home

cobra_11_undercover_demo.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
e15f225d26e0298fa8e309676ebea64a

SHA-1:
8d6979bd7f54b0fa3ef08ebcbe165418b26dc9bb

SHA-256:
1a3b9d71724d56e33fba95e899a000c3ad1a04a03d5733bcba5705af901e035c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 1:47:00 AM UTC  (today)

File size:
364.1 MB (381,749,850 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
5/28/2011 12:04:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6291456:4fNoxuEzYnrtS3FD5p6M7CRVcU7t9mdpz+niVn5h0fVgcsiRvgu:eZEItS3f+bp7XwpCniVsRT

Entry address:
0xB480

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, D5, 2D, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, F3, A0, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, 1C, A6, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 48, 32, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 4C, 32, 41, 00, 8D, 45, E4...
 
[+]

Entropy:
7.9994  (probably packed)

Code size:
70.5 KB (72,192 bytes)

The file cobra_11_undercover_demo.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1480899056&Signature=IsmK8ZQJRFD9ufcYO0ipjX3467y6BILflfyWTQWxKU~kx77BfwpNptZ-z~BkEAc9mU7lFuxoFz2~TZ2xn8BXcli~t4gmGBa6nZwwV5gCr2J6--jB4e7ofklLeboIHXmcaPrvTCIfYRYhGi8ej2YElrvu5vIB4X1~iO1taIKqcJ8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_pl&type=PROGRAM&Expires=1485633282&Signature=bsHlJu6ZqGf98~p~Ec1RYWb1~QFBraxq5D-COyGpCgK7Ueyb1aVJMzYj3mXWQ-41Fy7JPHBaAd01YmdGdtGSdGnHi2ecGtfeqzsyzyINqi5W2WpVxZ3m01BWNMGGDco1KhY0bH7Ke7o9ttjroKZAuRgyLHSwvvCcvvi-RbyxLUo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1481090008&Signature=QaNFBMMC7gvR-rR53n0OQNLNbvojnyS6fwhRe~gY-Nr0pJ5rNqHxKf3J9AHb7EtCOGIJw6TIz3Dt7iwj6awIWM5nzYdjjnpcXWou81rp5JJMfxq9W48cm8h8jwd-SShliwDFCYhWjAUB8bqLYDVdpEZaVvfGUoSSerF55z-tj44_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_fr&type=PROGRAM&Expires=1486943784&Signature=XJMfEVp8qIV~7uBptMz~9LEjiPbXpJhl6wKMrYNqNyOY-05r9JloZ1ouKS~JzG-CEG8400c2YnIPSCjvhBw1r3ZMKCHwa3h1I~xI26~pgJQ9pdBx2O2yCOJewU1fxLjD23M18E3TtVxoU0QO43fKUklD8C~Jru~uC3wSZT7drL8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://data2.stiahnut.sk/downloadFile.php?n=Y29icmEtMTEtdW5kZXJjb3Zlcl8xLjAuZXhl&s=rir52kt7oc0f78c5309jkl9o50&r=7d200cf46c2793a6687c7b9600e3acc2

