home

zumasetup-es.exe

PopCap Games

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
PopCap Games  (signed and verified)

MD5:
fcf772357b48f2404cfed1d9179152e8

SHA-1:
b57beea35459db470badfd11b1c3b313b0d52295

SHA-256:
7b17c3aa6bb6d3b05a8fd77afc1f55cfef47e1d216add4694f790dbf8e57e4c4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 3:15:10 PM UTC  (today)

File size:
7.2 MB (7,535,880 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
PopCap Games

Authority:
VeriSign, Inc.

Valid from:
8/31/2006 8:00:00 PM

Valid to:
9/21/2009 7:59:59 PM

Subject:
CN=PopCap Games, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=PopCap Games, L=Seattle, S=Washington, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3C61DF38D5BB3836A8B44B985C504479

File PE Metadata
Compilation timestamp:
8/15/2007 7:37:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:AZ0byENR6HobmnixRhbFnIKslRKTkNqXA7FXVBACKbXJ:WkRfINRIRCKbXJ

Entry address:
0x2B5EE

Entry point:
E8, D4, A1, 00, 00, E9, 16, FE, FF, FF, 3B, 0D, 78, D2, 44, 00, 75, 02, F3, C3, E9, 54, A2, 00, 00, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 48, 1D, 44, 00, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 85, C0, 5F, 89, 45, FC, 5E, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, 10, 12, 44, 00, C9, C2, 08, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 57, 56, 53, 33, FF, 8B, 44, 24, 14, 0B, C0, 7D, 14, 47...
 
[+]

Code size:
256 KB (262,144 bytes)

