lego_star_wars_2_demo.exe

The program is a setup application that uses the WinZip SFX installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
5f693e3ebfae166cbb53c0508252556b

SHA-1:
76b39d46a39d5ced7627cc829fe159698226eee5

SHA-256:
669724b066434f151f7a504fa2401c5f00dc583b0dd68f6a609aba31488135c6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:10:31 AM UTC  (today)

File size:
437.9 MB (459,126,784 bytes)

File type:
Executable application (Win64 EXE)

Installer:
WinZip SFX

Common path:
C:\users\{user}\downloads\lego_star_wars_2_demo.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12582912:7C5iyqXDmflQxWrtxUWxjj7fYB5gU+rtH:khqTor/UQj9Uo

Entry point:
53, FF, 15, 4C, 70, 40, 00, B3, 22, 38, 18, 74, 03, 80, C3, FE, 8A, 48, 01, 40, 33, D2, 3A, CA, 74, 0A, 3A, CB, 74, 06, 8A, 48, 01, 40, EB, F2, 38, 10, 74, 01, 40, 52, 50, 52, 52, FF, 15, 50, 70, 40, 00, 50, E8, 9E, F3, FF, FF, 50, FF, 15, 54, 70, 40, 00, 5B, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 55, 8B, EC, 51, A1, 88, 94, 40, 00, 83, 0D, 00, 93, 40, 00, FF, 56, 33, F6, 39, 35, 40, 8E, 40, 00, 89, 35, 34, 94, 40, 00, 89, 35, 84, 94, 40, 00, A3, 24, 97, 40, 00, 75, 05, E8, 9D, D2, FF, FF...
 
[+]

Packer / compiler:
WinZip, 0x32-bit SFX v8.x module

The file lego_star_wars_2_demo.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/76b/39d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54642&instance=softonic_pl&type=PROGRAM&Expires=1476560727&Signature=WER8h8jBFCs~2CFymAfp5MRBGlG0cQXg6Bcj5oU9H8V46owaCy1~R~W5jfM0BvhmE0cU4VehGrs9ArWnPU5AOo5H~hVljkZI~2sRbvGOuFhaZmR5-hn5nu7prb0~oN60c9Q1b3o-UAamc54mZXv5uB8UVTUshb~LzxPDJejllYY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LEGO_Star_Wars_2_DEMO.exe

http://lego-star-wars-ii-the-original-trilogy.softonic.pl/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOMniWtY23bPMLtVDpOQtw5wkTj3zREAbNtoxdSF Aj PCR32M2sPk3QHPTeSE/gEr9GOYvnZDWaNfvv4djZfWZGe4Yn NSvHAcSLZQAnDREgVLI9sKPWLSYL1wRgNPCE1ajCQqXomYKOleYFvRyJ11VWQu nuvT3oVI06NE9GIEysR7sW 311HqIN78 T4Cv9rjiIxQVSr79VkppLAWHoFWR2yZnodLyIK27IBE waWSMcqblyrfuDOkd1/4bG5oEmp 7xzIcZDno6ap2/Iichv3enNN3oUHxh9Uqagcw4UXtnNIvD2mCxPralT/ascPDiXDopcSpUDqcuKnCpFH46 GZPBwgZMH25tHDQdMifglGYAI0W6bb5eZN90rzKqBj/KQnFyiDiEKdIVEXIsNjBg4DOTzAhZqblLVJZZQqextr7uhzcPvDVjcwyB6VfossUsaWIuFZqfevlNDoQCL1lLlJPs1cPeNZkWMLYrxh5nngFKK/.../aVkpFmcFpsnIA3gTPUjm6EQ3sLkEzRA6yMN8ho32pF0hrxU3gEuo9 YpI=

