home

cs1.6 full v42 - protocol 48 clean.exe

Valve

This is a setup and installation application. The file has been seen being downloaded from download1519.mediafire.com and multiple other hosts.
Publisher:
Valve

Description:
Counter Strike 1.6 FULL v42 Installation

Version:
v42

MD5:
9408b730d7d08139e19361259bca06cd

SHA-1:
292f49283e9c0d4fdba9787f380c5a664b78ae6b

SHA-256:
6562bb40fcf93460c3a798a9781fc4f4b0bbb8258ee92b0bfd850bf32c17f512

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:42:57 PM UTC  (today)

File size:
245.2 MB (257,129,400 bytes)

Copyright:
Valve

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\cs1.6 full v42 - protocol 48 clean.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6291456:K+PHAI3esgSSYXGhE7+/N1nlXN7vnQquDIrmsKy+wbT5/:pgsrSY6EKvfnQV0isKy1n5/

Entry address:
0x17D64

Entry point:
55, 8B, EC, 83, C4, F0, B8, 9C, 7C, 41, 00, E8, 6C, AB, FE, FF, B8, C4, 7D, 41, 00, E8, 6A, 18, FF, FF, 8B, 15, AC, 86, 41, 00, 89, 02, 8B, 15, AC, 86, 41, 00, 8B, 12, A1, B0, 86, 41, 00, E8, 80, D5, FF, FF, 8B, 15, AC, 86, 41, 00, 8B, 12, A1, 50, 86, 41, 00, E8, 82, 71, FF, FF, A1, AC, 86, 41, 00, E8, 64, 0A, FF, FF, E8, 87, 9B, FE, FF, 00, 00, 00, FF, FF, FF, FF, 01, 00, 00, 00, 2A, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
91.5 KB (93,696 bytes)

The file cs1.6 full v42 - protocol 48 clean.exe has been seen being distributed by the following 5 URLs.

http://download1519.mediafire.com/x8zkclqh71sg/.../CS 1.6 KGB v42 P48 [By Djuka].exe

http://download1519.mediafire.com/v619zd809b6g/.../CS1.6 FULL v42 - Protocol 48 Clean.exe

https://fs02n3.sendspace.com/dl/1781da9b8a4ebd5ebd87aaed67dce405/572730694d6ecc12/.../CS1.6 FULL v42 - Protocol 48 Clean.exe

http://gz.dodear.com/downloads/files/.../CS.1.6.v42.p48.exe

http://cs.dodear.com/downloads/files/.../CS.1.6.v42.p48.exe

Scan cs1.6 full v42 - protocol 48 clean.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.