home

zumasrevengesetup-en.exe

PopCap Games

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
PopCap Games  (signed and verified)

MD5:
24cdda6ffe45c85a343524e36b676500

SHA-1:
00004920ea24c81628c6cbe2f83acad07875e758

SHA-256:
32f11320fedc929c3f080d01971f1731f601fbf9650d6a75a41854ad85094fbe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:49:11 PM UTC  (today)

File size:
99 MB (103,823,584 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\zumasrevengesetup-en.exe

Digital Signature
Signed by:
PopCap Games

Authority:
VeriSign, Inc.

Valid from:
9/1/2006 8:00:00 AM

Valid to:
9/22/2009 7:59:59 AM

Subject:
CN=PopCap Games, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=PopCap Games, L=Seattle, S=Washington, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3C61DF38D5BB3836A8B44B985C504479

File PE Metadata
Compilation timestamp:
11/8/2008 6:29:36 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3145728:K20OGB2e6VPkC1zS7vRvH2AyhXLcAafp2JYx:DOekC1qp+RoLfl

Entry address:
0x3241B

Entry point:
E8, 24, A2, 00, 00, E9, 16, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A4, 01, 00, 00, 81, F9, 00, 01, 00, 00, 72, 1F, 83, 3D, 88, B0, 45, 00, 00, 74, 16, 57, 56, 83, E7, 0F, 83, E6, 0F, 3B, FE, 5E, 5F, 75, 08, 5E, 5F, 5D, E9, A6, 7F, 00, 00, F7, C7, 03, 00, 00, 00, 75, 15, C1, E9, 02, 83, E2, 03, 83, F9, 08, 72, 2A, F3, A5, FF, 24, 95, A4, 25, 43, 00, 90, 8B, C7, BA, 03, 00, 00, 00...
 
[+]

Entropy:
7.9995  (probably packed)

Code size:
284 KB (290,816 bytes)

The file zumasrevengesetup-en.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1484479443&Signature=DBBu-wU3CsQzymacl277a0m0MFuFaHTLJYRCbPFTu9obpAA39WUxmlo4PPHOU2N6W9vNSi2LlIimXZEZTYUfaEGCci6Qx-pZjRFhqTnFzdKbtLJfSDuV9wk7x3KCTMSDXmS0aPSv77PBsb42Wg3wFDZBl-i3uW7oIsKlAgA9UmE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1425305152&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UtnnQHBl2atSrQDhJWsMvj8cPHIY9H07fAdR2sckf9QDIIL1v2M54-xveuWibajoc73f9Aug02j7jrjZDpglBX3LS1JgF~BnJbPh3nEJBLO924D041Dg9kg0sHAAtQBPGceMiT7WnMtU0HHTL4a8V3SkggFIcEoqyFI116rnyVU_&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1482727614&Signature=WzN8eG-fzVlP99q6~FGNdnixdJ~h~v16mn2ilIOp~2RgT-WHc9Uu6xiOkk-EnFWCiu9XfJzKjDVa-0KFW6WOg5E4X2NuRdyq8T7niHJhKp5TK95Tqobt0S5GrdSgBqvP0DhjoLrrshhwWt1XRlo-UgFQnJC6tS1iNwKKOXA6mh0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_pl&type=PROGRAM&Expires=1485571968&Signature=X5NRp2b0PAlyBwHqQoJ9VZa4kKWQAIOUEkb4CALdkxXHh-Yat77uIgtcGJw~dxPFZMs5ww8kgOFy6TFx-FXLX~0AizqyXhNNrkQmJklO0cZBvkF2SNqtFTz2MN3UhmF2cXdEevEyseRyo~CVKsuLt8WA2FvxGOwQ9ASrEirG0i0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1445745892&Signature=Qty7~C6PR6Rx3T2L90jPVUT5YpddyXgXD8aCZgnriuTcQJNYphx~yj8q6KOeRFDJ5F3YUO5qMvrX61YVvH3E7vr1dIR7-R-bwwldW5uzdkQTKUO62iz4vyWnbtoDqpna-4d2jD11uFymxvLqfMaoNT2da9G9R1Wc2wp3S3GDHd8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1484506501&Signature=blvMpkdBELhlOqm87WZgoHGl1V6PmQ-gjsSAkg1UmYHcsVOJ7njRPewFaWKQIZER5LrobAATLpfqKSzrXJzeuiUOtBBEHpZYK7PGs~DnQqqCMYkJO830AUEc12vGwhYctaEciL3XPGN5MwJZNSDCFm3VIdDSVcOVbuyKwKJnoNs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1480905476&Signature=iwlr38WlV5G4klrYHtecSmb8a8gysITtACNDqmoWeURQz-JLyzFjNrLcX8fF1bAjExDKzV6aXPfwom-wGysgwvIqeeGKvRsTy2BOaoI1tOXkGqsuSQNrw1d8MmAGczfesSPfB2Ck0ejnXmlm3FVrnF2kAnbAraOz8nyRhJwBXZo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1422020711&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UFPyA9vaOr1~g~~A6-22asA2~OTYK2v2-6~U-g-jY1RTIF-u6XLz-rcRVpSRk6dutSapc36gXROPkIKyla4yeWwWz7NYeIzSx9onV9LJ5DUtOeZWAycmdUKErI-sbyRWaLUJU7ps~yDM4j3-hpDop~jCNvjPjWu71ichqCrhWyk_&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1442863363&Signature=dp6sOuz-xusSQO1bZf3iEW7nwjXaD24oufiaR6J1dsRT3dFfE8g7URMuXzipPXiIQhzgEihEYJmjhU6-tzKLV5AGjmGZcJomHrX728d98qpwUw9XLUwq9wu1-QXz~qGVPJDZ2YlWVdhhKMakupHOMf63StZAdaZsNCxcFfnXRCk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1477645042&Signature=TSA6DRnM7PEMdKEp5lNNyhf6UvV2WRq6AJXplSKMkmfPAr8NP-v~TSDb7DZJi5i52ZLsuGxv-rlgQq~mbkEoabh5vbylQAkpBZnIAe49dFD5JfT~f-69M4tAElVNB8NjU~UNDGVeh34JE8YISzC7bz7ajN72D2ls0U8jUQmZ9NQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1476000194&Signature=CNQWmw-LDBOhd7GMZur6kzOZqWBPy8sWqEP94hg1GJUbvqB9uR5uZG34rNo2-hpI9AT94NVXrTWRjGGEIkpQArPAYsIsWXUD~k3k3ROGVDYsCO0-e-mzroYATyIfONMJGCSpwWhYfj7c4FfJxfnbFJGSW8RukOEGp7ZkCp9VMAA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1471174291&Signature=aRP-Nbsr59jMf2n0UrAzhN7OBJIiSnqjL~l1ub51EcoIFp6yPI0bNEAaI2PTx5NyvX9kp5rIwJY8x5h~jOMb4-FnedPHEHHM1q8Zuq8WX04GM7NXf6qlKFWox0ImeNUcAFzpQsXJzZ6utdCLWINPZyE8-~j~3aoz5x~Wz0u3it0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://download.freedownloadmanager.org/Windows-PC/.../FREE-1.0.5.600.html?acfc35