http://lego-star-wars-ii-the-original-trilogy.softonic.pl/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOMniWtY23bPMLtVDpOQtw5wkTj3zREAbNtoxdSF Aj PCR32M2sPk3QHPTeSE/gEr9GOYvnZDWaNfvv4djZfWZGe4Yn NSvHAcSLZQAnDREgVLI9sKPWLSYL1wRgNPCE1ajCQqXomYKOleYFvRyJ11VWQu nuvT3oVI06NE9GIEysR7sW 311HqIN78 T4Cv9rjiIxQVSr79VkppLAWHoFWR2yZnodLyIK27IBE waWSMcqblyrfuDOkd1/4bG5oGjA6uyfNeCR62O0XAMt4 mKkAaxvPIU/PHYEcGFW5hiiQeDyUaxVgY4NZvyuOBcRKLvK1k75x0b/g9KdfixTHj4XbaLAUHxXS/ugH8qXjDRTa lcpSyTk95Khm4c gYAHRdURmpfq1qzO8ODkA5suxgpI3q t1eUiWPJDNeRf0qIZh0eoiLcJindhLcflORLtYLIw3zXHrz6C47kRH1B12 cinMbKI15f10DTJGo5A6PxlW7/.../aVkpFmcFpsnIA3gTPUjm6EQ3sLkEzRA6yMN8ho32pF0hrxU3gEuo9 YpI=

http://data2.stahnu.cz/downloadFile.php?n=bGVnby1zdGFyLXdhcnMtMi10aGUtb3JpZ2luYWwtdHJpbG9neV8yLmV4ZQ==&s=p5p2cv72d8pk7eti6u9koba7g3&r=ccefc9929737702f1be808982e3c38c1

http://gsf-cf.softonic.com/76b/39d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54642&instance=softonic_pl&type=PROGRAM&Expires=1460077682&Signature=CNfKvLwdjFoEJr9BtqX1JBRpvSeYcx-KEke2zjv-1NsRHxkTiEO69td0FMiurz360Gaf6ZTBKkIBhtoT4kpcPyMcwyWQ8cFkMg-jDSlC6W1ICletXW4T0jvSXYLVwWrZpVcFs6GtvNXh-3qv5d12G1hS-56~xutcKvG~fvvwU6s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LEGO_Star_Wars_2_DEMO.exe

https://lego-star-wars-ii-the-original-trilogy.softonic.pl/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOMniWtY23bPMLtVDpOQtw5wkTj3zREAbNtoxdSF Aj PCR32M2sPk3QHPTeSE/gEr9GOYvnZDWaNfvv4djZfWZGe4Yn NSvHAcSLZQAnDREgVLI9sKPWLSYL1wRgNPCE1ajCQqXomYKOleYFvRyJ11VWQu nuvT3oVI06NE9GIEysR7sW 311HqIN78 T4Cv9rjiIxQVSr79VkppLAWHoFWR2yZnodLyIK27IBE waWSMcqblyrfuDOkd1/4bG5oEHdbwwBaWuuIZ w1KIO4zlNNJHTlf/ERXmGTBBRgZmksy1/8tDKhVig73iHSV8j2OIpX3USSEcM33amkmcvUhZ KLL7ZZwq9g0w4hzQYa2enJnKzgTu7 0C9ntk9KsJfQ/srGnh5IxS5RXBT5i1wEk/.../aVkpFmcFpsnIA3gTPUjm6EQ3sLkEzRA6yMN8ho32pF0hrxU3gEuo9 YpI=

http://gsf-cf.softonic.com/76b/39d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54642&instance=softonic_pl&type=PROGRAM&Expires=1447822597&Signature=dT6RPF6Z9MLavW0V7TA-50BWHIallt2vW3i6v7qN4VzOwzEirfREGLL6d6Ggjsvkbs0ZccM0OQluvOM6Uv8tp98JnCMAAxBtiHT7iXUvKnQDMmaYi~VXNIJbB~tT-QvR4mQcMCe08LiiM~Y5QOb9fJ2ArCNLDkV6DFvTrfd5qKs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LEGO_Star_Wars_2_DEMO.exe

