home

zd3.exe

Zoner WWW Setup

ZONER software, Ltd.

This is a self-extracting archive and installer. The file has been seen being downloaded from www.photo-freeware.net and multiple other hosts.
Publisher:
ZONER software, Ltd.

Product:
Zoner WWW Setup

Description:
WWWSetup

Version:
1, 0, 0, 1

MD5:
e6e940c617e2bacd03391236e63f7317

SHA-1:
5dd87a8850a639de15cd98e6fa23a88fa4fb5833

SHA-256:
ead8b70fadcb27a5608bae8231693e48ce836450b15cbb35b2f4e5166eaea676

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 9:41:13 AM UTC  (today)

File size:
8.8 MB (9,242,891 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright © 1995-1998 ZONER software

Original file name:
WWWSetup.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
196608:NWQ+u8xQEMyL2i2W5lBBmzPJJ9GjtDojEGYMQHqO:NX+ukfMycWCtcECMO

Entry point:
55, 8B, EC, 6A, FF, 68, 00, 80, 40, 00, 68, 78, 63, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, A8, 53, 56, 57, 89, 65, E8, FF, 15, 58, F2, 40, 00, 33, D2, 8A, D4, 89, 15, 48, DF, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 44, DF, 40, 00, C1, E1, 08, 03, CA, 89, 0D, 40, DF, 40, 00, C1, E8, 10, A3, 3C, DF, 40, 00, E8, C4, 10, 00, 00, 85, C0, 75, 0A, 6A, 1C, E8, 39, 01, 00, 00, 83, C4, 04, C7, 45, FC, 00, 00, 00, 00, E8, AA, 0E, 00, 00, E8, 15, 05, 00, 00, FF, 15, 54, F2, 40...
 
[+]

Entropy:
7.8849

Developed / compiled with:
Microsoft Visual C++

The file zd3.exe has been seen being distributed by the following 2 URLs.

http://www.photo-freeware.net/download/action/downloadstartwin/Item/.../

http://s10664.chomikuj.pl/File.aspx?e=Ds3xYZYQ551doWt9hyJmt_cc0JqWfWa4B10VdvtLOiAbfgWc3vd7k4KjkxNpuv3gZX9aVWM1xt-YZKGvjxV2TRub4j_kOmhrrQX1bJJsYATsPMvYT73TR9xNJDTw0mG5EYHhiKT0tLvV0MHPWWLixp35B7ZNwueO2uNHQsGyXp0&pv=2

Scan zd3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.