home

cod2demo.exe

The program is a setup application that uses the WinZip SFX installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
1960fe9430a05a7c27c7a43a3374c130

SHA-1:
623a8f299d3183b909e980893134b91e2e362862

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:48:33 AM UTC  (today)

File size:
655.7 MB (687,557,632 bytes)

File type:
Executable application (Win32 EXE)

Installer:
WinZip SFX

Common path:
C:\documents and settings\meliton\escritorio\cod2demo.exe

File PE Metadata
Compilation timestamp:
1/9/2001 3:09:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
12582912:7i065bQgiYr0ZlohWOrRT8VvDmMWaRiX13U1bfCTXo+2re4wb:Eo6slohWOrRYYX13U1eTXo+2y4

Entry address:
0x3F8F

Entry point:
53, FF, 15, 4C, 70, 40, 00, B3, 22, 38, 18, 74, 03, 80, C3, FE, 8A, 48, 01, 40, 33, D2, 3A, CA, 74, 0A, 3A, CB, 74, 06, 8A, 48, 01, 40, EB, F2, 38, 10, 74, 01, 40, 52, 50, 52, 52, FF, 15, 50, 70, 40, 00, 50, E8, 9E, F3, FF, FF, 50, FF, 15, 54, 70, 40, 00, 5B, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 55, 8B, EC, 51, A1, 88, 94, 40, 00, 83, 0D, 00, 93, 40, 00, FF, 56, 33, F6, 39, 35, 40, 8E, 40, 00, 89, 35, 34, 94, 40, 00, 89, 35, 84, 94, 40, 00, A3, 24, 97, 40, 00, 75, 05, E8, 9D, D2, FF, FF...
 
[+]

Packer / compiler:
WinZip, 0x32-bit SFX v8.x module

Code size:
21.5 KB (22,016 bytes)

The file cod2demo.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_en&type=PROGRAM&Expires=1484636824&Signature=M1plQGle58~CuMVFeFhxU5A31bYyspkBsOVLPbvwNpsya0WaWiCv4kpMJ0QAzAT9fXkkIAvujFlo06ddep3ISoTI1d6z1CacZnxrBwxEjzKMer8TItepQxRG1iB4xO3JruGBsJiLyg7b0Ptabki1WUNo-ltzrgjyn-AVWBvZyQg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://www.applicationconecptclean.com/PwVEJsjqrIT1xAVohFQ7Aj6Z_Br8I243HOrpXrAWj9x1GPRiW4Kl0AJXin4X5aYgCQ KLgjCvud8rVdnc8FjHca5RFG69NPiWr8hVS6amz52JTy9sPguvhxgwOCpqQmb47 HRJ8F_H__2KEsSXN5KeYfJiLREIF6cyXTDfbTyiEG39oX8_g4UZROz4Tb__mhT GQxpdxgp7fb7fYsyA83rUPV1X5XoFZaGKzEkP7IkHH1QrCDmUysm28HShgYhk5a1KGvTq3jPCEzu32KgkCtgnSnvVlueCfJMxPAxVlxP3VRSPdBlWEEyr_8VAufLHsPHKBVydzSjs9biAvPlm8vSBH r2UWCZkTcx1UUp2DkIESrzeCNMO_mmYWjxn69R2Cg4yZGNMCQ3Dx3swl6EVHH77v9 uqWp75LHW9uY1hC5EbGIdpoxxjTAfdkuwdUsX0v3e3ufRs03 Xs9NDWUy40x65Tj39kUUWGnWbYDwmTAHUvYVthN_EwdSUWbzQoo8QG04sqIgyG5mHVMDC2QD1D_fblKeiVqcCviyap8r7rho1uW2ITCILoERJSBj sl016ZoVBL58OJ__9u3 dvhQ9_bEw7w9Xr1o4AMkQOkPYbHJH2UH8M=-G1AAAMTm2vN1oghGvyc1XGtmbX6CDThwSiix3QYdh42xcf0i9GON29fTEfP251aAfi2pvaiIabZmlSkmMT9WqYqmvG C08fA25EswCn AA==-e

