bejeweled3setup-es.exe

PopCap Games

This is a setup program which is used to install the application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
PopCap Games  (signed and verified)

MD5:
d24bb97263b386913d1ca9962d8096f3

SHA-1:
097023d385415591bcb8c9778233f16f1c2f550d

SHA-256:
bb81f994659102e659c945d6bf3668af71acdde6acf85e7c5b1c4bf17fbc5915

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:49:14 PM UTC  (today)

File size:
84.5 MB (88,646,944 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\bejeweled3setup-es.exe

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
9/22/2009 7:00:00 PM

Valid to:
9/20/2012 6:59:59 PM

Subject:
CN=PopCap Games, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=PopCap Games, L=Seattle, S=Washington, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
60F0BE25F028BFEDB5BDF0CE5C7A9E26

File PE Metadata
Compilation timestamp:
8/31/2010 6:57:07 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:NBGkTtvMKj6CgfCBlZI4t3CrD8mz7r5NGj8BhDTnz35PoDlhg0g/q71DPv0RK:iitvMKGCgfCB3yH8mjCj8TDTz35gxx7P

Entry address:
0x47175

Entry point:
E8, 5E, AF, 00, 00, E9, 78, FE, FF, FF, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A4, 01, 00, 00, 81, F9, 00, 01, 00, 00, 72, 1F, 83, 3D, 44, 55, 47, 00, 00, 74, 16, 57, 56, 83, E7, 0F, 83, E6, 0F, 3B, FE, 5E, 5F, 75, 08, 5E, 5F, 5D, E9, 51, 85, 00, 00, F7, C7, 03, 00, 00, 00, 75, 15, C1, E9, 02, 83, E2, 03, 83, F9, 08, 72, 2A, F3, A5, FF, 24, 95, F4, 72, 44, 00, 90, 8B, C7, BA, 03, 00, 00, 00, 83, E9, 04, 72, 0C, 83, E0, 03, 03, C8...
 
[+]

Entropy:
7.9992  (probably packed)

Code size:
379 KB (388,096 bytes)

The file bejeweled3setup-es.exe has been seen being distributed by the following 48 URLs.

http://dw.uptodown.com/dwn/2ixHDWq9OVvkYfmEgRTGOg_pt_D7h0bd3AdNV2vsJJDOZF1l0GxlsDAPO-k8vYumNIE3D_BHkO_oH5lyuNL3wqHv7nMtoIyDxjWuicxDemm0ie22-arH77De2I7pQdHO/bL6D0-3KbFfpyQ71NZJOz-R_heDF-8rAwUdyqFyhq8Ae4wYgIL1q3jHuum4FlBi7xDhBF6pku_wkj37s41R-DNl8bRsV9PDEnMW3Sk0o8huGd5ug-B14x-_gfAxd69mN/CjeulQ3yDDKjVlr7m4DEgPQZFfD8DAVcn6JvN7BaWGYiI1r4hQh4wtQcMhNfANMMQy_ddDKV5Dymc9Q90qP2vaLLgg7DMP1QbomcEnLNrCYe-xukajSiSOcHrdXuKzrr/.../

http://dw.uptodown.com/dwn/SY7LepYCuq9qnMoSTMAFM4PbylAZxoJmIChc8-ZSbDX_mmS-ceH3u2q36K9F00Lr4o0kj_W0D5HvvFJP6wcK5-cHlx9n9v6HpJxOQGbbQtKcTZiU0Wigx3IkBSFPsP9b/Tc5UOrTHp-qcRPKRPIwJR2DBN6i1ciG-dY6eaLOQnYoATR19UXNPayVcj1d5rZ0IJdidy2FrRrViEfrsgrlFyNSi-kiwSrAkwkt4fJi8IBd0GzSHY7xXo-1Kk8MynCiJ/8QxxM3_gaL5lYSvlIs7p-ILAL-SH71hSp_kr4YaZa8PA-bvZiUcPjAxmqztwcvK2oiZmMaiSLflpnk797lb4jDXNntXmJowrS53zjYXkypd0YNquh9WJtQ7SyimZyBls/.../

