e

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/28/2024 8:32:34 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Adware.Bundler.YeYizhou.Installer.Meta (M)

16.7.8.10

File size:

6.5 MB (6,807,352 bytes)

Product version:

3.1.7.0

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\minicadviewer_setup.exe

Digital Signature

Signed by:

Ye Yizhou

Authority:

WoSign CA Limited

Valid from:

9/7/2015 12:00:33 AM

Valid to:

9/7/2016 12:00:33 AM

Subject:

CN=Ye Yizhou, L=Longyou, S=Zhejiang, C=CN

Issuer:

CN=WoSign Class 2 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:

304E7576E2082A9B6E87C0FFCC4B397C

File PE Metadata

Compilation timestamp:

7/16/2015 10:24:20 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:elFrN6TkB/rEMvvLW1UnvN4X64Be5aLK8oLK3qO1IzAMQ8idATq:elFBykB/wMLZNu6RULJD15DOO

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file minicadviewer_setup.exe has been seen being distributed by the following 13 URLs.

http://fr.softonic.com/sads/tracker.php?ev=c&co=BE&sid=4c9a845d0de3c786b3f5d8ec1388f7e7&upv=bf794acb2b6b8a3a1719c91c065a3883&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAAEAFB372B1F1D6F376784372D2EAB30844DBD2301FFA08580CE9FA53876655D239A1E56E2F632CB7ADB19198DB975AE3E6A664F10FB3BE5BFF02B9982AA696EAF1477EF6CA61DE378431419F509DB4380E9F2F92783E216EFC20AF8614B418EEB4140271E4DCE5D25B06213BE2A2A4328D92ED552016FDFF0D254DA1AE66FB2E60F5AE119263D33D302E807C3A2CC069&h=ADCF70FAB85F082508AFBBA8DA0F19DABF4CC4E33B55706FA4A521A23FA792FA&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=GB&sid=c89d5fba33919453cb38e48459e5b4f2&upv=01fa2903728f8e9116f0f243fedc42c7&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA7FE917710277AEF83A648D20D7E66B480130B0FB8F298E4909F4E53830B474E5E7A444C59443372A1B21390EDF189025382A94B888A0FDD41D4B66996DAD36802D4C9AE7E4A64BAC46D5C40FECCE662A6C3FE4FC6407406D312347A88AC620129941024C35EF77C5D5DA954E169A889E3844513BE8FFFA197C57BC0D3074FC0265AED2056CDF84B9DC5A66A327B24E9C&h=A5B02D8F852C81FBFE78148534D52BD7F38B5918EEFD071EAF9854B2E0ED5ED0&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://en.zxt2007.com/.../minicadviewer_setup.exe

http://mini-cad-viewer.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPemSpzydROONygDLMhXLMTlkesa85E2lr2EB4Yvr7k9Qyou0xxSwQrxxdlK6t g/.../gOZNMYacjoDwKye kcmpce8D2eiKHkIBM4=

http://en.softonic.com/sads/tracker.php?ev=c&co=TR&sid=b284893494b205cc23ea20457ebb54c9&upv=6dc20655725839264fc1fb9f5589cd70&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E035CD62360F892383DBDA90F964D6E23D84F6CF4CF114564709E0791D2BD0F8B12EA1A0D9BDF722BE604C4347166C690622F2B9FD2EE9DFD47A41C53025287611D5B8BD8F2194569E0324E6C27A9EAEA6F62071FD6F9EB5502DF6E296343DB9863984DF026A5FC666DF99C130B4A8549B0364D3260D28E47A89655F04387C51F1C04885974B2F6CF1FAF88A65DE8D29342&h=B4E451A05F64D9FCB6ACC707B272CB2E9E519437D23493CF654D3B60AE686CFE&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=AR&sid=b3a7fabf587cd9f9af156c6302659490&upv=9c8e93e1d31cbea8d6deb340fc7ae1a6&z=results&sk=0&abp=1&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA7FE917710277AEF83A648D20D7E66B489C65325446C801DA79DF67D6429FF5038BD9C42E956175EB5E4F8E2560C552B43F01585FD939A6A725AEF1F51578FC3FFFE979D182209A1099F61268774D184046772CFD5C1F710BA9FA646C610B3A7014054F72396FEB412CF6FF4DFF8CF5438A34A13829B7B35C3C07BA9E7847142B8C733388A8FE46247AF770EE9292ACD9B74354C02B82983230A63A7A47892AAB&h=AFADC81571DC86EFDE014F4F2FCCA23D2837B29FF73B4DA564D2B2CAA40972CD&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=AR&sid=d06b0ac50762e32309db2468eb2ec132&upv=0fb1a8609f168572907ed26b2a791823&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA7FE917710277AEF83A648D20D7E66B489C65325446C801DA79DF67D6429FF503DF6AA771DFF098F0D6805BE318DB96C710E9A4666A01691FABB9BC58D9B8918C416DC2EF949F1EB6F8A4D77CC32FB62906FDF494E95EF2F58C70F92693A6A7DBDAB69C9D39C425DD9E7B55BDEE6654F41FC71EAB47E0A9230CEE951D3D821164325A558CA1A375AC0DC4D7F8DDACC6D6469DC19506C166F360ED269BDB23C6A3&h=B6858A38336C4EA3DF05981BF4263643331DC4CFB6A8F6B7309DD8B764E2D974&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://mini-cad-viewer.it.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPemSpzydROONygDLMhXLMTlkesa85E2lr2EB4Yvr7k9Qyou0xxSwQrxxdlK6t g/.../gOZNMYacjoDwKye kcmpce8D2eiKHkIBM4=

