home

nfs-rival.exe

MD5:
bb1a6ceba1cf65beb94d8c825df02f07

SHA-1:
b260fe5cf44332b2b915de40f828ce5d543b4aa8

SHA-256:
ff020ed50c895b214f27f41152fc579933bef461a43f1a620ce6c20a1eaac96a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 10:39:06 PM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM41.1.Malware.Gen
1.0.0.1077

File size:
52.6 MB (55,142,945 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\nfs-rival.exe

File PE Metadata
Compilation timestamp:
12/1/2013 12:08:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:PV5stBgCUuJLcibkmr17634BAJcBssqtYyl:PV5s/z7Ze2AyqtL

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Entropy:
7.3548

Code size:
98 KB (100,352 bytes)

The file nfs-rival.exe has been seen being distributed by the following 26 URLs.

http://fileshare1280.depositfiles.com/auth-1481473581f41d64533cb154b11ce23e-112.209.171.0-61738830-163792826-guest/.../NFS-Rival.exe

http://fileshare1280.dfiles.eu/auth-14838809584deebb765dfbfbbdc7b3ce-83.205.106.244-84185212-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.com/auth-14687450769e5e27414c1f72895a7798-156.208.158.248-2623615145-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.dfiles.eu/auth-14759397628a52e7382e5a0d4e3ff735-89.216.130.158-6145610-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.com/auth-14720639501ea5ea15806599e591681f-82.113.55.18-2660900739-163792826-guest/.../NFS-Rival.exe

http://fileshare1280.dfiles.eu/auth-14795742303ab7eeecff0011563a4e8c-5.172.234.11-43016305-163792826-guest/.../NFS-Rival.exe

http://fileshare1280.depositfiles.com/auth-14786252800d3497428a52162dfd0fd6-91.64.140.176-33646508-163792826-guest/.../NFS-Rival.exe

http://fileshare1280.dfiles.eu/auth-1480267155691f11a9d6f4b90b9d02b3-95.85.174.180-49986343-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.com/auth-14523982150e9989de7a3b5874e26cce-208.84.207.124-2426692273-163792826-guest/.../NFS-Rival.exe

http://fileshare1280.dfiles.eu/auth-14810490966e91ec9f532cef3fd46787-188.120.212.57-57575076-163792826-guest/.../NFS-Rival.exe

http://fileshare1280.depositfiles.com/auth-14807407594f925b416255b9ae5d3eae-154.127.136.140-54415463-163792826-guest/.../NFS-Rival.exe

http://fileshare1280.depositfiles.com/auth-148074524011fdf17095de1d91646c19-103.10.20.85-54446989-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.org/auth-14531584677230c3274cf0ee19b1907c-191.241.41.61-2437823237-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.com/auth-14705717444f83d652c4bb1505349eb0-109.72.57.232-2643142419-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.com/auth-1467429895429eed43f6cda74a94628e-138.75.232.85-2610094340-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.com/auth-146744182614d6b04269ec6b03d734c9-139.192.252.30-2610193338-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.com/auth-1463232378b9ec8b344ba3b86c5d4b16-139.194.69.175-2562830151-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.com/auth-146646109451295e01d04a3867542f04-197.15.54.94-2599694231-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.com/auth-1460210624d014f4465e746f83bde903-79.173.222.83-2527138999-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.dfiles.eu/auth-1465045321c05a8f7fb23bfb71fcffd0-213.247.64.22-2583628099-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.com/auth-1448756238d4bb2af4e0fe4b97205411-68.186.53.181-2372567994-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.com/auth-1458496362341fe9f65e7c636a3c1f36-203.135.190.2-2505739353-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.dfiles.eu/auth-145627933515806a86177d1c6a23294d-84.117.166.49-2480605129-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.dfiles.eu/auth-145484325233c029e6d0e9001dc8c2cf-151.227.49.205-2461328726-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.com/auth-1447464156abe3039f4e019e6c9a33c0-121.6.143.152-2353167618-163792826-guest/.../NFS-Rival.exe

http://fileshare1060.depositfiles.org/auth-145064945148ad210fe65f76907b73e1-177.47.36.95-2400875037-163792826-guest/.../NFS-Rival.exe

Scan nfs-rival.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.