home

nfsudemo_release.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from need-for-speed-underground.en.softonic.com and multiple other hosts.
MD5:
b49b18d410d547e7c7ebc3ef282e7204

SHA-1:
0258d3ee00cb8bbe8f7d7019f483884f3f41ca8a

SHA-256:
38e02e061baf6d3fa5e166d1f3434bfaca203d4cfae779349b45d1b46c951849

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 5:22:54 AM UTC  (today)

File size:
219.5 MB (230,211,072 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
1/9/2001 4:08:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
6291456:SlGEcu5usD0Ta3LXNYdKFFlwWy+gT7NLlZCq88ZyYk4:SlGEcuZD57dtFFlJy+6+qXZ

Entry address:
0x39D8

Entry point:
53, FF, 15, 50, 60, 40, 00, B3, 22, 38, 18, 74, 03, 80, C3, FE, 8A, 48, 01, 40, 33, D2, 3A, CA, 74, 0A, 3A, CB, 74, 06, 8A, 48, 01, 40, EB, F2, 38, 10, 74, 01, 40, 52, 50, 52, 52, FF, 15, 54, 60, 40, 00, 50, E8, 07, F8, FF, FF, 50, FF, 15, 58, 60, 40, 00, 5B, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 55, 8B, EC, 51, A1, 28, 84, 40, 00, 83, 0D, A0, 82, 40, 00, FF, 56, 33, F6, 39, 35, F8, 7D, 40, 00, 89, 35, D4, 83, 40, 00, 89, 35, 24, 84, 40, 00, A3, C4, 86, 40, 00, 75, 05, E8, 67, D8, FF, FF...
 
[+]

Packer / compiler:
WinZip, 0x32-bit SFX v8.x module

Code size:
18.5 KB (18,944 bytes)

The file nfsudemo_release.exe has been seen being distributed by the following 50 URLs.

https://need-for-speed-underground.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPJuuM5I3KISU3UPMYypoWV JXLL2TiXlCLg5bM0v6R/W8IyPkxL3olC44K CEAcJErF2jaRWhE/wxVpRj2j PJHGx2QS CHB5BrpNpKC0iubUdHL7Q4gQxQtgPbxcUrY/fqrZPBZpSTq2xC/gs45UFeC7icUHABFILLKHfwjV8SY3KjmOf2wYenDRDYWNToeBbibHbR1RTT aVA5LtkxpacBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlXUU7pLm243 D8AlUHvjp2DiLK/dPKUtylZ7eZ1stEc blOR2Z4DFPynMKWolW3khF9qUiEz3JwzNzbmQEMxdMTCmofuyBu6Ufaugvz9/.../ecvRzG6eNH75nZCST9ML31pm3QVsnVg21trNlntZGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cy5tRTJkGqkjexL9MA173pWxUQ89ytvWWelo87EbVWGvNOsQQu RUd4py2eQdMPk2V3cUhcu0TDJEiFOoKeaUXw=

http://www.gamefront.com/downloads/mirror/56252/108/1cb40b9b3b0000f443f5c6d6c92a3b6f/?referer=http://www.baixaki.com.br/.../need-for-speed-underground.htm

http://www.tamindir.com/indir/MjAxNy0wMi0yMiAyMjoyMTozOQ==/nfs-underground/.../1.0

https://need-for-speed-underground.hu.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKKJnp2kl5g=

https://need-for-speed-underground.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPJuuM5I3KISU3UPMYypoWV JXLL2TiXlCLg5bM0v6R/W8IyPkxL3olC44K CEAcJErF2jaRWhE/wxVpRj2j PJHGx2QS CHB5BrpNpKC0iubUdHL7Q4gQxQtgPbxcUrY/fqrZPBZpSTq2xC/gs45UFeC7icUHABFILLKHfwjV8SY3KjmOf2wYenDRDYWNToeBbibHbR1RTT aVA5LtkxpacBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlUxTWGwbyFdvkO BEoh/ko0huyb0Q DVzbd6toOBSSZm0QW0kPlYy3TAu9DVSelmFUvTkLYY1LOykuTFrpu/ke8U3Q3wAd0SaUrHKirrw 6ds2if8zilq3rXNksiWaMBT6CXdP6mUSAX71AifreejhkfnErpoZR5RFcK6iwIFBthJBPbLEeupiOCRot/.../Ahy1BOBpQqlbBaGFDdtXV5llGelGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cy5tRTJkGqkjexL9MA173pWxUQ89ytvWWelo87EbVWGvNOsQQu RUd4py2eQdMPk2V3cUhcu0TDJEiFOoKeaUXw=

