home

nfsmwdemo.exe

The program is a setup application that uses the WinZip SFX installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
0a9c8441791eb1cfeff935bcf7939a19

SHA-1:
2410cbaf8871e443afdefeb578da4ceffb3fd5e0

SHA-256:
9660c2056b2fedc14833ab7f6aa41fb37c9aab442d27c152d312dc3b21ebfc74

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/14/2024 9:27:22 PM UTC  (today)

File size:
544.3 MB (570,710,712 bytes)

File type:
Executable application (Win32 EXE)

Installer:
WinZip SFX

Common path:
C:\users\{user}\downloads\nfsmwdemo.exe

File PE Metadata
Compilation timestamp:
1/9/2001 10:08:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
12582912:kVY2xeHrcc4qLCjouEUdI79gCwyA3j8Q5cyVUjeThSyih:ki2EH/QouESC8AUT6

Entry address:
0x39D8

Entry point:
53, FF, 15, 50, 60, 40, 00, B3, 22, 38, 18, 74, 03, 80, C3, FE, 8A, 48, 01, 40, 33, D2, 3A, CA, 74, 0A, 3A, CB, 74, 06, 8A, 48, 01, 40, EB, F2, 38, 10, 74, 01, 40, 52, 50, 52, 52, FF, 15, 54, 60, 40, 00, 50, E8, 07, F8, FF, FF, 50, FF, 15, 58, 60, 40, 00, 5B, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 55, 8B, EC, 51, A1, 28, 84, 40, 00, 83, 0D, A0, 82, 40, 00, FF, 56, 33, F6, 39, 35, F8, 7D, 40, 00, 89, 35, D4, 83, 40, 00, 89, 35, 24, 84, 40, 00, A3, C4, 86, 40, 00, 75, 05, E8, 67, D8, FF, FF...
 
[+]

Entropy:
7.9979

Packer / compiler:
WinZip, 0x32-bit SFX v8.x module

Code size:
18.5 KB (18,944 bytes)

The file nfsmwdemo.exe has been seen being distributed by the following 37 URLs.

http://gsf-cf.softonic.com/09b/a78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=45990&instance=softonic_en&type=PROGRAM&Expires=1486890337&Signature=AupYoBaLRNbfdCxPbXzjz6igCZUtVwJmaoXIyysBvrEJ4xtOlFDcBFP3-odD9v9ofpN1HpCfCP7sSyePC4mlR-oCWw8BnF4is4HWyNecpZVbjKnX-jsuRyCYpTkXKGPqojkq9sxy0BlYlSoGxQVqOg87dfpwxPWjrJOwSDzJXIM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nfsmwdemo.exe

http://www.currentupdateconcepts.com/JDCwgkml39AXbKSzfN6lcAKSTdvHfb0HSp5NgWYKjblIvCc6QjdsUpRe1T7_r8NJ7a7T7oJDbMktd7kyhpPFn_BvItPUreg94GOdtGiJFM47IisaoHaNYEffWfdhdRC4C2iNfyWjKxTn0hgR7uXGUI3Hwg_V xes6wRwEp1J122hZOLFkW2l4hYfBaPznJJ6KtIcwm7DlJlj4El2Rxg0TqaqEGzr Q==-G0wAAETnFtN5LZ4GKLipYxw43LieL3LtOnjISmXCNdjGPlsKaTBvOUxpwathXoiaix92EatRM33iYRLTFw==

https://need-for-speed-most-wanted-demo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANmvob2l/4JUWX48ZaZZSxP jfbwdLPl T7z70WVjFa1ZxpJsipYGEX2OBbFfzGEa8SFncumEDez1U1fXKX39GfiOCH/ElMe32E4A5OWJ QqyEYEx9bstU UOaJVU/nSMtMLSCsRzw41BnAPHW/tt4II/VDLmVnQKE1IYo34F7JDKO4nN4tqO42C1veJpL7OiU5YNnxi5sKyV8GLBSy6es1cBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlVyX y51ML3eLJMkn8Ea6MsAITbH5gB8H1XQJWdP5Vzl79vm le4W54ZYSCaMS/TMnfONi5KiDn8fyfAVfn48TLoWj/ BKvINpf4aH xACqeOMta/XBw1E TnL3OKamXbfz35yK qYsQlt0Bxg/XhvU aOuLKOSEv18kUMs6nSha5ERsVFGXztRzBcgmf3YQOrBYneoM8QjqeXdc7jCOcDe9281CIncyHJjMUC9aQ6fjZafI BgXISfqD7X41iuUuFGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c9xwyqr /1V3SLVuYUazL/.../fiwdLNfWRAy

