home

f1rcdemo.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
4c7b0f1c90b2295051db8a435b6a64e0

SHA-1:
6b8f638fd6d383fcbb1d24b60fd042c0cff14a8c

SHA-256:
c8f0e74c8b42c8cfaced8f92971d130b769d7dd6655cc1685a2715e9a626ba11

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 12:26:55 AM UTC  (today)

File size:
119.1 MB (124,936,704 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\f1rcdemo.exe

File PE Metadata
Compilation timestamp:
7/16/1997 9:32:05 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
4.20

CTPH (ssdeep):
3145728:dZMaRWbJbohHp/oyBTD9ydXtcFKFr49//O3e2:zM6/VBYNtccFr03O

Entry address:
0x2C97

Entry point:
FF, 15, FC, 81, 40, 00, B1, 22, 38, 08, 74, 02, B1, 20, 40, 80, 38, 00, 74, 10, 38, 08, 74, 06, 40, 80, 38, 00, 75, F6, 80, 38, 00, 74, 01, 40, 33, C9, 51, 50, 51, 51, FF, 15, F4, 81, 40, 00, 50, E8, 21, FB, FF, FF, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 83, EC, 04, 33, C0, 8B, 0D, 88, 73, 40, 00, A3, 4C, 73, 40, 00, A3, 84, 73, 40, 00, 89, 0D, E4, 74, 40, 00, C7, 05, 30, 72, 40, 00, FF, FF, FF, FF, 39, 05, C0, 67, 40, 00, 75, 05, E8, AF, E4, FF, FF, 83, 3D, 6E, 73, 40, 00, 00, 76, 74, 0F...
 
[+]

Entropy:
7.9970

Packer / compiler:
WinZip, 0x32-bit SFX v6.x module

Code size:
14.5 KB (14,848 bytes)

The file f1rcdemo.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1486658908&Signature=TJNDNfYaeQ5qZRtaRD0UBbHUBS3FCJzeb3KuZSUnqrLQ3jAd7e54qg8RM2ceYzA8vZoPkH0Rdijrtp~Z2Ffb45Ldejd9ALCuZtKOWnYCTzwA54c42U7IqNqGBDgKPfe00D5qK2gTABytmVRBQWDwvXO3NpGnx5Htu--yn4~QFCg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1474484164&Signature=ab6YsZBXr2HwpBxV1NjZyUBGqZd~EWo3JHFAsDQKUsxqkQDUm7koQNmTxQpJWyUPDXEZR-HHLYKKP~aGh811V-exzjwpXdvt3EwpRLslWcxKyqnK0P4IimGrtRMLn~DK0WnRuqMumzovyf0wJEcOCH5g4-Swqw3S3ITKzLqTGkY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_es&type=PROGRAM&Expires=1481970119&Signature=dq8Tu85cu5UMkpGU6PGy0p6zyh0BdDpZ5JUVRtV-WHm4ic6JbUGGfqrAm7vM0UJZI3r67oIMljL9Hnvg4KRssIy9bqx8KYWAQuDhyq3S2x5XZ5OnzTWn9vwsRM2NfqNl3bsAq0YkKbh1YmCgRxTKBmP3grpemOLhEA2NLTKkazQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_es&type=PROGRAM&Expires=1477568826&Signature=BnCqsrpCpKKgOnju0TUAach2z6oneIQXwv~m~YKK9nxR8RxL88Z-X7QGJGupPiaxiGrctvFK0pUZZVlSuLYWZLweEbv4EyvHB5-Yw0kz0OIGXwMlHoNPfzB1WM9c1kBfPDuoAmcjnPLmR3zjuXyW3Mai4kIRUj9ANFKiXU8uvIQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_br&type=PROGRAM&Expires=1470546713&Signature=Uv0-16juf-YtRjIfhfyer7HCUNuMcgPlSyoaeEvH~N0cB91tGro9MAZYGdlD0DcR3YkvTrjElrIHca1xtPqs-JqeGcgPxPsfB10d07VtXazpkyRj5AtIkKKFoCmGrjVLLlmnkeztz4vKsgWsHdZE~V7tVPbNI5jCqRXxHheX7PY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://s6821.chomikuj.pl/File.aspx?e=iY9tMvdmy8RUrQ3uWP576e67jISRpGrB4q_aKXG21hW_cnkSE7BPst7fRgBZf8Ym9f7XGsN1JrPdaV8OGgp2M2644WL2_ZDql52Irw5v1noTNhIOBU66b0TgOfi50WEaFaWfBbxmJFk9MTHg-i7XT9KT5FMx_qwDrw5lTVdv3unsb4IqAc-TqCOAPwuZO4jqPQot3UuliHiumJ0iywCsGDhq0ani5KJSSaVPoIbJAy4V0WVoW-UNPxvXiFV5wDwHX3bpjd-xNeKfKrs2JFVjG3jVaHrEcsfQkNMVb_23leWyC2ixKPQSEzJbE_K9XF-GuiRMF7mvLDyglsvObMG4QvptMujuCP9OfCSMl8SvwG7eB5rh8eQZ9J0AXyb4OQOAMM-Rne0lkTPIKpPVFRtk8A&pv=2

