home

zone.exe

Microsoft Games Setup

Microsoft Corporation

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Games Setup

Description:
Microsoft Games AutoRun/Setup

Version:
1.2001.08.3102

MD5:
18c49a6f28e96e9e4740558835a8454e

SHA-1:
78203f9979d2ffb6d1ed18c0371164c072bc33c6

SHA-256:
da73a01e04a8b338f392d5b421fd88f7bb701ca7829c8a7db6e49f6301e5cba5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 4:34:37 AM UTC  (today)

File size:
26.5 MB (27,761,056 bytes)

Product version:
1.0.0.0

Copyright:
© 1997-2001 Microsoft Corp.

Trademarks:
© Microsoft Corp.

Original file name:
Setup.Exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
3/29/2001 11:27:26 PM

Valid to:
5/29/2002 11:37:26 PM

Subject:
CN=Microsoft Corporation, OU=Copyright (c) 2001 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61062A8D00000000000B

File PE Metadata
Compilation timestamp:
8/31/2001 9:51:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:47jq7TobUIN6kU2BtGTvvXvpUgpPbSWEutRikEw/12e/juGffESWShnLgvZKAoT2:cqMLGTX/uW/AjC12erXWShSZKA+ib

Entry address:
0x4C1A4

Entry point:
55, 8B, EC, 6A, FF, 68, 38, F1, 45, 00, 68, 1C, 00, 45, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 1C, D2, 45, 00, 33, D2, 8A, D4, 89, 15, 24, 5D, 47, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 20, 5D, 47, 00, C1, E1, 08, 03, CA, 89, 0D, 1C, 5D, 47, 00, C1, E8, 10, A3, 18, 5D, 47, 00, 6A, 01, E8, C4, 3C, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, CF, 39, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.9975

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
368 KB (376,832 bytes)

The file zone.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_br&type=PROGRAM&Expires=1485162689&Signature=fYzJ1LoS7VoDZ9ii~mORbnODLGeB5Vq81-mnoR1DAWvYvBBRQa1qcarDZ7Wfv1E6uHdjLiNBCsNO89u0FgrM~DEu4UKZqtqoCwWqNZL8~znTI1jmsRq6tRmbJDyGKIkHKjAV5V0O4cviF4xu-KMwnmtNMklmnspWTSIszp81jAk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://zoo-tycoon.it.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOVuHlFnKIehtZzr1Y1uOJTS7NxTI8nYfe3zN9drOapjSI6F2zthIw1kyOfPtvfeBTT6K27EwylQHfJQdRlW2EXIACDzZzr61cZBo/J7IbI FjRG/axTx6HMftxPOZT4Iajlstqe1mZhck6HHOYiur/.../E 53RwryevyQ==

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_en&type=PROGRAM&Expires=1486017954&Signature=bvI2Rsf~vcu126XoclRla7n6NDMjarca80BSIEGxz7XVTslcwutI8c6u8A~nHUXzWdNsOTz7m47l7C9g4ZQb2MZjTnuAvByg34kplxpzCUOkAAcu~RFmJ5cyxvi~DqaqFkergLSdi~npeJoXXJzeBvGzu-hdolnIvNEoN3YWvx4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://www.towerbitscenter.com/cI8lWZPd61CqrPJMAjZ1gP9QvMfjALaLVQZ50o5byZXIIMdXaK7ZmrsbzG4dErDmhHlaBMxWJrohoZsFW JzbLhzheoJmtGX5SRVhoCKR8KR6BkMoaHi_r4X_XBVTnf2WrdcBB18ACIGA3uhZ87mRAVH hcl9OkDw9fr2P2DtGmYMm 1rx8SD3ZRNRvVfb5R3kbP2Cq8O6cdokN0gEvsN7c giIbnQ==-G1cAAGRyXUxj2_UlP9gAg0MO2GtdEgtYA8fhcy0RU96YokLFpJNXgX7oX5bzK5ZlRv7eZSMiEKOIxVSoKraIaxB4KF0WPzdYvRU=

