home

lolreplay-0.7.6.7.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
ed633b21b70f98fcb1f58c6720cca9bc

SHA-1:
ab905dc7836ceff9b23dd2404bab70ab3215b899

SHA-256:
5390d0e6fa903f82ec7c217d2b781c38440e420163deb163c5a59f640ced2f0f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 7:54:19 AM UTC  (today)

File size:
1.2 MB (1,294,971 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\lolreplay-0.7.6.7.exe

File PE Metadata
Compilation timestamp:
9/26/2011 2:21:38 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:X5CygUZZMbeiTr4zRi5CbOtWqWjZBLjDCi7nIUlg/8tk9Vxi9avT/Hh:JBpAeiX2E0ZyUlg/829Vxi9avTp

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file lolreplay-0.7.6.7.exe has been discovered within the following programs.

Garena - League of Legends  by Garena Online Pte Ltd.
League of Legends is a multiplayer online battle arena video game where players are formed into two teams of five Champions. League of Legends is a session-based game. Matchmaking creates teams with even average MMR (Matchmaking Rating) of the constituent players.
lol.garena.com
About 1% of users remove it
 
Powered by Should I Remove It?

The file lolreplay-0.7.6.7.exe has been seen being distributed by the following 43 URLs.

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1455163758&Signature=HRC9M5PgTYFXQa-AhdLRHurnnNoKmZvXULkUj4EVRXvEBd1vUw9iFh0smhV8gMG6Lx90~2sOEIks8gO~64VkX3UdU31~exNSiguvbLZiQABAa559Os76WviK7xFFrNvasFI3H4YhGA-HdVSWZqvvnbX8yn6Yl4ld72XsDvfP6mI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1461303954&Signature=XZ1XexEFWg0NjGR3r1H3dbguVKOEsrmIivFgVY2WfNJocw-TcJRKzRgVs-31bPY-7vZ~ZVoCbL6HX51GUkFIv0qWFQIx8VmgvBX73-~qY0P12BGj97uABMCfhRaMKGTp09Mxw5kQ6G~X6~ZXO7AJvVVRc0SX9x9vH~cY5Jm8MpQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1483676179&Signature=EVxWcZ~TdPnjwXTg79awsv~W-L2gZF3fQiHuqVMA-RqJ-XYKJ4vCPfNplaAr1NYhpA4WsT9bBDbUKPDaiQ4CimOHkbAxeRRm8w4aA61ymKFKiUkUL7yE9d2FDOHvhgXzttSy0mozlk4dsOxxN0lIRK5s6zsKAyN2G5bSvRFrBYg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1450410781&Signature=Ab579F069pvOBepUVmMfuj4rq~Xx6vFf4ko64t2jTqgArQGRhwccm9tHx4Tfy7RJA0SC2pbGF8BINsxAeHhQYOLT39awZg8yY7DgwoI3ElRhod5B6K4CLMTM38NYoVViQKl~P5N57jbcrm2zsQwKYTi5bE5V6qVPdvhxzsBpXsU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1450340918&Signature=OVBVF1CmBZJVTynE8MZp7zquDHy8TUst8gqe044j73gW~VXeZXZc20ecOK4uVWQQPZTUakiGcD-~PzszqMSf0jNTI7piVcpq4aaqzvFaMppsfpWukBRzxCFAftAzgvE0saRNzgvLZKVGWj2DrjZAbIrvqcablDQwj2u4AYqmFII_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1475993350&Signature=DQa-X00syMhyW5OKjgpdu6cQtwiClVsbiQIBeQbBem1RApu37yihgfqr12od2SKKu4hl5cvvKbmKwlEh6xuaQ1XELTrqHb8WLVoKKEJydvCnCY~aPF8LOY3P0qPJhvmLonSWU~HXBQ55M7-TZMproRKJLEqvDHIXUmeMm~TD26Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1469936215&Signature=Py9KtZHd0eOLkQ5mT2qZ8gLxy3te-rszytTM3dyTNtw7wul11inimK4nc1SDK9N20Gp14CLtg-N2bVwvm8z0q5nSn1DNLlTkycPNgucGe4K8KQ54J1kmee1xsWaJIXvSZYEWipGYSfl~JfB-xRaeUID04y8eZH9ObBzZsgZ2L~I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