battlefield2demo.exe

InstallShield

Macrovision Corporation

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Macrovision Corporation

Product:
InstallShield (R)

Description:
Setup.exe

Version:
10.50.125

MD5:
28b29549010d0980d1cd1d0ad86f8dbe

SHA-1:
77c418d76f9105ea0c8959934b0c8d85950fae31

SHA-256:
b71ad2d1c1ceb64c520ccb7bfee68b98bbc62a2fbd7e599df5cd2bffd438573b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:07:53 AM UTC  (today)

File size:
546.3 MB (572,848,791 bytes)

Product version:
10.50

Copyright:
Copyright (C) 2004 Macrovision Corporation

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\battlefield2demo.exe

File PE Metadata
Compilation timestamp:
10/22/2004 9:20:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12582912:QgPNisMsPDf1gOT6ENz9zLUeLZLHbUj0PI8H58YDeyVk/Pcd1KpcIHiwQ3zd:00DtdFfLn7yMBZ9Vk/i1KGDB

Entry address:
0xCE02

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 58, 21, 41, 00, 8B, F0, 85, F6, 75, 08, 6A, FF, FF, 15, 54, 21, 41, 00, 8A, 06, 57, 8B, 3D, 88, 22, 41, 00, 3C, 22, 75, 1B, 56, FF, D7, 8B, F0, 8A, 06, 3C, 22, 74, 04, 84, C0, 75, F1, 80, 3E, 22, 75, 15, 56, FF, D7, 8B, F0, EB, 0E, 3C, 20, 7E, 0A, 56, FF, D7, 8B, F0, 80, 3E, 20, 7F, F6, 8A, 06, 84, C0, 74, 04, 3C, 20, 7E, E1, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 50, 21, 41, 00, F6, 45, E8, 01, 5F, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF...
 
[+]

Packer / compiler:
InstallShield Custom

Code size:
66.5 KB (68,096 bytes)

The file battlefield2demo.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_es&type=PROGRAM&Expires=1475977712&Signature=U7k-D1bMrbVcSMSNEZUXlnzoIjo39PwOBBLG1xZB6-OteKu2bs8NxhN-VvK9bE7MOvjTxL8q900AnePiDH4SQSAMwTSm8YK9-F77FxjkVixwwPzY~ZjCQ9IagCFDDQT3LeDFUwLhqsSPNbt2tK5KMpynRHcmxE57d8IxH5UC498_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_en&type=PROGRAM&Expires=1478136461&Signature=XMZA2vGL3lLpKXIvM4eHvi-uHnQETJl6-ESe7jbBWGzCNZufAybRk0vFuGjf3KY66-WgLGFiotH6yfQLcE4dI~Z1b1seRcYFofj7al-kys6QmfRMjqrU-6H~PHw3XfpSgTPfZV0VbSzIJizfutgEjyKncke-D3qFFZc7vQv9Y-E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_en&type=PROGRAM&Expires=1448074864&Signature=NRh~UGN3j1a0yPOjQActTUjjhPzPyAKnbK4MiK3FIIWG5S6BSPe0BZv7dZQnPZS1ugJpU6twEsiuKoEzRUYQXm31Uu28xlDN6j-owrWbYKIVIBOoMYCaUwFLUfaEKzecVjj4dHg8LlozizloMBWB~0lM~y1tbrPN6OfR7te79zg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_es&type=PROGRAM&Expires=1486023979&Signature=GO8S3DM7n9zXhfUiPnzqqnGYTQRrV3--qzDeenHP-7TN01GL77e2RMNavbeTpEODh1pEKCo8yLwovG0w2JO~6u3iTDxMA4uM8zFY58u5j6m7dj~ZBIckawjFR-SPNS969XSDBbZDfIYzuh-NAfdvKOrZQ6EiC9bLVlk7yllKBeM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_en&type=PROGRAM&Expires=1487920265&Signature=Z3NQsa~KbR67JB1WVQEACSHj-tY6l1JkAbe-BGfWG6uNfjvDRLCJOG~~abQxf1A4esC6326MW3-h82u5dLGYYZtK1JU~JfFY-12pPh2GFto-Kf8accdNQCYqWgjrVUdDoCqCnzYf0rTEtJw9MMeoUs01cotAWgdA9XfVYp7sHO4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://s8900.chomikuj.pl/File.aspx?e=fQkYsky_uymffA0mqB4kfe2wO7Q_CP8d_IdZWNcCzQPyYHlXiB4xqNKQPemGVzdn5DCFReQPJcSrUOzd0psHLURqWQV65nHcypOTouSMP2RHZ1ObGhSnu7pTfDJgbCEHgjx0u9OMQnEO0QhDPQBbkQ&pv=2

