mixxxdjinstaller.exe

Wecan Software

This is the Verti bundle installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application mixxxdjinstaller.exe by Wecan Software has been detected as adware by 29 anti-malware scanners. The program is a setup application that uses the Verti Setup installer. This program installs potentially unwanted software on your PC at the same time as the software you are trying to install, without adequate consent.
Publisher:
Wecan Software  (signed and verified)

Version:
1.0.0.25

MD5:
bb5a8866e316371e940f4d4cbe4ea40e

SHA-1:
c95663fccc7d468826b184e311857d8ecc1d427c

SHA-256:
a60f7484ba296600f8f24a388f9748d19d60fc1141d6c2928009c4c0291ce48c

Scanner detections:
29 / 68

Status:
Adware

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
4/27/2024 2:17:09 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Application.Bundler.OptimumInstaller.W
707

Agnitum Outpost
Riskware.Agent
7.1.1

AhnLab V3 Security
PUP/Win32.OptimumInstaller
2015.01.27

Avira AntiVirus
ADWARE/Adware.Gen7
7.11.205.68

AVG
Wecan
2016.0.3185

Baidu Antivirus
PUA.Win32.Verti
4.0.3.15227

Bitdefender
Application.Bundler.OptimumInstaller.W
1.0.20.290

Bkav FE
W32.HfsAdware
1.3.0.6379

Comodo Security
UnclassifiedMalware
20852

Dr.Web
Adware.Downware.9413
9.0.1.058

ESET NOD32
Win32/Verti (variant)
9.11074

Fortinet FortiGate
Riskware/Verti
2/27/2015

F-Secure
Application.Bundler.OptimumInstaller
11.2015-27-02_6

G Data
Application.Bundler.OptimumInstaller
15.2.24

IKARUS anti.virus
PUA.Verti
t3scan.1.8.6.0

K7 AntiVirus
Trojan
13.192.14755

Malwarebytes
PUP.Optional.WeCan.A
v2015.02.27.10

McAfee
Artemis!BB5A8866E316
5600.6841

MicroWorld eScan
Application.Bundler.OptimumInstaller.W
16.0.0.174

NANO AntiVirus
Riskware.Win32.Downware.dmnqqw
0.30.0.64812

Panda Antivirus
Trj/Genetic.gen
15.02.27.10

Reason Heuristics
PUP.WecanSoftware
15.2.27.22

Sophos
NextUp
4.98

SUPERAntiSpyware
Adware.Rocketful/Variant
10027

Trend Micro House Call
TROJ_GEN.F0C2C00A515
7.2.58

Trend Micro
TROJ_GEN.F0C2C00A515
10.465.27

Vba32 AntiVirus
Downloader.Agent
3.12.26.3

VIPRE Antivirus
Trojan.Win32.Generic
36992

Zillya! Antivirus
Downloader.Agent.Win32.231419
2.0.0.2045

File size:
263.3 KB (269,656 bytes)

Product version:
1.0.0.25

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Verti Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mixxxdjinstaller.exe

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
7/22/2014 8:00:00 PM

Valid to:
7/23/2015 7:59:59 PM

Subject:
CN=Wecan Software, O=Wecan Software, L=Bellevue, S=Washington, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1FD8A9E8CBFDDB2724A69194C505EF77

File PE Metadata
Compilation timestamp:
12/3/2014 3:39:03 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:PP0cyd4eJ6IJGGIUmmB7xnqn1iJIg+apKceXXgr45oSF/U2Um:ed4e6IwGIm6H9apKceXXDoSF/U2Um

Entry address:
0x16D5E0

Entry point:
60, BE, 00, 40, 53, 00, 8D, BE, 00, D0, EC, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 55, B9, 16, 00, 57, 83, C3, 04, 53, 68, DE, 95, 03, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9194  (probably packed)

Code size:
236 KB (241,664 bytes)

Remove mixxxdjinstaller.exe - Powered by Reason Core Security