home

codmw2.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from am4-r1f7-stor03.uploaded.net and multiple other hosts.
MD5:
fdcf07b4557d302ae457c84341536c21

SHA-1:
4320ca7fe59704f6efbfab3de663327c859a04b0

SHA-256:
c13dd2f67a63970407fc33df5c101c84a8946a8dd014e582a917d96e32779b85

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/29/2024 1:51:59 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM06.2.Malware.Gen
1.0.0.1015

File size:
4.6 MB (4,857,826 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
12/1/2013 9:08:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:BpyrHoPfW+/m0iWQN9Gk9NU6J+BCAZYEpuKZo8J6ogyhTQsM/SY+d:eLt+yX/9NU6J+BF+wo8JjhUsyS

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Code size:
98 KB (100,352 bytes)

The file codmw2.exe has been seen being distributed by the following 31 URLs.

http://am4-r1f7-stor03.uploaded.net/.../13db39ba-04f5-47dc-ae6b-e7056df592f6

http://am4-r1f7-stor03.uploaded.net/.../830df727-d0f7-44d9-bfdd-d4747a401a7e

http://am4-r1f7-stor03.uploaded.net/.../64902791-eb20-4cea-8c51-4cf847a68c28

http://am4-r1f7-stor03.uploaded.net/.../2d7d53fe-5a65-490d-9793-a4e47efb099a

http://am4-r1f5-stor10.uploaded.net/.../6864ece9-8717-4219-b9fa-0d450a2856fb

http://am4-r1f7-stor03.uploaded.net/.../355d6f00-fbe2-41e7-b6c4-5e30e1afa4d9

http://am4-r1f7-stor03.uploaded.net/.../9683896e-6dc0-4a9f-bba3-8f783a7ec313

http://am4-r1f7-stor03.uploaded.net/.../87220ffe-9d82-401b-bfde-212e7ec9a261

http://am4-r1f5-stor10.uploaded.net/.../b366021d-df5b-4b04-bdb4-3992b509f7e7

http://am4-r1f7-stor03.uploaded.net/.../f0cf7715-3441-4e04-a0eb-03dc77f7fc04

http://am4-r1f5-stor10.uploaded.net/.../54bd5241-bb7a-4950-a9f2-f2bfea86c9c7

http://am4-r1f7-stor03.uploaded.net/.../1d31aca0-d0d3-407e-9377-da900a95567f

http://am4-r1f7-stor03.uploaded.net/.../a2e6f714-4122-430a-8b0e-f2bcfe24a066

http://am4-r1f7-stor03.uploaded.net/.../27eed343-1d82-42b4-934a-b2bc6d983a12

http://am4-r1f7-stor03.uploaded.net/.../8424a593-d714-46b9-9ba8-868851930363

http://am4-r1f7-stor03.uploaded.net/.../6a969aef-ef80-415f-9384-efaf3e0f2852

http://am4-r1f7-stor03.uploaded.net/.../3d202d8c-4530-46d9-bba3-08cbd8be2c7d

http://am4-r1f7-stor03.uploaded.net/.../c1ecaf72-b45a-478e-8acf-73dcee95c55a

http://am4-r1f7-stor03.uploaded.net/.../5f91b8a9-3d1b-4fbf-b00d-542e680414d3

http://am4-r1f7-stor03.uploaded.net/.../473977a0-d62a-4657-838c-41794731f092

http://am4-r1f7-stor03.uploaded.net/.../b733fe65-7c7d-47eb-a45a-8ecd8581cfa5

http://am4-r1f7-stor03.uploaded.net/.../6285e9fe-189b-44b9-9f2f-df78a4319c95

http://am4-r1f7-stor03.uploaded.net/.../64c533f8-5099-4592-814c-4e299b6e8bcf

http://am4-r1f7-stor03.uploaded.net/.../bc6df065-702e-41c4-a67c-702bff85f5e6

http://am4-r1f7-stor03.uploaded.net/.../55bd3c38-09b5-4c0f-9bc7-66ce7ae4d917

http://am4-r1f7-stor03.uploaded.net/.../f4e3e76f-a2d1-4dab-8524-c7b7802e380b

http://am4-r1f7-stor03.uploaded.net/.../338a75a9-da66-4b6d-b94e-c2c0d35ea23d

http://am4-r1f7-stor03.uploaded.net/.../8ae6bcb4-ff23-410f-bd7c-c707861d2bb1

http://am4-r1f7-stor03.uploaded.net/.../7d36f3c2-c601-4c8d-92b1-8b2efda50a46

http://am4-r1f7-stor03.uploaded.net/.../762e2a36-0cbd-407e-a7bf-95374b00b1db

Latest 30 of 31 download URLs

Scan codmw2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.