http://gsf-cf.softonic.com/025/8d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30421&instance=softonic_pl&type=PROGRAM&Expires=1487473788&Signature=PVN8SCYZcdMEoL6uhykjq5iiRaEINIwcwnzppGz8duFtGSP8naWqbZ1do2AxUj-OoFdbjbStyMj~bK2QmhqWvrGWa8wdFJT0H8N1yHskt8uKxhN-MSArnWKt2sjGOtf9xGp0WJXIeXHRuT6yvN6fRLboIy1gBf0lhG2iaGoHNDA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nfsudemo_release.exe

http://need-for-speed-underground.hu.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6aHpaSnmZk=

http://gsf-cf.softonic.com/025/8d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30421&instance=softonic_en&type=PROGRAM&Expires=1476231033&Signature=XM5JwVQETi37hnNWJ-GBex~HiXVuV7gCM4G4-h2lnNHyrDtb0pev6p9xlmJf6sV6p6n2bgavFF48eb1TOFinmZ2EMV4SuRKCU3snX6Hyg38zEIWAG7msNH1HTbORE~4iHkjUsMiCiZLXXsa29Ha5qocjk89F7Gx4GZuMiFs~Of8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nfsudemo_release.exe

http://gsf-cf.softonic.com/025/8d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30421&instance=softonic_en&type=PROGRAM&Expires=1474852816&Signature=Vkhx4HcyVhe8TMlt8YnQzy90l1gsNYNcH-PcItZu5kqmtRqXUGzfKvIBFMPeXuTY4672wkUxLoDuVdjo9updV3zmWvCLWK6VeNgXcE0Ouun5bhOJFrMpINZuaYQcPtohAfwW26oQxux2pAZ7A4hfey~404Yn6rS8Iwuyw9YO4K8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nfsudemo_release.exe

https://need-for-speed-underground.ru.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKKInp2lk5w=

http://download2027.mediafire.com/zmbnx53cc6fg/.../nfsudemo_release.exe

http://dw.uptodown.com/dwn/eKW0lYS59FVzMoZiQQWmFiJpkvzk3mbP9CgKIDXrk8Y1NW2Kfn9XijSoQ1ntZCvsDV7udR_iXoY0c7i8EZTUBzAXFabNoq4Oc3YZs4odi2Qp61UGGBCCKTNkvQNGlKR6/Grx7z37xw3Ya9HhTimqdijgFdjPJ14t3aQA48osPNOI9KyaSHZCTsujal-2wPPeITTigp4SR4SZqrZuKmGDl0uXw4yEctwdd_wgGEBuRa68rg4a3DilXhxverZmx_R3i/m3N5t-Aoeadvxp6dWBBVq7n6qzazvJBOvoCzG_H_ERhSEYpIUO-u3fJ5HHPiXZX3cnsC2u_0uAQLNI1kZmLIIkfApqXgeH4GBohUjZUWFiDnqNgq6oEZ5rIFY-c12dJI/.../

http://need-for-speed-underground.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPJuuM5I3KISU3UPMYypoWV JXLL2TiXlCLg5bM0v6R/W8IyPkxL3olC44K CEAcJErF2jaRWhE/wxVpRj2j PJHGx2QS CHB5BrpNpKC0iubUdHL7Q4gQxQtgPbxcUrY/fqrZPBZpSTq2xC/gs45UFeC7icUHABFILLKHfwjV8SY3KjmOf2wYenDRDYWNToeBbibHbR1RTT aVA5LtkxpacBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlVKPoSRc/1PAfcs2uJZHDBrjSxiA98/gklER nNCqEaiHtzQN kXfwCv1nhjrYaHZfQllxlNwSSHYWi7izQrWZ9i4wiHAlbFktJS/ujRnytgcuSupVQzQ8Bn607NsWDlHSfNW5IFg0jZmBCovRekMg0cpkaUUF2x5// pG bkIovvpHpWUTyUAqFp8GpESEYMnGRp869yGO7/A9n /.../LlK6iCp2XyG1ocTduzLmsPeaUT9wKI0g5GUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cy5tRTJkGqkjexL9MA173pWxUQ89ytvWWelo87EbVWGvNOsQQu RUd4py2eQdMPk2V3cUhcu0TDJEiFOoKeaUXw=

