home

fifa_15_demo.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from cluster007.ovh.net.
MD5:
8af8b8f6abe888dde50e70b1b2ee2cea

SHA-1:
4dd80ee2bb664fc2e07a4ada6883177405cfbf55

SHA-256:
e88bf2ee3d6fbc17a25630bb289965d0b685438994084e8e9d356c62351775ec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 7:26:38 AM UTC  (today)

File size:
6 MB (6,313,116 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\fifa_15_demo.exe

File PE Metadata
Compilation timestamp:
7/19/2014 3:43:27 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
196608:3LGLeLq5nHyNIlfMl8p2tE6Lc9B9wRQ5eOetjtb3eYepL:3LGLeLCS+S5dLc9B9wu6tjtb3kpL

Entry address:
0x5EE3AE

Entry point:
73, 00, 63, 00, 72, 00, 69, 00, 70, 00, 74, 00, 69, 00, 6F, 00, 6E, 00, 00, 00, 00, 00, 57, 00, 69, 00, 6E, 00, 64, 00, 6F, 00, 77, 00, 73, 00, 41, 00, 70, 00, 70, 00, 6C, 00, 69, 00, 63, 00, 61, 00, 74, 00, 69, 00, 6F, 00, 6E, 00, 31, 00, 00, 00, 30, 00, 08, 00, 01, 00, 46, 00, 69, 00, 6C, 00, 65, 00, 56, 00, 65, 00, 72, 00, 73, 00, 69, 00, 6F, 00, 6E, 00, 00, 00, 00, 00, 31, 00, 2E, 00, 30, 00, 2E, 00, 30, 00, 2E, 00, 30, 00, 00, 00, 44, 00, 11, 00, 01, 00, 49, 00, 6E, 00, 74, 00, 65, 00, 72, 00, 6E, 00...
 
[+]

Code size:
5.9 MB (6,210,560 bytes)

The file fifa_15_demo.exe has been seen being distributed by the following URL.

http://cluster007.ovh.net/~jeuxfrqqus/.../FIFA_15_Demo.exe

Scan fifa_15_demo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.