home

need for speed the run limited edition multi8no crackunlocked.exe

Alekxandr Zabaro

The application need for speed the run limited edition multi8no crackunlocked.exe by Alekxandr Zabaro has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is also typically executed from the user's temporary directory.
Publisher:
Alekxandr Zabaro  (signed and verified)

MD5:
edf3f302d6ee9305e0b47ee537a05886

SHA-1:
f0ad0432db541f4f9041cb26a39efd5ac617b6e9

SHA-256:
42e51be0aaeffcfc9484194c8481b38afe3ee0f5812d3f01c94ce529cdfe0460

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/27/2024 10:53:57 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.4.5

File size:
284.7 KB (291,528 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\temp\need for speed the run limited edition multi8no crackunlocked.exe

Digital Signature
Signed by:
Alekxandr Zabaro

Authority:
Unizeto Technologies S.A.

Valid from:
7/10/2014 3:04:34 AM

Valid to:
7/10/2015 3:04:34 AM

Subject:
E=Zabaroa@yandex.ru, CN=Alekxandr Zabaro, O=Alekxandr Zabaro, C=UA

Issuer:
CN=Certum Code Signing CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
502D914B787D700E2AEF1D7F85F80273

File PE Metadata
Compilation timestamp:
5/2/2012 5:25:30 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

Entry address:
0x63DA

Entry point:
E8, 0D, 12, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, D0, 60, 42, 00, E8, 20, 17, 00, 00, E8, DA, 13, 00, 00, 0F, B7, F0, 6A, 02, E8, A0, 11, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, D3, 06, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.5438

Code size:
45 KB (46,080 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.