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1475825650&Signature=gjkFM7PRAvL~gIF6EFXyC8UFbN03UXLrgKnH81VE5dJ~CD9doQ~lT2wUFXz4WWNUNHV9QyzM9XzovhY6d3L7kfYFRANJHoHvWBsbbaJ65P7Pkd3keZevkQAlh6XhUQkoCWckAFNnDw1Rj7GyI~eJoVAmohiXr3sdOg~O82ELwx0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1469214251&Signature=d1YyLTHz1meGj0648ohCl~nA6s6He1DYmClxfTp~FdE9fl~TwXdZCJtrpyGkGJFGWnSDMl4h4ooUy5xz5K5oTszDb~z1VdnWo7KnX6kv274258F2NOH68YIoTYLMmBBiJLOoNPufSgiHx~otwGs3ez4Eoymtq8dly9XRuiuE544_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://www.tamindir.com/indir/MjAxNi0wMi0yNSAxMzowNjoxNQ==/zumas-revenge/windows/.../

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1477149595&Signature=duN3ooaDW~4mXOp~P8W6UmMEvMRTZNdnhydhAkfrJohIyb12uigCh6BQQFHdFBAf8fO9EfMHXL3hlaPkrtVtO8ibwD4iKoSDBfBrkRGx61~wRZHfYkLQJJQn8PCrsmLQGMyBEprfL23a6XilrNdGBMKgIiO4bUwjw42gWYMrn4I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://depo-tamindir.com/dosyalar/.../20554-ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1435690293&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=g5gr3nmf5uVTpaBJeKef-N0cadAdNB2R2h7F9udGmRs-ZKZeuUTJVRownZRpoZyMYg1oc1jstczd3h0Sp1wwuCmLPXljnb8~SahjFc60K-eLA39NBko3JOTGO6NF-XftdXd2omcJeWrX23ofyEjbDxWx1ruC4~fWoMbWnTT9Kw4_&filename=ZumasRevengeSetup-en.exe

