home

zweifull.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
MD5:
40a1419349b2a36a7104816f08f44212

SHA-1:
a787456529326e6fa0cf648ea5d96d39b3f0ef8b

SHA-256:
ca7b9df4fb5f570d3feb83c87535753cd1f0905415de2fd9e781793ebb1879bf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 8:24:20 PM UTC  (today)

File size:
3.3 MB (3,413,519 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\zweifull.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:iDBXVypmOg6SH40dJGIeZbYY6gBjSBBMkMaRqhq3zOAM0T/17:+Py8Ogh4054jSzWaiY5T1

Entry address:
0xBF34

Entry point:
55, 8B, EC, 83, C4, B8, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, BC, 89, 45, B8, E8, 17, 71, FF, FF, E8, 7E, 85, FF, FF, E8, B5, A7, FF, FF, E8, E0, A8, FF, FF, E8, 4B, F5, FF, FF, E8, CA, FA, FF, FF, BE, 04, FF, 40, 00, 33, C0, 55, 68, 02, C5, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C1, C4, 40, 00, 64, FF, 32, 64, 89, 22, 8D, 55, F0, 33, C0, E8, 8F, F2, FF, FF, 8B, 55, F0, B8, 68, FC, 40, 00, E8, D2, 71, FF, FF, 8B, 15, 68, FC, 40, 00, B8, 6C, FC, 40, 00, E8, A7, 7B, FF, FF, C6, 05, 33, F0, 40, 00...
 
[+]

Entropy:
7.9962

Developed / compiled with:
Microsoft Visual C++

Code size:
45.5 KB (46,592 bytes)

The file zweifull.exe has been seen being distributed by the following 37 URLs.

https://dw.uptodown.com/dwn/RUArMtN8F9KCTESBpGVH0Ew-ZngC0a9ZEk4IFquZgz2UYMlg9o8m7xekucyjbzCeCbcuR1fOWaYTk7aPL8w-wIlG6UY7V2v-868xhK0HZz7-z8uk4hb7ZheJKdAq3IxY/gEYP5UpTWqte4-FbasuLl_iJhgjJoYTDTc-v6_220JR1kJ1OHZMd1CP2tep_nqCDfzlRfG-Ea7bbgUJSZgCs6vzKGW9cz4xBV2Zfw3sMXWkBiwuxpS7xPgXjZkCz-d0a/CVq3YeScG0UTg8CxnlbbfXkGv9YFMwl5O6E1mogCXhfjWcA-_YMXAf2rsuRo-yThcAxYGxnmvJ0flTEwLJsfFRNqI4J6xapPbNz4bU3pgdmsZa_9XUr8dHaeZksLRLjV/.../

http://dw.uptodown.com/dwn/d1cbDmMbv52oqOAqMdOEiPbwzuf5_HQSxn0cf_FKw8aKzo3-Uy_rnC94Mt1GKy7QzzMpPTU-yzYam0dA6zJofw7DvRdLHaIoTPvQ_GxR4mdqLTZO6BmzBDjx_qQWCZSm/kUgXY31zsGJgFUnxcJ630grURdS9fvJNwFi9LRU0zEpQheA1Nwy79HxZ7tf1FM7HdhZ70XCtf872Ha7ARIpCQTefky3Id-2_vT8b2BvfxvQ4vuEuzGN5frezp38Gk4MK/c0BwN6J3V8Z1Ma6_d8H6kCA4gRAQmAOTEgWM0BzuLk24a2EHhQh_w8xg7PBRLiitHldmNgs2kIbU0O7WbE-bpxGS-GIvkC6Mp9mg7lGVwpOgUTl8pkioV-6Ol6tqjOqs/.../

https://dw.uptodown.com/dwn/HssHQdlPTAJAo35Nvb7DypsvKg0Pszzpjo0OcQkR8yxUt6yf5edIIcwqaUjSq22LQp9wsSq5JoPUmDIBZN1doACEaXF9EjMM-W68xaCjM0c1HA679BdvyQAn1BhFFuPJ/uXXe93xJyxMmKQ7564MYZArn1g8Ve5c0xKt15InxCejhCkzoeBPhvsPawldtSrA65Ad6S_JrToyWEPhTV2VMPfL_9bYEqz9P1nneSgB__VbuQuOp_r1vOOOs-ylCYHxf/W7UXzK8TaCDhq1kQoBDbS0Y-_ZzpoqyL9t1zAgTkvNO6MEmfvzSe73r1JSHIGiyLLgLyVjImkkJFbTMWhKWrygVBCvfM3ovkinT2nbV1eZ0fOAwlhMrPXHO9grMFkaOO/.../

