spolszczenie_nfs_underground_2.exe

Nfs underground 2-spolszczenie by quarter27

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from s7482.chomikuj.pl and multiple other hosts.
Product:
Nfs underground 2-spolszczenie by quarter27

Description:
Nfs underground 2-spolszczenie by quarter27 Setup

MD5:
2b402c180749f480634af709729d8c68

SHA-1:
5400a9a645b1af7db78d4f0adc9c0d1fc15371d0

SHA-256:
84e42109a3cc3b22c5a2df5caf1b9383913c408a3cd9c54b6ac6dd0d3a02a25d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 7:14:05 PM UTC  (today)

File size:
493.7 KB (505,587 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\spolszczenie_nfs_underground_2.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:v2Ut58QFqi9ouPWdlyPScqKvnY3QyunoYcS5KD:v2U78QciauPWq8YaXag

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file spolszczenie_nfs_underground_2.exe has been seen being distributed by the following 23 URLs.

http://s7482.chomikuj.pl/File.aspx?e=y21mYQMBqlsryCUt5dwewuT9oXeKOZ9oAjB6_rQmfodYIRX8BM9Y72C7cDQgY8Lh5ctx88pwLavyXirZ-Te_iaIotWjubri-3M_cxVhXSRNfL7BRry1bMvEkulvYFUDMrQh3e2up07fFU2M2ZWjiHDGxyqAp05CbPF1zWNH__9k&pv=2

http://s7482.chomikuj.pl/File.aspx?e=y21mYQMBqlsryCUt5dwewuFwW7VadJ1aiQHG7kjZ0kM5NoUPPBnUaCdIMob7nMcOpaYEEJOWQ4Nk12Rj-k8P9V7wNjM7ujIv6bEvSg29kAp2nD7Fj3ErVE78eccNx_WzgrEU3YfE_dbRqBYx3TmE0JV6wKoIPOnKR2Js0Ulmynw&pv=2

http://s7482.chomikuj.pl/File.aspx?e=y21mYQMBqlsryCUt5dwewuFwW7VadJ1aiQHG7kjZ0kNVKObCP8PRgV0y8uPL9E0US3dZg6sYQe6nEhBix_WoOin2nagb4MG_6XB5m-HftjspzzHH70p-vWkk2qCAzBwjTXaO9TktR865mSgkpj4VUGXQ0dTXZlyAUmDCHfG9_cw&pv=2

http://s7482.chomikuj.pl/File.aspx?e=y21mYQMBqlsryCUt5dwewuT9oXeKOZ9oAjB6_rQmfocPZmJqkrs-UL2Nsaxei13w0VLKeUxRPAm_exx0fcD43F8iuBvWHRMWh_NiAeG4P4f1O6N7zO-Wmxw-uyKHNVhevXVLHIaKNh2mDUdCIZ5eyup99kT5FEhh3QhUCtHemco&pv=2

http://s7482.chomikuj.pl/File.aspx?e=y21mYQMBqlsryCUt5dwewuT9oXeKOZ9oAjB6_rQmfocHzwUrbpX4xUDL692dC-ZuClBhJgh9YWjjoeMaiZmYy_geuO0XrTcKOsTdKzsmfY_QnIITAXtrtJaALH49Cy8_KjvcVA2QwdBIaMp9OO1PlsI1gZUe1lLOwFOrGZjvIL8&pv=2

http://s7482.chomikuj.pl/File.aspx?e=y21mYQMBqlsryCUt5dwewuFwW7VadJ1aiQHG7kjZ0kOe6vxbYKPHAxFsciUJRN2gI71T4t_DQzCV2XyrCx3I_qdMxRVDauQS9r97NrGz32XBeDfzrCa2fhpRprgLmqw8jXAgF7ISowVlqTO0cwVrvLg9rUcOoI4C-RsdWR1AF5o&pv=2

http://s7482.chomikuj.pl/File.aspx?e=y21mYQMBqlsryCUt5dwewuFwW7VadJ1aiQHG7kjZ0kPL6f3btz80Chcf0S4_SEiNnrQ2q1hLE7CuEGz-dAwtkMPipKHdBye4qcLUm0J4MWHqzHaYKpZJxQjpq7xCr-xEbVrjW7L7rs5Yc4u1QpKpMaaQIQA_3j8em_kMqZ6dF6o&pv=2

http://s7482.chomikuj.pl/File.aspx?e=y21mYQMBqlsryCUt5dwewuFwW7VadJ1aiQHG7kjZ0kMXuh6FI5AY4ZL5KcnOoUwxoelns3sOWPf7eEENlN3EvQxPYpAY-azYgltlaMM5mriY9L7x4mOMYSA9tNl5zjtTQqmlXduSxiKwW93zXhHSadYIHvciAFAIFTUJGXREgGU&pv=2

http://s7482.chomikuj.pl/File.aspx?e=y21mYQMBqlsryCUt5dwewuT9oXeKOZ9oAjB6_rQmfoehoUvNKwATeo4kH-fCJuAwd1WkXpPXde4-yPbq_5dCwHpPdwgFxYa3Y5xhCdS61V1Ef_u8lsL_E64tpyddIA0Doc-zn5M1FX7gN382fuijInVkjYVkKGatcqnmZyiObx8&pv=2

http://s7482.chomikuj.pl/File.aspx?e=y21mYQMBqlsryCUt5dwewuFwW7VadJ1aiQHG7kjZ0kNsZaY9lfGw7RMCWUS5xpO4ikYyOMdivoWBcpdCXAtu2_5gF3BZ65U29A59P6OowAJBZWmEBN6n_gGKha0vD-4j_yDdn7yiEaPAVfbkQO-GtWmtd2GZEotUdccAwdygIQ4&pv=2

Scan spolszczenie_nfs_underground_2.exe - Powered by Reason Core Security