https://need-for-speed-most-wanted-demo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANmvob2l/4JUWX48ZaZZSxP jfbwdLPl T7z70WVjFa1ZxpJsipYGEX2OBbFfzGEa8SFncumEDez1U1fXKX39GfiOCH/ElMe32E4A5OWJ QqyEYEx9bstU UOaJVU/nSMtMLSCsRzw41BnAPHW/tt4II/VDLmVnQKE1IYo34F7JDKO4nN4tqO42C1veJpL7OiU5YNnxi5sKyV8GLBSy6es1cBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlWE8YQcTROP68Lk9voH7jicBLaGRVNvRl3nuVWFb3bv5ZFcvd/RFmjIHyAplrUVCv4G3ewfsyejtljMIuUqnTXS 3RuANoTpow4xbnWzZva3zv/4uQUT8BxkXN0EBJESVNN1n4T8LtsAom/DLgrW86uOH yn/uGD7wAX7wGvormMEVH88jvXmcSzRqnSFxTvsQ/6SJsIVZjNXwCVCeb7tRuR c79N8aGQf3wqe1G7253nz3ErTBsiFVbeHrGDKz3C1GUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c9xwyqr /1V3SLVuYUazL/.../fiwdLNfWRAy

http://filehippo.com/download/file/.../

http://www.currentupdateconcepts.com/e2x_JTfc6V8olZpc3qxzQ22msQ86HBoL_kUt60hJ3Io9Xh0Go8dEQHwxZ2EM2RA3nozCcO2gcZmV_F7JcQHf afBYPj5afKuekcyu_YtNg4QTo9gldxd2ux8oO7UGyl9Ad1FyHL2R_dCwbWuybDuYSYp9MIiGUuZlAIzlAOSj9bFaoT6noDJJybVkmZ5zu9mWDR3VEZ3IfoQbE19zzWwTaXwbCLPhg==-G0wAAETnFtN5LZ4GKLipYxw43LieL3LtOnjISmXCNdjGPlsKaTBvOUxpwathXoiaix92EatRM33iYRLTFw==

https://need-for-speed-most-wanted-demo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANmvob2l/4JUWX48ZaZZSxP jfbwdLPl T7z70WVjFa1ZxpJsipYGEX2OBbFfzGEa8SFncumEDez1U1fXKX39GfiOCH/ElMe32E4A5OWJ QqyEYEx9bstU UOaJVU/nSMtMLSCsRzw41BnAPHW/tt4II/VDLmVnQKE1IYo34F7JDKO4nN4tqO42C1veJpL7OiU5YNnxi5sKyV8GLBSy6es1cBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlV6Yh0uwtQd6GGGHpdq er1IgvbG8FdXAN1z5k jVRB45qJG8EjLrcFmP3AJQMu4j/VpfwucbqxB Ubncg1L8flrZ0pYxJoeOpzXtJ4n2iZr5CEEOCtMbZLcqum8EQM4sUzThU3VRKX4Y01N55p3YTDz FON3zqqrft91RVzuV/ngQDlLxaHGMYox80YrUts/r6UaP26ea231ATP3jvkHu7n JiEcbFiTQ1no5jbMBe8CGfsk7oUeNBtwFb1gsMJIJGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c9xwyqr /1V3SLVuYUazL/.../fiwdLNfWRAy

http://www.currentupdateconcepts.com/ZZg8JJX5oI4Ro5yRp0s7J8PFB5ty8Di00b3TPuYWQGw2sxn_ONcz85wG0xQ0HSalYb 04LulsGYmkyL87CM7WxshvP2rMi r7R dPRz933KrR plrvgVhTpP4DNpPcHNBmTzXEvqu 1Z8_EGftz4mK 5b nMxYcA34wafqJ3OWKngHRu8PR2I23fxWh4JI4QgznlIQJ-G0wAAETnFtN5LZ4GKLipYxw43LieL3LtOnjISmXCNdjGPlsKaTBvOUxpwathXoiaix92EatRM33iYRLTFw==