https://dw15.uptodown.com/dwn/O4IoHwo_X-qene_OE4cyN24tqX6tc7RBV_QuLxKZWTMhnWpmw3oTjsvtKqiDs2KZKIrht3u8viXbbhcmBerowPc9cUgi7Ms8dSGO4mMnFDCcJeJyXLMajvoqtuXMHEM-/1sMu93t6M3zk5XWnaUcTQji72oKxsF_1N2LvdpTD2SnQAsJUUREr6djOF6qqFhJYaw1WPVPFuTHXUJDWiNDhOeN38Yyq3fL0FLOsVMSH0LVzLUuuChS8o2DD-dBbaX-x/akp3DubtDastpGKbNUQzwgdMNOUwZ-lNOVf3P8VTbtOYdFsW2XmeqmEo0ouP-gHgGWEL7Sg1IFXjVJn3pzI8nsomi1BVfH7fop11C8aoc4nKpmz_MndSeG-1OvYwiWgj/.../zweifull.exe

http://dw.uptodown.com/dwn/K-E3YLocMaodcZAXb9gXt33uHn6zDODjIK-8FLLOR16SA5qCBryKOHjpFaLPh95LreoltDPDGVuhzgf1IyWoCr2AuzaGTYm6-49IFmfHb4v-WDhOhZ1HzV1ikUORU_2L/HxpCAZPQlT9MUeT52LJ2oCgPP05DtrZ8x9P1WDjmJgrXoaO1iUXd-E9slti4gtUhrFMxLFkyWTqNtE99FsCQ0H5BY2eKrnBz-kBiS62_9cblUP7wu3IUGnnkLG3zQw3V/.../

http://dw.uptodown.com/dwn/bTR4MD_FBeB-FO-UcSNh2fi0PntAzL0lrreqH17hJCXKG84qXZVrjinObecIwYh7rpRUTyP8VYESWP6AjPseV-B6zYtI8c_9xlCi86AHFJKStSYiSLcnAUuawK8uEnRX/5_6PG2uPXyq-K1pOcG9iSX4qgsAAM_3uSY7rlpyXE4lmmOH2kAD_LlR63Yxc9Y0LCgeL18Xw8JtSuJna7VADWPdjF1V_omiBhP2DxWo0QookdQo3857GtBHuFa34JCFw/PhY0VmtccnjZ7RXSrg2Hs7Z_cDznSxmrFLHt7WLo85Z-fz_Et1OaTkrQ2epE5rf9hlrttaqiVAUxYTZ-YXRhPdpVx29fjOd0My84GmWne0WclyVPChqjI-3yw53eryaY/.../

http://dw.uptodown.com/dwn/aqCC7LQczakTkAwo2s2GO6mXvwyM8Vv_KHZVaS7bkbLlC0YqYAcIL91x2jvFsisbeb3fGJ-PQJVRawBwHjMPcl-jl7QkNeQLqRnB0keEi-AIboFN11RNVd7HIKUm4ivG/0_YvgAhsVkpf8vJ-2c_RDAVcI_amitOHlQQpFXEiGAq21SD7Nm2uT7GiBvLA2auKeO0UbOjoUKX-DOAzNC_RKSJaCJqLGN4O-uwqcmm1nBD4gi9czpSMgN_nc_5Zf7yb/lTbnivlXt2z1fNLuP6OpacWbvB3OKO1SujAaRAyYQGZNGWpHI3SdEAj1NBUa5f9WiVkMHXl85puipnqFgUIQAWJNHLm1Lk-0RkH23GCEUDq0NixTcZjkcfRQT7EPEWrP/.../

http://download.softpedia.com/dl/38f3c2ac2cd66b44d3b26fb029b5946e/57b7814a/100007242/software/multimedia/.../zweifull.exe

http://dw.uptodown.com/dwn/DayW-iWyniM51Jac-mjemp4dEdgZRz6VEy30VXWSIuQSA_dhlVwdC3bKX0ZBoIkpN6Rujg7m3m6GNv9QhMHKymqeoksY65uuvpWHCD-FxrngZUpNXagu8KtQtEHlk6L4/AVGMcpKku0RPoC8-91Ja3a7svZUNpguI-AeHXX3RW-ffOQTz2OQyuztORC6XIrtzQnL3j2DESTSdVZrfEgaKdtLau3l8vtjRrGeEVqChfq6z_E4XEV3VxgQ996y7TX4p/.../