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_pl&type=PROGRAM&Expires=1482114690&Signature=NPNGZOTUXh4MipvJ~pCmkn8NpExLJYSLximmuq0JeiS8-AbLqbQ-WnwNeAd97sakNFEBTd7ynW2lF0pJXsXbGYcG1FVpAD8y2f7P1rsbOIQw2NrPZrCUYRKdBQOVGJJ3zdItjx-p2sAVepHrtIiZwmJOKOb6Sn-6jFwM3lzQaGA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_es&type=PROGRAM&Expires=1472722235&Signature=WAaxqH54Uag4dkEoKojIIlhPx7olCAJTEeFCkjAXS7Z-TJ6S4-PwhWtw8K6kydiMPj0FYdlcAeGEzA1kg84oEqJvAJAl0qRA-5axuJqfrh0Zsl4xYaGjq9ayaQvnFkuOn4tQfDO1ms60K4jQ8K513QnV1j9IZe3S8zHh1-h6vv0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1476935790&Signature=JndecoCYt1N-qHLVDnEa1zowM1OVZ6inF-yGW879ySL-K3v2pvYFGb0Fy0JsvpCn1c-OeSIcMqq83J82iE81G4WxsCQrYPTe8TgeJAk6Fy2CI6~pwfsYuXxP87PDlWobP9LNdsPIjE~xkRPU1s8WRvt1348zw6glAx37wlHdlzA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1459298220&Signature=fPx3ZhwiO2bJn~PT~ShShcLQ7E0xiaejZa4FnBQe9jXEPsXZc5CChpmyeZG9STe00gy-vYfIGivQK~0z21wX3NYuFLVspllF1P7ttUxSjX6IfMlImd~dtl116gA7Jgm3gBp6iIDbaqz2hYKuH~V8FIbogKvs34BSeDXSOdVNuu4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_es&type=PROGRAM&Expires=1477909904&Signature=JXDJ-NjfgXd5aDynr~UutelM2Ab2S-U1RQUcvcwBxOuzZGy-r~rqu3iGgUbMSN~axUoCyIPxc2t-YpUIi7WwEAGIDdLMT2l3fUZ9uVvfGgO0YjQk~6Xsnpv0qmq0ROTH8pp71M1L0qKsSj7UDM8PRyPx3WqZuqY29KDuJFch3rI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1478750518&Signature=I-7DWhaC~Z2WBitW1epPyHeNNdO8wPZj4D~rONDmQXez59bOzs9GMoGCKcRGlSQGKabvkaVLPWCXDJzqI8hDSxsd4U96lNAh2KGBh23SrrXN~ppO4K4r-OoftQdKRT3GIFF3xQTBLzrhX75vnGNbTBy0ODTKUj5ScACDTWKdiKA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1476383730&Signature=DVUNxQDgK34UzDM2TUVZ2ryVWByN8D4pkr2PTfFep2LkojJVVvo9awl1Hka2T2J830U12H9yzWvYtvu2Ch9DSrCBp5264-bk0yL6p68Yebu3yagy2xjQ9Jf7Me9gzYxAtkOj5WAUUb9WsO5TrH5l-nF0ZwOBz6vrbMJeJkDkQwo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1476561260&Signature=CVDWxSAGsWocnALnGkq9YT6-Sq63b67qr6Ltw1Et8fh7sxCasC1wjV4f3e~SMG6BiBihRCrlgWboA7hEqALenT9vI6xxf~Z9HTjt1tsIJveUWJFZ9Yl0l2VL2y6edfdJOYNpQJ-dAdvFlmQ8ELo1-eVTS~PcVYeMdjdmgFVFrF8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_br&type=PROGRAM&Expires=1478148559&Signature=QI80s4wu1trs6jQqMMNlPNWlMc-9wMQNrz97g6kPLiJ409FbR1jRtiLpaD9dBWhu9Fia-biiodmuae9yf2T6mo7yMObo63bvgeolRed9zoA3JvSmGiQM4T1JkJxqKyqjVzkno4G3Cm5b-AMYpW2w4OyZBLFKIKGKfhW6x4O0KwU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_es