The file zumasetup-es.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1482661985&Signature=IqhRTqTiF25pUYS2qokQW7W31wgrUfGvHwe3xZWw4jhTmvQtq4uQTIoiiQOmq1qhANsKaVObcQy5Yv3noDhUKBK7aNZvd2PvtnoJ8DFeQX~H10PN5YPsRU7vWpIpJkLob7iNvnYPx1hM5zqHBs0VlKEwv7n1U-YYv4GprL58aKQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://i_mp3-es_zuma-deluxe-1-01.fkiloredibo.com/crawled_soft/3/9/.../39595-83225-zuma-deluxe.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1485089110&Signature=AWlSI8yQ8sS~I0xFELcUuKD04j3luojEm~QsdIUHP5bIk3QuGF6qOhlTh-qp2wVZoXGp7sYbAex1gq-xT0eFnwIzbVrgWlXelC0W9vYXT8CsOCV0IoJqEpY3YmFN7GjHeQy67I6EnWHDtkd3vZhNvIr4tFno~MTsTKpdI9keQGo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1484814168&Signature=R9-pjQA8G0pvbLuv8LKgzNzYJ1E1JcjMsbaHNQpIsGawvCMkcYJzqnjuxm~kNW9TF3SuPZcUp3rhWu-azn3urdUKY3Ki~Fv61PJXYn0r7O-~Nz0KzkX32Ur~oJA~LEatijs9r4PQ4laKGT7a2leS2WxtTKWFaCxbI8ZWNtwKHjg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1461629720&Signature=QnD4iv3PyFCdXOrIPmKAxqPJIfilh3QD2MANdtpM00HANz8A7UzY7NtRKocm4xbzlrTFduVtUOqm~rgtcmjxzrvVqXNKnWkOViijuRDko5Psk1wfX8Wgs9jHP2Q-fk~GMNNCmj1Jvia3nqBZIBGZvyG8pvXdeGdBrcu0EjoWUik_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1482577961&Signature=UBjmh37~2cECU3g9B124ozPplxQnITyLZkUQldwAvgciW6wdc4dkZbyWI0BdR8Vs1QTdO0gH~H3HXgK~URPfK3~WGLYCbe8VdPr6oo3iLXTOz1RzswcbJ6HRHAQdLfnm0bXioe9cie8lE6mX2~2BCoxqy3HMJESNetM20bW3zo8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1432718973&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=BgLJgAZbCTT5LDtY3HExg~R0wwD-uQ5p-v0vhdcWm~hC3v9OBgE3uDt41H8-Y3QwICZZ-zAFLjeyr13yh93MSGeW9UybrR2aO8Ww7DDefqux2d-Mdn61Ai40FRBCdLHNYl8MHJ6CxGPB2no5-SWYXSh-A~fFnJp2HrxP10lSL3A_&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1481095101&Signature=CDSloNlAWT6uTONBE3hQTy60~BlsdtFgXQIHuTTFGO5W2S2bfsH4RfF1TfFABWksABFmZz-h5YJ4Fc6H~m64QpF3ldKq0rY5BPUhgynYiXKrHAfd3zAXaVu7ncfkHMlH644oRpm5mhAMTwAZZmhYtkXipb7LdMzMHeoHzVGve7U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1477094078&Signature=AiwJWEBNLbviwwCIPT1hQ9T0vlLcrs3OKW8wBZHIlzZFud9p2ziX9MZ7mbGvzkC5A3SejqxdXHdtuJhj6uDSrwBBJFgmZ9ACk9zV8bHz-Jw7uI0Y8IXtinSQ9LZEc5w0~IEWN4HVYOpD7FnuQFo~cQTUs2n-m-QsOSqS9xJEJv0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1426205942&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=YQJ9u-6RF-80s4XFVPRWtMrkGIhYV92ZwcqZ6xzfyYo5Zl8gfPX-7QP8iYtMzF0ybHTAmSv~pqpdlBxifUreZHVH35CTWlNjzcqkChzwwFDwUYvzKIrh4VeEA9fkY2mO-6EmJ~i2G6pC-5Y2LzoklozUWzkd6JvjOQo16d7f5pY_&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1475477466&Signature=ZTfmxlKlg-VEfYAFVxa~oGVb4ERDhP0Sey3lb54APCCiv3toIRTJpmhTCI0K~h1E6HpSE0DCSKFR8zkdh9pQnaX-FCxidV1E26eN3IaACrGZz1ng07Jaw4vhBFQpnS2ihZeINBnXtEnTPSn24OawnhX7EKcVaxRRPRgejxFM0gw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1470301559&Signature=ISbysqXKF6JXhnJ5CphfFsX9NoJmxQBcBHENy6BALqHL8bviVUaHu4RapCVQZQvxieBZnokgUcBhTGx3b0H6HAlIEUwYmN-ly4Sw03JKUfe2cPH20A6MdjKYH2DnKscNwXmVoH96TGSuxojW9x8D9hj8MBmJHrNCwIHRu0VmXvI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1468682876&Signature=QrBWhzIKG9lW8Ncsw6qsLiXJPfX5e61WLA9zFSQBdm3Nf6U1HnpG8NXWOUessQZyBCTa1~vA~TLKuaCdZdcuH~E7PI8xyJc6jim7JmD10V3XemoCgM2DJ-Nz8plAIhEeHWo7MZpshxSKgOafMbjxIjdRKyCpSf0ek4g5xTXa6Fg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1432017939&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Pp0NclqXQBIoj7prdfbUyNmAj3b8UQ-GpTJxpxIaB-p02ReNvr1IEpI9mv6vPZKRadKRd91AFu1Pwf3pWTrPrTXOXQUDucLYiekBSEFTLj3FsZxFqajqOF~yYdKyLvT1uRfB0SggQfkWKSGjsC2bnT8rj-Xx3WtI8f~bJFsV6RA_&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1482627761&Signature=AXTJ2V2EA7y7LAnd1GZig0Sos~b7knPmTEkH5ebvKGLIRkiFino5ldP6PGQBRToPhG3jtB9Ub63Vg63tfxBfPbLuT2ZxBoj9ZExlQLyDcgwMKKgaHCGyTGYt9vcBxJsMe2h46YATVBp8HfZEc~H48Ed81YkT3raDh6vdQRCmPgA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1479702117&Signature=AigtVFVtjm40-5n8B2i-b9WdaIewl4IKOnynHD0YIYkZhwjYzjL7UosUjeCJAs8qkVQ-045jPeYzTS~lkzrTfLL~X6hBAMxJFFTZrzHVfUztD-N-g2Ogxy7tz3DdcHWxpclP87x~JHJKKHhhldtmo3EbrFKfEFerYzNV1VMmViM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://pf.dlvit.com/s/3/.../39595-83225-zuma-deluxe.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1474967945&Signature=LC6Z1r8VWvl8KfQKTW3stfuDP9pgBZ~EmvfWlFs35iNEZcfbohQSTTeY2rW1l63Nqa4zsz0r7djFNydy5n9h-XMv6tD3igT-Vgmfw5pIIu8ldeLgQ46Vk95KT-P~dl1IL2C8mbvprNLW9p6deqKY~vztsfMbXwaUzb2CgyxCKvg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1470621358&Signature=YTz7i~M7QI-pAuZNTdH5-y69l-HHvouFEIu9oC4su1aa4yPc8x87XXY2lCQ-Pdg6cnY2L1DlwXx9lNgHz54fFFhKxVzP9lIMxNVo5qNt0SIEchfooYa-d08iBZ0R4mBdPB-i4~vqWunazk-eWvVPmQ8B9GQN3Q4MI2nEJE1gbP0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1477320201&Signature=FV1~QVUleij9lexR-g8nRgM3VumdL3f2D6V9y-X~QDOM7~B48301ZPyCtivQfQ6owYaSuMp302-CFMegKxfUxk2ZtaZFBBcql1KftvE~qpON~pxDUun7oD8FVmNt0H3trdNcJU-4Z4swD78lwKzqqAxYIdVrp-XTisWLipGUqKk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1421738099&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=K3EAxiW3UO-NjA1auHQCP8FX4JsWPku-uAv4Mkf3dX5mi8-T0evFuiuPoza0BJ32H6L6N6LxoPZBLzFdW9iN9fFgncvpIxqCXePEtUKW0ieHOygkoaFImGrhLQI6RMGz4h~j8ENue6bR3eMUTOzYpixLXisKOv2IiYaaeYtkohA_&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1435673034&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=B1dhzg2BSuOEajKSN3q8SJxfpC5PmoNxyVmQFJvdPq8AcaXQjfhk7EY43z3YqjsXDLDoKLLtI8c-iYY9I79v~zLDbsWMAWYPw0BJlWv3a0kLvEMxMyffLeV3JCcdLRnRIupETI~OCEsewMD43Q3IhcoRvJcLkSbK1K8EdFw8ors_&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1429483923&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=eI36iHHEIOdoRAXa1PMox8CUSbMoQlad19QeKKnOVOdarhAFcHuaifthwCVsQPyicP8PjlqTmHxHsIrkYCA-lpFbCwbH8LAKsyWRPluz6nSYLtSpLcuZrYFG~mSJ~Ep6bIOuDRRL7SND~WJM5OJhcn4Id2Yaqmrnh2~3RfkVS0Q_&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1474869400&Signature=gL3igeQgSodhEJW8eFV5AjDRRrz9pdLIjRlgPOg-0eiDMg8Kicgji9nlbqML1IcErQASlIUPwYs9poM5vznCm8awRx~opjSUNA-A9JCYVccY21iI4uMkaF7TUAGhFU5ql5QayQ-~RsUPADBALLcWVGdFv~NcFOQMy6m8fms0dKE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1477465824&Signature=WQl~4l0Gp9ycGgVTr4IC5Tturpb~L8wPd4M3haPwXWLOpnSwBqHCqFflFlk4JySOZqctV3KUhJs~PPWfvHV90k8nUJudxkWMl7eOBzOcdSxmlBVOYlm0HDYtMuz6KSbIDkRo1tqTPR6WvsCeowaQycsk6BYwVC0hDyXEBKsWK38_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

