home

bfme2demo_english_final.exe

The program is a setup application that uses the WinZip SFX installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
bd505a6a1755b07761cebbcf83aea4bd

SHA-1:
6be7d96f64371e7dac4621d281099711f5d5f0fb

SHA-256:
3ce7d07907f333dcf6ffd3ea6809d352d5420e2135c964e76e3ab92cea3f0c89

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 6:18:17 AM UTC  (today)

File size:
1.4 GB (1,468,388,352 bytes)

File type:
Executable application (Win32 EXE)

Installer:
WinZip SFX

Common path:
C:\users\{user}\downloads\bfme2demo_english_final.exe

File PE Metadata
Compilation timestamp:
1/9/2001 3:09:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
25165824:07T9IpiwfqzqqVjA+4967q+sgmzTs7TpAu2d4ZprRhZ1+rMQkVmY1f1fn5kSnC/:0eiwy3jA+4c7qdvzTsxAu2d4Zl7+Cmam

Entry address:
0x3F8F

Entry point:
53, FF, 15, 4C, 70, 40, 00, B3, 22, 38, 18, 74, 03, 80, C3, FE, 8A, 48, 01, 40, 33, D2, 3A, CA, 74, 0A, 3A, CB, 74, 06, 8A, 48, 01, 40, EB, F2, 38, 10, 74, 01, 40, 52, 50, 52, 52, FF, 15, 50, 70, 40, 00, 50, E8, 9E, F3, FF, FF, 50, FF, 15, 54, 70, 40, 00, 5B, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 55, 8B, EC, 51, A1, 88, 94, 40, 00, 83, 0D, 00, 93, 40, 00, FF, 56, 33, F6, 39, 35, 40, 8E, 40, 00, 89, 35, 34, 94, 40, 00, 89, 35, 84, 94, 40, 00, A3, 24, 97, 40, 00, 75, 05, E8, 9D, D2, FF, FF...
 
[+]

Entropy:
7.9946

Packer / compiler:
WinZip, 0x32-bit SFX v8.x module

Code size:
21.5 KB (22,016 bytes)

The file bfme2demo_english_final.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_en&type=PROGRAM&Expires=1481915561&Signature=AGfUmc8G7jmrj3xEboxs4CYZ1liLK6dz1iUDSFsmy4DDOI4MElm8dttW9qUpJh5nDJ8Cmltoq9sBAd9fRdh3RwtzIGronlkfNLlelDoMiZ5u-OwskkET1XhEgNUwHQfWYHp4pX~cKI-Lv6jzIrn5dAYd5tSj-AHfGrAEI042eA8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

http://indir.gezginler.net/i/12561/.../

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_en&type=PROGRAM&Expires=1486699396&Signature=JvRLm6F8cTW-pS60FaSgX3vM3peHKdnsKhEYC3LrBqQICgCoLGMa-X6X6NzX5IR7-Jcy3r86pGHy943OvrSmgKHd7e8nHE29z6ZoRlQVBhYuU0vnLeAhIbg7M0Ya2S8tQEEuqcqZqE2rOEaeUHmgewZGqEWkiteaI111ft2iwF4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

http://lotr-the-battle-for-middle-earth-ii.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMaul9fJDQAHWB6whMCkRNZv3VTZNSD6DDedd5jwRI/q5Kf4m rEbM6giDcVylp7L14EVH5qxGn4lqH2/eruBvbHveOqoR4JXuQ2OovtpCDqGfgfL/dggwMdZUFRFAc gLy2vIomahz9zpwFAi1G3Rncrh4TKBV OQhb0vUwcG41Vs8eNSo9CuLEIx5NhaMoMW/1VW1HgwSW7eBgPdfzLuVcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlWxUOH5AKzstLuhpMtpeJsVf/OF3Z8l2jOESDk57EI7G1mqmMqlwlyzLSPLMS9Fiy83Ye0gktny5TSdV35 viA5mnmOgtEeqNZW43pg8QzgEdDrUsCac /Hc4oLnLSISJNvWuzAuUKJq/EzTMimvQh2Hmn3w3YBdE Fmc0pAKWPSPIBKjVgbmzMQZvVZDFBja9fNZZ7I2IJj0wH35uI0L/.../gBsW8UwbIfQzZub3cIklyvMBOHibsGdNGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c03wZvz uAQxl2BgG1CyRdMft3uiOvO60yfnbj03lD BINP8dxn6esRb4KeGsUJZqvATOd9A1xI8keURl2UdKUM=

