home

cstrike-16-classic.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from fileshare1260.dfiles.eu and multiple other hosts.
MD5:
924ee051f942cb605989d08814114c45

SHA-1:
e238450b34358d15008474e6ffc6b7848ad99997

SHA-256:
75b9125481422f94f6728ad7c6600133492e0a4e3d3f5d9ab3cf8c9ce2ff0795

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:57:13 PM UTC  (today)

File size:
506.6 MB (531,159,603 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cstrike-16-classic.exe

File PE Metadata
Compilation timestamp:
2/17/2012 4:55:21 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12582912:CQPATG1kpe63VYB93CwIi2UhcDrnavFMdnym3DkTKyup12cNa/Dd:CQYi1gVG93CwIDRom3ITKyuOAGB

Entry address:
0xB583

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, F2, 2D, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, EE, 9F, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, 17, A5, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 40, 32, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 44, 32, 41, 00, 8D, 45, E4...
 
[+]

Entropy:
7.6361

Code size:
71.5 KB (73,216 bytes)

The file cstrike-16-classic.exe has been seen being distributed by the following 23 URLs.

http://fileshare1260.dfiles.eu/auth-14811103302abcd71f5bf4bea9859ac8-178.149.80.231-58132629-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.dfiles.eu/auth-147438297345492c3663ed919b598570-178.79.0.121-2687196369-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.depositfiles.com/auth-1463060282902eaca1f46947bc70a7fe-150.129.140.241-2560856493-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.depositfiles.com/auth-1471514035cfedad92a8b587b18a25ac-85.65.171.190-2654543060-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.dfiles.eu/auth-1473001454399737126e1ea83bac8da8-79.116.59.20-2671391744-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.dfiles.eu/auth-148044457059e40f136298092ce161cd-5.134.111.47-51672333-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.depositfiles.com/auth-1474758945ee3c61db1ae4d7bff6b940-99.135.165.5-2690930970-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.depositfiles.com/auth-1476125407baebbd17e6561cd0dcc218-41.251.40.64-8155514-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.depositfiles.com/auth-146827160354dbe3288693ae6ed048ec-73.247.28.250-2618813383-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.dfiles.eu/auth-14730911932018f4b2482b876606b45f-94.254.241.6-2672654819-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.depositfiles.com/auth-1472059345ebc0197020c973c633d481-109.67.127.71-2660842295-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.dfiles.eu/auth-1476524864be4b9090c40cd529d605c8-188.4.35.153-11979811-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.dfiles.eu/auth-14774211522aa67404027f02a094a94c-109.93.230.80-21043343-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.dfiles.eu/auth-14668476426106b0068bb2cd4564e9f2-89.45.16.107-2603844578-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.depositfiles.com/auth-14794093322a9c22598470f5812a8210-188.2.191.146-41344030-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.depositfiles.com/auth-1474796361f513bd54e5539aa4cecb9d-109.97.14.245-2691289899-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.depositfiles.com/auth-1475239059f2a5625fa8df8ee1fae2ef-49.0.186.96-2697416868-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.depositfiles.org/auth-147302519078c45da883a09ab8171f52-186.204.8.231-2671724482-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.dfiles.eu/auth-146236784211c1130a01ebda4180165c-188.80.225.78-2552978193-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.depositfiles.org/auth-14674971860959083580d4688e740848-190.241.117.72-2610783837-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.dfiles.eu/auth-1470403724306cd6c9cac00ab50680cf-93.92.255.95-2641391634-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.depositfiles.org/auth-1461759570c7aa1cf4cd46a949e256ab-187.79.8.174-2545846533-162323393-guest/.../CStrike-16-CLASSIC.exe

http://fileshare1260.dfiles.eu/auth-145298356945af53e19eb491312cdaff-37.152.19.52-2435238361-162323393-guest/.../CStrike-16-CLASSIC.exe

Scan cstrike-16-classic.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.