home

iw4sp.exe

Valve Corporation

Publisher:
Valve Corporation  (signed and verified)

MD5:
8dea79877305b883e92fe34cc1cfca77

SHA-1:
afeaf391316c484c121ac3778ff8eaafd870333e

SHA-256:
5c5ce00841bcac1a25eb47a31cb87434ac386b34234bf559003161b6e156d477

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/2/2024 7:27:29 PM UTC  (today)

Scan engine
Detection
Engine version

Norman
Suspicious_Gen4.COYI
11.20140122

File size:
3.4 MB (3,513,944 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\call of duty mw2\call of duty modern warfare 2\iw4sp.exe

Digital Signature
Signed by:
Valve Corporation

Authority:
VeriSign, Inc.

Valid from:
4/19/2009 5:00:00 PM

Valid to:
4/19/2012 4:59:59 PM

Subject:
CN=Valve Corporation, OU=Steam, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Valve Corporation, L=Bellevue, S=Washington, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6C409E48C32B0D1100F80B9D29BC1FB9

File PE Metadata
Compilation timestamp:
11/6/2009 4:22:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:CDmbRo8kIMc9Gv+0kwUY0fGepkyZ4U+71hTmMlmv/H:C6No8kIf9Gv+0kwUY0TpkyZ4UQhThEH

Entry address:
0x27A16F

Entry point:
E8, 4A, DF, 00, 00, E9, 16, FE, FF, FF, 6A, 10, 68, C0, EC, 72, 00, E8, 8B, 31, 00, 00, 33, C0, 33, DB, 39, 5D, 08, 0F, 95, C0, 3B, C3, 75, 20, E8, F3, C1, FF, FF, C7, 00, 16, 00, 00, 00, 53, 53, 53, 53, 53, E8, D6, EB, FF, FF, 83, C4, 14, 83, C8, FF, E9, F7, 00, 00, 00, 33, C0, 8B, 75, 0C, 3B, F3, 0F, 95, C0, 3B, C3, 74, D2, F6, 46, 0C, 40, 0F, 85, 8E, 00, 00, 00, 56, E8, DD, A3, 00, 00, 59, 83, F8, FF, 74, 2E, 56, E8, D1, A3, 00, 00, 59, 83, F8, FE, 74, 22, 56, E8, C5, A3, 00, 00, C1, F8, 05, 8D, 3C, 85...
 
[+]

Entropy:
6.7326

Code size:
2.6 MB (2,699,264 bytes)

The file iw4sp.exe has been discovered within the following programs.

Call of Duty - Modern Warfare 2 (Singleplayer)  by X-NET
x-net.16mb.com
About 6% of users remove it
Call of Duty Modern Warfare 2  by Activision
Call of Duty: Modern Warfare 2 is a first-person shooter video game developed by Infinity Ward and published by Activision. The player assumes the role of various characters during the single-player campaign, changing perspectives throughout the progression of the story.
www.modernwarfare2.com
9% remove it
Call Of Duty MW2 Farsi version Call Of Duty MW2 Farsi  by AsreBazi, Inc.
www.Asrebazi.com
About 9% of users remove it
Call of Duty: Modern Warfare 2  by Infinity Ward - Sledgehammer Games
www.infinityward.com
About 7% of users remove it
Mozilla Firefox 24.0 (x86 en-US)  by Mozilla
Firefox 24 includes support for the new scrollbar style, closing tabs to the right, an improved browser console for debugging, and improved SVG rendering. In addition 9 new security holes were pacthed.
www.mozilla.org/en-US
5% remove it
 
Powered by Should I Remove It?

The file iw4sp.exe has been seen being distributed by the following 4 URLs.

http://download1053.mediafire.com/mz9dxkmddztg/.../iw4sp.exe

http://originaldll.com/.../41180.exe

http://download1208.mediafire.com/rbka2qcn2s1g/.../iw4sp.exe

temp:iw4sp.exe

Scan iw4sp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.