http://download.nvidia.com/downloads/nZone/.../nzd_bfme2demo_english_final.exe

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_de&type=PROGRAM&Expires=1452368679&Signature=EtgcYSTeA1AgVKxYCh864gxFi0QPxTYBnCEuVydXf0PMA0tkdIv7dixBqQa3uJkQpu3W0aIjQwVHsHq2EhQhR3ViwAo7~2JuzhJt-xfrsOsbVpVeVZ5qW5DUPBSRPFkiSBYk4tbgP993D65JAuRokniT46jq22wTTZK3mCwKGNs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

http://data2.stahnu.cz/downloadFile.php?n=bG9yZC1vZi10aGUtcmluZ3MtdGhlLWJhdHRsZS1mb3ItbWlkZGxlLWVhcnRoLWlpXzEuMC5leGU=&s=f4eppein7d2u1ne0snhipj1n94&r=b3197586a86f9ca606071ed3b042b654

http://indir.gezginler.net/i/12561/.../

https://hr.download.hr/go.php?file=w13830&code=v1b4y8h2h1x5b9x9f0z0

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_de&type=PROGRAM&Expires=1482823968&Signature=cb94SXBZcg93-tLWAFXnndMmODksyzs7PxcYm7Acim9r3~uAHq~wMgDb34EgGyI5Gq7dTZY6eYs8PLLq884lbAJmjzrfaU~9Ud~2dDT4mBzGqLgo4PqKqvDX82oxTfSKSDCYsMbeB0J76Cw~0MKaXi8O7IE1aePoTz-ManWTzds_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

http://ftp.gry-online.pl/.../bfme2demo_english_final.exe

http://www.4players.de/services/.../download.php?action=start_now&DOWNLOADID=45074

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_de&type=PROGRAM&Expires=1481946980&Signature=Cu16-FLPBwSBTzLjhWburENIUDtOPbhrvcxDyQwX0MEZUgZX2cqjhWgstjVdFPIauygb9uLSBwqfKbO9R3LcEN5HoZLRgUBWqSzJUbuic1-mIuWyeKWaI~-SNiFW55LbXj1y3zSKdFLnQ~mYMJx7Hgv52IzuDvTGlhZuYnle3zQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_es&type=PROGRAM&Expires=1482003294&Signature=U5GWWubVXXuCvl1DKhIpg0Bc1Rbeh~OLgECpaBP2ssfnP0c77PIzr1lGvu5hnPvipDommzju57WwOUYH1wdTRUq7~IP405r8ZJazJp6nN0XMSj4gSa5Y87~RBBSUhGjgXfDOsO0RSbhEjdfFptDfCSDWYWK-jJOXdiACdTFVvi0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

http://lotr-the-battle-for-middle-earth-ii.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMaul9fJDQAHWB6whMCkRNZv3VTZNSD6DDedd5jwRI/q5Kf4m rEbM6giDcVylp7L14EVH5qxGn4lqH2/eruBvbHveOqoR4JXuQ2OovtpCDqGfgfL/dggwMdZUFRFAc gLy2vIomahz9zpwFAi1G3Rncrh4TKBV OQhb0vUwcG41Vs8eNSo9CuLEIx5NhaMoMW/1VW1HgwSW7eBgPdfzLuVcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlU0BhM5mVGxPNw1sXf6D5MFkVmvCzBBjYj4HjoTI9PDGBdsSeY3EaHysHECBNHqZDFwMgbyhBuUdbv3lAI/h0V7ffPYzuQuEW3YmQimknJkOUv1OHEfrYcdZJC4hWT1 lN7MKx08zj/zxyRDyQY8ujvC8FKLQnDyeYUXm5FO7Bwz/.../Gb8e5 Cd3XEox4yKupl6vK0QQwGuBU9CzKAzJGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c03wZvz uAQxl2BgG1CyRdMft3uiOvO60yfnbj03lD BINP8dxn6esRb4KeGsUJZqvATOd9A1xI8keURl2UdKUM=

https://esdla-la-batalla-por-la-tierra-media-2.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/.../nvWeWJKy9bpZBwoNdtfBGhROD3MBxZNG6G6Zf1BlodGDqFATOsNNqxbpyW1DtZ90IWe9iNePEJdRuLliNpw6wPIF2WIigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEba63cEAN3iga6Ipe4eOAfwMADf7Yz69HHD1K 725w61Ps8u RuoBSPsvfkj6UJ8AokRA9EBUAxvggAqhJvTdSRU=