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1487546687&Signature=f2lVEDz87vlMhyBPkPEhhBx1IOG9GopgO~Fsw90HIrMRZAGBvuOkH8ZlbmMxduVT6dbLK957QpPef6VYRBsuDx3pabs1HXUQzOD-r7nHDoOYuDHaimMYlUBLuefxYMZ3cHAl5QinLSGpfOymRAb9Kno0ANSGGd-ec8L7AQhK85U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://soubory.instaluj.cz/dwl/97a660e98175cf0b4cdd10350e9fda4c/hry/akcni/.../cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1484086588&Signature=Q1hd0CdLOIrXZ6xPTO5gHq4cdahbNuIITqW9G9innose30JzYgRdtvGeGC4ZUPQDYjX-tLguFyr3SrWqlBSmQsVd5Pk6sWH~3KlKMJMPngDj4aM0Ho4XomBC3qxKty2SA8ADCg-zqqeNM8xmLQojVY7Yc75Jk-e8AwFKuGjgRqE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1475860911&Signature=VHUol2wwqTT3puPT8oOfF~iB3Q1FH4sZQQ4kBjk7iSNIL3GpZ3bbL1IjpfKuH3zaSBMIPltTjtdQZhDft1TMkm7FgS8VJdjk1Ns-qC6GhYzU8vyv87xXeEyLnMt1nShxwYDtYzQcKcm9Li-SnCRtCBQdWwBxhSRO9v7tVJVfFuk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://soubory.instaluj.cz/dwl/565e005b96efdb09e22817e36634e1f5/hry/akcni/.../cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1482384817&Signature=dKHsNANeg51HW984K3rxCl77HymTC~2Cg6N7m19HKhQoIuhBPqBD~-N80NsXOrCXmAnc2sYH4RmrolcMTI6gJtXJN5z66kj~UO~axtD3vsWKEp-mJkxa5XvcQrKD9LBcVBDbtp0EKgE5aSufv4u7ElH8a5zhOkbYHN39GM6JgL4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1477006776&Signature=F1hi5flVoWNXBCLWPzSGdjkWGEVlZYJQ-4uNCtdEfSJLY4WRu9ZMjRDoME5irbT6dgVGf3Jo6ljgC~RInUJv8W-NZ2JBZPgilTj7tjuULRgBqcFa80mf~st6dep1caaLJbed529JyprULbF7y8PALwsEdISMB8TzlegR~ZehMDg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1479173887&Signature=S3kT~TcXVz8Av9hofwVn1ANWdlvZKpf9sTZWhzSIq19rQTPOP0xBRYLkpQ~mUfbqVUGS-TI6Iw62q8eQwEMp6ncfADACJy1Z~ChLp91ak6nWXMPvXkrOvRBZFnG9aRNwqVFIcoEmB51Vw7i55GcnDXEFIHz1UFiUDKunGLu6PHo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1476500429&Signature=P81rhB-IBgTuKeMmhyLjPyp81rDhqkpkY29Eh6CJ4DBWUVkdrUTtF5NDJxWf2ep~SGeLyD13dLTarLADqcdDS~lIydR-PertooeZYZ5~WXyR1JjKIWSWWQP-3AJBclZyTrwZUO8IU6z-lcfypEAhB2WqZE3sSK0IP2ro5lF1y8M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1476193863&Signature=Ib9i1HO5iUsAvJv0tDaplgMawYNmc56~ZqR8SnEGfwHeW3I-axqYDvOsp4Lm1g~bbZknRAGh8jEKkmajOJwr7pD1KWVVbs~ASbkZBiiK~t8IIDmPTu19ib21RaNMy7uRkVU6FJ45QE0tykj2D9PsMZPS-uaQ4i2OXAGy~6nr5FM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://www.cobra11-game.de/undercover/wp-content/gallery/.../cobra_11_undercover_demo.exe

http://data2.stiahnut.sk/downloadFile.php?n=Y29icmEtMTEtdW5kZXJjb3Zlcl8xLjAuZXhl&s=49shs0l5cd2m2nk0f8hlpkanc6&r=660c090a10fe585762d7c339480094f4

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1478897913&Signature=SqdDlUYy7uQTMAl3vw1~x7EIsAadEuYEk5HTcdyJbQn~BSFLfGlzgxLOWnkBStnJNt1h7ryU71lx7C9picTOGiirZQvJl8nvlsQX5e8P~7mhE-zNCMUC6pqDhehd3QKhmloqq9a3gdw2O99DJ1LFqLp8~bG9IlFCRPf2eYvHL28_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_fr&type=PROGRAM&Expires=1479369169&Signature=Z4FT~Z2xvhPZgoz4SZwx1rDbJCVwA4OAa-6te06eJcs5hac6zLiYP6FG3UIpV3BL6-2ZfTPPzUqhqHx0N7v59T~A-072jcqs9FpBAsL1eg-lX34jQkj7YMdG4iKoCYFXR7Uz-kSkQ2z2umnIfQxsdqqwIWodjEk7nnWMjZjNBYs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1479032718&Signature=cDgfQoyo9dthRi0A8vomt0~clJVTZIvSkUZALuh3gOb4mlUUDYGjTq6e35y4kGKBWUQ0fy4Wctv763V21DslUPPhRoJkamGwf0SBAVfa8tm8-3Mp5t~hIFu0sgrr5cZX1iicRjvrqoE~5vLOf4f8-~UKnJOAsZNsMYcBb13KdxI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://data2.stahnu.cz/downloadFile.php?n=Y29icmEtMTEtdW5kZXJjb3Zlcl8xLjAuZXhl&s=rekvf9j1f729nvjn9tq9v5kfd5&r=e1d64265761696be177b43d67dc3d794