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_es&type=PROGRAM&Expires=1484724058&Signature=VbhhC6FpQP3fQ1lBfAncV8NZpATrKtSJlzjVUVPEhmqAOnDCUKxkSGMpIMhF4832aaDzk2ZIjUxFrqErNUOmAvZ6-jKeYd3Wv6F71y5Sq5l1lpShsVqTWXNlV~tXkOnGNmpk5DIBZk1ogSv6BcFKYfFlCHXD9XZA9L72JK3e~Kg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_es&type=PROGRAM&Expires=1481433224&Signature=LSeRoASzoTtfvB16y6DoZ3egsV-gKHhq5BRxXYao4x4f-BsVUts4Qabfq2uZbWJqy10eEWuuSxEaafmDVaaOYSVOl8mCPZRd9fzGs8lYEcDpTos6f3lALxYb3Y5KFRvtAom1uBwRXE~JgVEtG2m7RYAX2tUFbDEAu9t8DULzDgY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_fr&type=PROGRAM&Expires=1436405384&Signature=ewLAt1LTCYXfy6INP~uhBWHv13fBMpF~62vs1FWmH~NqIzk9YLz32rFtLYaunSbmkjO4niGaHUScXpP~ZSJPL9GuZPiK0VJvSMxfAM9e0d~IigUsdUjBXuKZKcY3SJZEmrGzqzaYG~MGaWhRB8YxtqkUpEHERFuj8VSWkoaiwqw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_es&type=PROGRAM&Expires=1483457623&Signature=ERPcYqjPGqVZVdOjR9Ncly8FmP8rOls~Qf~JjzznmG-VhaqjRQIxc1XeVwaWPI0tzFmGddFVE~t76uiPO9ssxYWeYjbQUXgb29YxX2AI31A1E01VpICsa4Bu0lK6BujZZFLhV~a1e1XgY0dyqLIsU4IA71-K7kblWXD8Od9nifA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_en&type=PROGRAM&Expires=1478513068&Signature=akdB9XFIEOrJOgOp9FIRhslzpKoXgEc07RuLK91bgTZ5CNj31StxaROb32-kUp2LiUebEeTTP~c1DyE62uBegT2zXwIJ~yCeUPzqIJil4jW49XPtwAUHzOU8Mcivgj~jCVyZpoBqh9SkDCPHDHsfBPA5BT~JnD2RJzCeW~nuj1U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_en&type=PROGRAM&Expires=1477533852&Signature=PPnVf5V1NSQlkLuLrX0l0~F8gKM3FeD35tGSA822WbxT9eX7hfLl2jcsGk5A6BHrkZlMeNGzx0S~yLQdWl4pEKWA2UWc3d6YjK4JUfzBjK-S3oWPzIKEb45e-~LlBbpcMBzzrp9UfBvO~r0QUAKIWf8ZKcxxPwK-8OOLP6EgO6o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_es&type=PROGRAM&Expires=1480922355&Signature=UZw4kA~8n~5aEgLTllKVu1qIzkNpAfnRFDhvZCFpGUMHY0BNwBRbVPkBO6jFBe8lZdARAnKZQG5iJLcnMv2xPRe~bBnNRx6B7giEJhvc8d4wsIEYLjsZbMCQsgqzJhhsEU3pS~gVE9IBTRp3~zWG6NUeQK32pOIPfAzchRbzU4w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_es&type=PROGRAM&Expires=1481609425&Signature=G0d8qdO2WwcdiXYuahDMz-lHfz5Nc2MxgG6mjZxvungK6XcHszvIE7cMh-OLnc0CtIpw3pMY0RhxMmJm5EIV0cZI2x3Plkxv~fg7cEyNsZoz-3N2ueFqNbXAeYWCUxUEygMO1F3X03u4z4k4OI17IogcbNMzjBPbSpUjlvNg1i0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_fr&type=PROGRAM&Expires=1482917311&Signature=LPqs9oSWhwvuRTqFNY-GrQbwUTDVJH4IigkgKDc4xlcpt6oTVu8uxT4oLZKcQ7JqULd3f-UvaFUGr3DlGQcIuscMUrX61LPVNNdkt2yq7TNN1pt-ynSAS5ak~a6VoGNMiOsLojfcpP~p~4DjDqobvfxvl73XJANOvh72z-wUW5k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_en&type=PROGRAM&Expires=1474888671&Signature=Rq5qx~gZIPF5zxG1qVdqgSYgbsys05mm~lY-KvGqMXiivh4uNDIxkTFL3JBxmu1fDhr-5ebz0uZ~O1ZwibeuUlnheZ-raiYS1FDx-KNQ4nS6mOY9OOp4lTqMt0IX95jp3~D4kz4xPOw7-b-emUKRiEkea6NkZtSGBjFcJS3wPlE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_es&type=PROGRAM&Expires=1480989340&Signature=Tom8Rs7rsmxauxFOXTu3021~j0PLiGx6hOuPIL6WSFWLji~-nwuVTGzLhTtkAw73sh0kv01ELVRdp~omRHcU3-vizBKOZeQtKPyy8BUXWXClc5HZjjcUUv5IXc0GXeCMBZUINtQWPilN9-z0W4B7v8aVD~sVeZeXuN8BULiVmSs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_pl&type=PROGRAM&Expires=1449890726&Signature=KRSw98LohGzq~ikLbWzSZH5T8nSLfFtz0XqOf9-eC1cfl~1CjTWmRyPHj4DXPqFo2oDzFKd~rt-E0DyHoRaot69WLbepM05IV8ceZJkjXIZkZ0z9uXWyRIxZmfs9vap-5ZdGUbiE0fN3VtOtUq6~kGUzRhfCCTOrTf5BzIm5cmA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_en&type=PROGRAM&Expires=1481802240&Signature=ivKSCY37~5rI7HiAqiaSN5-oOctgcqCoFP-GhJLbU46wO2RfCrDxCC9O5Akwytl1trsezuxEi9Q~9cTHwh~McqeYuuxKzzTHhEhJDooJ6gGGcHLSoPWdBNWXwRAEIMpPvI9GcfKnV13U4n3ahnXvCOySktuwdIISTkOs5wM0QKI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_fr&type=PROGRAM&Expires=1477970936&Signature=hNXAZM~f1Ik2C1xBUvfViTGv1jjv0yG7Pns-eEm7YbsTBGdhFblmWwZCKyiJXJn~bgPNNvvsU-v1zOLWcmvn5GtX5Rjlwv0jomkF4~Yqc~1LN6afiDkUoyp3M0FrVcApU02Wxh67MaAc7qhVrb-VlgZyLMbLGqtwz9BRgB6nmYo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://www.tamindir.com/indir/MjAxNS0xMi0wMyAyMjoyMjoyNQ==/zoo-tycoon/windows/.../