1454107085&Signature=L8vvDgFWoa9gBgN5U72ejbZrezibQSYodfLkbjrvsPso3hZcOAU47zyLOcZghhakDWp5T~FqB1UO4EQqvlNe8Au~wO5oDthTfzlSEuqYubJXU1khj2eP9WD3KqGKpiPKGQ4KmELymk80Ypv~-E4kU0f96PAUfa65sNDqTSZH2sE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1455751668&Signature=ZwBFTvigAQ2PuaQz-SfpT-nWdInZGWxX8rWuaDJ7SbuHTTgDtlgMckoYELF~yhk17qERp4srKQbiy1bRAAxcaXXsS87UYmvSbD42f6TgJ6jpYh03dINQLHryHS92RRCVGDraa0~mD6wsPtf4wses1ctzGNtkK9SRVv7GHglN1KY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1446099896&Signature=NrlwaacxF0wlWaTPj67UN4nWl2oWDu4P2AqhoSq1~CbDpmCdWoQ90xXPcKoW-xli2AyagHOwtUM8V5wcSfJ-txFksjy~HFdtwyKDc4PiFDUR0ShRXchT9RNnb-k4B7C7Y8z6B6UXPDJj96LA8EzFRJ5ca3Ls1pILwd7~~wxr4ts_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1449796168&Signature=hPDd8ly-6p962wOxLRFN7Cv~Y1GSKm3tYUn7SJCDZh99GMOH93tkBL1A1x2U5mbfPwuag4H4jX7-mmlUPdAiIty8fiw44ujH1xQQ01QJIZDjpRuqtsDiWkmPBEB2pZzVqeTPQxo2GR0t22e70m9QSqiswwWnGGZX31lHL0T44Y8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1470322699&Signature=CskNdohCxXkOVHUnjLEwZjUsqMXLzweRsB4N~5W6P3TRkw9vxzsJ5m3kuvl16Bsd7-DzcBrLCTTDewR-SMxLsZxsxKKve2Kn4Wi5va3I3RufUknRPk5YcInSQ6y~5LBSSJI4EsJi5xoJNZklVyshJhkztBc-jcuEcpPsOMc8EvE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1461642218&Signature=XA2Do1ZEmOEM7YITePsp4s75L~k3IX9yjsK7eO73emp0gVDeWU-D3Ymbn83ZFOiCY8KswLFgty5YGFhG53Q51gnAedo-CsR09uLMer44ilvH5SWW04NaAup-VBV6I-ufKWPOGWh9aoTMDN1oqbcicwhdxWM7mXLNla1n8QeE3ow_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1454647827&Signature=MzJgygU7uwtnNX2gf73vPDxYmDqenAhr4t-p6CX7WLtAUkdHNGoYjhwC1OWPBTDZAC9jp07-Lmuw19LvG8AdzX4xw5ZUuHgg7vQE7cJvus3dwjQrxMLy~CVY4smY7gH9PAdsG8vVc~r8wAACtKaa-nWhEFjYe96d3o5VQtq7IIs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1433802005&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=W8rVrDdc3-vsZ38X4mAQR-Mek9GvXxSTgwPNXHjJQhQz95PboHua4OnPNB-83uhmussp4c16UEZUsidNMNw4KdC3Vj~G2v7mAw9BC19J3snY0SCjeLmLR-uKv-OaImLQc3tNr8tSKWwfOmoqpZAFPzCzKOsjQOxweiui5QHUnvs_&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1455150823&Signature=ehKm~QRKleHKA7TeR-uC6Hgkrd~B4YA0Kd-yLrtQo9Gn-bm~ZuJFz5o711SNcYBdPMUuqu9DRfcgLHCBzTWc9Jvqs38z4MVFSsIkVLbJchTjR99UHzBV2aAcAIJ~4PGr2FXfJL0-B2GibgE3tZwikyJ5deiZFkHcdxuYsEnJIoU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1457680820&Signature=d3NBr-DWyvkr-CJx8HfB~BPPPFNMuOTPzXU69nWY1ySc9JBBwguDwDR4Lq2RYNNCQV33QD0I6Ct~msKx077YpF7iK~QaJKhBZ2ZGYfoJnK4rVtMYpw773eaendj094dSUmDmmFk9Tcu6kSWs7vTlN~rKUeWJxnJ6BrtQ7zOErVg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://global-shared-files-l3.softonic.com/ab9/05d/.../file?nvb=20150119150308&nva=20150120030408&token=0d6892ee21652a4d4c75d&SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1448980919&Signature=YEix6H7dGpldzIVTwK9gvTzN4V4pTXnobXmR~h~ANRVfgInqekPXlNZPDP5MmnpdWZsZexmPD791IPYFwiUf5H1MZoDJdLzHQRo4Wt0tfNJeMYoTzrFSE~NxVU-QN5zV40kMoctv5-P~P0J-0zC1alN09HMtznggHXme0gWG-gA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1462597906&Signature=dTHkXGRuTjoF88x7skjRWpxK8Th