home

nfsmw-2012.exe

MD5:
2c0abec046f4d6a94d5682b2a23d3c4b

SHA-1:
97196a2c34e48232e17b1bea91215c391d5db30d

SHA-256:
1edb22b86b617ba5abe389e3f62b79d41a114d9da8ace4bde366292c3138821c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 12:02:59 PM UTC  (today)

File size:
52.5 MB (55,018,246 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\nfsmw-2012.exe

File PE Metadata
Compilation timestamp:
12/1/2013 8:08:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:GlmAhs35tRwvjNk2xf9dFDOgUmpunpYJcBssqtYyT:OM5tR+k299dFDdUFGyqtR

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Entropy:
7.3526

Code size:
98 KB (100,352 bytes)

The file nfsmw-2012.exe has been seen being distributed by the following 26 URLs.

http://fileshare1050.depositfiles.org/auth-14865109683e7e6853a3102445eb9589-200.185.217.155-106768148-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.dfiles.eu/auth-1482778369996f6ff824ea0d6e9e7c09-89.35.93.95-74030821-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.dfiles.eu/auth-14840761298f8c7fc5b9ebe932f4ad3c-83.205.106.244-85967065-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.org/auth-1485486815f1904148020fdb40fd440e-186.216.189.114-97788200-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.dfiles.eu/auth-14878108382d5a122712d78512d3ba83-83.30.156.131-117512778-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.dfiles.eu/auth-148534195886361e81120d56487baf41-185.124.249.212-96566291-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.dfiles.eu/auth-1479226389c58111c69708a3845e3254-79.185.183.6-39562949-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.com/auth-14755928973e375b0f6894f56845e123-62.80.225.190-2609345-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.dfiles.eu/auth-148300557601bbdea06d545abbb62188-185.45.13.153-76241886-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.com/auth-1475764933a43c088c4117aa2e18ad95-77.234.82.73-4348924-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.com/auth-144380063244b69a61554e3e280b9326-84.94.90.98-2299725989-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.com/auth-14716948044ff44b104dd681717b4721-83.213.161.172-2656614535-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.com/auth-1477256430256b7c75a3de46eb37613b-109.175.101.208-19408957-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.com/auth-147180197844774dc4030cb5a5a421b6-81.16.204.50-2657961893-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.com/auth-148018423549aee5847a8339b6dc0c75-79.112.146.195-49165027-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.com/auth-14807243207bc24c038b46d26670619c-154.127.136.140-54301318-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.com/auth-147122700014f2bf45019fdf5ad9a88e-68.33.77.171-2651200839-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.com/auth-14673178742e6729320f990f1791df94-197.15.49.26-2608951980-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.dfiles.eu/auth-1450347175895cc25094125abb9e1656-84.117.180.155-2396394526-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.dfiles.eu/auth-14691363869d86c88eb1998f1abe3805-109.175.42.25-2627681300-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.com/auth-14650165625d20ef091333ac82fbf02d-72.241.21.191-2583304456-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.dfiles.eu/auth-1448365681b968807712c7a23affa566-5.13.93.120-2366745279-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.dfiles.eu/auth-1452986944b12dd23e9ae01921c0ade3-92.251.255.12-2435283263-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.dfiles.eu/auth-1454939907bd2cb46c23f5ad37eee308-5.14.5.156-2462718368-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.dfiles.eu/auth-1454923274b9b0b380b5589c65adc7d6-79.116.102.79-2462477776-163792865-guest/.../NFSMW-2012.exe

http://fileshare1050.depositfiles.com/auth-14518244696c62a7660b0cbbc234d0e7-95.218.205.50-2418024502-163792865-guest/.../NFSMW-2012.exe

Scan nfsmw-2012.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.