http://dw.uptodown.com/dwn/fd0eRwsI41uRnbMKHMU0W8urtxOV7H_e-GghdWDBqsI05_YP3149QUyAQIUQj3VW-68t_vHHZRJ50ogXz8lxV-blTrQlKMOGLlQxCirN5kqysL_kp5tklfEPrOWUw4HI/qgsr9z2cOUq78qBIetYEQm4MOnUDOwWlibLi0BwkXBtOnx4__zKEXe0U5ZR1AP46wlCZnPh5GSZmaC8ewp5Bwhj4ED0W-ktYi72za_JvNmmEytP2b4BdY9D6fvpO9x3M/nmECkUt1KLnZIAaI4ND-z4PRausnd_0kWUXHcHSuR9D3UQlJ8evqYFSGapyJY0kvu8AbeuEuIhkhmpp9eNHzMTBfqbgsDpmjJs5X5te3FB90fjO2TrlOgAVw_5iIA1J6/.../

http://dw.uptodown.com/dwn/kwvmYCloud2jhJvF1c75CGRdb_rQ4xSJ5g09fc6Fv7qUa1VfZpXwldNM7oFsPv4xlUkQtAIixNjNoVswAR4asTEoJecPxxPqr06K3XgRoLzzx-EabTpTELfG12p1El8A/QcP9kG2lLUiqGqO04SPqsZ7z4Z9v-kDzWFFh2EfZNWycBg4bRwd_aTcZTeL0sdZyEE-rGnpeaNWQo9KEmivgHHjiKwz1CQNnBtsgpsPaCoR7s24Fu788vV_tM6Dm8Ktl/YK5QrT3PnEN6s3-rT9X7HJD4iZ7n-yf-oET6lC-hyDqFzr-Qat_7nbMdYh2NHAP0fAGgD-IEFIpD3DgV5O4TIOQtl4i_T3FKGf7_mO-eTPu1_joOHgr0Od3DZTcDCAOu/.../

http://dw.uptodown.com/dwn/XBSFdX3GwNE9ASS3pB-FN1wLSbQQpYEDldSeYWw-oNJ15dXmE0n0CPSx1ZveOzgvM2EKboeyAfLyHpzq9JFkGU9app-S9W-Qz7oRSX3s_zNaGaSAUzZbPA1Kpw4DjpBX/3DdOPD82NsR4UVPeUJj3FNpJAG8cPSxeCJCuPoCS_efVMBG4oW-R-daNAgfY4A6cz8kZMlgWRuSkJhaPJyZSxnyNf02tYKiC1TMSPQID3_H99IwBC9X2QX9W9dht191K/DDBV1fe00FgSIRPvUBLD2k_AnKIGajAkYjke4WSJgSZv-12p6tjDU34R74NuPX2VEpOZRl3FLRnxyeAXVgJkYHgEpQjrGiYr1Yt6Wd4qkN33LjACCDWyKLwgaPGB5tYr/.../

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_br&type=PROGRAM&Expires=1466438542&Signature=MDHhvNZMM6W8RXej8xuROgceY0VKUCS7zphzIYCjlMZ2ENmBQSZQcO78IT7kz77Fff6YNP2fgxd4TytVPBp05SW5HOmWOBOBAdgqaIVJNlFCE~pIEreYo0B5NxxBrACJQw3kNyXU1FsTTygdn-V~L85lzmRcHykCCI1GxloyehE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

https://bejeweled-3.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWuV6QhjPidjBV9gIES5oCMgaA TR oEQDWH9wY08hauhixa2PtSU276c 8Po0/.../TnIpCMNFOCkhxRq632tHXYoOi5Wmx5t8onEw==

