home

fifa2004_pc_demo.exe

The program is a setup application that uses the WinZip SFX installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
e86ea4622088d06bcbc65a50cc42255e

SHA-1:
350ebfefcc0786be70f5c79e5d5727debc55045a

SHA-256:
af9d4632b900e528b247b759d64186682852f95c5bf5e1b7fc484c8c4360ac30

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:26:10 AM UTC  (today)

File size:
34.4 MB (36,081,152 bytes)

File type:
Executable application (Win32 EXE)

Installer:
WinZip SFX

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\fifa2004_pc_demo.exe

File PE Metadata
Compilation timestamp:
1/9/2001 3:09:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
393216:bpEnwnO+lDWUeT0fqrInQ2SLuvllwHGlnwpRFASSGc00uYsIuPb/l+dFtSvBp02v:bpEwxla+JQ2Su7wHuQ5SlAl4zt4BpW

Entry address:
0x3F8F

Entry point:
53, FF, 15, 4C, 70, 40, 00, B3, 22, 38, 18, 74, 03, 80, C3, FE, 8A, 48, 01, 40, 33, D2, 3A, CA, 74, 0A, 3A, CB, 74, 06, 8A, 48, 01, 40, EB, F2, 38, 10, 74, 01, 40, 52, 50, 52, 52, FF, 15, 50, 70, 40, 00, 50, E8, 9E, F3, FF, FF, 50, FF, 15, 54, 70, 40, 00, 5B, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 55, 8B, EC, 51, A1, 88, 94, 40, 00, 83, 0D, 00, 93, 40, 00, FF, 56, 33, F6, 39, 35, 40, 8E, 40, 00, 89, 35, 34, 94, 40, 00, 89, 35, 84, 94, 40, 00, A3, 24, 97, 40, 00, 75, 05, E8, 9D, D2, FF, FF...
 
[+]

Packer / compiler:
WinZip, 0x32-bit SFX v8.x module

Code size:
21.5 KB (22,016 bytes)

The file fifa2004_pc_demo.exe has been seen being distributed by the following 16 URLs.

http://gsf-cf.softonic.com/350/ebf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30052&instance=softonic_es&type=PROGRAM&Expires=1471838432&Signature=IlZI3OQWW0ewIdbhNB54mJrPsGE9Qi~Ne1CukAfM~uFlzJmi2WY3YQwC1GYJImo15FP90xygdbFUIYvX62pMLT827Vj7xZLmPzk0G0izmmvHUuq2a53bAgx2qzdbdToU8-jMbMyE9eCuy81nPyUxk9oaX8exNDryTu7jHgKxuYI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FIFA2004_PC_DEMO.exe

http://i.download.idg.pl/fannef/01f37b7d890088cb50c28af1391ece97/58323146//zx/cyberjoy/dema/.../FIFA2004_PC_DEMO.exe

http://i.download.idg.pl/fannef/b71601a5d832db4b0906c26d4c5ff666/57a1f5ee//zx/cyberjoy/dema/.../FIFA2004_PC_DEMO.exe

http://s6606.chomikuj.pl/File.aspx?e=XwSeK2udzv9NJjc3lnLwzw3g5AQj0ZI_qa1qwDm6KrR6aZrBwtT2Lylmxb8APGVa8dyr3hirwFxeBvhJwq4LyvRPBclu23z2seLqrHe5N3XpU2esmnLkLIew_d4nc6HwJ51fCwUHt1wJYyu-5EmR5w&pv=2

http://gsf-cf.softonic.com/350/ebf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30052&instance=softonic_es&type=PROGRAM&Expires=1479640674&Signature=LOGp~A59p49gqiPGgbo~df4LiCgbMu3pc0R0qD~UnMFZTR08iN9-jgQXiiPVPBTjJZymno2o6jMqzcTX31bEZ13fzwkZb-lppuXDfbMOPSaP0l803VN1p47-SLoJ~PfO8eig8RZsm6tBKLsyR6umajhshxZXywQ6ZU2ggBjGgSA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FIFA2004_PC_DEMO.exe

