home

cod-bo_patch-iw4play_v2.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from fileshare1190.depositfiles.org and multiple other hosts.
MD5:
2772d8408c71371a6e2a184d4f8b4a08

SHA-1:
1015892e97a5cf08ac27fdd0f56bc8f34750d427

SHA-256:
b86b50ef6bd1dbfd6dbdbbe2bf31b257eda7abdab5352383b4266b7d8673a11d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/14/2025 3:50:11 PM UTC  (today)

File size:
509.3 MB (534,030,623 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cod-bo_patch-iw4play_v2.exe

File PE Metadata
Compilation timestamp:
2/17/2012 3:55:21 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12582912:edEG3W43ZrZFuO7yOKC0mx4+UK97vVDzQScV1vuKvX8bsc14kueMu:oJFx7y+IK1tkScV1vuKEwVPeT

Entry address:
0xB583

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, F2, 2D, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, EE, 9F, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, 17, A5, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 40, 32, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 44, 32, 41, 00, 8D, 45, E4...
 
[+]

Code size:
71.5 KB (73,216 bytes)

The file cod-bo_patch-iw4play_v2.exe has been seen being distributed by the following 17 URLs.

http://fileshare1190.depositfiles.org/auth-1476462540250e010a9a3dadda9544e3-186.240.154.63-11375953-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.dfiles.eu/auth-1461395459da9cc4c863cc344cdcaf00-92.57.94.157-2541423090-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.depositfiles.org/auth-1480032870317ab8a05a6163d69f0102-177.85.203.66-47727176-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.depositfiles.org/auth-1477070673321ed1adfe0e2a1bb5007f-186.221.177.173-17450543-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.depositfiles.org/auth-1476058082f47ce75735bb588be0a82d-143.202.104.160-7473250-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.depositfiles.com/auth-1457820785a54a93c614fb857fd0c272-70.37.206.166-2497040065-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://download1644.mediafire.com/0mdo16rtjjag/.../COD-BO_patch-IW4PLAY_v2.exe

http://download1644.mediafire.com/zdu0e8mv8f2g/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.dfiles.eu/auth-1460389972a49d6ca9d6f18e85f7318b-83.156.31.121-2529471191-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.depositfiles.com/auth-14657704167cbeb3c12b6cd64e18213b-105.155.171.83-2591901194-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.depositfiles.com/auth-14629399491de2defa5c7b44901350fc-51.235.1.103-2559562365-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://download1644.mediafire.com/css48o68z2eg/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.depositfiles.com/auth-14585025682c411247945252cd40df1f-73.134.53.49-2505839316-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.depositfiles.org/auth-1464619068c08b42e30f22e0b8a59304-177.73.203.9-2578856788-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.depositfiles.org/auth-1460204446c0dfe018a9b0776527de82-201.9.4.255-2527043754-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.dfiles.eu/auth-1460745661112f3b0a1f5bded8b9b8e7-93.89.202.132-2533699269-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

http://fileshare1190.depositfiles.com/auth-145905890144d4f5a868f2d3d20c8028-50.141.101.86-2512677526-166059358-guest/.../COD-BO_patch-IW4PLAY_v2.exe

Scan cod-bo_patch-iw4play_v2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.