» nfs14_x86.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

nfs14_x86.exe

Need for Speed Rivals

Electronic Arts

The executable nfs14_x86.exe has been detected as malware by 14 anti-virus scanners. It runs as a scheduled task under the Windows Task Scheduler. This file is typically installed with the program Need For Speed Rivals by Black Box.

File name:

nfs14_x86.exe

Publisher:

Electronic Arts

Product:

Need for Speed™ Rivals

Version:

1.2.0.0

MD5:

a268bb5606143a829037deb4015164f7

SHA-1:

da66a6ef19c7ed4e2164cc299384f64d3a3fb484

SHA-256:

aca54c9d7e9a11e1c5dcc5ef64699410dc5a03426f73e6fcabab21532241e188

Scanner detections:

14 / 68

Status:

Malware

Analysis date:

4/25/2024 9:50:21 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Trojan.Packed

7.1.1

Avira AntiVirus

TR/Black.Gen2

7.11.121.108

AVG

Win32/Blacked

2014.0.3616

Bkav FE

W32.HfsAutoA

1.3.0.4613

Comodo Security

UnclassifiedMalware

17486

ESET NOD32

Win32/Packed.VMProtect.ABD (variant)

7.9190

Fortinet FortiGate

W32/VMProtBad.A

12/23/2013

K7 AntiVirus

Trojan

13.174.10588

Malwarebytes

Trojan.Agent

v2013.12.23.12

McAfee

Artemis!A268BB560614

5600.7272

Norman

Troj_Generic.RHGLZ

11.20131223

Sophos

Mal/VMProtBad-A

4.96

Trend Micro House Call

TROJ_SPNV.01KS13

7.2.357

Trend Micro

TROJ_SPNV.01KS13

10.465.23

File size:

7.6 MB (7,953,024 bytes)

Product version:

1.2.0.0

Original file name:

NFS14.exe

File type:

Executable application (Win32 EXE)

Language:

English

File PE Metadata

Compilation timestamp:

11/18/2013 5:09:44 PM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

196608:BqWAidtFFIVy/4T5Z7q405wG+RSQZXeOi79LjRwTGaAScj:BqZiDFFIAo5tqajRSQtDuLN0AS6

Entry address:

0x1EC20BE

Entry point:

E9, 93, 20, FF, FF, FA, 21, DC, 48, ED, 66, E6, 03, 13, 54, 17, E1, 28, 3D, B9, 4A, 6C, A9, D0, C1, ED, 84, 35, 52, 62, 45, 76, B5, CB, D5, E0, C4, F4, 05, 30, E3, 90, B4, 17, 40, C8, 35, 84, EB, 29, 26, 43, 48, A4, 2F, 7B, 9A, D9, 11, 97, 96, E6, D2, 92, 54, 83, EB, 29, 53, 73, C7, E4, F4, C1, 8C, 33, FC, 34, 24, 86, 49, C0, D5, 69, E1, DE, 45, AC, 62, 2D, 9D, 2A, 58, 5B, E7, AD, 5A, 96, 91, 9D, 50, C7, C6, C3, 51, B9, 26, 63, 5E, 1B, 35, 9B, 50, B8, A7, 60, 14, 25, 08, 8E, 91, 1A, E8, E1, 68, F5, 21, 36... 
[+]

Entropy:

7.9983

Packer / compiler:

tElock 0.99 - 1.0 private

Code size:

18 MB (18,872,320 bytes)

Scheduled Task

Task name:

{DC155992-22F5-43B8-8910-4A3D2629DB6F}

Trigger:

Registration (Runs on registration)

The file nfs14_x86.exe has been discovered within the following program.

Need For Speed Rivals by Black Box

This is a repack of the original version of the game which may violate the games copyright policy.

www.ggamez.net

About 4% of users remove it

Remove nfs14_x86.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.