http://gsf-cf.softonic.com/350/ebf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30052&instance=softonic_es&type=PROGRAM&Expires=1478541061&Signature=Oq3-sqpK7uGtHBTekjB-sCFRzwPnh1kRXkPYoW8BwghOqOOCAAttcgvHDnfWWdE93gdu8BOHl7c2AH~zZ3QqP5mN5ies4wet-ggJ4qvO2~ozODFKGXlklTUSVhfPPJeHV39xv98lZEB3x8rpADAvqbRiehaJEye3VDvu6X01TUg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FIFA2004_PC_DEMO.exe

http://games.softpedia.com/dyn-postdownload.php/07e9e59dc8397902c298b5c778c6b688/57dd400a/33b/.../2?tsf=0

http://www.gamepressure.com/.../przekieruj_ftp.asp?TOKEN=M2Y0ZER6ekRMb0ZmTmR6VVZOZUd4S0YrdzRYMThUb25wZm5tcFFscld5NXpkaVlpRVRTYjlzcVhpL0tmdUVDSUZFbStHRXFxbzI5YVRGWklGb0EwblY5Qm4wd2dROVhFUURXenczeUQ4UnhMakYvUk5VZHFwRDlWUXpWZk5sbW8=

ftp://ftp.ea-europe.com/support/demos/.../FIFA2004_PC_DEMO.exe

http://down01.wxsrv.com/descargando/024/1877/fifa-football-2004/.../fifa-football-2004.exe

http://www.gamepressure.com/.../przekieruj_ftp.asp?TOKEN=M2Y0ZER6ekRMb0ZmTmR6VVZOZUd4S0YrdzRYMThUb25wZm5tcFFscld5NXpkaVlpRVRTYjlzcVhpL0tmdUVDSTE5UjR5TmU5UCtPOXhoWERGemM3TGFWK3BvM0hyUGZGY2JNaVpLdHBUNXAxOExVaWsxUi95eEhRcTRhei9VNVg=

http://fifa-football-2004.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWv02T15Q2PLbns2FEX08PNuFyElgJR2CePZit3esmGoChLmftrYuR5nSAD AmZ adupRRq3CpAXODVExf5kfRjz2L0EdK50qb/AMXfCr5QzYXk7H7iG97TflYpdVamNas0Kq5YgdF4mcoPbzwWy/.../BJp7A==

http://gsf-cf.softonic.com/350/ebf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30052&instance=softonic_es&type=PROGRAM&Expires=1457775998&Signature=YYMLMxIcD7uDt6T3bdCM5iZLuUg7GCi6A-GAyUMP528B2KtN5OCb9VspdiU3na1-C~NRD6aEXnq8KD5q6fgLrXZfdJF6abjQsf5q7BG639ZbkGWJc5XS-PFZE76Ch0W06-zZ0BJvV0pVFWLGV8hutHe4iUB9Pxfk498YlVVKDc8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FIFA2004_PC_DEMO.exe

http://i.download.idg.pl/fannef/4542dad42e6fd516fcad85ef3cb042e5/56c44488//zx/cyberjoy/dema/.../FIFA2004_PC_DEMO.exe

http://gsf-cf.softonic.com/350/ebf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30052&instance=softonic_es&type=PROGRAM&Expires=1455524764&Signature=Od2jHln~AQrlFQKYL4UJxcTb~4Sa-oMjWVVrqZt9507bM7jz7H~d6c~ixEWcBiTdbweY0bNsN-6q-9QWMi1hi7oHlrRbqW~LfF-bX9Hd3a1MtrJPr0ktAMONSvQVdvNu-8DvETIc8M4an1O7HjJDiZS5UlGUksZh5ADwdLeI6lQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FIFA2004_PC_DEMO.exe

http://gsf-cf.softonic.com/350/ebf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30052&instance=softonic_es&type=PROGRAM&Expires=1446627166&Signature=UlyhQr8p9vQ5NAY8SFlKohqYFl2EmLhkeZqtamAquqY4SxxVhZsv6vAwj5T0I9I~mwNoFy0ZsC9YiLuvwIjhauhQCIahcf9EBB0ZRYB17QBzWQmmMl4tY-ZoKEphKf2gyQhoyDIr5jKv3I1gAzxtxjNj1r4Lto1pLl3FEazNnUg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FIFA2004_PC_DEMO.exe

Scan fifa2004_pc_demo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.