home

crash_team_racing.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1154.mediafire.com and multiple other hosts.
MD5:
54c6724d5171bf7aa298831024f3e791

SHA-1:
fce42532e88ff3ecf639077cdef69f3d11d205dc

SHA-256:
6a403dd4b9dddc7554c98ec2694ce26bd346710a35c164a78724cac53f523010

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 11:53:47 PM UTC  (a few moments ago)

File size:
94.1 MB (98,722,211 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
5/21/2007 11:59:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
1572864:c2G4wwO1LglEHYbgDeZRRDML92rW9hisrOJC/zumNTzznsPs4nwR6B1+aIN+zhVu:c2GhwMDCgDgRRDy92CIOOJC/zXZXsPwl

Entry address:
0x1000

Entry point:
E8, 2F, 2B, 00, 00, 50, E8, 3F, 31, 01, 00, 00, 00, 00, 00, 90, 55, 8B, EC, 53, 56, 57, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, D3, FF, 75, 14, 68, E1, 50, 41, 00, 6A, 00, 6A, 00, 8B, C6, 8B, CF, E8, 52, 47, 00, 00, 81, EB, 10, 01, 00, 00, 74, 05, 4B, 74, 14, EB, 57, FF, 75, 14, 6A, 66, 56, E8, 9E, 33, 01, 00, B8, 01, 00, 00, 00, EB, 47, 66, 81, E7, FF, FF, 66, FF, CF, 74, 07, 66, FF, CF, 74, 23, EB, 30, 68, 80, 00, 00, 00, 68, A4, 69, 41, 00, 6A, 65, 56, E8, E4, 32, 01, 00, 6A, 01, 56, E8, BE, 32, 01, 00...
 
[+]

Entropy:
7.9983  (probably packed)

Code size:
80 KB (81,920 bytes)

The file crash_team_racing.exe has been seen being distributed by the following 28 URLs.

http://download1154.mediafire.com/y8chlcc6qgog/.../Crash Team Racing.exe

http://download908.mediafire.com/29xcxt0ahgng/.../Crash Team Racing.exe

http://download2167.mediafire.com/4x9od9yeoaqg/.../Crash_Team_Racing.exe

https://dc749.4shared.com/download/.../crash_team_racing_pc_game_-_Po.exe

http://download2058.mediafire.com/xl4bws7zo3wg/.../Crash Team Racing.exe

http://download1254.mediafire.com/lgz42016qcmg/.../Crash_Team_Racing.exe

http://download2181.mediafire.com/a406yb74cn8g/.../Crash TRacingLT.exe

http://dla.uloz.to/Ps;Hs;fid=32410814;cid=310743513;rid=2116187772;up=0;uip=178.23.220.21;tm=1480448492;ut=f;aff=uloz.to;did=uloz-to;He;ch=f6406fdee71a5e78086c6442b75cf1b8;Pe/.../od-dudomila-crash-bandicoot-4-team-racing-pc-exe?bD&c=310743513&De

http://download627.mediafire.com/u34c1quma6ig/.../Crash_Team_Racing.exe

https://mega.nz/temporary/.../h0wwjRJB

https://mega.nz/temporary/.../615nHRwI

http://dla.uloz.to/Ps;Hs;fid=32410814;cid=1843962377;rid=1336792781;up=0;uip=62.169.178.94;tm=1456054006;ut=f;aff=uloz.to;did=uloz-to;He;ch=ea5d16420fdd3ad6caf239ba2f6d4600;Pe/.../od-dudomila-crash-bandicoot-4-team-racing-pc-exe?bD&c=1843962377&De

http://dla.uloz.to/Ps;Hs;fid=32410814;cid=18530995;rid=1090635974;up=0;uip=95.82.134.24;tm=1467916768;ut=f;aff=ulozto.cz;did=ulozto-cz;He;ch=59b12701f3cdcc7933161639f236db86;Pe/.../od-dudomila-crash-bandicoot-4-team-racing-pc-exe?bD&c=18530995&De

http://download1959.mediafire.com/b6mhz987aztg/.../Crash Team Racing.exe

http://dc318.4shared.com/download/.../crash_team_racing_pc_game_-_Po.exe

temp:Crash Team Racing.exe

https://mega.nz/temporary/.../bBU0HDTa

http://download1862.mediafire.com/0stwo8el4a7g/.../Crash Team Racing.exe

http://download2030.mediafire.com/wn1d4c9yku3g/.../Crash TRacingLT.exe

https://mega.nz/persistent/.../h0wwjRJB

http://download1824.mediafire.com/qzio6sfuy54g/.../Crash TRacingLT.exe

https://mega.co.nz/temporary/.../bBU0HDTa

https://mega.nz/persistent/.../cwFTSBgR

http://download1824.mediafire.com/3trpgwmru8sg/.../Crash TRacingLT.exe

http://download1824.mediafire.com/5kb3az9pfvkg/.../Crash Team Racing.exe

https://onedrive.live.com/.../ayXmsmWwqodMchiaCZ7Il24KMld7rpRpf2Q=7&ithint=.exe

https://mega.nz/temporary/.../cwFTSBgR

http://dc318.4shared.com/download/.../Crash_Team_Racing.exe

Scan crash_team_racing.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.