https://d1ob5g40gc5b6g.cloudfront.net/79/787522/.../nfsmwdemo.exe

http://filehippo.com/download/file/.../

http://www.currentupdateconcepts.com/hyNcWGDYjSP0Dt0e3gP8HMot3LKGQKGEMOHC62UrWdUyQfjzNpWOsLnct8SzaEQk0mwEYlLHXEWt8QT3fzGTBYOWfMxahC ljAfKKrglFtXJf1PSsLPhlezJ6gkwU5HbvuSJZnyz57P UC4ME8aotIdFXK0wuFlD9DLqqT5XWWe6bwqZFxhpKcqsW3B5HTIbku7_jbwk-G0wAAETnFtN5LZ4GKLipYxw43LieL3LtOnjISmXCNdjGPlsKaTBvOUxpwathXoiaix92EatRM33iYRLTFw==

http://filehippo.com/download/file/.../

https://dw.uptodown.com/dwn/CCmIYvgpfEAK6y97B8orbU9ZjDVrnXzp3OKt4ceOUdkteSPN1J492aBGs7GEh8_MUWBS-YVnh5qrdP8sQCXCX_UdEpGOQQES4KoROMn7NoFSYhuGXFVV-0x8GZACgp41/RCaQvlf09ahiVFhvGHipZmb3g0PQax3rXsHUVEuLiKLoEICpUrIHd-AwbXYRVwRZQ71F5qWA3bPgt-ljci5L5xqjnq1N95mJ1G0JYzVzrtDCwLVoQCBj-AOXRv6YATqc/mP_oVzkf4KaIyN3MKG_h7hMvcpoB1sfNy_myoRKUxPk7T9sTIz-HzsIYR5C-dQbNMvULHzaVedFoazUM2qLLRkISqYmSeL6WsIM7UFEnczBNbgIlz5H4FtS2d1Q6BZt0/.../

http://www.currentupdateconcepts.com/mthR9hXWMgLn_VDM4ZPkDmGRRqmBddUd3ZpWC0XUx5O4ct7Qt9rYj1osS10iwgdFnfZ1fk7YOVgbQKa9j3Wje ndFi3Wj7z05InRIn9MjA6YGGoK78LoomwVLHls9PtX_KO4vc0LbfwTqohv9phyXPF96edyhazsAC1DtYaH_N3XerxXcY3AFUgbRKvYQEGfWF1iuPoakh G6gTETmXaa2EknOzjNg==-G0wAAETnFtN5LZ4GKLipYxw43LieL3LtOnjISmXCNdjGPlsKaTBvOUxpwathXoiaix92EatRM33iYRLTFw==

http://www.megadlcenter.com/rf3wxdv7kcdMFcQB2Zl1edC8GPWzOOfO3JQETRhKo2E27tIJ0qIk9uaJhTn3LNaw6Zu4TVoQ1wj3nsIigG gPBfXSiDijd4iYIowS2khIPo9T5LKK1VyoRHZhLngizFN46jYHstgjTPR5OJ1AKUDGyUlylglw9KQNlDa3UTso5KGLzXx2d6TbS49FMrLuHYK AporsW1tK1kpRnkQRlMV89dkokzs9T6Kqeh7j0go1xCndJwLI4gQZC1xVvJJbxvmcYNsbaUm3bujaPSRJ2aOAf6x4TRucjXmovosOUPkulc 56g9MD8KduKn92epG_tCg_uGZE97e7cZicmPjrIdtzVYm57_gyS cX5BZcVNwJ7AycZi0UsEkpWpKF5AwQuHysnY1i6B6LvhywQzk3xHDOhVuEryLCLGwd0qnyfMc3c4iWosIk_3Ocx0ip5dOoHnzsgcydNchu0qqSEg7tRUxYSzIJ_lGAfHnZbtcgxQZWdsVbS7uZwF3LDhCtc7UAQnOR4VZr54 tmC PCsK6LhtR7XhwnANzfDUB885h89As2T3oOAUM=-G0wAAETnFtN5LZ4GKLipYxw43LieL3LtOnjISmXCNdjGPlsKaTBvOUxpwathXoiaix92EatRM33iYRLTFw==-e

