home

zumasrevengesetup-fr.exe

PopCap Games

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
PopCap Games  (signed and verified)

MD5:
f57fde601ec00d7a175f6383e2db216a

SHA-1:
c0d611d0ec4cbea03e9d1e2dde3c603d99daabbc

SHA-256:
1c010fad07924906dea2368d228cb86d1be6624a9613f19d8146764fcf022575

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 4:13:12 AM UTC  (today)

File size:
102.1 MB (107,016,512 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\zumasrevengesetup-fr.exe

Digital Signature
Signed by:
PopCap Games

Authority:
VeriSign, Inc.

Valid from:
9/1/2006 12:00:00 AM

Valid to:
9/21/2009 11:59:59 PM

Subject:
CN=PopCap Games, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=PopCap Games, L=Seattle, S=Washington, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3C61DF38D5BB3836A8B44B985C504479

File PE Metadata
Compilation timestamp:
11/7/2008 10:29:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1572864:3ez1tVLT4ivILblEi5lgMGPQLSXamQIm4ejmVvqQ50BtslnTaX4l3bVoiTx5ZR:3e5sIW75qMGbqJd4nVitKm4l3bVoib/

Entry address:
0x3241B

Entry point:
E8, 24, A2, 00, 00, E9, 16, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A4, 01, 00, 00, 81, F9, 00, 01, 00, 00, 72, 1F, 83, 3D, 88, B0, 45, 00, 00, 74, 16, 57, 56, 83, E7, 0F, 83, E6, 0F, 3B, FE, 5E, 5F, 75, 08, 5E, 5F, 5D, E9, A6, 7F, 00, 00, F7, C7, 03, 00, 00, 00, 75, 15, C1, E9, 02, 83, E2, 03, 83, F9, 08, 72, 2A, F3, A5, FF, 24, 95, A4, 25, 43, 00, 90, 8B, C7, BA, 03, 00, 00, 00...
 
[+]

Code size:
284 KB (290,816 bytes)

The file zumasrevengesetup-fr.exe has been seen being distributed by the following 26 URLs.

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1482124460&Signature=Ev1QWSMqZ-8qwdo1pNjqwkqSFGAZfTHWcBxAKv71PwUgAzD4lK~9PjHtGMdTdFo0~L89Woi9WXXHHJ2PggpBPWDcS9pr2mrCqBvJ-jtmK6lleHabvq7Jou6ysUz08W0wq02TwF8wDjvPcyalD-pwZLgI80ZdSiztB9aeLczA95Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1480640422&Signature=FXjQLcJsz0jCZ1D-gJDtCLQmmQvXZVpp-28RvA11KvN4lsKAT83Ezk0CJkoOchIVa68j3cEtFVGbD8sBZnroljh5tCq~4Iuf1NNkDKGO-PoEkkcLG9TY67kPhmUH-qZBhTuks4si26b56QVvi1TWJewhdculrRO70cBGch3Zfc0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1472018159&Signature=J5D3zOATBO5b8zYhb0IFjPnzecEpTNH42YG9wOsGAckPdg7LGVSau-W8SHoYKkpx0KGN5VfCp3ZTLIepSM1m7-z3BHuw1RKV3xGIavfuk8YdcqFHKc6yfiZcwqoDRDf-Bk93tbHaMmyU-IPkki447YArlfV6y73hlpP4aJ6Y4T4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1471926801&Signature=RMxDpfnYNoTYZ3nHLLDXvP46bb5taVC0GZjjLhEJnWlFe-Ce4H61lmhxCjgBjQbrI-eafKrQnzg3kwK7ylDWL2xHgOUCQ-lgvyYKB2QORBzSLNyUsZZf-dQUzq~cQH4HB64NOSdO4DYtnKKHSkdMuITvWlhBvUMgeo1HwHu9YLs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1485166478&Signature=R-cu9JG8EshoVubmGo~8TMC6LnQilJwxXn3WwrhRAamgpXECXcMstE0sB3w6NErnYHdh7uVYoHB5JY7qQma9RLXMq~azPjz26uWNeL2OJVv0lAmiZcAsaM6ZghUhAVmMR2FYrUSicnRJSVpSfzbPSz7YvI1pVumRXB5AUZONt0g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1480292247&Signature=G1JT-U65kKE5nA6w36ghTZRxPxYQcZqOJUiLhx1u~pM-gXwssrswwijNRn1aprKUYk390OjlKcA8NAhgCpYjzDerzLo-vmcOiKIWVU9DG8GW1k1WVjX2XBfgBctkYXTKD9t7Z1u0I92o3pKRUDaAu8g~lO~s9RBaGolbaiDVwOk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1445920533&Signature=QiatX8opiQ6vVkepUsiJ6CMYhhnd6cTbgQU9tFFqZr5z5HBB5NeRMmLC37pdqy7GoPAUbfsDdcnqcC10Zlkj~Y97Nv57A5EZZIf08UWT2OQV5ERBYjT-K8zYgsDhcvtlzih5~n5PqoePvz-P8a6quf7onRKZ3gheYYTnTR-utz0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1472165449&Signature=iatZi1d~awmpUhT~VfKta94n4hTbpkYNlr~kpiJSxlqIaUcWUtd6gwLrNWGNpmWxtUBGYwnUbMYPNe3AQR3CPcWpVOGgxaRjmLTKRNQhwFVUPyJBDw005YaPOf8s4IYAlx2SoCDQn1AkTZn8Q3eHo9rNSU5HWeqSWX7sZgxehrc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://www.hearttodaytag.com/PkqWpygdrPMb_6bwTcNM0Cml7Cv4mEKqRTlteYohMYt_HQRRZsRqLFkNcjn5XAf_tVanzGkmTucDFDCAiMyvmwcVU0tcjFo_kJBPy9D8nzVb61Gm8Jdqf7mMDPS Ghouwk2imqnb3LoCxMIhFxgLbwy6S JMRFxfWvR3lzxaFaMTyRzaRBWNMUxWzHvB2eb5nHsPmjgx8soTcp1dMvndyOOuD1G0EudK2pLQE_s3Zb75G_5s6lhOjOMktDNJqPFAP8DufDSVGkwndpAx OQrAGIXc1l_XGQ cKnYnq eSKwT5sgZgJrFcwKP8smdTvkYiSR_oc 4NiYOdPD_c1aWJ5Qh9CLB2dobSKPTWniL64vBxpPUjoQgIwl5Nz8uLZ3 5B_1InV9mvdWCMOARl3DnL1Nhl2kUTdZtK4Mi8Jfr5jba8H2yAuK8kaXacnkoZbztmhWtqdE0L2Lgj52JOlC6rSSaKgEJnYxK9SrUkM7SL6L7m9gUWzYOYUYA9z3vjttY 1QUhk lnvfCwJjH68h0UJ65HP9NDL8ACeslSlcqLr_pq6cdC0Xbka qABYmKW13NVY7iPe-G1MAAGRgnq2tSUzQDdiAA5cCmXQAnGiYyAGHLbndNcbe0O58vszHoGFl8P91Gh7g_U5w2yzQ8l3kx1PMrkZ3RZbgOT3j4rpv89IFWRVYRJSgKRxhMA==-e