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_fr&type=PROGRAM&Expires=1482712677&Signature=RqNxCizj2KNDy59EiwjibDdmFbZLXmmo0DQv4CmUSsfuK7FxEd8wOMNDCYCZ0gAJC-LnakiNpgul~zdYlyyHzVFaJnzfbwKed11diCk51EDQG4a2C9eYh~ilw8J2Tz60ojRmOwMgOSuvRbyfaQRVNJ3KR~KGrozREnRIIjFb-Wk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_en&type=PROGRAM&Expires=1462746254&Signature=NYypLMeTiQkseE-eqxjQUWWmqHLDBpmMM7UEp-wqarw3LM6NQXXyptbLrg1z94VYJQSvftCB89IfEg6A2fimAOHINGZ9nhleQ~Iz2EuJMtof-257ja-MtonOGjHXkrbFw1Pjh4m5sC12~caRn0xa2AfItFUSsz~WkHvzwoHb3AE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_es&type=PROGRAM&Expires=1483512808&Signature=DY7wLzH30byj5G3vkzCXmQDyjOOcL5flpNNiiVl3wLdCo0rJk8wRtvsYpuYWIa8s8V48k36~eV3H1F-fjAksxRZkdbXF2uzazRgqhmTDEHTkFlGfp7cLsWiPl8ba0Qp4A4TTqzmyQAYXxSEeVEvDiyHBOC9XiL1C98P7-e1zVBY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_en&type=PROGRAM&Expires=1458013869&Signature=Q~8J-KaKI4i7BSNoZ-37RkTNeXYVoUL596oU-TZBX2dNd6hT2APRYyXgqP4Mq2h2ywMUx78eGrig7g-qsL3Ixvq781QIq-reJ7JrNO1y73rdWxqdAqPSaEWAPGl-ArVJ-6jc-ay09f5-53XVTCNHiLr-t327ln3NN4bWdKNOWJg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_fr&type=PROGRAM&Expires=1484983827&Signature=hEhjlZtZ-5Hzl770EHm~osWiA2G2elwW7lJ05NlqkHBAtT99JbxPRq-M7JYf5ed-LPXPyEpktrdDEwpAWmR0jxnd6dSX0whMaONwZeJSYJtj2ai3Kk1AXQsJAaU5xJY6P8pVkfh~ieDHuj0EptGOV1QK~wHuqGFVJbLs~CnmoR0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_en&type=PROGRAM&Expires=1485749754&Signature=H2~Xu7Q1044QhBEOiFbPN8kjHbrhh0MzawXrewHZsyt7jUTDRDc6OHBhf5Qf3OX38TyemQwSSNMIy1hpDZJInsayW2c~~hQKPdXUdfzG1Tr5MyhfEKGSvK6rn-qvq92pEZMCUFsuacj8oWSSbOrPG5JayG6NMZrOUVU87M3ySuM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_en&type=PROGRAM&Expires=1482644462&Signature=SzXapyHvSvK25YNpK2eQHFDOph0O1HyHb0COKgwCUhzdVv2eZkOq3JJgQVJbDDIeBqMA5uJfYRGazrkNrNUZwZebVCYlomIBEyCu8nvbIvwg19x7OFBIPhFO9RlDe9D4C9tWHwYOmQmGwUHOfnRBLm3i8KZs0KPyF7t-JFwIg~Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_fr&type=PROGRAM&Expires=1485115555&Signature=RMMljANZjDsECdv~7O17i6Km6evZUpW6IqFE8ge16JLEFfOGIE5k2SGnRQEEEJlB4KUMaCAtI5dTAJVh~8oRswn-q~acSVC~Yf87GgCBu5am1gd7NVqZFqhiXvd62LnWzCFqSDdLv1p9MvefNYuZjac2NeApNQFTWyqQK80izLw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_pl&type=PROGRAM&Expires=1478146065&Signature=SWyb35N27IxkH~VOZhQ7rAh1xlyBfQ4K6mvAzKA0G6Z574juhngktNoFLTRb1hZOCM6Suq338Oc5b26gDzBPvv8HDkHrucMYRHVdIVWaHw2jq2kipUq-3eGvA2pnOqzfb2qfvaRUcmbaI0gXfJSHrV7qsgSN1J8~ZVdqfPrnP7s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_en&type=PROGRAM&Expires=1482784366&Signature=NhffavnT9MKagQvE9uWeW0QXYZ3Dmz-lHRN1dhOeFfkwUhJhYBIMFlbTelBjL2EpCyUFOwB-YavmbW7lxLscFJoQnPs98L1ofG~fNoy7drgSeggV~v3GEC9guSHDUFoH0-GjtAuXXkH2eB1fW~-Ujb0Ss4qjkCDHllOQvUVrDjQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

http://gsf-cf.softonic.com/782/03f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17138&instance=softonic_en&type=PROGRAM&Expires=1483923703&Signature=LCPuoAmQOrxwj87I~N4-oCEgv~-d09bNMO~bLD05jXU6hH82GhJO6jdfyPBb3NSeNP4EmwEQAUXJsp~9rVbA6OWnHakWp~19jttJz7c3jPxc8ym3ieIdiEvPBiJn-xWa-OvZovxgRL-LloM-kSfpK0aq6N92dYif5DErJQo2dMA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZooTycoon.exe

Latest 30 of 308 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.