&type=PROGRAM&Expires=1477986316&Signature=OlXrpUss8o~y~S~7glcTZAU4j559l9docOolm8Rm5msS2bLOOuEdHpLLp0lqo0otQ2clOjfyAoyjCez9zOG6Q31Nbhoh4AAdtZcwLIUzuanAEYaq5PPbSoxLfqpPg~bdPkhdOGrP8hw8FnI0hlgS1yzzDIzoMIQ6gGXe40aZfUg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1470644076&Signature=DZMTxJFgZoecMw9TxN9-~Idr9aUx8~ekGs3f976DiDmW-yGDZq~oXTELmpqbqIcgcKVTmVvDF34ArYU3gxKaApSAccTiNllizDd2Jr7ETJ2zjGpnikMl7JTkloMdi1WE46QLuWERd~-W2btNGIYBggH-gBAmX8x8-le~DeX6urY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1479867795&Signature=dYn5jS7TTk7RovJj~05s177kgZ-3tJ7AiARHBVD1ANZ340PCmTrndFaVMWZ5d~flUtbGdOiz~SmEq3Ja0~gZNScAYG5jQevYB8ywHnLo20rlB2gR7xvERlzKQyDgApg6PV8r2dlBlcVd3OoiRxzmSJ1IwehEaBaHoOwMlrjWtto_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1480295685&Signature=QOn8FYWMx1teL5JkjSOeTw74YqflOZE7GELtelW8yy5XUJPZTUH3Y-PhTyzsa9kPgftMcFImiSd8N2PCjrL176svzsYL94j08zZRoJKWFmUJSDVQfGZ2g0CbglfEGTtAVeYAdKD6GgOAZYifLjhtFMX7-wk460BvFQK0ZPXwOCY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1481252977&Signature=ChQGgfPCRN7dLVVULhVn-OnCF4AuPAm-diS44Ngh43DL1DF5AdE32wFZKjYrjZIYUnksvlk4Z7PW1yAGs2oxO-8s-B4sZk8Fw8fLeMARcSNSSNsHjADBTdqA-Czy2uHCzbRUMCh37~iJQhF9ayaQtvF9NMId~FFlGMjpQZys0vE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://i.download.idg.pl/fannef/00d9954e7300ee9119071bc0ead92c5c/5630f7df//zx/cyberjoy/dema/.../f1racingchampionship.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_de&type=PROGRAM&Expires=1474259660&Signature=Eds2tolhcY7CK6V27sk01TCSH7yfJWKmS~xmI86i8o-8WieaqSWjBt3xTLn8IhBHkqOjzIN-txYixmpx2D6YTqoOMPt0JMwcHqqsropkVeswVx-fEjDpf2JK6hakKOor0NJAKMrMYqVD8ZvY9lcnKIuMpp6mYy~hjolj7THKqf0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://f1-racing-championship-demo.de.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANc6jZmmcn4DoXXwH2nlAIV3yIxhdejcFbIDsQdzuRugdnqUhtA4QlyHS4 fRW iPL24tqI5XkfC/LEDtvMJ9hACwRzRJfuH/oaROmxM4Fn12xZruf/HaIPLvtntkTnYjXmJjdlTPPxFVRsau/rhg FgoGAUrKN7pXgUOif9fOwK190/BE0ZeXFhaQlIPdogyke5gqNb4UFpRduafttzP5eT93 mMtVOjhvS2U4trvd2e 88Qhwwctn8Hxfe9c1sFhfej6YWOjLe8iFgPSGBwDcWb9PFiR1nyo073W2JYY/RXGvTbdWb7ep WTFI4AjOJ4Bsgm2TWLratv3ZD0CZCGglfF05BvG5vnO33KLs82QZP3/tzx7R06NittLsYlXZMTrCqkhYsRhAy5Qk9isXutW3fh1tvF7new6fA bJ0y 94xIbtov2F3Rz00KeEAk3QP5QgYU4OP58kT9t XOhvt/.../WuGu63xWycyu1xGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c s0meBHrhoGcKd9xHOZAs2Bln2B9m8cKNrgyJm58CVj