http://dl1.jetelecharge.com/up/FYI2Yi73Ou/.../battlefield-2-960-jetelecharge.exe

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_en&type=PROGRAM&Expires=1428433193&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=MPJHiIJirV-6UOvdUrSja30QkJpPegN2FXICPJD96BqyPVr2RdZtdeyvTzPDAfeui4POTvCxuu2NdGpMpdSGqDXCLVe4RvfX~DaRPN0reuPmZjJb4iwcukMaJKGae0esR9wvJyi1U9SP24v-E6RnUJDpD-5i7y4KntK~DG2LCAc_&filename=battlefield2demo.exe

http://www.cdmail.ru/.../go.php?action=download&id=4199&key=3700509

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_es&type=PROGRAM&Expires=1423623616&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=EYmjZHMLEit-qdaO4UhKaDYWYxVjp6gFC-33w2r~yToVNZKGFliHg55ggRuPGwLUVHHWpUeEdbfE2aX~xHLo0CjRbmY0QBu7S9wPaqmV8TK1G1PlEI92Irv~6AqYVVnW37unAgXpEGEZFSszvAritBigMcwq9OuG8DWivRZwMwE_&filename=battlefield2demo.exe

https://battlefield-2.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtwaD3oP/HjbttO2 kNPANdj4v0muF9SGy8N1k TRXOXBi0fjWX9fHpkHKfTQYqIgNOrKqfTFDcNlOk3wbLff14GU45sUeQ93SzmrarnM5gpdu57qmFeH084yJ3GGnfxDQL7p/pfc3 EZAfPoEXXXXdvsdy1wplysJ7t/YPSm46EFD4rntaCfBmqDbHha31yDMRLigfE90Y4WvyeR10rNaeJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugw2qutkk8q2nlFcive3bqoJSdJyzlOmXePxBu7YlEt Ap2inll8sUw5Ra7K3/eG2dzQzYS5LtdOIgSmV4LdvSvRRg5w9jmPVBdbTUyEGjciATMkK6Rxl0JQV6C186gE7hbjhGV8vmNyDWYOXgxJHol6eJJ5uIW2ZGrZW/EIUItNv09fDsmFEV34UdC3Is xq1pDs0UXDkyJJ19mus0Gp FtIm76o1HB6RmYm45p7Snj9pHY6GFxmmk datBKi5d5tmIigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbVW89z/.../GN3IADhTvmnI=

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_es&type=PROGRAM&Expires=1483787333&Signature=fQeDswOmDkzTrFTZSa1MzSC~8qL5MCqPV-YjelNHzuXYxYKyIoVOFT3ulGHmLJgbjYlPUpM78OFTWlkWHV53BeOGUlvraOuRDBttmmrQcokVoOmGi1UB~eGo857kzfZVp0zQICpAL3BePArWdF5ivZyEb4wH~0VWIpqjQSUViZk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://data2.softmania.sk/downloadFile.php?n=YmF0dGxlZmllbGQtMl8yLmV4ZQ==&s=sgeocdgk4j2ir0gmkjj7t5hsn5&r=9cb55bbca5e360436e4b54e94bf9ea56

