home

nw_17378_supertuxkartwinexe.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.bytesendclear.com and multiple other hosts.
MD5:
07a1f064743b78a503d8c95f4864cabe

SHA-1:
50f4b9ae869a0036cbf214a1a6f123e15b2404d8

SHA-256:
cea1224540b00079151d4ffa469a5477d6ad676e525517f2a56a063baaeeb6c9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:51:46 PM UTC  (today)

File size:
195.8 MB (205,260,992 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\nw_17378_supertuxkartwinexe.exe

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3145728:xT7T3D+81cnXfTTv6DnRcKNzMP4cS182+/jfAUp0sMSNk2wHe7cgu3CDLWVtq:xXmaGfT76DnqkzdpOfAUpU9+cD4LEtq

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file nw_17378_supertuxkartwinexe.exe has been seen being distributed by the following 10 URLs.

http://www.bytesendclear.com/_l4wyV6R5p17VLzn rKOmTk9o62iptETVQNVWoBYCT1w_1g4gWVyvh Fy0N5EpCkiqonxxw9A6FWH6uvW840g3dBZg3BLxrc94k1tRao9OjC9PvL0fnMeBhaYnmlQ6iRyK3jcrQN28mjl67 Ck5wh8B8zW9a_H5ZJmiVO17C4KngSgR2er3BwBJwOeTNL6dnNGLpQBa6JF8CaCbPFH2RWp 6kt9KHgpuIfN6wi6JCuIszIgPgqNQVanACH8SFrr04arysfDu6VN5alSrD1xOSIhcfBfCN39Luo9NZiqr8bZ_noxnHHfd2PfCyosReW Dp1xC8RjSxdWu MPENa SguIYFTKUUHm6xF1IWt6t3jGC5LuTIbKywZIuu1X3GuHXKYg_4bQ3Bc4Q1jKaL7FlTU2oFFX7Q2mRAS2lDVtYQbmnhny0IJGorWbxYneOrIu0cM2RQ2 Tr167VoFffDsuQlHVQP8PqGaXo9iuyKAIU C0uXIHauuIWBMnqCsZl9owD7yDKBaRI pqDAArDpg4DJu_06rCGHwwx38FkehoFs00R6UEZseFY3PYbeuOIZARacjWLB3JJGRwEMF0Vi2RqfN_o72AucHLXffVC76bAQqqb5h0R6k=-G14AAGTYtrmAM63XmwqLKJjIgUNLA4aTPjcM9MaIArkT_F6P2aMte6Vv8HNo8G1a3 5bsRhdLVAt38LRlj7u91QX7CNSr5iqxT6Coh_IKwc=

http://dw.uptodown.com/dwn/q3cr77J0jk9eASwYcTf-APjngdc4HEyXt3qYG0LyLp_jWAzrNE0w9KaLhN626KKldUL4BeeoRqtKzkZTSBqH0bGWWjaHcDXudIavvWXRXHvvGNZZqhIZGJhGOJSSjcJv/w-6AVlQus6y9xC9lxI8TvVMaG5fkXZ_FUXg1TsF2vNExvUM8GwhyqG7LHmwln2CCbDpMexLO9-UpD83bI6rurfPoT-DYkRHxw6nlVH4WHUE2h-ZeTu3khzPB9uxgzja_/cUQQKcUzDMgNvvkg0IpdqSw_j1jdGErYRgtj22wol-YHmgWgV_BJtXn4z46VpULcNhbr0DxLdpOXcJdgHsO3Ag8a3aXh58_iezAwrAnKbLYOhLP7Z6wfduxiENMbIUVg/.../

http://dl.cdn.chip.de/downloads/.../supertuxkart-0.8.1-win.exe

http://davinci.dccircle1.com/therealfolder/022f5602b3da6f938ea544f1d0672c8619a625eb/3fc71a719c20aedca0d257e0497c5ec368896c9b/20160304213439/2016/02/.../supertuxkart-0.8.1-win.exe

http://dw.uptodown.com/dwn/Ya3Z6Eow0MRZAqVm5nROsEvN7UnYU_kF2noJfwf_ED9QD7w042NySziWBCNLnToD1t7Dj8fZBnH9bE6EuJiUtXPdWw1vZvV-gNNC60B3emzQNBNIqUXhAMIyxZM1ruqC/CZMfDD6COVCqSxp5ps86X_PmvGL2aDw0er7SJdbnqwExNzk3t9MWd05B__EGXR_qsoEAoHnX5HnkZFFh4eduwthyXEIT8AKRJG--Hx7jjMoSf3Jgsgb6xBgNegNUl920/.../

http://dw.uptodown.com/dwn/gj5fqHvEK5fnP_MM1bvDvH9CwLOCyxNvmg4Me8Ww5ylF5GKWFxmIprlJCwQqST2u-guJSWXGAVLJ9Zs5KEDW9JbZWGGxLPA1uJSnFeQuGCGkDfx_8-lMtYLf_78V3nkD/mPHQDpxyD8ej-3p46yypHACBDeZ6UMYu9tFI7gY65VLTSOdhsAN0Fn4OYJaxh-9VmTBr83Cgtshm_oGYI4v48lhSsV1Ub4QoKzIdKbbtdK9_YjQn9pIjyECzQ2h0a_-d/.../

http://ftp.jaist.ac.jp/pub/sourceforge/s/su/supertuxkart/SuperTuxKart/.../supertuxkart-0.8.1-win.exe

http://cznic.dl.sourceforge.net/project/supertuxkart/SuperTuxKart/.../supertuxkart-0.8.1-win.exe

http://ufpr.dl.sourceforge.net/project/supertuxkart/SuperTuxKart/.../supertuxkart-0.8.1-win.exe

http://downloads.sourceforge.net/project/supertuxkart/SuperTuxKart/.../supertuxkart-0.8.1-win.exe

Scan nw_17378_supertuxkartwinexe.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.