http://files.downloadnow.com/s/software/10/22/99/.../f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1445810631&Signature=grfahldbAcZk0sJdqIvUR0GZcy2GAk2N~EyA~qJsc7KFBiFVALpOYRGdqjEcjM6Kq~etSqXDZl5OW4tAZzPVgjHiYlqzp3r1cF6tQajfO23p7pr~gH5CghHb-cANeTxIlF3eGPIZpBB4HFiTzuUZREWYBU3jdU8SDUR7pXOXAkM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1468617084&Signature=OSytgJelu8Cf1vgeuLrbAZWxvUZjrFhgdw7UUTb-1~D67XXXSRBplX8S~fkpEgASemLehgwGi0e1Qjrj1kW7S5Olb2ddP0oPQre2VrGkzTFWaglvQ4huxCTaHLzh6h35Eu2C16fT5KRM0f-Z~ctjTlFQaviNn1xCQ-jiSY5T5s0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=f1rcdemo.exe

http://gsf-cf.softonic.com/6b8/f63/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13047&instance=softonic_en&type=PROGRAM&Expires=1432789058&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=NtGczTxw9dY8dhIy4DGMXU~JBpWC79SD8WoRg9vqwM4Jvd6X5mrMmIojhEKOBX0noYRhhc81ZWmqbc6KIXC8PNK-acXG689VOHsSOOTqkvuRUag-48XZx93VMM6IgcysLzFEtGLOclkr-Eu8EK9~VRnWNB4jWX-pzWZau-U~P7k_&filename=f1rcdemo.exe

http://download.fileplanet.com/ftp1/fpnew/gamedemos/.../f1rcdemo.exe

http://www.gamepressure.com/.../przekieruj_ftp.asp?TOKEN=M2Y0ZER6ekRMb0ZmTmR6VVZOZUd4T28wS3h5a21MYWNqVHhmUjJtNS9MdWRkM2hUMFNiSVl2YWkvTHVPRXhHTzBqYUx2THMwQnYyajdhakcyanpYaHNOVWp0VEZuTzdtTzJ4NTFnMVo4TkRMdGlXVWtqUlJHbktTU01mQkx1Vng=

http://indir.gezginler.net/i/1281/.../

Latest 30 of 52 download URLs

Scan f1rcdemo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.