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1476488745&Signature=FpKOaxW8WmPAxQ4TOp6cN1GXXXpEp6KcnalUrKaz-fQ2I~VjTXzm5zZsK0l~SR5PAoi-b2Y7PtRuKS0zoTlEOYuKNriHwLslP1tDWauPUL1Ti3e8WyLEzjxHWzs1hJ82~LVfo90xt1meMg3aFZaf0~jxQh60TU8f35TwtYe6oi0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1468433871&Signature=PXkvVTIwsiA77B75fOuowPAO7aZzUpAhcp1fYdKXy17ARyZp7zzdc-AC7JAL25Ep6~7tz~YDgJ3xYK5EIzti-0z4BQsVrSWnZVtXK1Tv8NIs4~jBmjzjkfa6GsNPcMRLLISRJ2Ela9E701cHsjgPpAzGAOtDXlF1lze9spjF3oQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://www.clearheartgift.com/pYcDGbstxyeYaT18cyz7yIWoVXeJx5pmfXW6YdO7IHL2Zq4YNtSGTthrufNsoT5_8F6wETsyKfJQSRlLiWHmn43hLLhKT6kAI09Lc2XE4IzTNyIZKgPb6PNdANWv2DMj La3VMoPNCnrEzJ3KHIOoGGOXf3C1f6pvdJKmGZhlf0Tq4DDn4wz7of4DApJrpZKmvTP4MBi1syL_z0z7c8CEG0llCJx9Ixsv3RoJmUBdGOR7O2IYGkJhYxbycMI7fh7sL6rnkvncy_WvaFJbwhv5W98zlgQSvoKfgkcBJaoYjatBZrBc1n001a0oL8gFpSsVAR5xoCTdyHXVogIN87wJOwiTcwKBcNrDm4envCy_LgCtFu1iwBJ yF7i1X2KMRHNWjdJ3S9PGb_ue6QtNvmipLnb3aYRGJ5LpLYpGjHGOWxvI6tODmbzXCgzbfRt4TsE1bJD0qVqkfKGK 1KaHYrdJ3tRRiVuRpLGYcuhB3pBq7r1W7puJrfdQnB7mZ8Vah2BX8I_ydhN13QVqwebZZBu_Ozwc4m6Q6bVTTNAL2sxQDp2kE_ziCcLPIiOx5KTtclm93pi84-G1MAAGRgnq2tScjyBdiAA5dCCgAnu7MNPFlj6IWW87z0u9CwMvj_OpoHeN8JvtMADd9BfjzFtz1Fft1 ENM5GhWt_O2uGxMwiChBUzRJMDgF-e

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1478233332&Signature=IXAuHX61qvuEAWoladyikS~Zo~02ymoXKC6mse3tN6GGco9X1jLOK3yDgekFi4A71mHVbnm-tP4fJRO4KfcU8kBMvWq6s6fN4hegktulQz-SSdHkYO08YwUKuIIkRNgTjCMT1Go18vtqwqBgUK7I0cgoAm22TsAkhoHywOyA19I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://www.commentcamarche.net/download/.../download-34098555-