https://mega.nz/temporary/.../c8k3CZRJ

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1478052588&Signature=KwUj0P5J1TRWT8GsnQqrS2tezlAb8tM2qpco3gBn1~YIljJ25CHcKXHQWhBI5cn3AjtEzYZ5e8owmRmitqFTn13P~6mP~xwK7pSUh36uabWAAADQCEiu-5yiDH222f1rI5VXVDFGrCShR0wb2sm02b~qch8081umk6Te-Z8MzYk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1424349614&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=BpEuPOgQIsBNZl0CNdTe4gw9fFD4DwquYy3~XH~-PSJ4Rcvyg~IYzign-MpKNr8hz-DV8Lmx3zVkgORBQeoE7b-CjBj~XFEnD0AKYOveWBL-RCSL5kkNy5YCt7mXBx-LnU5NgEnnX0SgZ-PH5vCXXO34-WvaKJDIhRaD8KiNqtU_&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1476225415&Signature=glq9TdEmCOjzhVEBGucSmKusFbb4hJFTihCsBjWldH5ZoR62YeEViG8R0Eu3zpSxhlmFNRtyHF-0kaqRaRp8oLsetnL8WeQhCHDEWmn427CgPFmYSQWeLy4~xeA6cUBZmOJdRDxQmT9xpK9YqDvXrPLy6KsE9h2zuTmWUszENGI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1477595788&Signature=FQIQBe-DeuI-IqDu5DAXkF7aY1cf3NjWRUM04atDq8hSI3IH0Ura2~JcEcNmNIr91ySIwCoctHDnA--fc~5I-0JsvoqdPdu1JZXU~vDTrWKAHBAvwufi6b1KqvT3A00aSWTU-c9Rzv4U1zvyfcNuIam4nE17g-r2NjsrK2bE~sk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1448635500&Signature=IIIyMvkxiWItZxUo6FsF0K7658HHULIoMICpKQvtaWazm6CSpz0msKzJlXGp4MFHj9-fa5kNRWZFt-0-QowQlBbFSTcgjw-bSwP9goiIkgnvExdEyuN67sWnqR5My30Ce9~BmRwS9f3daLcBhXu2taAoSVFAC8QA21Z3RjbjoMQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1478244282&Signature=ipW~~J8V6A9tSrnpkUBUpej0ES669hImRKzbMYxvvVgd-7ZX5IieyilVRDbL4I0sgA-2FHaOhj7QdOiVXuQp8hYv7mYuuo~8XMArj-iWTR0zsD4gLOYr~uNZAaZp-75UK0nN8B5xKWZ7f~sgBthLQXjIklYJU3QPwVHUqk3nf7U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://www.vaultsfarmhosting.com/c?x=rNgwJmBzB0nNQ/eI4 6GkfgRFzek/c3OCzn6P/Zt6Y=&e=0&c=dAfDfmhl3O/DWqhesQn8Vz4Gz/2t/97ZvrbxZ1VHSNSL4OGybntp17TXU3/U2sZf0PMEtoThsy9kG1q1ChAzh2mnrkp7eDU4bu3N6drQ8jidKbH9NaOul/PxxlsO62m3PSJBLeCGwXF9RXMAzdN2tw==&downloadAs=zuma-s-revenge-1.0.4.9495.exe&fallback_url=http://pf.benjaminstrahs.com/s/1468260635/fr/.../2/225906-1797365-zuma-s-revenge.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1478066555&Signature=iRzQXsJMgNjdrobSSpOmzOCTRNP~PvufFhCbo8fXnzxuhxjek65ELvaurleLDVKed26MTECsE~nnnVb4uh7oTroaXZ2jNFJF2k6erfKAk3dun~Jzn5uSd12Vt4hLKalOREFxfBqXpGzVSIGNpUflCjaq323BlUWgO7NqjewTSk8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1474545032&Signature=OE30pY7Ku~YWgneSEqNr7mbGeaFagEniovEyHcFh7f66-C2SXf5Yo2KoEqhnpIrpqgjwNKrep1RGaEnBN50pmUgFs0I~9SEf6Iz3Rnw6B8Xwnt2MCZBDFe~fO-w5Snm9bh6GGIoieWqelTKvlUmbetg3dScgFTwsM9YNXl6cM78_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

http://gsf-cf.softonic.com/000/049/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_en&type=PROGRAM&Expires=1477257185&Signature=R1a5qjKuu8c0j6~EZrRHceR6-pQdMhkrcmCmCkQ37WXfrq2t2SoPZfkl0avok5xJtOSaC6uyDmu68Nje-T-MGyOP4yreccWGPQjc19Y9u8PhjiUbJg2Y~whXGgry8VH2MMFJCo22E~J0ermsUheSjZ4nO6P4KEIx2uAElm2Ig34_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-en.exe

Latest 30 of 110 download URLs

Scan zumasrevengesetup-en.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.