http://www.megadlcenter.com/CUUDcGAReklDyFwNeLAzgnfN33wpmGJVrl8JkTr5fMJfga2wjfN3YDGWCHiiObAGLvr InpzqVWjatSZ_lO552hyXqsEuhHUtkgsrFjMxXgXZ qV_fkmo6TLBnUQK5Eslmxi6Y42usCDQlkf0ofZJ_Z9WWR77sWnv032cNV6Lps6ZO4Gu1UZ9Ojts6t9kAEBvFLDd 2L-G0wAAETnFtN5LZ4GKLipYxw43LieL3LtOnjISmXCNdjGPlsKaTBvOUxpwathXoiaix92EatRM33iYRLTFw==

http://filehippo.com/download/file/.../

http://need-for-speed-most-wanted-demo.bg.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6iMp6OllZU=

http://need-for-speed-most-wanted.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWsJiUcRB3VrGHkuIey7s/t0iNykZHsLPFDbDxEZi7svaP6npDNrqFkltm17 SUm4i0rhfSnf4X7qtVuUQWs/hCc/rEUPlQEmxPuMzh kQZzjA5ldUzJwZIftSSqzGpY1TGPZPGfL0bGF2X6dt8lCrDP45Yhv4/rUB6Ym4bnTF0NowzCxgA8au4X955Ofoqds53e98g7C9uLrgpfJZY7qUTSJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugzCh8kxoC0a937o4SmnFIvARGcpYylQuX/lMke si 13Ch8iwqLruKid4xATrgqh38Y87p9Ua750hTejEruiuOGx7jT1Om5NVrKrQ6 LlqKyjN5Yu2uKblTVuzRhLwS6pluZKnUKl8x1ZTpfN/j/kZus6jhPZJK/R1cZPPt0KZo5tAT5DqDLnqhQ2mW/.../zzgnpZYsVX2k58C0uTLojPme02H896AaULoZhM6 3Mp6 IigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbUppnl5pRXSJenGU0lofXZCxK8vjsh8ocRd76uWLPJRg

http://need-for-speed-most-wanted.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWsJiUcRB3VrGHkuIey7s/t0iNykZHsLPFDbDxEZi7svaP6npDNrqFkltm17 SUm4i0rhfSnf4X7qtVuUQWs/hCc/rEUPlQEmxPuMzh kQZzjA5ldUzJwZIftSSqzGpY1TGPZPGfL0bGF2X6dt8lCrDP45Yhv4/rUB6Ym4bnTF0NowzCxgA8au4X955Ofoqds53e98g7C9uLrgpfJZY7qUTSJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugyMHUMNkjFBpI0ziMdMyV/slOXwfxqaEPALKhtlh0TUf/2ChpEq/.../QqDdE vhlg9WqSIigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbUppnl5pRXSJenGU0lofXZCxK8vjsh8ocRd76uWLPJRg

http://qpdownload.com/data/need-for-speed-most-wanted/.../nfsmwdemo.exe

http://gsf-cf.softonic.com/09b/a78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=45990&instance=softonic_en&type=PROGRAM&Expires=1469681134&Signature=Zg~vfh~xLIyf2JaAZy2rMV7E~fSBoZuRShzQo2pgzrGUFUzbf9TBVg~8NrQfODfUUn8p4tR9UpmibAJu3ekk-PrKPWtJrGv7TVADidAdeRh9LwNGzOU3cCbbxJwJ5Vnq2ZlvZ9sCzt-e5BfDlHWekVNq5eFDyIohgNsrxAi8lmA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nfsmwdemo.exe

http://qpdownload.com/download.php?name=need-for-speed-most-wanted

http://need-for-speed-most-wanted-1.soft32.com/get/file/id/.../?no_download_manager=true

http://need-for-speed-most-wanted-demo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANmvob2l/4JUWX48ZaZZSxP jfbwdLPl T7z70WVjFa1ZxpJsipYGEX2OBbFfzGEa8SFncumEDez1U1fXKX39GfiOCH/ElMe32E4A5OWJ QqyEYEx9bstU UOaJVU/nSMtMLSCsRzw41BnAPHW/tt4II/VDLmVnQKE1IYo34F7JDKO4nN4tqO42C1veJpL7OiU5YNnxi5sKyV8GLBSy6es1cBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlUkJI/idmz3vX0YG6AMARunyGs2YUr66ulmrpmXio2gSm4f ZN8LboD3V5ttr/ylbOnLDL6hK07ZkMHBNKmlWMMyv047gL89nTxszPRgWB6H4CldfiUFxPOaz6qQlvkkykQkETaT08jPWonqY6kITGbRQSK4yJDnnlZoGwNFvby2fma 6llyj3UI1NVcF4zbVbtVnVJcyKmLh76NFth/iNC0teWloh5Ilg9dEmTjEwaCAQCisFHG8DXc66AnqUyUmVGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c9xwyqr /1V3SLVuYUazL/.../fiwdLNfWRAy

