home

cb.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from 199.91.153.131 and multiple other hosts.
MD5:
80ae5f8cd4ad4304f97c5103bbcd4b24

SHA-1:
adb828b91814260e4865bd75b6766118e5758f22

SHA-256:
04824042612e1169f61fcacbd85d0d8582b8b1260c6a669dc2978def33c1a795

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:54:48 AM UTC  (today)

File size:
174.7 MB (183,221,429 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
5/21/2007 11:59:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
3145728:c9g/GVZI/MCHQ7FIJ07usyfXzKyCKEkdN4ek+kSUIJ5BKdXIdmnJkr4xPWuc8Nsh:OgGVm/MCw5IJNsy7KHgdWf+kSUIJ5B88

Entry address:
0x1000

Entry point:
E8, 2F, 2B, 00, 00, 50, E8, 3F, 31, 01, 00, 00, 00, 00, 00, 90, 55, 8B, EC, 53, 56, 57, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, D3, FF, 75, 14, 68, E1, 50, 41, 00, 6A, 00, 6A, 00, 8B, C6, 8B, CF, E8, 52, 47, 00, 00, 81, EB, 10, 01, 00, 00, 74, 05, 4B, 74, 14, EB, 57, FF, 75, 14, 6A, 66, 56, E8, 9E, 33, 01, 00, B8, 01, 00, 00, 00, EB, 47, 66, 81, E7, FF, FF, 66, FF, CF, 74, 07, 66, FF, CF, 74, 23, EB, 30, 68, 80, 00, 00, 00, 68, A4, 69, 41, 00, 6A, 65, 56, E8, E4, 32, 01, 00, 6A, 01, 56, E8, BE, 32, 01, 00...
 
[+]

Entropy:
7.9992  (probably packed)

Code size:
80 KB (81,920 bytes)

The file cb.exe has been seen being distributed by the following 43 URLs.

http://199.91.153.131/29hlhxe0y2tg/.../Crash_Bandicoot.exe

http://download851.mediafire.com/17dhjoa673ng/.../Crash_Bandicoot.exe

http://download1637.mediafire.com/h1tqa1omipmg/.../Crash Bandicoot by xxluyzxxtutoriales.exe

http://download2116.mediafire.com/xrf8zlo1yzwg/.../Crash_Bandicoot by problemaspc.exe

http://download1124.mediafire.com/c0dqjeif4k6g/.../Crash Bandicoot.exe

http://download1940.mediafire.com/0pnmtnjmu10g/.../Crash Bandicoot by xxluyzxxtutoriales.exe

http://download1454.mediafire.com/zgvsj5wsvpsg/.../Crash Bandicoot by martin97636.exe

http://download851.mediafire.com/oq6q8uu6odwg/.../Crash_Bandicoot.exe

http://download2057.mediafire.com/bznw8a8gm0wg/.../Crash Bandicoot 1.exe

http://download851.mediafire.com/ldaiothlsibg/.../Crash_Bandicoot by problemaspc.exe

http://download851.mediafire.com/g00gaa2m6mdg/.../Crash_Bandicoot by problemaspc.exe

http://download2057.mediafire.com/i5mndfzk6i5g/.../Crash Bandicoot 1.exe

http://download851.mediafire.com/dutzhkx05zng/.../Crash Bandicoot by martin97636.exe

http://download1124.mediafire.com/bgj0amdv1plg/.../Crash Bandicoot 1.exe

https://mega.nz/persistent/.../h803kYAa

http://download2116.mediafire.com/7xq6v2qqcoog/.../Crash_Bandicoot by problemaspc.exe

http://download1124.mediafire.com/a87sc3bqxqng/.../Crash Bandicoot 1.exe

http://download1124.mediafire.com/56p6wuouc6ag/.../Crash Bandicoot 1.exe

http://download2086.mediafire.com/vq1u3yalw5fg/.../Crash_Bandicoot.exe

http://download648.mediafire.com/2a72mcbmrwqg/.../Crash Bandicoot 1.exe

http://download1394.mediafire.com/3bwa6mov7iwg/.../Crash Bandicoot 1.exe

http://download1124.mediafire.com/0v9ggv9kyizg/.../Crash Bandicoot by martin97636.exe

http://download2116.mediafire.com/9ei9ly6bdeeg/.../Crash_Bandicoot by problemaspc.exe

http://share2.earthlinktele.com/download.aspx?file=882907066&sig=MTgvMDUvMjAxNiAwNDowMTo1NA==

http://download2183.mediafire.com/g1k3o7l0dfsg/.../Crash Bandicoot 1.exe

http://download1611.mediafire.com/u0xx6dyxrtgg/.../Crash_Bandicoot by problemaspc.exe

http://download766.mediafire.com/zy8fbtsxdgzg/.../Crash Bandicoot by martin97636.exe

http://download2116.mediafire.com/w91pst3dbstg/.../Crash_Bandicoot by problemaspc.exe

http://download791.mediafire.com/2kp7zw9hw1ng/.../Crash Bandicoot by martin97636.exe

http://download1124.mediafire.com/nac8otcoxsdg/.../Crash Bandicoot 1.exe

Latest 30 of 43 download URLs

Scan cb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.