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_es&type=PROGRAM&Expires=1470417996&Signature=SNdyvjBwsaDpHqvoJ5CPxL67t3Jgm5v2Z~0jUTVUkgAvIHfikhkKzTtm59ToUbwD1l2GU88AVMGyCLwx9hkdi~c6PVkSS-LOoFkmivx2cbAGqIEfu-BNYfA7sSpYLd3zx~RJjIRUtF9CPI9~LCZgxZ-V1Gacs6WQ6kOHw8ysmeU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_en&type=PROGRAM&Expires=1463287944&Signature=L-Md72xpVi4M-Tyya0pP9NYXutynZ4S6khsoqhYUohbhLD1PeYTDsiYci3tiHnwKVnSSpv0GDyT2yhNpPLkt7QwPngnmbjxOou0ivE8NxOfryaUxihkKFSh7cR72a77xBWB5mwWEvzExvR1IohjUBzKV5lTgRt8dURaE9xPEokg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_es&type=PROGRAM&Expires=1484266428&Signature=bmIEP2GJ8ON7qHcch2wmQ-p0xLyBdciJRQpeKmWMUPTqc3OFNYjt~0HbOLIrb2Rjh5L4-14Wfach-PvWcoZttyGBWVEOxF3EQBdkXdkghq~fr0FZHInfEPLxzo6DDKTa4BRpGZZJF~uEv~xh9JIvOjm1H8pTYgJvrL76O9NGNQI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_en&type=PROGRAM&Expires=1476338342&Signature=BK2AxLwgvW2oQd0Dqv8~W-qdGWbEF0Bwmiv3su~RcK~Y5eEFyPIvo6c6mIR3wgDoJ6OvFM69GDSFZTeh-hbuJC~yJ57Vb5GBGAbCSOYsk82Ko~DQEYbtD8S-B2UQ1w6m7EG06kAXuexrRFbZfwgupbnPn77ReQqa0Ix3jtsedfc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_en&type=PROGRAM&Expires=1483076662&Signature=Rr5o-SfpOc8f0WRFirBInZlWjz-p0BQfSstxjCclDitq~MpT7MZ2j7RutiRT-4HMeRRyRYLhq8SJ~~aL0~QdGC6iT44veIgJq9HsR-4mARD5b29le3P7MoaSF~xkgexFVlD52AZy3ROSRqGYmNUjNKVspJpsKGeqjyvZklrmSGU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_en&type=PROGRAM&Expires=1459119902&Signature=L4hQaXzA~thzntp51G5~XTA2Mx7X03afVwePvUdEXIVpvrMP3bcrX2xSsPuLmhilJVpqRztAkNh43Ys6zdGTlPW55jpRJMsXXR-xJ56FP51gRw2t~owek6q6XVjt4xR6y3ZKX7Ot6~vQY8EVkD11OioqUb3wV7KyHazz5K235SA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

https://battlefield-2.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtwaD3oP/HjbttO2 kNPANdj4v0muF9SGy8N1k TRXOXBi0fjWX9fHpkHKfTQYqIgNOrKqfTFDcNlOk3wbLff14GU45sUeQ93SzmrarnM5gpdu57qmFeH084yJ3GGnfxDQL7p/pfc3 EZAfPoEXXXXdvsdy1wplysJ7t/YPSm46EFD4rntaCfBmqDbHha31yDMRLigfE90Y4WvyeR10rNaeJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugzA/RjlH3/F4uoyRmcbTWdeVh6FcUg1Yk9O4l27YOuct1zpT11SJA17VU7LYRER9kqK/WuyjpWq0f57rULbhv9ElUjFsWsLTcge3ta/Vi4MlITW4VtlglD39G4LxhrzfuUqcMrq0eF4oEZ hdbEi49Pv7krn4MwBhBtR1TsgnbEA1TnFOPczfPzn8BtgLUyDiZ2pJXzYnBdUbK1sDN7sostLvKZ5Ghmpx1fXzRE6mzZPL1rueXuyeug wEcwWLJqsqIigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbVW89z/.../GN3IADhTvmnI=

http://battlefield-2.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtwaD3oP/HjbttO2 kNPANdj4v0muF9SGy8N1k TRXOXBi0fjWX9fHpkHKfTQYqIgNOrKqfTFDcNlOk3wbLff14GU45sUeQ93SzmrarnM5gpdu57qmFeH084yJ3GGnfxDQL7p/pfc3 EZAfPoEXXXXdvsdy1wplysJ7t/YPSm46EFD4rntaCfBmqDbHha31yDMRLigfE90Y4WvyeR10rNaeJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugyJv76EHvwMQzlqJhJPrZqP fvGZKOvLN1y 3tiRN4uNN/cJb55H9PJzRpGn3eAHUBTH41uFlTFGCfkj4GaeMRbShhE8Q1jNRfPaGsmFGBLAG9nOzohTLi955CKbLGapl231VBurz1 g/ukIOQLMd9uy9H4q6uXSU4UvoiLnOJjIRfAlCeTZapVvm55LPfmzgxMIN2BD0rzop KDW1S9HMibV7izDRNZcnxLYjcLMwfDRYfdIhRr8uYfEfk0E0c39SIigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbVW89z/.../GN3IADhTvmnI=

https://battlefield-2.de.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMqCl6QRr6UyvOWEVdjonx1aUK01/GF4tRf6IB 8Oydj5JHsCy3mi9g7Mam6U4clqOiUwzVJo1qPFIZg9gyK0GLSQfrON/.../wbOVsR 33TEFDkFgL9PVPVTOWQKwtrU=

