home

counter strike 1.6 steam 1.6 finalinstaller.exe

Kasobocot

Gifudamab

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.megacapitalgrab.com.
Publisher:
Gifudamab

Product:
Kasobocot

Description:
Kasobocot Setup

Version:
1.2.1.6

MD5:
6e09323570b9afef9874ad2e81b53459

SHA-1:
862427c7ebd115ef81e752f08aa193cf0d29104a

SHA-256:
56cc46157793c8ba9e3a067014fdfc028d5e6477538557f0e7cdf4753ddc3bda

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 7:40:23 AM UTC  (today)

File size:
1.1 MB (1,119,208 bytes)

Product version:
4.6.4

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\counter strike 1.6 steam 1.6 finalinstaller.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Yw7Nkcb0I+1LohEVskEDbreTBX9I+6V0yrUbkqeAu7:Yc5bJMmqskqbrktIj0yrUb+37

Entry address:
0xA5F8

Entry point:
69, ED, 2C, 81, 94, CD, 0F, BF, F9, F7, C1, 6E, 2D, EA, A6, EB, 08, 0F, AF, EA, 0F, AF, D0, 03, C1, B6, 71, 19, C5, EB, 02, 19, D7, B3, 3A, 0F, AF, DF, 2D, F1, 5E, 00, 00, FF, C2, 0F, AF, F5, 2D, 4C, 01, 00, 00, 85, EF, 78, 06, 69, CB, EA, B6, 0D, 92, 68, 56, 4C, 52, 00, 0F, B7, FA, 08, F1, 8B, D7, BB, 00, 00, 00, 00, 77, 05, 13, D5, 0B, CE, 4A, 4D, 39, D6, 8D, 15, DA, CC, 44, 5D, B1, 69, F3, 41, B2, 31, 23, D0, 8D, 2D, 5A, 8E, FF, FF, 81, CE, 09, 17, 3B, 92, 81, C5, 1F, 12, 07, 00, 69, C8, 14, BB, 3A, D4...
 
[+]

Entropy:
7.9359  (probably packed)

Code size:
39.5 KB (40,448 bytes)

The file counter strike 1.6 steam 1.6 finalinstaller.exe has been seen being distributed by the following URL.

http://www.megacapitalgrab.com/c?x=YtTlh3YnEiIE7sHdKA/wtgBuGw9iyX7tyNSaUDd2Ie8=&c=VouYVLcbjBe69RqFAAMUZmT4qpGqLhXkIgqTWtu3q5vJssnnaniuQN4br8xBOqkzeHH5BXZUtPD/KPh3ESvwGwowmcZLaTsl7HFYYmq1nWRvDV1NS4S8k66Gi7UgvALXEk5TadHJHehGKE9dwQayVDfMn2sqWU4ObXNcMsA8QEmYQSl9WnRbadcfvSpIkDb2&e=0&downloadAs=counter strike 1.6 steam 1.6 finalInstaller.exe&fallback_url=http://soft.sptechs.com/files/.../14055-counter-strike-16-steam-16-final.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.