home

nfs08demo2_euro.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
f6a03146bc3bfbbfa91c02f838f34c2c

SHA-1:
9f99a8ca6cf7e29f122eafdc30fbcf964eab65e4

SHA-256:
664e52b8cb4b4960245d2e4fcb361135a9caf5bcd2867c9472352b87e70c9a6a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 11:49:31 AM UTC  (today)

File size:
569.6 MB (597,266,653 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\nfs08demo2_euro.exe

File PE Metadata
Compilation timestamp:
9/20/2007 2:34:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
12582912:5gWynbn1mfFYJwP0MSbLAeJMxBIrca5ua/iLPyGbPKZ6CXAe:Cnbn1oFDdSbLAeJoON4m2PyePKZ6Ch

Entry address:
0x1000

Entry point:
E8, F3, 2A, 00, 00, 50, E8, 3B, 33, 01, 00, 00, 00, 00, 00, 90, 55, 8B, EC, 53, 56, 57, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, D3, FF, 75, 14, 68, E1, 50, 41, 00, 6A, 00, 6A, 00, 8B, C6, 8B, CF, E8, A2, 47, 00, 00, 81, EB, 10, 01, 00, 00, 74, 05, 4B, 74, 14, EB, 57, FF, 75, 14, 6A, 66, 56, E8, 9A, 35, 01, 00, B8, 01, 00, 00, 00, EB, 47, 66, 81, E7, FF, FF, 66, FF, CF, 74, 07, 66, FF, CF, 74, 23, EB, 30, 68, 80, 00, 00, 00, 68, A4, 69, 41, 00, 6A, 65, 56, E8, E0, 34, 01, 00, 6A, 01, 56, E8, BA, 34, 01, 00...
 
[+]

Code size:
80 KB (81,920 bytes)

The file nfs08demo2_euro.exe has been seen being distributed by the following 15 URLs.

http://gsf-cf.softonic.com/9f9/9a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68894&instance=softonic_es&type=PROGRAM&Expires=1444331825&Signature=ZYufKe4ye-oiquzvO0Du2TfCrhk1ZM3889tC~uSdA04iFUYreSntpLJya-Ig2Fm0by9PwuFWBEch0h1XYCUM9vE6UQKid43fjHQ2T5mMwyyu38BLVX33aVxSaVez1TuGjKCQqCYsV4toN0xgN7RQL7KCYH9BpeYCkyR-FxR2Vbg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Nfs08DemoEuropeEngRelease.exe

http://gsf-cf.softonic.com/9f9/9a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68894&instance=softonic_es&type=PROGRAM&Expires=1482304450&Signature=KJ47C7rTXnkip0VNweYByWbDHDndYJTFf1fE0UaDaL7QHMnjZQms35j2mU3Kww-QpbGaJel1Z-eVIjvUFOTKNQ8d1sparl0zs0~mAgU8BSXaJBmtOogd-zrErM7zk8mm5N5jKzlzncLSIQQW0SC~4Dd5CcT1zh4DT6TBTwygCWU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Nfs08DemoEuropeEngRelease.exe

http://need-for-speed-prostreet-porsche.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPWz UJIt5IrRBmT4DIVKuktrjos0danmBMV8VKCUhPW1 ednMEczvul62Tr0uUZstW56wS/rOl0voeZLER1yqIiipPePjcnNev7LNaLq0mkFC7QNsVNIY6KDE3Kv wX19s4eqDjgXzqGAM/iUYJ1x4y66vv3b3K1Foisl /V6LUt4j oTyxf6JpMXfAEAoJZhi9cqhTOw274CP4wQfg89xcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlWoitjCx1FWiYtYv1jepLGHJ3lGTEwCMUQq/D0ix6ff9NP2vaPwB1fYS/u12226gJn1lPwtDM36iKAjJ08AFUPOsr8Z17OptC3d/bBuTns9GW4/Fr0JzS4 ozf9SNw9b09s 4vV9bRQyvOHazrHJZlbHdS0aF7G6Ir5/.../ASfjztFx4txYcXAdLVGnu14anDMcYBvw=

http://gsf-cf.softonic.com/9f9/9a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68894&instance=softonic_en&type=PROGRAM&Expires=1454459972&Signature=RAvU4rL1cvp61IyXypZsMXWdmHlJQKPTeBU~XbVIzfV7NqTIHRiHw6aAZHnbfzFZ-rEULm83TR1TXcPSzORT7DBuvMZVSqo59jDg4Q4WAMrNN~y-gpVkDro9pwzuICR7LoQ~4650rfGBIwP4ejNlr~-pyKt2foDaGr1HDF3Z874_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Nfs08DemoEuropeEngRelease.exe

http://gsf-cf.softonic.com/9f9/9a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68894&instance=softonic_en&type=PROGRAM&Expires=1459482377&Signature=D9icUASNngsipwjUU1yF2ctRKqcmQfLwBn15~Hb455Fb1g7D2IaJG8DVoGsoEbQG3XD71WpCXW-T-guNEUsfpFr6SUJV8aDkYagZ-7VBNR2oheK5oCHClaIPBD0vFgmPyWDke6dXGHh0Rf2nGTXPJnkJfRnbchVs~4IVA-n8M6I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Nfs08DemoEuropeEngRelease.exe