https://dw.uptodown.com/dwn/G8Bczk30nh-BPhpiGUxY6M0uAUH5pZnM15ikjA_Vhz2VTSWHHay7ykkfHs2Td3PC0DAnqnJFUzzUug9pXWaUI7o5CBTwmMRQp5KbRfeDYNTgbMX92--dTWWEWP_E3a-P/oEiQ_n-DiyauRaGaakRVdvIjVAeSQ2OU9Cl3gz_ECyAHY032F01C7BNK3_nYvMuqaNnqzq1HXRsahR1ZbO-qjYu6rhs3bG3Hk6ZNxmoG7lcdNt44Byw13u6kClzughPd/H7ByEE01JOCz8TALls553vNHGyztc4nPdb7kRYdju3tNt3BX0wWeMUB8UdiwEuiBbmKF0I0fl3cw51zv0ip46sUjcasXy-FTASMaCR4j-ZoSzMlhDlpFHTLHVNVi19bQ/.../

https://need-for-speed-underground.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPJuuM5I3KISU3UPMYypoWV JXLL2TiXlCLg5bM0v6R/W8IyPkxL3olC44K CEAcJErF2jaRWhE/wxVpRj2j PJHGx2QS CHB5BrpNpKC0iubUdHL7Q4gQxQtgPbxcUrY/fqrZPBZpSTq2xC/gs45UFeC7icUHABFILLKHfwjV8SY3KjmOf2wYenDRDYWNToeBbibHbR1RTT aVA5LtkxpacBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlW0R4x0B0L3VS1X9jT/dt3srQztDhvR3ZxA V6D skXf7qltyec0BhDCHsgsX2mPoNhZulHjsXdggt9D Z6ku9qJAXFZGIEX8UAlSDRKOAo2eEghfRAHZo6gkwa7vSoDNDyHX0OAyx28rdjYKC xIZ4Ff8qCBEo8chOPCiFbp wQp12j9sPM9yqSt4AFahdmcTsOxXU lLUKVf8Tch2Q/.../NSIWfPrt OotWyFQ7dGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cy5tRTJkGqkjexL9MA173pWxUQ89ytvWWelo87EbVWGvNOsQQu RUd4py2eQdMPk2V3cUhcu0TDJEiFOoKeaUXw=

https://need-for-speed-underground.tr.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKWLppykl50=

http://gsf-cf.softonic.com/025/8d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30421&instance=softonic_en&type=PROGRAM&Expires=1484757090&Signature=BBCzdZ7ZBPC9E2sq65WQbA7H3gQVqdURECF4WjEetfvWzERvwV1igcLvxRi80G2N5HkByxzSuSspdPPHOuvP8HU6kv8BLS3TYqeJxsubGxVrB2TdPNETZGW8sE9ueeWefCzlGJYI896OXurGqjkO-PG3lqAidXlYJlvvaNktmKo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nfsudemo_release.exe

http://dw.uptodown.com/dwn/3FPO2vGhGVOY6qbUXRTNs7tRp87P-Rrk94_N-lkIky9Zy_4NVOQvsMVOXaBDvZicX-p1WXNYm-ixi1CIiryNa5QHtMYmysl_ZMIPnTwmwJFs39VxG4xRECsMmo58TF-V/MPJpvX_g1wRDv03NEM3eY5U5IzzzyAZAFX-NCzacw3RU6odowEoQupE02qAuVEcaDnLyZNZlRJ4-7-ixy0r5m15ndwazcoD5zHnecyJzJ-3mQez3vuY1vIH1JXE9jxK4/clAEVicU816U1WW6fLTJwXUrDnQhfoV3og610oVPlqJcDIBtGu0WKvcsgE2nZ6JsCNMwalND86vhsZLV-NFsnK0JGXfCOlEDt3wI0hfLWyH2_wBzA78ks7lSf2L9xyTm/.../