https://dw.uptodown.com/dwn/9l771i6CERlmraJVgc9nO0CgFJpgUAeziS77okfVGy3PgYZ63H_YSwL-emdRbx54M9yEEG21TVVPT47LQe8Xhu5MjU_aigjLyPrdhICHhIqAYB82cV8O8Pc_0FAXgE44/VsPoYA4mkJkdNa6aVFGi2syEyODi4DCJL3Gd2tkYOc1vNCXqh4kqBlzw5ALOoI4hCorhWXvGLTCCsSmv9mgL79ZRhWjaFYsU0JxP5JVF92WJs8k09R3XmtMEFAqIADv3/uULabR_fcfWEXIYLnlpv62SJm5ZRBKXfL96fkL6OKAVNmphysxqVTAUGjP12pnvg1X8CRlYWQ1ZlBR6PGvcnkQ0tT1fB57F-gZqkUxQIQddGlb7n-8Ea_jMx_eurkmw-/.../

http://dw.uptodown.com/dwn/9YWLIqc0mxoDPwiQyQHuy6bFzP6L-sMrIhNMUh_FyLspSPLY5NnJ4JLnXkJ4UNgFNW1hkVXRqw71epKrmF6VWHxrjMZiykX4K2dVbJC8RBs7wzZkTNirRXOTMNZ2c1vf/cAkbNf9HLbK0B-7v3sJOoKlSzI3bAhn6lW-243BFDgP2lZEm4PzRdQuOCFCWRLaTn3sCoJgFLzc0uu2D1TaZoWUU3UePdMt1V99GeT6m-u-TddwaHXOVqUJ_IXQojFHz/.../

http://dw.uptodown.com/dwn/IDqTZg4puFGSspsQqwRpVfvnhW7KfqIvlWygxeb9dg6XOg8hwyhWhwMd7v56CttR3xuGnkQlgQ3GhFoTKbPNNuHNKkhP6llw1IoHXGW3KCeZQHIa6GO3JOlJo5_kEX8y/srcIhx97_NgkBaGREhh0yJKPTeekWL0OVbsEt-th4BHr3iKQLIWQTMlUOTvzsNnb6OBpz_m-L52fSoUlBWYj6q4bcNu6E3Mbuytl6M5dd4SU5tFQmiHc7yNYSOLzmt4n/FHzxhxQ9NfmYULcSZYQyPelMYvmi2ebLd20qwY-fsb3SP6bB1C70hGQGjNQys40USCieL7lSksgwULTbZBje5L2uxQNexrmljBbNBMTJryQlDhqBxuHwL-RUYikhEJDa/.../

http://dw.uptodown.com/dwn/VGwroP58xwMPYWEEE9lYD9-kE9n_wrbD4l9HvhrGHKvzzuBHH2RqS1XdmW-4uqOJGxtkVFEzvn-Q8tB5w5JxW0fu0Lpb0boMRjgvxecY6vHcDqgz0r3fvhzrKQFsfX65/0hNW8MAIZN_o1MHpLfj-0fAhjTpFW6-mhYRuGnEg6X0eKnq6bNODUTiF9CsxJ67WUdQJglvE97Ka-KGBOx6E7M5T_jUUvA8Zt3wH-hVjS_YmBWOFZT8cHmlXbCQqtavH/.../

http://download.softpedia.com/dl/02d06463d08bcf4e5d41870b1d93e1d2/57e816a4/100007242/software/multimedia/.../zweifull.exe

https://dw.uptodown.com/dwn/LPMv8POAxBASG8yegOMImOtz29MMZqixmgFiYFcJEzbK2ZvYSKo8e5_pjPZT08jc7QpPudcD0WsZwwc7D4oWVn1XH0K4fWH12gcGDa8LrWFqc-N6tjDJY0sdjuwXoPCv/MumM_danvTgRnNIFIK5WE1Odj7aNHo4q8CdUerrnJefNKYk6GE3ie3hIz1nryKlfw5d9EfqJcLPs-Roy-BzAv3qb4dUsQdvkx9qvwI2uLRjaDhdJXFuaS6lmowU9vCik/ctR0VH6NWqoJFlF4jg7MwCyF5tQdlr_eTFP8SRvcGQeXgirYUvYNG_SmRK0NSKKeDWIYfeIXGI9vVznLmTDBWG2_BLi3essjO5X-4p9tbbU7BCIueqR5mdsDwIoJ5Ndi/.../

