home

tmnationsforever_setup.exe

This is a setup and installation application. The file has been seen being downloaded from indir.gezginler.net and multiple other hosts.
MD5:
2a36d70989f94ba9369993749ff20640

SHA-1:
23388798d5c90ad4a233b4cd7e9fcafd69756978

SHA-256:
2f659138ed4409da404970841e18f03d29921beaf6a424824c8312ddb20f6355

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 8:03:19 AM UTC  (today)

File size:
506 MB (530,600,781 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\tmnationsforever_setup.exe

File PE Metadata
Compilation timestamp:
2/3/2009 9:21:10 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12582912:OcZ7m6Gs+/G2MVu/HdoBLcjcTlM6lu+qfSQ+REt:XwpD3Ms/HdSTzuNd+k

Entry address:
0x13254

Entry point:
55, 8B, EC, 6A, FF, 68, 28, A9, 41, 00, 68, 7C, 31, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 88, A1, 41, 00, 33, D2, 8A, D4, 89, 15, E0, 22, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, DC, 22, 42, 00, C1, E1, 08, 03, CA, 89, 0D, D8, 22, 42, 00, C1, E8, 10, A3, D4, 22, 42, 00, 6A, 01, E8, 96, 0E, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 48, 09, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.9998

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
97 KB (99,328 bytes)

The file tmnationsforever_setup.exe has been seen being distributed by the following 50 URLs.

http://indir.gezginler.net/i/3036/.../

http://trackmania-nations-forever.cs.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmKiNoKShk5g=

http://free2play.chip.de/trackmania-nations-forever/.../?dm=game&key=iwz8f662-aa4b7f497684e8dbd5a1ccfd2c099397

http://lb.cdn.m6web.fr/d/c/a/20385a2e93226483d72fcd359178b010/58935a6a/soft/.../trackmania-nations-forever_fr_429919.exe

https://trackmania-nations-forever.da.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKOPn6KikZs=

http://www.gamegratis33.com/take_out.php/8ecd662ea6ea81604e34f16d3b814492/526938596949326a316d6f614d522f5a762f657a522e7379622e437a492e353778/.../tmnationsforever_setup.exe

http://lb.cdn.m6web.fr/d/c/a/e9b7756d6b43c9d99cd5fa8d84602deb/5881d3f4/soft/.../trackmania-nations-forever_fr_429919.exe

http://lb.cdn.m6web.fr/d/c/a/56328ec2aa8adbb060020445cab4e952/57993ed2/soft/.../trackmania-nations-forever_fr_429919.exe

http://lb.cdn.m6web.fr/d/c/a/4caf7037bb374b4c772ca0afc754ee81/57b4c4eb/soft/.../trackmania-nations-forever_fr_429919.exe

https://trackmania-nations-forever.da.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKKQoqOfmpo=

http://trackmania-nations-forever.da.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKCPn5-olZY=

http://trackmania-nations-forever.da.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fl6iKpKGgkZg=

https://www.slunecnice.cz/sw/trackmania-nations/stahnout/16202/.../

http://trackmania-nations-forever.da.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6GQpqSmlpg=

http://lb.cdn.m6web.fr/d/c/a/59acde2b92c64d492b269a59724445c0/57f29ea6/soft/.../trackmania-nations-forever_fr_429919.exe

http://lb.cdn.m6web.fr/d/c/a/399e02c7baef58da900a85a916efb9df/5824a6a5/soft/.../trackmania-nations-forever_fr_429919.exe

http://lb.cdn.m6web.fr/d/c/a/f5bf2cac68991573ac7ba956e321915a/5859b4b7/soft/.../trackmania-nations-forever_fr_429919.exe

http://qpdownload.com/download.php?name=trackmania-nations-forever

http://lb.cdn.m6web.fr/d/c/a/64551a00ee3b87b1311be9e127c2e975/581688f8/soft/.../trackmania-nations-forever_fr_429919.exe

http://lb.cdn.m6web.fr/d/c/a/e7162c1b0b11b2545463f6e3b229f02f/58148bc5/soft/.../trackmania-nations-forever_fr_429919.exe

https://trackmania-nations-forever.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/.../Z6y8Nrn4LNyX0Lpgocm6I Bxv2ry0 p9HlbDJ1uOPCpn6Z31 d6b6pudaQMO0HrMWaxq8aYgxNSL1Ns=

http://lb.cdn.m6web.fr/d/c/a/8c16a19b3aa881c56bc66ecaabb4c10b/5811ebbe/soft/.../trackmania-nations-forever_fr_429919.exe

http://tmnationsforever.software.informer.com/.../

http://lb.cdn.m6web.fr/d/c/a/8ad664b497cd188e2b3e6992bb6e5fce/5643561f/soft/.../trackmania-nations-forever_fr_429919.exe

http://lb.cdn.m6web.fr/d/c/a/bbda0f47d41d8f29f3b4ae1a28fa55af/5830a94f/soft/.../trackmania-nations-forever_fr_429919.exe

http://free2play.chip.de/trackmania-nations-forever/.../?dm=game&key=icth5uyn-21e6cb3b064827c781277ab0bb4e658c

http://dla.uloz.to/Ps;Hs;fid=109899169;cid=1328147162;rid=1019611583;up=0;uip=5.172.238.156;tm=1470176371;ut=f;aff=zachowajto.pl;did=ulozto-pl;He;ch=6d7a435152bdb055249279466aae6dc5;Pe/.../track-mania-nations-forever-fast-speed-game-exe?bD&c=1328147162&De

http://lb.cdn.m6web.fr/d/c/a/4e312177226122b27560f1ee8542c74d/58163412/soft/.../trackmania-nations-forever_fr_429919.exe

http://trackmania-nations-forever.da.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-flqiHoqCik50=

http://trackmania-nations-forever.da.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-flqaLoaWlmZU=

Latest 30 of 105 download URLs

Scan tmnationsforever_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.