http://dw.uptodown.com/dwn/0frlsNZsXeD9YsZQGwHbTtB3q2BkcD_O79QfObMCNgSZX_N4qd45xzMncPDTJF4HKwLzX16s_at0LtPmcy6IEHO9cUbEazeE1ZAAb4FM7iCYIDPDrBf51GlZx5rFdruq/sJytE7h62ImYi5xrXJQwv2s5xvuU5d32UIKXg9MRu_rvkaGLK-zS-AN4f8TDjM_C0qnW-XCAr9w7zXO7QNJMFKYlcGgDBFM76L4d6-R_6pzLwXxr_at5fhRzyD6fGoXO/7k1E1dR8a-YaMdZvszB7qeWX0jFTywRpYKjzXL1ivG37AgrWN-vPqtgqxw0NJBZAh8ahmOsYRkzY5oORiVVnVq_dT_QlVU5oFEtqFCIr3ZZLeM_24EkCvGNUVHyWo3gU/.../

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_es&type=PROGRAM&Expires=1474737733&Signature=HVAx1K3KgWCn4KhTyBfMX~0dAcy02TLNXc1gIYc1J0eSnxRR210YRJiKblPT1ElI3xujsbj2F3lJXZg6beRD1k5cuqaNnAVsKppaLvN~-gXF4o6pPW2KMxdt9KeZAQfc6zopwPe~v~Xjgr-VqbKNCUrtFgMDyucymfOzCyy5bV8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_es&type=PROGRAM&Expires=1455195211&Signature=Y~oCnWwLiDfitj7845SZdw8uUwKQ4bA-K-HJQ0SVjRqs3WvUCm8twFlEXol8M8fZQaPANp89omz8Zxhebnrz5D76VYhvpqNQbrDmIfiXdB5jkFsukfnVC2PhTEeRVpfMqC~NPzUvWULia88gJrUnwPQvcITt9WucJgawvbrv9ug_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_es&type=PROGRAM&Expires=1440812583&Signature=Ae87vb9RU2BZYpm~-SfvpxOO2RUH-0bAW8vP5WMkKRUqlXVowzAk8PeqPJU8D~I9pa9UgcDbMtoNmmFdYRSMeVw1i7DqfB5IAnEUFXHhGjKirlCcROj5ROV6Oqy~uCFG1Xd9EoL24nTpVUnFM31~0JbH~7ppJBp50oj83q8tvvg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_br&type=PROGRAM&Expires=1446975253&Signature=K7LMbiT0huUbtoexk83owd9db4lujutZFHTlfrhl1eKaiXSCMz~O57AiBNTyBvFPpMioqR1RQSQpD6FtR8AmWe0O5QkcjXsO6VxGj3PrEO9hsN6WtziBCR99-Aj~rbSZapyN~8P9J81Oiil3zEx7UcE-mjleZECcXOQ~u3-HFTk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_br&type=PROGRAM&Expires=1478754264&Signature=XrehB0umq1f~-Jc8HKohBOcAy5s3GD1frVVRFbG1YIKaFu7kbWmdvQoFuYfXe8H6p2CqwE8a5CeyZ2khrqEkF9H8C6dxFD~MT1Ll2Yylhl5-hlRMXmWQLYS-R0AS2mzpHx7b6c54Z3~mMAmf967sWBhLhqolrSmn918QFpTJr7k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_es&type=PROGRAM&Expires=1456798061&Signature=WlsAyGIQae4YxDGtnuh-MIWjqXjKFazXUzXLsNTREugbBEg8LRIu~1DZs8DG29R0bN6gk03xRlIYErsuRTW~fsK4MQldiG~8YrFVM1~WOgBmFO7nvWJE5kHwDBwkk9aUICrqwHjeKndkwd8k35iUsp2TxHxq31c6~Xb7M-~Yclk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_br&type=PROGRAM&Expires=1476401824&Signature=BqPVjwn3bj7SAgXvKlvewA~~LGsn7GDA29n-EW6SgYEGptcFAWMXWRYfEJrNiTVUVivpCTAIsVOJcYmmGREbpp8FbemCghNnJknFIORQtirq76vWtdqPe6A2oQE3D7-LCXqyoiBpV-aMmXaGFwur5C8aBflJkwvseGeIsqlNNzc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://dw.uptodown.com/dwn/t1b9rBMJoUyn66HKh8jyEAnm_j-7EqkFffUCV19iCJpEofRcNwNy491PV_FFAKJjd_cfubjyuXmII7stFabWQ3S4cQeQBs9vglRVNR-NcgkHrICaVo_i-hLZs7eP98Bf/cm27Ap-7S7Jx-yhLQSPwxjFsIORH4iK7smh2kSQ1ozXNbiefePukyHv7G3YygxOsIBc72sshHR7bxIrZisHgvDqri27jLqfRUHZtmyOAoQteV-umwHOETqUCLl3UJ2kV/.../