http://dw.uptodown.com/dwn/WOoT5U5zLbLNO5vNYHpNOTQ6GnXg6-MAMy-m4Kbx2qBwTP-ALQKnwmj-rQ6Fj-a6kcJBsrX_TD0bfaPINThRsoWGARi-Mm7M8bZGS4bFuovyTcety31AWS0ceKieypbz/.../

http://dw.uptodown.com/dwn/EUoJNNpvqG0ekQUTHuDIwhL2On6QPQmOjNn4sNr-djXYU7I4XRyJNzCWPJ5LsFPk365qmXRanlAVBU2KaG7Po_JQScgqFVmPZx4AR5_aTRoMqPsCXX952Aufndna-02T/WibK_t0ZGA2m2lADfpNzl9wt9BllmAYMNy9l26HL74S7P9E7GgTpoPIIc5ksl446mAHQfza1tf_zbgL8IH0-ADXon3SzMyVAdv3IVs3e64vFBdLoZZGeqK59kAcjoJA9/.../

http://dw.uptodown.com/dwn/f-brGiC8GC-WY_QBwBSQbCov6ku9bsXWVXNCoUOSdfgTdvSz-VUksmSuzMa6YNpFkHNeIL2Tti2KkQbDp5YAHKfPO0rcZ-ZNXNoanqTDRcoMUq_W28GRoJcVppk2exL-/SGU7bbTNM9cRGVKEanS6BKAaGzsqDK-fs17uGk-x0XZqrBW4A-M4u5R4JCMQ_U1uO2pJxFWfQLPZwiASV6XIgu9FtGExnO0ZEr9p--pCBOwh0Ijco9yqKqIghqaCWSLj/.../

http://dw.uptodown.com/dwn/RkuyypdlyNGsrPAUMppX5alDCUr4LGc-x2E-JxXs-4KkdSDapfM-sl_BOOYjoe9K97N9d_MexD68IvGrv0Czvqjxx1uB0dxN8Dqo_wTS3fshAM6UM3Zbaw5RYFcXpBNZ/zTzzjrP6CtFbRbUZ9sbjEbjuPYb1RKuLph6SZ63kgjBUECbz7MG4oZQdJrGyCjx4iPXOMi53D8PD47ui8DuhAeOQinMzfkZ9p30P8gLsLI_DyNabjRuSjuD_tEXyOW1c/.../

http://gsf-cf.softonic.com/a78/745/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17287&instance=softonic_en&type=PROGRAM&Expires=1464414595&Signature=KKKnx22knE0kwA9kRh6CGy6ja-e1u~63mUGyzq8HjHaaObrwMxeOB6XNwONqSacLcnl4GreWnZlzR9VhwfyqPqFnjCLJJf0MOxyuA5~WHd-CjMjkmDks95B78aHbCiCWpbc6sXPFzopJzFJYQ1gl0zEl75-cwqvdY~I~jU87vdw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=zweifull.exe

http://dw.uptodown.com/dwn/719gHeduTLeXQmYyAMERVLGWKI-6Ey4ySHFhWylfBbjzpKjEUx-L3ltIhwoClRQ7VIStE6q-dd6frEUsdovJm0T5ukFFNQWwxmJOkuynLBqbc0q0Y6nuk9_jvkw3169x/bB9VHmHljySMxzIhl-asM9hKKF92GVf6Ih-GXPVfTM9fGh_pFZrKSpztwD1AB_H8WxC8iXplXgIJUQ7jbKveWlUpRE291fp1QQavwZTW6s-Vj4UbMrMWkQ9o1N2gQkb5/.../

http://www.tucows.com/download/windows/.../zweifull.exe

http://dw10.uptodown.com/dwn/VY50BDqDEqafwfwTzQ7cWnFDNWGVb1UHoFVZK2h6Ixm83-RVFH7k4s-IkvVF1rN32ytc2eFnrS96GosI-pusL29bPvxpJO8f2kczlmzKaev8Zxs44xAm_adybGkzCRUW/vR9Y-E8zZJiXOSGeVPqVjxGtJo7K-LVJJMGtUEEgTGW6iSLwEGWSO7Qutcw-ZZFtaCClATVij6VOUWrO2iZcd1odV4E8ZLzS9saQTJgv353dWjGAhrxU7S_1RwSeNhC2/.../zweifull.exe

