home

cod4mw.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from fileshare1300.dfiles.eu and multiple other hosts.
MD5:
7bb36e2b31daadd1cb20750d2f7016fc

SHA-1:
c84690a16e85dbd0fc31af92d09b1499835adea1

SHA-256:
dc040895673fbb6639ed6479636cd4d9ad264f15eff642b97a3729eb6d8697b8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:12:15 PM UTC  (today)

File size:
51.1 MB (53,550,036 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cod4mw.exe

File PE Metadata
Compilation timestamp:
12/1/2013 10:08:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:IEGXEm14Lc8dxewrZLSXV7RfDwgg/02f6k+ffcF/CI8ubGj:IunddrZLSRRfDwgG96k+ff4/CI8aGj

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Code size:
98 KB (100,352 bytes)

The file cod4mw.exe has been seen being distributed by the following 40 URLs.

http://fileshare1300.dfiles.eu/auth-1480026672304ac61df7c0eaed238137-178.149.80.231-47676143-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-1478782288012a64e623f0157899ca1a-95.47.218.36-35087420-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-14785406769a4898e1a88d550560b44e-92.37.98.144-32838221-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-1476891752299a4d40dc329cba9355d9-216.72.43.6-15679013-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-147376250729903afdc959a2b14b606c-87.13.187.230-2680540031-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-14764500327544e260c6c2eb801e6a37-60.54.65.23-11216124-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-1477325926b34ae81d4165576a1e64ba-79.181.209.23-20067319-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-1481551923c830c7c60c86c3188560f5-109.92.107.95-62425545-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-1468596540325f4ee6b4fd12a6e2b7bb-188.83.56.102-2622108498-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-14824153204ddd1f2257ff67f41bce88-182.182.5.234-70532791-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-1479492515d699acb5bec1a2a80d7fce-178.221.244.123-42138661-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-1477447279e51ee9c30693381b6c5752-86.14.231.228-21292774-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-14714211126c76f23b216fa28aaee83d-94.66.58.135-2653500324-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-1476282789d3dac28f5e2b8d6841a95d-90.191.244.98-9619106-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-1477989856d7b446ddb4b5b556e7a6ad-95.159.75.175-27129191-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-1476894871cee47701bd9c7018a9c5b9-46.186.132.37-15726955-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-1478455323c22c3667f0bfdc6c864694-93.142.6.210-32033464-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-14795587888528f4b07aacf8ee6e473e-49.149.119.56-42793594-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-1459078757505e657f74c25691474479-76.182.108.195-2512930163-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-1475832259b51160c2af848ec0ff5ce7-39.33.197.6-4969208-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-1478804542fd910a0d2009a475f73aed-176.190.78.75-35345447-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-14796123856366e9fc3059ab7f6f290f-179.106.99.59-43422117-165403483-guest/.../COD4MW.exe

http://fileshare1170.depositfiles.com/auth-145783738745f423c0e3a553d59d032e-181.188.67.32-2497237721-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-14756758628f0f738279b22dcec87611-46.176.246.46-3478813-165403483-guest/.../COD4MW.exe

http://fileshare1300.depositfiles.com/auth-146523054444511228c990e384035af7-68.57.82.36-2585812075-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-1458076765991e2b4be46938959a704e-86.17.48.232-2500338522-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-1460273491ac11dfa199a89fa6bc88f5-46.170.187.25-2527943715-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-146643814712280e36cdf180d6dbc582-31.223.144.210-2599394644-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-1467201694c5ece4c6fd7003486d2aeb-5.133.141.179-2607678646-165403483-guest/.../COD4MW.exe

http://fileshare1300.dfiles.eu/auth-14668037784d8fc8fb6bb7c92aa73103-109.196.58.199-2603389200-165403483-guest/.../COD4MW.exe

Latest 30 of 40 download URLs

Scan cod4mw.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.