https://dw.uptodown.com/dwn/U2kovM4vHfY42nh9oeCU7GjnOeBwT9BD9UEDyjtGSBEqWX7mp6dbaLN6uRjBrZVaZRlmISMTvCoRe7c5EZ47kdbX6hqDG5vgz4vrqiUfrb3y4_2qwcYcHBpCuVblUsz8/gxCsdg9I2G0dDFY7Dk-CTttvOYXhuw40T8X2TuCVN0eTQ86pK1KCyUu0dfw2Q5WkKsPUq9ZsXosDZa5dym6H24DQc9vv1R0FxOoTknByF-P2Xotvdj5-GuIlmAUdsVgR/uwLbzK5VvHHZBrqy3BEJiHqFAA_rE20BmZ6062W6T7aPSDcLONuoWumgXW_HvLHrBTwmR9Y3twOLx-E7HUaQxYmU1XNbIWkmUv4ZHrP7myQu2_VgtSQRXn8mw6zXKwrm/.../

http://gsf-cf.softonic.com/025/8d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30421&instance=softonic_es&type=PROGRAM&Expires=1484489455&Signature=SKjmDlWiWgQWeYTTzN~GUqxZUG8CovndPCjFLXmItBWqnYVQtXGxwdA6hccQDkC9CXJmuS2joH95zeIwZFeBMJjPBqVICowxD74i4PBVvcK9lQ-vP9fKKcwUUCV4oKynIjxpO-wXjqyO7eCOyw3yQoEcQahD0siPk1h5t6Sw0nk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nfsudemo_release.exe

http://gsf-cf.softonic.com/025/8d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30421&instance=softonic_en&type=PROGRAM&Expires=1477469913&Signature=grvLnW~VJSAW0~jzBXKhYPjGH2FxURaPl21Lp4RWXGZSmsr5OH2dpos~tVNPSIJuFFg4JUg6uFfy4XHCvYdZ901M~6cHIjZCnha0yiuCnOsDT9wVhnsXmm9nVPpkzpAhXEB5Z4R3SCXX0cTrbb7~8EzSSS~vOC73jWaKnHYG5aU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nfsudemo_release.exe

https://dw.uptodown.com/dwn/RbwGhSTuwk6esIgLUbpUjnv_DJL1KQT9duJAN_XCt6ilbVaURHVNn76gXQLxDljU23JEkIhxvYN1vXn9mMoLUXpM7YmCDqO071XoIpFY4AKXUmhZVnOnc14WhDH7CqVW/SHZCR28AIr_FrWFQayan8dLpFc4WuLantAv6YjcM1wLiXxuUIA4ilGv9WM1bDHzfkKz_v94WY9Z8AGNJvVf6EOmS-FtZ46ftp-ii1oe3uzJhBFMMJc0aDVTBiPmMr21_/MyNa-wB7WdTVabwWz5vkTewlHZPKXsZVbkiGk7cqgSC1GuIMd4LK-UnNki7CW2budFGkXgQufu9j7jwfsIiRmajndcHRS_6_rbzfJBvcjWNF1cNO_5EqJnm4oQGIjXgF/.../

https://dw.uptodown.com/dwn/L84VNXggwbNlTXmn3dZ3PZRalDT9sUE8LgcIXofMr9ba5rT9k5ae_RauIZwNfeXwkP7X1URRf4bPQ4EtvHFLqmu3gCY88_WPs2M-nkD3iwUIi1JMaX80u7dxzJIaTlHu/5uRG6PgURSvq-JU_zj1FO6NmE1SGHhREzHjLULGPhJbJLD1fgGcyNJYrIT6RY6OLEze7JCGuWD2AV7cb51m1L6eISJB2CVCug2YUqm-eftTzv0-o30CP-k_EoiwAmpDG/w70_q3RiA5Ib0tmRqhNPZd3inJw8OV7lAtM6VPe-ZrTRQ_HTK20AjfeB9HHM1VMGCAqTD6nkRwLjKdJw0y6NFuc6qFJ53g4cCSpWVwli1ZtojtNxKojg9ysmyQ5GxiG8/.../

http://gsf-cf.softonic.com/025/8d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30421&instance=softonic_en&type=PROGRAM&Expires=1486517096&Signature=ecZh3YXo8xLcjIJV8ctS2IZXzR-67vCrqBRnSKxbl9DCxMJL1RDzG0kX-lmYnsz9qTFJ07W18h3MMktmVyxr8XSZOZHUwqtH57rAUzwO1RTmCPTF3WPQJpQOAuhx2PoRdNgrlE8CFSpNm2z26-6odM48gXEMlci2F06PIKqWEOI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nfsudemo_release.exe