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1478058899&Signature=fnrmrYQ4NdT9L5rtefR~3X1Ez4X-0ZnlUn39iToV2U0XGfZ3-5L0dWQtx006jLN0RGLrxW~q~SQG-UyhYPyMMaxRgH~6~Xfk-gO3ZA9ufwKup-DzOAbc3zQqK36-doO1LIIvI3Ts4E0~fIInP9XuEP8XeqgclDYxVrUTdzoobl8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1467169998&Signature=LMtn8EuyjRHRq7HYITMQF5v9ZLM~UssSetAWzlJlmnXh~zTNuqQfRsprDH7eFY19fM5Vs9UjIe~tiafZjntKskxgDkcNTd8hBJZSkLZeaRMka~rZ4ZSJvxmuCo5X6MoNLCG~FW-LdxkbxZg2jI3uaWR0eOECdo0pKF5y-3snIgU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1471097297&Signature=L5oVrteeOFGTnqLP9L5E~1c-c00oSoGPy2GX2p5g9aNx-vuQMzFgWdeoy-ju8Jc8N3kAYIG9a8hPzDiZYJwPmAEywC3JaFvS6r-oNaE23VQWib3wkPwytWb8U125mkg~lwQfLHFsuDY~obU3~UTCNbrxs0Q009DiJVhSi2mTp7M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1472646311&Signature=aEgfI-9NTJ~a06i-~4dDVE-Mmb0~eKOTOqMKuedTA5o1GFnmfVUkWEOuVBjZdMlmy~dpf2MhM1lJJ~A9wgsZ9EvschFxKb9zSj4I3l1IWuY5zx-feWNmUJaECzqrT9kn2RgaCTqMYmrX9weoYoZJcBkb0DbYfTkpEGVEi6Xytqk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1471991575&Signature=NT13pjDvNJ3ee91HXihsC65TfHKdx2LSc-bmZQySgOxJ587rABBSz7D5RPzdzMrMdcAkw2AFnkjAMYVB0Gadd1wbAnr6JtP~6RpzZly0XAJb3YfjaTnRiG5S5yP0lO8Z23woCmsGj7DC7Np8~XPQYnv1rfsXHbQW1sThHIvY7ys_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://global-shared-files-lw.softonic.com/c0d/611/.../ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1466100462&Signature=W3BYkb5rc-bBDHwAhuVE5z-tGNJplgtMifJsLoCsTe~3BjHVw~LTAZWk31NtvhOPsylzvdL3qFoPyyA8GLDPzcRFS46jxDrNbqi3ldjLcpsFjmBPYeQzpb0lxfpeyjw244cLlkC35i0e8rMwXO73aN5HZr0Kl8wqLShiDTb7SRA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://zumas-revenge.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANvBD2FYrkBUc1ARGAqgf1AeUYzNtjRLX8B/emHfZOrpU6Yn M1JTyFIV/.../eUaNRXoxbuLCFHsIjDpcwjbUB9V886utoPr17Kyk2Bu MA8NiwSPwpW5M7EiN5ekGVandWCYSHZ76RjiWfpJlzAWYDoS UNflJvilCL0le cpyw==

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1462854276&Signature=Ep0SXiHwAU6EHzkETaP2lG~nDjpWdFDX4HndaWBwBWRYLZAw1vLTedrO22GO-iLiEZyomZu3x2CYXQAbOJDGWM1Xr66zEBgusrOiOHRmz4FZ9q74L1noWenUfJPFqVTq4qOKIwPXhxfoFS5oN9Qa7epwdRQLaCVY72IZVgi5SAQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1431202231&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Uo0Ej8Xk7moU4w9TRhWXUkt22mzyr2NWmfvvir~aAgedWKM58aJTrspqQdr4X5~mADL2IuqH5wTh3yry8DaeQhZfu63GU16LfdcFMyoi23vl07~C4tv3ZkfXQU1c6e96cgulcT9AanO338Qwa1Qe0ZEF4syBiX5v6BjswwHCdIU_&filename=ZumasRevengeSetup-fr.exe

http://gsf-cf.softonic.com/c0d/611/.../file?SD_used=0&channel=WEB&fdh=no&id_file=88458&instance=softonic_fr&type=PROGRAM&Expires=1449747846&Signature=D0UfrZJjl3UYETXvjyMEUgP-8-ySHBdA96-LTwn9pYG9zr6vwaPJwIJJMI5A5jA~CkDOz2mqvoqvMMKfe9MB0fWC5uQ4znlRD5XP0sei2g0zjlKZesqcm8hrSrXtRhEaozWUOjhl9vapIiX6KQvdV~HgEj2dcS7vRDT5rd-AQ~A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumasRevengeSetup-fr.exe

http://static-www.ec.popcap.com/binaries/.../ZumasRevengeSetup-fr.exe

Scan zumasrevengesetup-fr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.