home

nba2k14.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from fra-7m18-stor08.uploaded.net and multiple other hosts.
MD5:
ad3a73df594787568ed0ca4da3e637c1

SHA-1:
4775917fa69a621299819613d729cfe5f2081dcd

SHA-256:
ac60e1e8eed0fd7bc4b55a247b99fdbde3bc537c5640700ff15f26ca66480055

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/30/2024 12:05:22 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM06.2.Malware.Gen
1.0.0.1077

File size:
4.3 MB (4,556,245 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\nba2k14.exe

File PE Metadata
Compilation timestamp:
12/1/2013 9:08:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:BbfQ2K1ECV+bUxt/8btgXuvAfovFynfCd6elNxl2CFZks4HrS3TB9Gl5:tK1j+bUoRg20fCAOcs4LSl9Gl5

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Code size:
98 KB (100,352 bytes)

The file nba2k14.exe has been seen being distributed by the following 7 URLs.

http://fra-7m18-stor08.uploaded.net/.../20a6ea2d-8f9e-433d-8d49-51a5720dfeaf

http://fra-7m18-stor08.uploaded.net/.../5f656343-f411-4212-9bef-d88b5c7dacce

http://fra-7m18-stor08.uploaded.net/.../fe9149c4-50a4-4020-a8df-4ac7a13506cc

http://fra-7m18-stor08.uploaded.net/.../df938899-1af4-47d9-92ea-1b78abcd9bc0

http://fra-7m18-stor08.uploaded.net/.../fbc1b3fb-5c68-47f7-84b3-2622f807c34d

http://fra-7m18-stor08.uploaded.net/.../b6205c3f-5167-445d-902a-c0471cd5caa8

http://fra-7m18-stor08.uploaded.net/.../61859c5e-549b-424c-86a0-5463a9ba2a42

Scan nba2k14.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.