nfs_carbon_pl.exe

NOD nfscpl

Poland, KIELCE

This is a setup program which is used to install the application. The file has been seen being downloaded from s7357.chomikuj.pl and multiple other hosts.
Publisher:
Poland, KIELCE

Product:
NOD nfscpl

Description:
nfscpl

Version:
3, 0, 0, 0

MD5:
066746841f987980a3c55cae727309c4

SHA-1:
dc6d38764daac2cf5d32d16ba3b5c7edd3323193

SHA-256:
25b25ca1820fd0f9b3ddfd657b6fff7e0cc82beaf23a72efff2b68a8c6674cd7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 6:27:14 AM UTC  (today)

File size:
220 KB (225,280 bytes)

Product version:
3, 0, 0, 0

Copyright:
Copyright © 2006 by Czacha dla portal24h.pl

Original file name:
nfscpl.exe

File type:
Executable application (Win32 EXE)

Language:
Polish (Poland)

File PE Metadata
Compilation timestamp:
11/13/2006 8:28:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:W9GR6gpkucnrBVBS8mlvNWLzIlZh3nsyyLk3IvGgAJs7loQ/QuyDGAUI:9pYrBVI5l8LElTukYOvrPG

Entry address:
0xBB0A

Entry point:
55, 8B, EC, 6A, FF, 68, B8, 8B, 42, 00, 68, D8, F9, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 60, 62, 42, 00, 33, D2, 8A, D4, 89, 15, 40, 4F, 43, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 3C, 4F, 43, 00, C1, E1, 08, 03, CA, 89, 0D, 38, 4F, 43, 00, C1, E8, 10, A3, 34, 4F, 43, 00, 6A, 01, E8, 2A, 3E, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 12, 26, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
148 KB (151,552 bytes)

The file nfs_carbon_pl.exe has been seen being distributed by the following 21 URLs.

http://s7357.chomikuj.pl/File.aspx?e=yk0_gajAK78TwoJgCkctfU7B87ux9lbtcAhzmeVgHXwKrmNJ6lW7BVJR_wmsw86ph8ksn3fDOIzJBQKqCQ1J5YW6aL6wg1SqybQdHAa-0CzSv_VuTtERgXwu6U6uxw9iJt9xWQ5jl-3KsoRUL82ZxA&pv=2

http://s7357.chomikuj.pl/File.aspx?e=yk0_gajAK78TwoJgCkctffUw6KPYVsB_Won1prGmVTv7cpn8NOOw2ufTFTTML_vHNMPTbCCs-UbHRmDOnkF9VNNX4VauYKEdEWdWGJSZxk6ofwX9UHWCgOUXlXtRtGDN4HDGfygkOVwKvqjyXuIs2Q&pv=2

http://s6697.chomikuj.pl/File.aspx?e=yk0_gajAK78TwoJgCkctfbNjuaHW96P2CUJ2pCwSm4-7hdZmvjZZ-nr8tL10Vjo5oz_k-aikb-bOeD-wtC9-iqdByjidX-w19dUOW4PaVumJyDTGrNdkJDfsfTyAwIhT1QP1xhxBP49TEJt4Wnt8uw&pv=2

http://s7357.chomikuj.pl/File.aspx?e=yk0_gajAK78TwoJgCkctfZIaTuVeE5ZdnADvquN_HDCrVHAX93Zc92fvvHW3ltCzF-hfCS5jM8qgZYrq0jFz5fYE0ET9z1flKvosEmXD3m-EpAxk666Cz9jW0eb-huZNCO6_oGOymuVwmbjGnl6Lfg&pv=2

http://s7357.chomikuj.pl/File.aspx?e=yk0_gajAK78TwoJgCkctffmxFsHbohm1_N0bOIwk3U8I1nZMAvgkb6bgB-l3rKjxBb9hJm8nzfQQdvVExMu9hxBXGiDO6SAcjYs9HaJW1UOoDHirJO_fclenSvtXSAkh-ilBb7TbtOlL9TMmSRjDEA&pv=2

http://s7357.chomikuj.pl/File.aspx?e=yk0_gajAK78TwoJgCkctfUnXtPywCNdRtdjK6QcehXWVOMONQOrG-wrjus7xs1zvuBjc8mLvcN8uo3wkk0v1UXKEZll4dMkeMjYUJAIPifl4ct-KkzZfMdjXJUwikppE-RxjWoE2EZc673AkKXcW4Q&pv=2

http://s7357.chomikuj.pl/File.aspx?e=yk0_gajAK78TwoJgCkctfR_QHuSZE-_se9evROBrXWssAxJQ5_JQyy8xqB-SQz_coaCnG96FzffET2qV8MYmV_TIpeo4q_km1QY9svdNJnJKgkYgowB1VzxIl3wk83SckdOtVulYzyhN-7XaJ65VDg&pv=2

http://s7357.chomikuj.pl/File.aspx?e=yk0_gajAK78TwoJgCkctfcy11x-wBDdx8hDeGnBNeV3SkgQ5d0XKAmoWfJ-n4vOJAb1tyv797dXEvFDxVaZehbhvtib8768rxsYeaBwW900WoLScu6WvSCz7kcHp0K9RY4_Yh2-zOzbEyDAhDzaq8w&pv=2

http://s7357.chomikuj.pl/File.aspx?e=yk0_gajAK78TwoJgCkctfcLhnPa9Y_EDIRfydGl2BHjGREIm-YZQXK3Cx_gSAGBvlkb_nory2F_aMz2sSYnCm5NTCp-QJp6t2fxvNlYIaeFeubBepSksUjtzDcNHLWLHAxt3E1AkOYi17FvZ8SEnWA&pv=2

http://s7357.chomikuj.pl/File.aspx?e=yk0_gajAK78TwoJgCkctfctLOQA1yK52GJyjD1iuW1xCxmzMXY4Z5hl0sHCshm9bgD7aN5nKEkMt5xwrEnZNViMpAyzzIiStou5ExjOZ1gBuWFiQU98nUsCm2Rjr1CJo0WC6WRcciLM5JwosIQLKjA&pv=2

http://s7357.chomikuj.pl/File.aspx?e=yk0_gajAK78TwoJgCkctfYltxyYQBcecv63qb5WM_Cy-VAUmkvgxC_1XDigD0xFb-aXVF6uQQGZCI_F8HFQA3CYup6_fakFpkx3rqFbH29qdF1x_9DM--JF8iOEms_UufDmbsNbqQoMkWGCl9TKgHQ&pv=2

http://s6697.chomikuj.pl/File.aspx?e=yk0_gajAK78TwoJgCkctfRqcPD34NV2SJWlBcIR0Bn0S_Fwkv_HIiR0y5t5ozHcq8csVlGEXUWYhnyX1Z7GuPmtqezNdRt73-Zd3AFmR4R5S171AItCzJ2HYL8R3yduHgyyGhgJUPxEYPxJgefMA8A&pv=2

Scan nfs_carbon_pl.exe - Powered by Reason Core Security