http://need-for-speed-prostreet-porsche.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPWz UJIt5IrRBmT4DIVKuktrjos0danmBMV8VKCUhPW1 ednMEczvul62Tr0uUZstW56wS/rOl0voeZLER1yqIiipPePjcnNev7LNaLq0mkFC7QNsVNIY6KDE3Kv wX19s4eqDjgXzqGAM/iUYJ1x4y66vv3b3K1Foisl /V6LUt4j oTyxf6JpMXfAEAoJZhi9cqhTOw274CP4wQfg89xcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlVbL0jnFi9UpMS3c5M7PME/4bJgDMBMTWyTp6iXFpUPbk6e1P0FID4nGtIzh1wnJub8mZXTRECq6KYHEhKetkekshmu6kPfzbzW3xIL0/0NMQZA6Z7xNigaSAyxWbZi4lKHJt8iXBDdKS5jm8cOmMzne9KKROw tdRcHNEoMUCnXwv0QFbpiTXu4bZjoyLeJAp/CQJL7TXPVzW00I/.../ASfjztFx4txYcXAdLVGnu14anDMcYBvw=

http://gsf-cf.softonic.com/9f9/9a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68894&instance=softonic_en&type=PROGRAM&Expires=1437774000&Signature=Okxj7qZYQFjNTf5bgd-zoic8kf~wcjRMwmfekPxjTUK6QbQYcYOqMLF~bF5~6l3x6ThYrKAT-Byx851JAjWyIbnMRl1TiQqHg9F7HWUUm2-or1O9K3e9viUwvE3lLyh1yrxqF1-4LITwmu1r1KCkh7dmsVPNTJRalGxSMFrEPgY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Nfs08DemoEuropeEngRelease.exe

http://need-for-speed-prostreet-porsche.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPWz UJIt5IrRBmT4DIVKuktrjos0danmBMV8VKCUhPW1 ednMEczvul62Tr0uUZstW56wS/rOl0voeZLER1yqIiipPePjcnNev7LNaLq0mkFC7QNsVNIY6KDE3Kv wX19s4eqDjgXzqGAM/iUYJ1x4y66vv3b3K1Foisl /V6LUt4j oTyxf6JpMXfAEAoJZhi9cqhTOw274CP4wQfg89xcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlVTSe7Ii zN7l1SDTGxYs9YjgM48mm18mYayLR9W/QQQEMGNXUeVuRQPdYOiHp35LCEspWrM2tluWuZNuLik9KeIckq1BfevZdBM7Dhqmg2m5dxAKEaPzdAI2Kw0FNpZuG3uD0CxEAuOuB3DN6SfMJvV3/.../ASfjztFx4txYcXAdLVGnu14anDMcYBvw=

http://gsf-cf.softonic.com/9f9/9a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68894&instance=softonic_en&type=PROGRAM&Expires=1444970926&Signature=C~z~daroiwlF0Z2nE1tYfV33UU--8sdw8vQ2b8SBTRBI9urt4FxN1ozho4AdJ7ZfWVTGo-omc54x-6MmVOtMI0PfGnwyCQPsGwS4RKiryEBIW63pBK087Lf5IJamDmeCKRz2cToVhIjAW1gWMn1zPKr1IjmOkyJypgAGunmqbNc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Nfs08DemoEuropeEngRelease.exe

http://need-for-speed-prostreet-porsche.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPWz UJIt5IrRBmT4DIVKuktrjos0danmBMV8VKCUhPW1 ednMEczvul62Tr0uUZstW56wS/rOl0voeZLER1yqIiipPePjcnNev7LNaLq0mkFC7QNsVNIY6KDE3Kv wX19s4eqDjgXzqGAM/iUYJ1x4y66vv3b3K1Foisl /V6LUt4j oTyxf6JpMXfAEAoJZhi9cqhTOw274CP4wQfg89xcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlW3DnNIMfQJ9IVSYKrX2pagcknKej9k8Eb/uJbW7tMqkq7UxNloYh1C5dpToPQEL99Go fGdkwJGrrJv5m1cJoUolxJ nipEyEJsFEaF6RpYvzEJHmLLvhGc dyJ3uSHsh87BgFVXoGcZwK /EBF80czlnriXND8HzB3EOs1APriDgiPsrGNo/.../ASfjztFx4txYcXAdLVGnu14anDMcYBvw=

http://gsf-cf.softonic.com/9f9/9a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68894&instance=softonic_fr&type=PROGRAM&Expires=1464085908&Signature=Mh3hR6-ObUm0rjvtYc60-pTBpiXCmPbMfITYf8RstNMr2GWXV6ygEHa~i7rrK8p8B0mxrscvDIw-wJ69GODYcScWI8vozqSPV3DgjYH-w9B45ZXNxljfLmRHkNGR56yWqkbCRpAFsyJ-d-446iXoZekEtWAkrKw~m2TIezmxogU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Nfs08DemoEuropeEngRelease.exe

http://static.letoltokozpont.hu/letoltokozpont.hu/programok/.../nfs08demoeuropeengrelease.exe

http://gsf-cf.softonic.com/9f9/9a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68894&instance=softonic_en&type=PROGRAM&Expires=1461185031&Signature=BntEaP5~iOU9XaKOMQxHxSHhewIF84ji08pvvSugGhQPDMGE58sq9d2~1~eHcXw8X4fE9NrDjZiyeQyu28nBH5DEbC~NMH52Y~rMs11FOAUrTL43upolcx653TvSde6jdnsEoQi17L1PFJDqOAJacDFArWX9ZIkcBTHNJ~rV3RU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Nfs08DemoEuropeEngRelease.exe

ftp://largedownloads.ea.com/pub/demos/.../Nfs08DemoEuropeEngRelease.exe

http://global-shared-files-l3.softonic.com/9f9/9a8/.../file?nvb=20150122113042&nva=20150122233142&token=0d69a30a1ac74e7099f07&SD_used=0&channel=WEB&fdh=no&id_file=68894&instance=softonic_it&type=PROGRAM&filename=Nfs08DemoEuropeEngRelease.exe

Scan nfs08demo2_euro.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.