http://download.gamona.de/dl/init/1473097866/1440177955881/524288/653a9c17792767bf736054d171c87968/files/2549/.../cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1481324078&Signature=KBjKGeiSbCzETx6DVmN9k77vcWIQpwHE4Ppbat-IomxyjwsmZoekuoHoTcBNE9RBzbqD02mPgFJLyU9rQlYVGpR~9GdVOLXWXEjDUj-UJbapWbRlGDTCeyIpbeojat9nNRsB2CHpa9rDA2geTWvCArSQUKXqzCFKbl2lqwAzWO0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://data2.softmania.sk/downloadFile.php?n=Y29icmEtMTEtdW5kZXJjb3Zlcl8xLjAuZXhl&s=vlirta9tdvo0761f4jej1qfua0&r=e6d5d242da92f7af90639422622fe0b6

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1480196618&Signature=aPzzz8QRoF91FPPs27sCzj3pPHaxkoHXVtqDysOyv-IxyzjRQfGFrm2dYjA5SrqbJarfnNtdoKuou91eAeZHoxrq5HLhJaKlq93DBKJegQ5xGL~mOMFebAYo-DQsMyuhmGgXRXg6I78Wl5Dd6i1gXvyrZ3E9fP94UE6uCCc3FSw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1481007069&Signature=bz38z08SS1uFMSNkRLIXut2hKGibCLuUOZwiUtwAMwZiOzju-8LS8qYpa2M8EVLU3s6e12SJI2-cItxL7ArAygwIU9DuFmscDWt40dkF6ZVuF4iMGVZPJ26hhb8l7gqeCCqkC-81TVoG2lUwKTEe-nhOMWuSshM4qXuPE9zsZ0w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_fr&type=PROGRAM&Expires=1469485026&Signature=K39ENYLP87bJVZYenWLT0AriWKYdtL-4md1k3qD773u-uzrIgZv54c4eF-hYl4yLJGTLBUy6a-TYXvSV2Ha472A5SEV0QJrLDhmekK26qDmjv8DrYtLsNPT-~vRrSylnExfVoYIQcfIkAr0a4M3iY4hWHrNo~XV-reC3QPL2DUY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1477788826&Signature=HOLK8MFpT75E023aA83bOJXO-eVDxCj8zNV9G3vMtLtB5Nng0DvT~Fpm8UUjrKBLYAraEDq6rOgH7P~TGl1XMZMZQ7lEoTk48Mmbw-vvEObJLs505QgMS6O-4RFaegYvBV3uLP4i1hhWFBoCN4fyK6FZTCcfw4XpaQk6Auy4l-c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_br&type=PROGRAM&Expires=1446959530&Signature=cHv6lyV-g4UWeVoLj2bwwEu8cuLGbYf3hrPq34qJGUCLAJJ6SVOZKMKb4-~jxaZP4ovdlvzf~2vb-QBIfc7bYE2EpyZEKt4A9SYaO2g-XrUJvj972VfwkMCq0wD3wcGXFJXXo8X5Np5j4vSWnOc78pTZFPd3-Y8dadgsg-m~nBg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

http://gsf-cf.softonic.com/8d6/979/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6650387&instance=softonic_en&type=PROGRAM&Expires=1467877202&Signature=GxyrY-txcDiMLxaMXkVr4LVwvld41JehRNBj4izVOm53FsjwZIUcxg9ymYlHHTo-hK-MsEZwA518CTx9xMUD9b6FyWxmF7mlkTt6w54YKR80sqi-8P0LW82XtsIPeojjMjduyoUF2vMzJJm5TSGKpT3a3JBYoC0iJ65FT~otF38_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cobra_11_undercover_demo.exe

Latest 30 of 72 download URLs

Scan cobra_11_undercover_demo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.