http://gsf-cf.softonic.com/025/8d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30421&instance=softonic_en&type=PROGRAM&Expires=1447653582&Signature=IYRgWP6axuuJdRBMcqn4CETOC2zt6oY~TevcT4TBy8LYh322RHBfpHPoGK34pQxrycNQ9V~8~02zDDt0~U1KGwIzrIb1XR5g5P5znk3lCUczCY5AL~Xgv-LcCCRjdY9pDfYjHwopDWAsmZVY56IzvLkw-X57SYI0qkAWLTcpamE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nfsudemo_release.exe

https://dw.uptodown.com/dwn/B7BsD8chKQxzhfFXZnPwWM9OP3TIr2diWFz6An6rmL2onLnPelIsS4ICH5YSTKLbPYJVzm_YRn9PxLKsJjCmOuqZ0OQlCPMY3phIm1TkhsF1WEsZtp2UwnkD9qlsycp9/q_MFFgQIPN2pWzv5ahGVeK_yuCaKlvmreR5YkpVSlDiJYI8u99vwhZadJhRq8-HYpUMPyJ2538wRPRDNaK-1E1rqQ_0IUVJ3_XdnUz6ir1hVaqMv3ar4XlaswQD24p7C/O_yIZ4KOdcNPpnYzcBZdLk2JowAnXCMoe-3NAsNQ1AQ2GS3qjWvf1wfmx1RU-FuNmpaEh0bmU4t941c7q2pW-FEjEbMRXjAVMpNT1fCIN0jYrBTeCRXszix5wOYcQ_VR/.../

http://need-for-speed-underground.ro.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKGHpJ-omJs=

https://need-for-speed-underground.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPJuuM5I3KISU3UPMYypoWV JXLL2TiXlCLg5bM0v6R/W8IyPkxL3olC44K CEAcJErF2jaRWhE/wxVpRj2j PJHGx2QS CHB5BrpNpKC0iubUdHL7Q4gQxQtgPbxcUrY/fqrZPBZpSTq2xC/gs45UFeC7icUHABFILLKHfwjV8SY3KjmOf2wYenDRDYWNToeBbibHbR1RTT aVA5LtkxpacBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlWdO6VuAoSTOYW65gJc82pUwohn/ix vVXL6kave/OXxuLfUCoCBsoObsMjReEqAdq5Fk3FwWPe80ZhIMGi2oXzB3YfDXyS6XEf5Fp8dHtuNtDzI3ed5ghzfL3SKBHNT1PO7xMSyLT/7nvN2QtzVHw5jL44aD1VntnVbTxg0 m3QuZuEgFNaPXxRIHD0/.../vJAmdwQ0zrCPdjjZxGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cy5tRTJkGqkjexL9MA173pWxUQ89ytvWWelo87EbVWGvNOsQQu RUd4py2eQdMPk2V3cUhcu0TDJEiFOoKeaUXw=

https://need-for-speed-underground.ru.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKWHoqGlmJs=

https://dw.uptodown.com/dwn/P3COJ5fug3NHA7DUk0pTuLZkBs4Eblg_U6EiTucT_zDmgAvd79tjBF94q0lnoJ36hnHhGZ6GLfWYFM3Pp0F8FPpH6Hf5_BO0yFEdY-BTSzmmTaE-sNsznVekk3aaNxCl/6SaXkEpr3OkMx9s9z2oQBS-q64O7_SwYwEkBqoviH96TBsN9g-5Gg9ovgTcWV8F6jBPGAQ2Pvjvzf-MAb6TktTGvoF1KHsmM5d_wGhT3sfukBU-vFtjEcKynpshNfzub/KuJ5UECM-BnLUPN_BV8qYWfnmVAsmMewibusz22r6bOQyi-sy2acOgI8wK57CYzbHt5lbL9CJBVHg2FJhSjk3bEQ8TVXYDftJo9q0rQ5Bw-83unsILznqO2G5q5zqSce/.../

Latest 30 of 1,605 download URLs

Scan nfsudemo_release.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.