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_en&type=PROGRAM&Expires=1470813941&Signature=OkmxPQNXkxByK~jHg2mztxtIEAhDss36WDxuP7uFNCQS-ZvWxjd1ocDlHE8wbHDi02j1Ipt2o43gFYasNR95h2VOy0vQX273wPftGE98XSC1VHV2~7Ob3tGoBsc3ThtzDEuRnTgsG91NvyQgAFoSvMTmL0jnsE1Ssl9tg2n77mU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

https://lotr-the-battle-for-middle-earth-ii.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMaul9fJDQAHWB6whMCkRNZv3VTZNSD6DDedd5jwRI/q5Kf4m rEbM6giDcVylp7L14EVH5qxGn4lqH2/eruBvbHveOqoR4JXuQ2OovtpCDqGfgfL/dggwMdZUFRFAc gLy2vIomahz9zpwFAi1G3Rncrh4TKBV OQhb0vUwcG41Vs8eNSo9CuLEIx5NhaMoMW/1VW1HgwSW7eBgPdfzLuVcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlXURNX mdJzNNLE 0sWVCy4Doe /sUp6mDh31/.../wMluCFjhfLMzsZFFEMsZWRzV2cyEj5NFxyN06LTFvHVbcf7IJDwbgtyc0GxrpBNlcEODtShcj3qxZGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c03wZvz uAQxl2BgG1CyRdMft3uiOvO60yfnbj03lD BINP8dxn6esRb4KeGsUJZqvATOd9A1xI8keURl2UdKUM=

http://lotr-the-battle-for-middle-earth-ii.nl.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANr57fIYlfac0cvjICQPHmONkfypGE6BT/DTbsmouigJSDEIVHYCLhCoKK0XWYwit2KhVe2nrprac6Gvl3MAjtGg6Bvf3buyeGzk2Rm3CZ2bp7PsP156mwy7FqV/aRvF6rwI75peojombNtF8PkAUb//V96bYldGvdFZkK5QzDvOfIxTnkIEYRQYsHRxgGoGPD0H u6/02jEb9Y57UAkbW3m/qg/F0t5bUPf7 qTFFZmcTqnDZIvV2e s2hLYjnWkqk0gI3 oC3 0z2TILMQEvzYGRyKynt3tTR5/TI9dgfoxIZETyCF9jS6Z0AWhN1aT1fdc4Ss11wZ5CPaByjiomkMXo1e8vuVrZWuMYyarsMkwojNlyrfqHYAiGomUlyoP6gP/n6DS8/.../Skw==

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_de&type=PROGRAM&Expires=1477258328&Signature=dN-yKZq7jhuKCHRr1R-UYAxNdZCl~F25NoR75IdTj5lV2ZEnM7ullGsg4Cej8xN2PPZBcHfstRxLpYVe6bbC72t2V89jN8lcODWGAQJuf2AKh9FUpnFQrrDTvNtc0w7mF2au9du4mGFA1FHd19qMOOOn1wIIGdNq0PPFGCrhAGM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

http://indir.gezginler.net/i/12561/.../

https://lotr-the-battle-for-middle-earth-ii.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMaul9fJDQAHWB6whMCkRNZv3VTZNSD6DDedd5jwRI/q5Kf4m rEbM6giDcVylp7L14EVH5qxGn4lqH2/eruBvbHveOqoR4JXuQ2OovtpCDqGfgfL/dggwMdZUFRFAc gLy2vIomahz9zpwFAi1G3Rncrh4TKBV OQhb0vUwcG41Vs8eNSo9CuLEIx5NhaMoMW/1VW1HgwSW7eBgPdfzLuVcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlWiYFdobKKGWr2XMv2wSy5taJlgHvzyRp8uCw3CZuBnBKwp7wqwCoWV0esGWw7fJ8VKGm9qbczO gtAG/07f5yT6GLsE8D z/DGhbHZJ/QEFBadF5kBncG1CJrsvkmbDMDnfJRrZI0cwapjwxAVoSvOtO98z18IsP/QA 16g/.../V8BAN5QOHhW5dpj1Q2Go8MtCoi2KmqZGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c03wZvz uAQxl2BgG1CyRdMft3uiOvO60yfnbj03lD BINP8dxn6esRb4KeGsUJZqvATOd9A1xI8keURl2UdKUM=