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_es&type=PROGRAM&Expires=1448461865&Signature=HPk7qsnaGPKQ0hDxIaDcsAavDWt7qlpRrWagVTZg6kNi1O2EG~A4igN-~Qf3WkQKMhhtwd-~0BnMJ9eXM21yQ9gMJiph2YnIXSLxb5s6GPQKH~eMPoUK0hFPzi~3flsrSafwnFKD-hoFIgw5hWB3VkQDBLKvLLK6TJcqRUwovQ0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://data2.stiahnut.sk/downloadFile.php?n=YmF0dGxlZmllbGQtMl8xLjAuZXhl&s=npvfd0gu821nbqsbguibuvq1t2&r=f05adfd0ed37e8cbd5d042cba5ede1f0

http://88.86.106.11/download/.../battlefield2demo.exe

https://battlefield-2.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtwaD3oP/HjbttO2 kNPANdj4v0muF9SGy8N1k TRXOXBi0fjWX9fHpkHKfTQYqIgNOrKqfTFDcNlOk3wbLff14GU45sUeQ93SzmrarnM5gpdu57qmFeH084yJ3GGnfxDQL7p/pfc3 EZAfPoEXXXXdvsdy1wplysJ7t/YPSm46EFD4rntaCfBmqDbHha31yDMRLigfE90Y4WvyeR10rNaeJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugyOFNCY3B/YIUgVdwbAXMHCateX1DSLRm6zq/Cz7aZ8GE03HWyyCqu4x3ItjF7NbnGGal85Q7jvvNhAiIqD9Rkb7Aiwwn lCnycMk9IAwdq8C/D4xG2k7RC0OZ71cG3Rq7jw5Gt5I18 XglzEvT4qPraG4H5PSrMiGuhVfiTU9RuyAAvPuFVnrz04ow0Rb/tdj9 cdagSzTE92MbseyzkgdAkp/ueF7HlRWIynRewUCt0tHV1ZbNQs9VmsvXe/CxAWIigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbVW89z/.../GN3IADhTvmnI=

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_es&type=PROGRAM&Expires=1477666751&Signature=Ju-UeEIo8YgMZrTwCq826tdaYxldvqYpXYFlATRuiOMJI5c83fEXebmi59h4neV0qQi15x7EJEoZ9rPtZUutMC4nzyDBhYOq1yUe1KLiUQIeIuMiW8YAU9-~~vQ2sYPHVVOWnTsYz048m2jrfBgUJZSKhq-QT9IsXxnbsok3OUY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_en&type=PROGRAM&Expires=1441393835&Signature=EkAdGf5hNf30me4TTPUg4kiCDZUaZ8uCPkCmOmTNrrzd8nzjf4tpzTYlbZ5oU1Lc1FfTsgFjkQBG5eLF0vlULSBW47ZicmUs57BVmcnxR3Cn7WEhUBkZka7T2n~AnmRIDHc-RYF1a7EzMsHXA8A5KdvRPLI17TjjnkXr6R~vNrI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://gsf-cf.softonic.com/77c/418/.../file?SD_used=0&channel=WEB&fdh=no&id_file=41627&instance=softonic_en&type=PROGRAM&Expires=1480993537&Signature=MU5vTe0CuOLWCesTiPTo4sAvN2olIZ-bnmA3sADrI3xgSp8lMaArX8nUG5xRnofubvb7wJ-KQB0o1qzgCjloVpSOZagMKj1OpSCJOWEPcsjFWYTCk0jhilXamZeDw8Ur9p4TA1xRPVPCUMEuKdyR2WFzZDqPEoYucsYsP6AMZO4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=battlefield2demo.exe

http://battlefield-2.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtwaD3oP/HjbttO2 kNPANdj4v0muF9SGy8N1k TRXOXBi0fjWX9fHpkHKfTQYqIgNOrKqfTFDcNlOk3wbLff14GU45sUeQ93SzmrarnM5gpdu57qmFeH084yJ3GGnfxDQL7p/pfc3 EZAfPoEXXXXdvsdy1wplysJ7t/YPSm46EFD4rntaCfBmqDbHha31yDMRLigfE90Y4WvyeR10rNaeJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugw5i4vUj7l Yt2lMhGA8EfeVbqpcS8qMbkENVWEkLQc7iS AZokVkjW3qFkidCvCeagXy2KICk5TwXvLngA4KjZRIEqTgtZxL/jNihkwd9BnAxOFUxPvWrLz8L6dZr9OC7hi DiKmD/8Crj2aUB9E8/iyUuo/A4tj0nZGZuE9RVdmHjY8s80HCf1IirRTpsVt629ZX35TzHWq46Jiuo0Hz7CWuawbGqLOsXDKQQbIvfcypeMpifFjMs20RmGNJAT86IigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbVW89z/.../GN3IADhTvmnI=

Latest 30 of 233 download URLs

Scan battlefield2demo.exe - Powered by Reason Core Security