-BE6Qa3j8zEeNigYWZqt6lnWyvaY0-MBE3TOUM0zWmkp3DIrMVBYDJY5qnyJo0eBMogqLEipq9FWjDOcNRhKGLe0mX55jE97iFUlVerHgxKJ~Eb5eseyIflSmQdxcna~B9m~h4b3qbL7fRTA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1454477806&Signature=fOcU6J0Q7Vtu23KFq2JxjN0cid8l4wmiAA1WVSKfb1VmwE1zEWNQVhlZ1LI0ikze3~dYNR5~cdrFJeyszXTr5lc1-pXrHTB-gThteIxcdggblMC4GKn8znk5dmTY1k40ozDC1Ezt~lnQi49BFvSnMK-f65Cj5P0H75Uo4bitK0c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1450047040&Signature=eUvip0GqPXjaHnCJGsWLR6nWXjlnG-A9~TflddWfcAILqQ5M797eGEMnjbP-wHpxpy5arfyZ4arB6MteKox0yx8-qsHSHRMOt-OSya6IZbyke3S0KbtzcJ5wkCL7gJPFqy-1d8m-cuSJ0pEFhYoaRWSwBXDA3u7t12h1xNlkCD0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1450078800&Signature=V76NwPZSCIeaB-p67pFIc7~VHfzGLTZPqqRZ-riizforu-8s6EuTJ4OWAp~99Tuc2z0Oy7nuq1qrtwCFPy05Q7W0DUs53SM3XMbuFhkOikbNbVBdKlKpUAaVTI3oDYhtdHxeXGSo30KfznP1B3ADnVMVRPcMnYTioIiUORs9rDE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1446178235&Signature=Csb9abxfPvEoWm3GOan7ZEqYiC5uWFfv7dHue3Qut4Y~LI2VPM7nalo~yMOlAn67Tg~lOznAdVjvMAUxxFE-7Afkg-kS5Fix26JKXQmNRMF9NaLl5yDJddjFe75unNzEq4PdY5Fn5y7rhdi3XY8R0ERxUQm-g-qqDxZWwMSd3Cg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1441521675&Signature=TA0YIltartqaM5Sql4O5xd2bN8cG1JwyJcGlsudyMoHn5MJoRYNUdFhiMBT0W~3J9y04xmAfWlVf1tNERHNL59C2hALVdwm8ovkljYzxXePuSIxuNEYE4HjfmsJ2VxOpQwjuo1oQ8WtTImHz1qUdIZkk9fnEt70v36IPfaK7Dhc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1435816700&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=PY0Mn1s13-8g7rPQmo-RRAfnttf~Mx9rdONkm-cWb~Kd-cVW1xj~tIQ64-oDmnYjsy6KotUHySYqUjx90gDM5-hUJEnsJhYRdXJqjNunBqZeeMEDbdew1bRFsNsA9hK6TwpHpB2jps8OxgUUWzacE6ijg19HGD7oWBLkSAvhcL8_&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1460820880&Signature=ZWJgsen-o4aea4PqsvBN1EFobHkg7aEEdJPDARPobxJnoHlFr9Yq6UsyO7X9o0Gb6raYJRAQmNThAZ5eaVtbv0ZG4Nt5NLdNCOGzXr9wlYTpJ61~4fE1gLif75RBC0GLIVQKwPjOqjX--Ku1uAlKNx1kiQk-qBcb8gIzcq2N2gs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1458979304&Signature=d8ITdK~15QGxVuboFKvTSGtXzgQUgXApFFa-HWpBJoWe6XyEsHUNySBN9l794bl1mZ~0PvrubT96cT16suj2TH9pprU0iCG1zt81AvSPqg7VVNrbdlO8d4AQShe-N7Y2w4ScOBqCGJywQEo5smZWlkBYtRSD-rjz1ANzroLaabw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1435420928&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fy7E9cZ~kv1xPIZseMKWb6KtB1LAHIyTpdVmJ4iZ1smU6LRDEbEc3enSclDwJSgf99KEF81hq9X4KTdDwtmrh01HmmF6I3rMM-aWlUXxPf5zRTXzbcA~i9Yux4gooyDTLw3zBl0X1KE2mUQnUwuSgnBPTScrEAhU4rR6zi5IdjA_&filename=LOLReplay-0.7.6.7.exe

http://gsf-cf.softonic.com/ab9/05d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342463&instance=softonic_en&type=PROGRAM&Expires=1458869008&Signature=fKNN-1htb8W4P7JuULDs3VLlFGYDgcdai0iF5YxvZbBiXCJo6KUJpkvtMDS1Y89Cab7KXEGm3Pf7oWvwPkZeaQMS~GewhASLrZcpgmPNcGmqhMViK3pBBXcW3RW7e56X6ZQOphOfT4Zc~ERuil42R8lyKpSPU~42cIbsKfnBvSc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=LOLReplay-0.7.6.7.exe

Latest 30 of 43 download URLs

Scan lolreplay-0.7.6.7.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.