home

FIFA14.exe

WindowsApplication1

Microsoft

This is a setup program which is used to install the application. The file has been seen being downloaded from cluster007.ovh.net and multiple other hosts.
Publisher:
Microsoft

Product:
WindowsApplication1

Version:
1.0.0.0

MD5:
ef3599fde98269bfe60499d7a6e4851e

SHA-1:
abd9767dfe21594999eeaeb6e01f36e60daae862

SHA-256:
9a1f0361dee258192553cf12b6af9bdcae3e152be79fcab3c4da0b7665f7df0d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 7:50:10 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
Suspicious_GEN.F47V0728
7.2.237

File size:
4.6 MB (4,775,936 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Microsoft 2014

Original file name:
FIFA14.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\fifa14.exe

File PE Metadata
Compilation timestamp:
7/18/2014 7:48:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:aL3L3LPWmDnnEK+CVyNIlfXMuI8yMHhVqhvldJE6SWc92YT9wiaQYBr0eOwW6URL:aL3L3LP5nHyNIlfMl8p2tE6Lc9B9wRQV

Entry address:
0x48B45E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
4.5 MB (4,756,992 bytes)

The file FIFA14.exe has been seen being distributed by the following 6 URLs.

http://cluster007.ovh.net/~jeuxfrqqus/.../FIFA14.exe

http://goo.gl/ETQelR

http://fifa14downloader.weebly.com/uploads/2/8/8/0/.../fifa14.exe

http://cluster007.ovh.net/~jeuxfrqqus/.../FIFA14.exe

http://cluster007.ovh.net/~jeuxfrqqus/.../FIFA14.exe

http://cluster007.ovh.net/~jeuxfrqqus/.../FIFA14.exe

Scan FIFA14.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.