home

cod-bo3.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from am4-r1f4-stor01.uploaded.net and multiple other hosts.
MD5:
2d38e4183e36102ede41c4321f31ebda

SHA-1:
c39e0241dd6c70c7ae8aa2f495fbac1038114bca

SHA-256:
49d1850f3d7342ba3b181e14c42d1f8764bb1b5dad2ca2d7be97b4af79f8ae23

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/24/2024 12:57:10 PM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM41.1.Malware.Gen
1.0.0.1077

File size:
4.6 MB (4,830,771 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cod-bo3.exe

File PE Metadata
Compilation timestamp:
12/1/2013 9:08:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:DL/SIfiqD68waLSU7Tv0sueE4S7ES3R7n5:n/ZagV70sueMEMt5

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Code size:
98 KB (100,352 bytes)

The file cod-bo3.exe has been seen being distributed by the following 50 URLs.

http://am4-r1f4-stor01.uploaded.net/.../48f1bf36-8f59-4c01-a324-8f5bd1031a7f

http://am4-r1f4-stor01.uploaded.net/.../cce7d4a4-9fa5-4e11-b4b4-62a32ccce3a4

http://fileshare1080.depositfiles.com/auth-147646432242b177be4141527f826431-47.201.27.193-11399765-170167383-guest/.../COD-BO3.exe

http://am4-r1f4-stor01.uploaded.net/.../56bdbf5f-a3e6-4a1a-a7f3-8959be94b1c2

http://am4-r1f4-stor01.uploaded.net/.../8d1e2673-0f86-4a3e-940a-d78bc633bcff

http://fileshare1080.depositfiles.com/auth-1476415872f4c72ee005df15a249bec1-162.232.136.212-10902610-170167383-guest/.../COD-BO3.exe

https://1fgm8kp.oloadcdn.net/dl/l/Jrh3BOQVbXE/.../COD-BO3.exe

http://am4-r1f4-stor01.uploaded.net/.../7970f6d4-737e-4a59-a31e-c7b2454b91af

http://am4-r1f4-stor01.uploaded.net/.../3edb42f2-3ff7-4cff-b9e4-860638d87c62

http://am4-r1f4-stor01.uploaded.net/.../5a864eaa-a1c1-49fe-9228-ba23de51505e

http://am4-r1f4-stor01.uploaded.net/.../9f4c1d97-d8b6-4982-ac5f-f8ce8b9bc086

http://fileshare1080.depositfiles.com/auth-14711838254c2fbc9339db4322199385-188.48.152.169-2650582511-170167383-guest/.../COD-BO3.exe

http://am4-r1f4-stor01.uploaded.net/.../58a9c6c7-94c4-48e3-957b-77e782a38048

https://1fgm8kp.oloadcdn.net/dl/l/tBaXXV0BhHg/.../COD-BO3.exe

http://am4-r1f4-stor01.uploaded.net/.../2f272359-51be-4068-b841-54292770b785

http://am4-r1f4-stor01.uploaded.net/.../57d7b53a-18bf-4fab-b468-46d0a2ed7aa1

https://mega.nz/persistent/.../8xNWDTTL

https://1fgm8kp.oloadcdn.net/dl/l/9WZtNtwuT0k/.../COD-BO3.exe

http://am4-r1f4-stor01.uploaded.net/.../c1db37b5-40e4-4357-b4e4-a8b7a1dfdb07

chrome-extension://bigefpfhnfcobdlfbedofhhaibnlghod/persistent/.../8xUh2RpJ

http://am4-r1f4-stor01.uploaded.net/.../74bb7e5e-99f1-41ab-9d09-887afc115c8b

http://am4-r1f4-stor01.uploaded.net/.../2bab09bd-a38d-4619-8589-1836db1f1060

http://am4-r1f4-stor01.uploaded.net/.../b5e26279-bd6e-4304-9403-d96eac17f881

http://am4-r1f4-stor01.uploaded.net/.../14dc6dd5-47d3-430b-9688-f02723f9559f

http://am4-r1f4-stor01.uploaded.net/.../ea0efddb-dfb7-4a1d-bda1-a9322bd8caf2

http://am4-r1f4-stor01.uploaded.net/.../7c0e34e1-5fec-4fc5-beb4-15fe03f2cbc9

http://am4-r1f4-stor01.uploaded.net/.../354d9b44-fe3b-4441-bdc6-a5dde4e3302c

http://am4-r1f4-stor01.uploaded.net/.../35e06a55-c176-4057-8465-dc3a81f4d3b5

https://1fgm8kp.oloadcdn.net/dl/l/xzAcwcV9hww/.../COD-BO3.exe

http://am4-r1f4-stor01.uploaded.net/.../8c2e5b74-5f6f-49af-8fd3-02e886a75732

Latest 30 of 107 download URLs

Scan cod-bo3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.