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_br&type=PROGRAM&Expires=1435548006&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=g3RFQGNxBkfn1C-aF9Gd5z3WO1Q2VfemP~-FasxEfKnX95b4b2ed7xmNAKHsin9oJ9OFjnc18rMO~MlhPMgQNVGVsvV6dUwv8G52lWB7e7JI0trG7cSbbPhZmDNUKwa8WXCx935uOTZ~4ApROrMjY85ehe3QvIK4AfBWtQyN2r8_&filename=Bejeweled3Setup-es.exe

http://dw.uptodown.com/dwn/QTBA-wWtj1TMe7OAc_i0Wm3f09owZSiWA-f9yVoy7B0by_ny_srcTZvlSuOAGLN-lEYGNuzWV3ge5McEZkCJHHKBtw_Xg3bnn0d_nH8IPCPrBuVQ883K5HQOrs5RSJ8A/MRE7ReGhhAPk0sTf7tgNsLAjeFzXq1cIHZRgcKEoR_VkgDeUkR8T314se6oqNEtgtvoEr1Ih3zT3lFRa8g7j075lfCY-lLBTbYLvJWm_5T1F7ZOnJf87Q6KQQvRmYiqq/WifT68oNC5VyeXiJcBZ7OH98DgnQnr147Ren-TLCnoh7CImzDYvjAFYcLX4Z2i6rq33hfcc0OVi7BNuRuqspt1oSpZjpMtPVDl27ekq7bT2Y96MZhEpUqBcUpBWw2Ws2/.../

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_es&type=PROGRAM&Expires=1476767465&Signature=Jqes2aN~cj2QqHK8DOlwV49SNooWzG6J4xtbQ9rdyMdLfX2zl5QTEoIOTE3BhXIfbJ53hM9I3Arp-LjvJ9Lndo3l01Oiy2P7CgIGgDQWPyilQ36m1lX5kRAw63zyf~7qBmKhJUAto3Ds8~baS~YCg5CmcpqgjiM~-zWj2aQqCTU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://dw.uptodown.com/dwn/ep46FtDZVBQkoS2JrFEKgxuMiyFlssyL4dmjafhtuA8viDrT9MtNfVp4BGZvunIfziGnO6yr8qrJQ0zsLfEFl232EAu4jjS9EBk8BY-Svv_qZ2MNasnHkz3rXrw0XkyD/EnrV-EwQge7fqTHgFwQOAHEiaClvHzYhMztsnOa3N5sWKPnNVrpVGBj0aaXmN5bRCdG4EIPsDD_dTAiMj_oilfFXtHHewb5pmAQLJ7nKFD7kKCy1GGgTRLSpnb74PDCJ/.../

http://dw.uptodown.com/dwn/eOD4a_NFFyrqun4G_eB8ZTHguSKrVsZw4Rl2DgXwi0CBftinMTv51bwBJs6yISQ9varQpQG1f-S2qXuEj8HXz1RqAppm8H9fMzWbcvZUb1ZfpZIHE-1tEsEDl2CJNJnC/TSQqjaJK7UYuyQAhmBIhryKdxTkBRv_3JrIHJESDNOT3R7HbpiMawfgwQ-36FSNKzRun6AJb-v7eN1id3naM_McmFjYEvjz9-j7wErcM1Tag9JEMuQzkmFHD1376aiRf/.../