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_es&type=PROGRAM&Expires=1446455459&Signature=iXMexvb3rCgbUdDBHMd2q7dbncmTtOsHZjc9dXv00kKY-IzhsuVFXSEdwnQlpcWC49kV1~oB1aMq-FY~-LkKJSLRTBxCulMJdTWSxr5NIzx3qWsvCEkJkC~ROdzVXK6i8k5rqURWcWfgRKeBL~qt~jaUmEYTh5LBgMJu5jrqDDM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_en&type=PROGRAM&Expires=1425682711&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=VODonIOwSZO8kM4LL8rnG643V2eqDhcIyP2x94DOU2sEV0trY5HwBz1vd94cWKt8ZlRAsWTdJ5RTVYzK7AYjtXSG1lAK-YXmptihvXyAR0AiLR1DTStEetpe3uGmMGDE0tnFZp7JJmDNmEEDWMQbKLLM74TAArDRNE-Zy4SerXs_&filename=cod2demo.exe

http://indir.gezginler.net/i/3644/.../

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_pl&type=PROGRAM&Expires=1482798361&Signature=MwqItzPR7T9v54N9QnZPWzGW778HhkUDvRtiS1JBxf2B4TqLMXoAQiZDSwCdDaPQgAgZlRF4W6uusmLpuHJ-e-OLRpMLdTGGdC4JqhTZKi1soKuSwbUkbWHNPgVrTqMQth~k~HnhqAfYkPrvxP9IbaWE47bR45DLoh9m~w8~hMM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_es&type=PROGRAM&Expires=1482896952&Signature=iYZW385MxKIpv72kwHa5~sGlsYubUSvbfGoKtGsHimBLPhZhm9srIYCcchb6q-yZLXXURc0TAPo13wpg-OZcRPg0C3LiDiDsCOohAV97MPC7G~OutpdzZ2L2izdiUklhVEwoOtvUws~v~7svtIpngEr9sTUEL0E-KFF7qmGfodQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_nl&type=PROGRAM&Expires=1480857663&Signature=OLH4aZ9h6ZRb4Pj5jaenHNtTRgQQEGCWTZrIZ6ZnEGoJqxLbfLGE9~Z8o43wNSqULLFuf20tfPH0~2KahWHUqeWpvFRm692ShLLIRk5LSN9-xA9xWYgz73LuimmA6LDlNUMRGvqLA3XXE8kc-D9nCFyqaOcXeV4jLRVHrYfFxws_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_es&type=PROGRAM&Expires=1483774933&Signature=giqNVAcBaQApsG51La7LrABR8-q~Yzif79ipDvMJtlacNhoWv~fJE2o~MSv1CIlBmYXaz8~VVnaauUGohGrvaavANBwuWJ3baoN5EmiI7eYcujBM4e81rlmd6Zq9QsWojbpfINh~~Tb~HPz2UcxeUayvt~IhgHouaXhIvZE5EtY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

https://call-of-duty-2.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKGPn5-imps=

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_es&type=PROGRAM&Expires=1484808640&Signature=EuHqA4RVwinKY1kwfPKxEkKg8iqf-D7~LicluRUWOEQSJauNKlLmcyt0ReHZCqpCwsvI1Dq~uLF8mH0CK3EX3zqo86pGSqBTNEAnYTBaqISOLCWokoX2DBXFHsssQ1ooALFvQAgX4hIMZBVEm1BqpOsQBk3j6aPc7o0KDi2VMR0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_de&type=PROGRAM&Expires=1451537288&Signature=LFk5q2sDTWEa2-hmbnwPXxsjrU6JcBrFwPyzsdRKAd5pLnSfRbO-yvrMq8YzEfWIH52jjREh6KhEOWbuECKVD8UzLXe04sj7otyh-HMYJxECOvJt5YbstWoi9Co~ZMtgZJCTwhoGlDd6rGBmIUGlSBdH~70OmBPKwZz9R95nLj4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_es&type=PROGRAM&Expires=1471251579&Signature=QktaPZp9mS1LwGbl~jFxlgaPima7NktXNYMDpbmc3jCeOe7PS5NLULqjsK7nkaRN4h4WAnYYGwTuczuRhGZ4bVCnNgiIVSx4l3eghtPzkpSWuGKnaA0NLFlMjOUwZFABKZ-DJKMxJvzsysKwHuB0MRtNhbxuO1r3SD4Qtyrb~jE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_pl&type=PROGRAM&Expires=1448179622&Signature=KhvKIFXT-uAP8HP26DtWTYz2xXOLTagZ9J2AcvHSEmJtVoYl9rG1VUb20auNU7Kc3yTFa9RmIkNJ69VgtzzgGwwOpZ~N9KVLO0NfmiyM808io7ZnY6pCYl9S3UIF0BB7qL6mOMq4LhqxOdFRhZCkcMvftBbXvj1rvlXNOgKwzuY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://dl1.jetelecharge.com/up/FYI2Yi73Ou/.../call-of-duty-2-8357-jetelecharge.exe

https://call-of-duty-2.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKGOpKCfmpk=