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_en&type=PROGRAM&Expires=1446387411&Signature=EhmSHh2mynawvDavs08gLfbZQMK5b4BnXB72TnggSQH49Hp~QY~qZEakxMI8Y57Y5xuRvw4-GuTz4cr6xymorqsya97mpKifZ~y15S0cmS5Ko3f6EoXliqr5vqC7KqSismEcOww9XuZ-FnZ1Gt1N4sCPUYiZecKkC736imZZgko_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_de&type=PROGRAM&Expires=1475222584&Signature=NOPKHpH7rhomfcVgwoqu13noXtpGI4zFlbFh2BcG3Ys4DRDFUyXnH9htfjEM74JoBzGhlqz7OvrQtXH8bsnpk4eOX24zxspJt06H0ZP6mlU4iwfBmcQhz03v4mgK3UmMqS9L7WBVm4HCBx2kLyw3iwn4d0KNUDT3227nJyC30Ls_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

http://lotr-the-battle-for-middle-earth-ii.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANr57fIYlfac0cvjICQPHmONkfypGE6BT/DTbsmouigJSDEIVHYCLhCoKK0XWYwit2KhVe2nrprac6Gvl3MAjtGg6Bvf3buyeGzk2Rm3CZ2bp7PsP156mwy7FqV/aRvF6rwI75peojombNtF8PkAUb//V96bYldGvdFZkK5QzDvOc/yxk/Rk0iiLAr4C62aydT9n8oT5FdvrCRRLziDvjMsGr6H9S4i2HUeJOkkLBUnkNbAlLfy1R/oaAl6XEvJgWuk0gI3 oC3 0z2TILMQEvzYGRyKynt3tTR5/TI9dgfo1X6BTAVUU8w3uqKF9WvZaAwPRn UzwdbFBBbiBrFXdMXo1e8vuVrZWuMYyarsMkwojNlyrfqHYAiGomUlyoP6gP/n6DS8/.../Skw==

http://www.gry-online.pl/.../przekieruj_ftp.asp?TOKEN=SUYrN2xqUXFHbVg5KzhybjBrRUwxWkdwWnhHQ1NiYkN4SDd0Ty9jSUNwWlNieHBGMnRKV0xsRnZaNzJSVHhoQS9hWFJFN2dzRzVaTHVWRzFDZnZVU2ZtSFFBaWpyRjl4RTNlODNpSjVtM1paZXZBNVFTWHliN2dXOXk1Y2JIT0RtY016cFNXdDVJcjhGZ3hwN2lDa3BnPT0=

http://i.download.idg.pl/fannef/a481ecb1a5203203726f9068377cda60/579a1ddf//zx/cyberjoy/dema/.../bfme2demo_english_final.exe

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_en&type=PROGRAM&Expires=1446877782&Signature=hu7GDowM~f-qpbrUPHP0NlATdpCfTgO4-QtEvYx5LFc5TJLdtZxfDqPGj92RhDMT7fZpFsCypORzJ5cyrQD2R04qsNlNKNCOelB9fLrn9hfnx8J5RDs0KTsqX7cwH~i2YFBoLFrfYqR1LONcD0eUGbbMF0Eoox4d7bTc1rQfRVY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_de&type=PROGRAM&Expires=1473989389&Signature=T9zz9KHQ-7MKfSO~BNtVa~FAM-8peDzFAdBfyGEaMAIhwtkdhwNcJdHDmZOrmODGk~WDNYs1E108A19TJbkdIVQPcZTmlKoKhHw7f3XfpdokI9WoZEs8zUhYru6wrIkM-du9KUqkxkyfuIxgQPyv~oFYADKHzH-WWHR1-0x1A64_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

http://gsf-cf.softonic.com/6be/7d9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49093&instance=softonic_en&type=PROGRAM&Expires=1479231114&Signature=ix8Y0v6VyI~tCvS-BbIHKctgL1xj2QvR5oMaslFwGe2arT7cqSrJ4H0JscV93krAAUvYoFTtV8qKhGDmvMWG3Q1s2AN4Dhu96JJYclEqOaMMA~4wo2R4HnmQJQdX0reZpBrftXkVh7JpcRgAAmKqTyg4GQOfpG1cfkwE2cJXHCE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bfme2demo_english_final.exe

Latest 30 of 60 download URLs

Scan bfme2demo_english_final.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.