http://lego-star-wars-ii-the-original-trilogy.softonic.pl/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOMniWtY23bPMLtVDpOQtw5wkTj3zREAbNtoxdSF Aj PCR32M2sPk3QHPTeSE/gEr9GOYvnZDWaNfvv4djZfWZGe4Yn NSvHAcSLZQAnDREgVLI9sKPWLSYL1wRgNPCE1ajCQqXomYKOleYFvRyJ11VWQu nuvT3oVI06NE9GIEysR7sW 311HqIN78 T4Cv9rjiIxQVSr79VkppLAWHoFWR2yZnodLyIK27IBE waWSMcqblyrfuDOkd1/.../aVkpFmcFpsnIA3gTPUjm6EQ3sLkEzRA6yMN8ho32pF0hrxU3gEuo9 YpI=

http://dw.uptodown.com/dwn/faIKFphz87X9zxRaVXDycR8x5SVIF7w-yx7glAhEkUqUXPzZszIoTDdr9XBPh2uLWsKvt_bnGG0oAk2bQ_XQ-HHjpBIPBoTfvGOeAnTzUubSsEJPHWMmjx_iVn-i8xQ_/WpoZNaUVG2KJf7LqJH4XSIvM0jsWoRft6OA7YdbgzC9tMaUxBrP9FRdkE3S49J6xEmTtVxYNwKAuprMgbnrYYEqJLM4aYbQV-OmoFv2DuSrRFsELP8o7Tm84tMV9zDFR/LbGi0HYzLw5iG2HNC1V3JUg6mcSGoJaNwTP8auQUbIeoZKPyn7GfWE-dSq1OeWTyPgurqLQA9kLNKX2WZE0FZCxQXwqEA3ZnofLN9iLpU9xVAht1k7mczFOgdeqwt5Ce/.../

https://dw.uptodown.com/dwn/HI3cQa7BCv4uczG5UdSeHLAr2rEHMtJ4ITzPY-r1fZ4oQgUvvSqdEdSJos9Ku6w8gyilsQwyYz2vUwCGi5MnQnYqk1b_ncFZYZgAZjMT7hJkDWlN5pO9wRhcRK4-UASi/z85YMM4CXlKrxGK4j7x7JPpA8AR0ALOBt7IeLVAhjrw3JwhLAl6RwUv4a3ocsNUv2vpjbcX9E42egkaJ6_lMeuSbThI0k0GYWmXmz7mtCAobyS49MtFCaTR1oAKadzIv/rEaB-oSXgPz7-vfCW_-OoZveIPRraX2c0leweZyLQxWml5sqAtUEPRYPzNYu85RKviaHKtfn9Hy1FfAwb_xItHatzyFR5ci-B0Ng3rm0NV7JveuIYuPmiX4FH-U6Tmmk/.../

http://gsf-cf.softonic.com/76b/39d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54642&instance=softonic_pl&type=PROGRAM&Expires=1475173954&Signature=fGkP33r72vsAYErTVnQenHlRD3K8g5KYrqUNKMT0iBRMXdtbZmg-4xwr6CJ2FHEuxwjrPTX6LpbXwNjlkSTXnM0XL1~sSj9ApysiUenbbfg5l7fdcfsRfa18~yTqOh0Ff~3KA0oHzv9ddElKrbF04PICtYlsH2Zk1EN6Q4rn~Aw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LEGO_Star_Wars_2_DEMO.exe

http://download.fileplanet.com/ftp1/.../LEGO_Star_Wars_2_DEMO.exe

http://gsf-cf.softonic.com/76b/39d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54642&instance=softonic_pl&type=PROGRAM&Expires=1467316378&Signature=cQwtUF0oVC7Zb82bbhCxMxmlZQc162nY2pl-k9mTIad6225K5icKI1bqHinWxX2qxld4ZxovFqrSPIn8W4xLTbia4-XBsikZqIHOmZIry33BlzvjtlPqUCdWrMXIX4d9zt63fa2AcKbBA63sWIBK6Wvdbw7UX-Eepob0xDgt4VE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LEGO_Star_Wars_2_DEMO.exe

http://88.86.106.11/download/.../lego_star_wars_2_demo.exe

http://www.indirveoyna.com/indir.php?id=993

Latest 30 of 61 download URLs

Scan lego_star_wars_2_demo.exe - Powered by Reason Core Security