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=ba4e5da3be03dd6a6918a56c8e606c44&upv=0750f1a3cab3f332be949439f3c1e6ad&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA7FE917710277AEF83A648D20D7E66B489C65325446C801DA79DF67D6429FF503AF445E43C2F63881390E918EC72F950FAE10DB61D771C07B0006DA53DCA16B7B047E36D955B96745D51767F12EB2A4DA80D02DBEE57977B695ED3BE4EE757BF5D3BDEAE87D97A5085E1CF3436B3CF25D19C0E30861A6801675A7A43BF1DEF90AA9242AA75937DF97CFB1B151E6F266A0F935EA98B3C2F7A7EDC6F3D9E49CB805&h=64EEB8F22A38EE10CCAB09920F8E35D562AB271C0778DB8D87EB309261614046&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://mini-cad-viewer.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPemSpzydROONygDLMhXLMTlkesa85E2lr2EB4Yvr7k9Qyou0xxSwQrxxdlK6t g/.../gOZNMYacjoDwKye kcmpce8D2eiKHkIBM4=

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=b6871618cbac0a09b72be91058958ed1&upv=b94ceddd8d510eee480b50e00a3643a9&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA7FE917710277AEF83A648D20D7E66B480130B0FB8F298E4909F4E53830B474E5E7A444C59443372A1B21390EDF1890254B928BC268C246509EB3CF8374A2064187C3E27732220C3B7B947FAEEA029BC0F9086F0A03C1AE965170173D318791A926EB1AD761F60C8D71C4C8A474D875DBAE2F982850F394DDDB6681DCC200721B57FFD7F1A1D1191CFC20BA1C8CEA49F9&h=CBE3200D42C4806C0DF71092DF4D7809F99067315E3585242CB9D6D9BAF399F8&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

http://mini-cad-viewer.softonic.com/.../trmsvRChbxdrflJq3ZIylWswuLEQ49FsUDAE5TMaBGzyH5CpHghDADZqEHluqVriSP86ianBxmuwtV IYr7LbrrTzMizptCR2oAH Rq7itsgOF4ZUNGZwApgdHddQRFNh2Z7nEH39b2ZqyZSOra0lWg=

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=edabbf484f458e07de00659c65297d01&upv=24c88255d27dc39c1e1469bf52be3656&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA7FE917710277AEF83A648D20D7E66B489C65325446C801DA79DF67D6429FF50328BEAA6BA28CA004331CDF5B442120D6A4CB7EFD71D7C5A78E31B6F1605002E6A079C22309F5F661EDF11C2235BC71D6F12CE1832E4F23C6B8FDEE0875514A965E664D636B372BECB958E217ED28ED7F927B172C10C765D7A11C7BCF237AA14ED372DB8E39CA5542AD9F2278B601420528F6ABE59841099172783802B43ED36C&h=A5826BC3A59607258CCC9EB202FE5352A1EEC6DE808378E4EA3A6728D89BEFC0&directdownload=1&f=321344&d=http://en.zxt2007.com/.../minicadviewer_setup.exe

Remove minicadviewer_setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.