temp:ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1474737684&Signature=T1SQ2b2TYk4rMXYsMKoV1zDKK2OsNUfenqXLfJ6BRLeVOWNBRcyWGoq1ALxEITYx1y31aw2duKAvuVq2PbUwSn~3PjVdMYhSFjTK-tubuAXNagwH8PT7pK-WRtXUqYDYnljO8nHxF2VYDEOoE0gmbOlrBxoJUcs~vuI0ZFFWDKA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1477749863&Signature=YIPFmYhN7Yj5qZUEEkqp0UwW1IwpuBx3Jpa51S5fYattH1VP3edprsfyYWiYtItKbAptCvDskxfUZkrBdql3UvJkvrNOlqhpsndAF6iyqYWiiQ5jWOjCxHz~0buO9fJWJn1W0mQNyMTK7aW8cF25GE88ctGw63-jhq8wxfgrAjg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1451815841&Signature=ENemXtzfiRN~LmBiu411YjJ41NsYZDcVrRRXCWl9DZgOjqO-rcbdQ8LbqYnRhn7gFd3IicmVtQlFbVWxOHOom5ForJdJIUYz0IxC26D4ELCRmaxJx7WjHqS1hyhqv6CRF86H23ic~hYtI7SZzgD3OWqaUsAK68JNtKkQb3TSMFo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZumaSetup-es.exe

http://gsf-cf.softonic.com/b57/bee/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33974&instance=softonic_es&type=PROGRAM&Expires=1435569741&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=iVrV9dxqARmRGbzUvS9t65amHjZsOJS7bjBuSseU3rLcUVtdjGAAMxQfBte5YOwwj8MCNT4zx4KTi3QWxhOy-rPnRhWvLsdOCD0kVq99eFHsBgtUfkuOqp6DPBRoAhTAqOpMnPCH1W~KoRHzxfl~4TZDppvdargLi0isaEZnChE_&filename=ZumaSetup-es.exe

Latest 30 of 232 download URLs

Scan zumasetup-es.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.