http://static-www.ec.popcap.com/binaries/.../Bejeweled3Setup-es.exe

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_es&type=PROGRAM&Expires=1450696747&Signature=A7ylcdW4jSDbH2QA5pVpHMAKJ-ERJzZZeZaTdSUuTmxQ8orvtt6xm7wt5pEi2WRWYY96ByVaB30ZJCgloIl6ehJS4H70pNDAbQZqFXevgGcseCiwVGf3pUJv33~e4b-iET9QWnuCakX88EjwKldsYXUhneJ5QcHUJ4vw6DqxdkU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_es&type=PROGRAM&Expires=1477571045&Signature=aCdEeZToW1QdzGhkP7H9EJONGZb~KRq0WEJVBdEN5opy7X0NsfLnrsQw3oZp6X3kvWBHl4jNPwRJcu7iOCz6as4mCFCr7ANA5F0AM0saOcNNeiv6eJggKFMqWjeoJ-4XQ4KufmUKlMmphAcN0EcCvwgFfmbsUCnPcNYThVXyXIs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://dw.uptodown.com/dwn/mIA4-hFTusb9SvufvihrAR1i1Q5sGFUhO2x8_1ljlBuXcyhaoeJDqukSGa5qaKorG0jRMBO9tzYaKyduZbSm6oGybE-PntFqq63e2uIzy-X9TlhEhwvgTGLy3_tidrxD/s_S5FIW_BexouRMNU-TWt2t4_SuCr9aMWZ9wpNXX-g5Od6omeOdAjuNTVFyucRKrjpl0pTaDKx3XekCXQTqUMeCh6yCfVSvdjFeHKKiWb_hLufsUgXbuPL2bOQCQhMoc/4_oyEk5jYxye3ih7pbjA52ahTilDazLEw-OZd4cgY3LYsEE9xl-QRZVfonkBlsHNL5EzV9TvabgdqUq16z8ahMFvsJFXof5jnjFU7RMOtn6sFoNotArmMPur6ExLupdH/.../

http://down01.wxsrv.com/descargando/024/1221/bejeweled-3/.../bejeweled-3.exe

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_es&type=PROGRAM&Expires=1468673735&Signature=U9cbczq94xrGqoCg0IMFOuh8Z~4F-GiMyseDHGQ5LC6z36hdA018YWiklfhTtAtEyQp6Ow~hJrt~MCmsDvk4DYBjxK8UT8airR9-tKgKzorrAnDQQTydfry2m27t-v06w4Qu-SKxqqnCkhX-ZCo41SfGmNb7fxwbbcjPfiyZeVI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_br&type=PROGRAM&Expires=1470580612&Signature=gc3PO93uXkcfHhAywSXGMzUOHVYc6KHsgyDqlryeusuAvtNAPISx4vm0zTY5WzN2IHr2vpD19MmrXco6UE7Uzc9eSIY62s9EQIbk52qEdA0oF5e48qKMyUzo2Q9aWh4nt-8PFgCuvwQSSp-QzGbtCV3dpRQ2UgNnjfrf7TKrFno_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_es&type=PROGRAM&Expires=1449833260&Signature=G~h3ydjkubNEnpP6TcawmHeeFUVbPBsy6-ZpbrMJ5CKrsrCYl9QUL-fhLUxm54x1h5JXM3SZmRWJ6B4qudgVL~CY0sPc3I~~QQucizU8RuZD~yTYnq8sz-CmGLRsOw~~GAojrkc2JE6RkMffMtXjsmXLYffvzzOC0e4I1kw2my0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

http://gsf-cf.softonic.com/097/023/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303976&instance=softonic_es&type=PROGRAM&Expires=1471926455&Signature=Uc-i4s~v4ToULPmLcOKClLVAQhDeM0VLm1jPqzOiv7cHE3HDdWsWzect70RyRWY7LBp7oaOTKRS9UveWSUaoHAxKkIvzRdoUCGQNXl7Z-rmIVeW57vI~8vrFxq62siw-o~VBmilCJSHSrQDGi2Xs-vO-AoyDdVUqpodXL-oIlUE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Bejeweled3Setup-es.exe

Latest 30 of 48 download URLs

Scan bejeweled3setup-es.exe - Powered by Reason Core Security