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_en&type=PROGRAM&Expires=1481398740&Signature=CbAGBXqg-mj4SY~3ILBH5XGpmn3b2JAsWWwK-2MiEeKfX4GgQrFY3zKW4NArsmtg98gmp59hiymPDFnicuBzA6OT~kV4rmpwCdgE-JLHDk~r-GvYVY1dXMs10SQuyCAaDpFXzT9onjwe017jbgA7wGgr0OTu02R6wPdGkh4TRg0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_en&type=PROGRAM&Expires=1463346692&Signature=A3Py0vyZ5oCGY0PD30s1qXkIJNWSzh~bf3rllYoaNCkBG40Sra2db3wGVY~HB6JUH-lhHyF97QBp4Dp4CPCRN7fcMsO~KFXA1PC2Nr3lUcQ33Oeo9euMu4M6HfWVfg3fvgO~xuk6Z0MQ8SiC3eh0EddJ7mQC9GxVCV7PXr2Pu1I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_es&type=PROGRAM&Expires=1471688411&Signature=aL7l~in0MN4Z9IErC0aIFynqog4RRAnVGCWwzpu-9L0dntUWUvzbgrlfytluy-rRpLQ9aO3Erd0PEK-4mBYYZQqBrWbcsFQUEDnc3ymYXkkzej0gKPL7kQi-Zzt4s5FJhu-d8Ly98ggnav39PSPRtnlDhs0ju2s7~QFvJpSB8No_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

https://call-of-duty-2.ar.softonic.com/start-download/.../5a7e6290526169c0908cd2a20b788e80

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_en&type=PROGRAM&Expires=1476176072&Signature=Vu3dyywh1ptzVkDN~fyGeiHODH5b4WseRqjwtcbar13eUgW1rP8koNGM274MVtmWMXmM-BCPhcpracmYYLx075-PwwjTCm~5wELKyuupgMsAZQwfYsLG-ETMvXG~4~kz78RrcUMG4CjGOFsIcjW0YyOG4xh0CV9TLl3RYAhqOvo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://www.tamindir.com/indir/MjAxNi0wNy0yMCAxMzoxNjowNQ==/call-of-duty-2/windows/.../

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_en&type=PROGRAM&Expires=1461269890&Signature=eOT7K4QvieaBOh1063~ozL4qvRu4MycNQmIRMHx~K6HiEvaWkm8Q7-OjuiJW6iZp5~Q5DNBR9EpLzF6~6nb4jZeUoscKaFVDG97Rx2uw-56Dxt1YYBcxYg8c4lI4RshtDgkz-BnFs-iWm6J9179--ofHneSxfgrQml7rusVocvc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://www.tamindir.com/indir/MjAxNy0wMS0xNSAxMTozMDoxNw==/call-of-duty-2/windows/.../

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_br&type=PROGRAM&Expires=1482836736&Signature=HcxPVaCNc6kk3slbK4szYOK2ForfieoeLibbEzKFRTvBbyqL09vKP-MG3egp8lG7XuCM2fT1vID-Vi1qVBD8vWcY~BKEjSeT-TVOgi9zpL5glfsq0RSTofMVEPfcQWsWXXMsZ2DQEXMmvSJiTYa6Mi6aMD1SooOWYmb~6RdrIZU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

https://call-of-duty-2.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKaJoKWgmJY=

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_en&type=PROGRAM&Expires=1466573120&Signature=GF53tD92KpzDXxanneOLb7lyAjSao~8-rEIEGpg4EUAqG3vwfmFsSEYMR0fN9jW3prBoH~SN7mi2bi2TINiLAG6ScFyzY579QC3uZSocv0EUxyZLZhMtIuIznVJWyLOnoP~vd-jOa1jtrtzGAhstlU42KqEY-H7lbgytL-cAqZM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://www.tamindir.com/indir/MjAxNy0wMS0yMyAxMToxNDoxNA==/call-of-duty-2/windows/.../

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_es&type=PROGRAM&Expires=1482469692&Signature=CCLxhv2dh8UGyw0cKQLneLeW66svDueKK4uiEtbxL0KWi4xjBt72sYEht9QiPwgScxRaHlx2Lka13lUOnjWvpiKu7N~H96nu5WvXeZx39DGbnTH~-R5a-lUK9EZD48muXEiuDrKVky~4OxKcUpw0rly8EQwRdL-ajyxbkETPDZg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

http://gsf-cf.softonic.com/623/a8f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44068&instance=softonic_en&type=PROGRAM&Expires=1477775318&Signature=J0GSg~vksXjcmfHLIPE6MDU6-dSd0SQdR~Ph1dCNMiLmto1BodSiy44CXTYCWwUVFFHcti5Szg9O3bbEeMuWF033d03tfY1Ra78K36wupYyhUDouL6zlgWf~ezGvtbYpx7Z4IgTbqe5XN-KOS9w8BnCYH0V4YvDlrf7H9JHqqGk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cod2demo.exe

Latest 30 of 741 download URLs

Scan cod2demo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.