http://filehippo.com/download/file/.../

http://need-for-speed-most-wanted-demo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANmvob2l/4JUWX48ZaZZSxP jfbwdLPl T7z70WVjFa1ZxpJsipYGEX2OBbFfzGEa8SFncumEDez1U1fXKX39GfiOCH/ElMe32E4A5OWJ QqyEYEx9bstU UOaJVU/nSMtMLSCsRzw41BnAPHW/tt4II/VDLmVnQKE1IYo34F7JDKO4nN4tqO42C1veJpL7OiU5YNnxi5sKyV8GLBSy6es1cBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlVi72/VGEg2WcfSUbpQi4Pgz o5BlA3Ba4/axvwJw/xsZc 1V9RMlGw8rMXhUSx8BHU43c5MVobJG7qe4acz2JLgvJq5o2WzoV6mo38g5fvWKkFFsRJav Sp6fbFsrMRYMk/iMfANE/jBWvp7rXPc4MXhXFc CS4B1a9UNnsg0yk3A4sqt8Zm5mZpuNuuNCyWREV2ql6G7d7pSfY6HQVNhRx319apoqdHErxWs hwNr6oY0tqfGgAcSYN5vsmMOuDhGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c9xwyqr /1V3SLVuYUazL/.../fiwdLNfWRAy

http://www.megadlcenter.com/ZbceeTs4ZKjLXlFZ3AKhjU8CbegxHOrm7jUxU1N40690oIOhIFRjwN1Q6hkdyyhNNg579vK_GRRuzlymjUXsbSU3J28BhkSlaAtvRg90ge4AIczbieNv1 rqPvxYk4JGGE5oYRR_7yNh33UXUWg6fXplTa2hUplTA2tGbW Sp7eLugG6n8RkcCbJu2xN2hCBu3 VNuK_-G0wAAETnFtN5LZ4GKLipYxw43LieL3LtOnjISmXCNdjGPlsKaTBvOUxpwathXoiaix92EatRM33iYRLTFw==

http://www.megadlcenter.com/BOqLijG4E92Fahej GXtyQgxvdtH3ingy_hjX 1dI946LQjxaZI3bfU4tXjfIP1CAHkag80HF9EyBFwouzoz_7uncM54cNldM7c2kxOiPhMhnZ K3Kw qDMAtDgEiJTj9Bj2D3gFViqHClCUqqqa C67mrFKEop3AaI8LQWYKbQitrCezHF1AMpTjxfPleGObVLTtqAq-G0wAAETnFtN5LZ4GKLipYxw43LieL3LtOnjISmXCNdjGPlsKaTBvOUxpwathXoiaix92EatRM33iYRLTFw==

http://need-for-speed-most-wanted-demo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANmvob2l/4JUWX48ZaZZSxP jfbwdLPl T7z70WVjFa1ZxpJsipYGEX2OBbFfzGEa8SFncumEDez1U1fXKX39GfiOCH/ElMe32E4A5OWJ QqyEYEx9bstU UOaJVU/nSMtMLSCsRzw41BnAPHW/tt4II/VDLmVnQKE1IYo34F7JDKO4nN4tqO42C1veJpL7OiU5YNnxi5sKyV8GLBSy6es1cBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlXnr5ZJXtjDjQXdQ0Z2VHPsifhXo89j/6UGtPv/g6CsTjpgzgH1FX9y7jJNqvRxRow0JSv6wRyTroHnbEq49DUZMANHJUO2uwVjmFpBQ s rm3ToQ9knnkE1BHoz6xdiowtAWt9qjaZzpOskHtlVV4ZDcTfTNx30Q20YtuDjKvCvBuO7x8yMp8PHj5NwO7fdkxvMRxqdFCge76U0Rk8Ws VY5iHvtY9Of1Z28p2MsoJwUBf 6slVLs02ep6LY/UB9GUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c9xwyqr /1V3SLVuYUazL/.../fiwdLNfWRAy

Latest 30 of 37 download URLs

Scan nfsmwdemo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.