home

nfsmwle.exe

7-Zip

Igor Pavlov

The program is a setup application that uses the 7z Setup installer. The file has been seen being downloaded from download1139.mediafire.com and multiple other hosts.
Publisher:
Igor Pavlov

Product:
7-Zip

Description:
7z SFX

Version:
4.45 beta

MD5:
23757faf7281952105706a3d09ae28d0

SHA-1:
2c60e2e5c11aeeaf41bf0b37d89edcdcade22fd8

SHA-256:
8a51f0526c41146cf919b5d1824d9e7d43997473bcf20b7f9966b69e6f9601a1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 12:12:41 PM UTC  (today)

File size:
353.4 MB (370,549,290 bytes)

Product version:
4.45 beta

Copyright:
Copyright (c) 1999-2007 Igor Pavlov

Original file name:
7z.sfx.exe

File type:
Executable application (Win32 EXE)

Installer:
7z Setup

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\need for speed most wated\nfsmwle.exe

File PE Metadata
Compilation timestamp:
4/17/2007 6:49:25 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6291456:u1S9nBcAQ9cigp0ZJemFA8AzAsQ3CQQ+WjJUuxTOvAQIkE5M8M9o7QWSJ27:MQcZ5ZkT8xsQ5ENxTOv8M8M9KHq27

Entry address:
0x189BF

Entry point:
55, 8B, EC, 6A, FF, 68, 00, BE, 41, 00, 68, 24, 8B, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, F4, B0, 41, 00, 59, 83, 0D, 84, 8A, 42, 00, FF, 83, 0D, 88, 8A, 42, 00, FF, FF, 15, F8, B0, 41, 00, 8B, 0D, EC, 19, 42, 00, 89, 08, FF, 15, FC, B0, 41, 00, 8B, 0D, E8, 19, 42, 00, 89, 08, A1, 00, B1, 41, 00, 8B, 00, A3, 80, 8A, 42, 00, E8, 20, 01, 00, 00, 39, 1D, D0, 17, 42, 00, 75, 0C, 68, 59, B0, 40, 00, FF, 15, 04, B1...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
104 KB (106,496 bytes)

The file nfsmwle.exe has been seen being distributed by the following 50 URLs.

http://download1139.mediafire.com/qiy78vfi0lvg/.../NfsMw.exe

http://dc355.4shared.com/download/.../Nfs_Most_Wanted.exe

http://download1686.mediafire.com/4v9ntrh480eg/.../NfsMw.exe

http://download1633.mediafire.com/71p8ud6m1gdg/.../NfsMw.exe

http://download1362.mediafire.com/15l4ct64rmdg/.../NfsMw.exe

http://download1150.mediafire.com/i7igil9qjp1g/.../NfsMw.exe

http://s7360.chomikuj.pl/File.aspx?e=tSX6ILdzjZFon8Z8Cq_9rBacNDzLsH7y4RoWUgSkyyJf5reQU1ivOz2yYyPyf-Ukink5gxgcfAKsCv3T7ELV-vjgbQxp575PqHWTq-OsMBBKn-iFOkLqLogA5VC2qvKdGGAzUbmoaxE1cXJUhhqcWA&pv=2

http://download914.mediafire.com/y53vsfayu5eg/.../NfsMw.exe

http://download2056.mediafire.com/swdxti78dsig/.../NFS Most Wanted.exe

http://download2183.mediafire.com/9nvb0mb8vkag/.../NfsMw.exe

http://s7360.chomikuj.pl/File.aspx?e=tSX6ILdzjZFon8Z8Cq_9rBacNDzLsH7y4RoWUgSkyyIytPsxRxBhN5LoGEUXZTDhBNkl3CPR2L3iqFZieGAJICmQH-Msu8fPPBcW9HCCaf813SusKdO_riyrtaGWH4p0cUVIblyYS1U7JYb7hAG_Ug&pv=2

http://download1343.mediafire.com/pqk9ada6dngg/.../Nfs Most Wanted.exe

http://download1842.mediafire.com/18zdrcoulcqg/.../NfsMw.exe

http://download633.mediafire.com/01ta2dbzf36g/.../NfsMw.exe

http://s7939.chomikuj.pl/File.aspx?e=tSX6ILdzjZFon8Z8Cq_9rBacNDzLsH7y4RoWUgSkyyJMUZEYtBP-gDdfGSnkQJCpMvFBjT6TSrNm0XHR6loo52F4uVzVUHJvcpuyb5xql9umUwndBCMOBb041NXDsYOgETwnrAAG5SqzS7SFn8mAng&pv=2