http://dw.uptodown.com/dwn/tjzxBcuWTjnsw38KK0p-eU1BbH0rZQ1pYCXE-4PkuQNIe5CCfDRwuaf9oWUTUuK3HBm2uEoHAd5PhnBRqinhv16dKHVYUjCekmHH1lkSxCBPr75iOd5ZVrSkFvqSyC2Y/6v31DYWOVyy2_pe6cBwgD5zqfG7KQ-8d1sDxrN5-k7iVhBkVXplmfBljSc2vvbHcpbuw3YfYM0p3oIiH2MDmiGYiBWbat7hBPnnRzwlNbzGcyINjAFEkQRVfT46YMFOI/.../

http://gsf-cf.softonic.com/a78/745/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17287&instance=softonic_en&type=PROGRAM&Expires=1462452759&Signature=AM3OLJ49oAa2UQyEK8fVnVkjD4tQDrXfJschh5IegTb0UvNkCvdleGxCELNrlHYriVJxXVCVJ21mO73ZAu7i845hGRnZoCisjkDg92CpUKdYcBdgl8j6d4arzRSdaY90eGclka28D7332CJXuGpO0sNnxZD1LOCrPfmOZ5liEwo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=zweifull.exe

http://dw.uptodown.com/dwn/bDCqmntQPp2C42Pf787iw98yr1HKNSlwMTJa0eDu8npX9JlgHOm3zRPTq8gpURH7Y7w1JZNIzYHxv7YXoXhpqWskS8_KnVX8SyQz-p5G_kVANTtNXJXd4avkc3GhK36z/vtptCF4GqqUODaIhYxR3SeKwvXqrshbW6jIYzwvMJVGgYYTKOjko-a3_vaPzJZXzBz0qCPKpSUBda4kOSGbm061py8vIe-BtCQ4DbdMXp2XlgmEjuvixWK1efoyPu2jn/.../

http://gsf-cf.softonic.com/a78/745/.../file?SD_used=0&channel=WEB&fdh=no&id_file=17287&instance=softonic_en&type=PROGRAM&Expires=1457297904&Signature=N~mGoIdUgCr~ct-NEu~nkZiE1uqoYpHrpHG0mv-Mr4eWVy8UJ5v7jPmfWwdZtFSBf9XvkIjNU1JTy-4PYl9qQyQb19eVPRvyIUIgs-Hg9Y84RCFtKwQgUzl2pRGiM-W9I~wUQjEUMBy2lPeQ83x77qnF561kJvJVu6VIBRKy-Y8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=zweifull.exe

http://dw.uptodown.com/dwn/uPaKboKzFDSc9r5jLORgYqPFWulFyHRHkcEHbNAk28TARoi1Ia6mHgmyZLF1Sak8cscuSQRmR3NcIQeU_dY4SXaQfTunt66mtve8GMg5vlBXRUu83SOM1ay4QCoFBm5s/xaZ3iwnSz5zL1DyUwcAHldZxj4K97yEYAYrFzv9y4Mq9EXY0e7SUVtxATNpV26N3p8iF6q42ihUBh2osxEsjzYjhnSOLyqqvpXaz7b6F_y_hQHVX_F6xH8A6itdBJ6lI/.../

http://dw.uptodown.com/dwn/w9vtWDeHeMqwrFiDACRZ5Cua-IwgIm2yjrLkLwGAw_KaClbfXpAmF8X6MlvQgVXhiiJkFUoClA30lLhrCiYNEr0z9PraNMx5sFkuxmM_LgT7aquN9XNh33RKtgOg7qMz/.../

http://dw.uptodown.com/dwn/LA0YIqCmw76uhsqSSGW03i1HKIMZ5ecD0HFRjd9Zh2Fh1AOdixYgK5AsdR0JEp1KVivM6LZI0nsNHKGY7E-cRcz7lrkzYtThIcCi1XnGdXc8F8Q6UAQBVLlZIoaURNNv/22aiDmY6mg09clzWiek-VekIqVvjTQmWieeuI5xSpQe7q5FDuepjhpWDrcMi3TvzWYOuBjASNilXnMykqeZft5wac5STaWVJodV6XKv3rxTZ33Y3GPfhndb6BYkn2ZGN/.../

Latest 30 of 37 download URLs

Scan zweifull.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.