home

cod-bo2-mp-zm-sp.exe

MD5:
bea60be1bf22c8e2ed7b32ecc4ba990a

SHA-1:
6f3aa763726425d564a8f28055f3d6852cc33e2c

SHA-256:
d70f2a6eac454db85cc85feed81ef17f63ea35487062d4c2d6306ac10834ed1f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 11:52:48 AM UTC  (today)

File size:
52.1 MB (54,654,613 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\programs\cod-bo2-mp-zm-sp.exe

File PE Metadata
Compilation timestamp:
12/1/2013 4:08:28 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:B94t4Ddc5ELDp3CEKZnASKTYTpVjfg8DRKsB6Vhg38ckP6ANhkFnFBADADktztNB:w+5Hp3DKZAwVjfgIA53JcBssqtYyV

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Entropy:
7.3470

Code size:
98 KB (100,352 bytes)

The file cod-bo2-mp-zm-sp.exe has been seen being distributed by the following 10 URLs.

http://fileshare1240.depositfiles.org/auth-1451853108b6372813b5b2b55068e978-179.54.225.35-2418580501-163757090-guest/.../COD-BO2-MP-ZM-SP.exe

blob:FF5314EE-C3D5-4406-97A7-8306D7CAEA0B

http://fileshare1240.depositfiles.com/auth-144447369381c74a32f2dea7168b86b3-84.109.56.75-2309586711-163757090-guest/.../COD-BO2-MP-ZM-SP.exe

http://fileshare1240.depositfiles.com/auth-14584881258d49e794613614ac555bd0-86.99.11.115-2505601815-163757090-guest/.../COD-BO2-MP-ZM-SP.exe

http://fileshare1240.depositfiles.com/auth-145921769896eb57b5c4815bcee2b118-75.108.241.173-2514782309-163757090-guest/.../COD-BO2-MP-ZM-SP.exe

http://fileshare1240.depositfiles.com/auth-1443479369d5ccef81cfd48e2169eb1e-104.34.9.186-2295081981-163757090-guest/.../COD-BO2-MP-ZM-SP.exe

http://fileshare1240.dfiles.eu/auth-1450095484d1bd97b3ce3cbfc36b7290-5.13.170.111-2392874330-163757090-guest/.../COD-BO2-MP-ZM-SP.exe

http://fileshare1240.depositfiles.com/auth-1456072506a326e5f7c83d65e6a57a70-50.81.244.207-2477874447-163757090-guest/.../COD-BO2-MP-ZM-SP.exe

http://fileshare1240.depositfiles.com/auth-14451606320d5cec710551ce71f93600-87.3.121.24-2319491294-163757090-guest/.../COD-BO2-MP-ZM-SP.exe

http://fileshare1240.depositfiles.com/auth-14507657498b44279688f33b7c62789d-173.17.134.58-2402432395-163757090-guest/.../COD-BO2-MP-ZM-SP.exe

Scan cod-bo2-mp-zm-sp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.