http://download1679.mediafire.com/69odpglalc9g/.../NfsMw.exe

http://s7360.chomikuj.pl/File.aspx?e=tSX6ILdzjZFon8Z8Cq_9rBacNDzLsH7y4RoWUgSkyyJwdMTjkEJIhcKaREi6vm9xSCTPVs9JKTV7Q1B0SsnurMJy0KnFSwnd3rz9QH4shI9zfx6crRv1CXHZxVT_Y5K8bI8J6F1Dbjp7qS1uNcqVxw&pv=2

http://s7360.chomikuj.pl/File.aspx?e=tSX6ILdzjZFon8Z8Cq_9rBacNDzLsH7y4RoWUgSkyyLnyCSdSITKJoOBFh5EC6mCEmx7uBxbabGJfkV6TYRBw1EdJlX7S7tIjCC_NauneW7bVWVZvJbp6KGn8hpWl5kHcWDGCgFkYTRIU2m71NEbNQ&pv=2

https://mega.nz/persistent/.../oVIXkAaR

http://download1027.mediafire.com/1z79hn7i55kg/.../NfsMw.exe

http://api2.tenlua.vn/filemanager/builddownload/.../?hash=0b28e06ca40328471c6e612776f379dc7539f48fb111ec54fd35ce3a99434a16622079f8e76d2fb11522fef512731b514a2815ceade24f2e6b5ec24bee9fd883da98f4918e42ddfaf7253603e20d8461c0119a20aa511a6d8f0023d41d7c41bcb816af2d1e4673a4cc91db7d1264887b876ba90715302161576a71d09bf1eb27ee9e14297632b9d03520856e8fd02be6a74b&url=0b3da36fa30172185e32386174fd75853636b390ad53eb4da0&down=0b3da36fa30172185e32386174fd75853636b390ad53fc55a0&jump_type=download&file=need-for-speed-most-wanted-2005.exe

http://download730.mediafire.com/elkf4ccro48g/.../NfsMw.exe

http://download28.mediafire.com/oj7lzawewjdg/.../NEED FOR SPEED MOST WANTED.exe

http://download2.mediafire.com/ao3iwqsy265g/.../NfsMw.exe

http://s7360.chomikuj.pl/File.aspx?e=tSX6ILdzjZFon8Z8Cq_9rBacNDzLsH7y4RoWUgSkyyL3lHiGF-73nSloqCfevYvI3-B5xnmPVunQjwF0UYTh6RaiAOp0De-TSSQQEOsOvbgpAuC8H9ILcgxS8IeC86NATC_uBCGZwfxhbWGDzzkuGA&pv=2

http://s7939.chomikuj.pl/File.aspx?e=tSX6ILdzjZFon8Z8Cq_9rBacNDzLsH7y4RoWUgSkyyLFgUwrlAwQ9lIJvu3HSP_348yNjvL9mT2OmmMej9rU7bKrQ-cTcrTcaEU3khLd6z3R8TF3AxJsJWyH1IX_XpNueRQ-D7SMBkYFsxRTstcndw&pv=2

http://s7360.chomikuj.pl/File.aspx?e=tSX6ILdzjZFon8Z8Cq_9rBacNDzLsH7y4RoWUgSkyyL7cPy1g2xI4yVumSlJqNdeFm73v0CT90qCcQ-bQuguG6QTn9loKznmGWhTR9hh1IiffH3C3B24wGUtL4xGo5xFa_z2t8jkEzEp-ohB8uHdeg&pv=2

http://s7360.chomikuj.pl/File.aspx?e=tSX6ILdzjZFon8Z8Cq_9rBacNDzLsH7y4RoWUgSkyyLBeNWxq-VoqNs-BvLHYkcqJH0temuVsA0ClR1U9w5uDfWnPspP09NJLMCNxaQ8VeUgkZ-6LUIyCyx_eM_Zroi5SczgXUcDiC_wGGso-BwXMw&pv=2

http://download2183.mediafire.com/evtzkp3hmxjg/.../NfsMw.exe

http://s7939.chomikuj.pl/File.aspx?e=tSX6ILdzjZFon8Z8Cq_9rBacNDzLsH7y4RoWUgSkyyJwp2c2vJt3q8acBOYcOXbLXoz1qBOuTXEU9fhuXX-BmmquA5JctM89CpKSvSYmPVqwVyKvovTKFYk7wJgFOjcd2BTPHYuvVRpi46_57jw2fw&pv=2

Latest 30 of 150 download URLs

Scan nfsmwle.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.