home

lh2012.exe

Counter-Strike 1.6 LH 2012

LongHorn

This is a setup program which is used to install the application. The file has been seen being downloaded from www.esportskosova.com and multiple other hosts.
Publisher:
LongHorn

Product:
Counter-Strike 1.6 LH 2012

Description:
CS LongHorn Edition 2012

Version:
1.0.0

MD5:
80d93601e2b9447a9e79049a76d894d1

SHA-1:
59c6beeb18227bcff03d68edebb233b7c9f57881

SHA-256:
064b10a942c3e1d9c68e37e335b275c0782b72fdba87d0698ca1b5da1ba9c1e6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 4:53:45 PM UTC  (today)

File size:
241.5 MB (253,246,709 bytes)

Product version:
1.0.0

Copyright:
Copyright (C) LongHorn

Original file name:
CS LH 2012.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\lh2012.exe

File PE Metadata
Compilation timestamp:
1/26/2012 12:34:42 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6291456:mU+s0KTFFW4IralFOMK32OmYCkKaXlrrzYJo5IhZ1eNj:mWvTFFWxGHOMK32Om3NaXlXzYJ1hc

Entry address:
0x9F17A

Entry point:
E8, 41, B9, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, F0, 33, DB, 3B, F3, 75, 1E, E8, 2C, 38, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, F4, D3, FF, FF, 83, C4, 14, 8B, C6, E9, C2, 00, 00, 00, 57, 39, 5D, 0C, 77, 1E, E8, 08, 38, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, D0, D3, FF, FF, 83, C4, 14, 8B, C6, E9, 9D, 00, 00, 00, 33, C0, 39, 5D, 14, 66, 89, 06, 0F, 95, C0, 40, 39, 45, 0C, 77, 09, E8, D9, 37, 00, 00, 6A, 22, EB, CF, 8B, 45, 10, 83, C0, FE, 83, F8, 22, 77...
 
[+]

Code size:
820 KB (839,680 bytes)

The file lh2012.exe has been seen being distributed by the following 6 URLs.

http://www.esportskosova.com/lh2012.exe

https://fs05n5.sendspace.com/dl/d52dd78e8c94e31ba1501cba0472ebf7/540c5fc06d0e36f9/.../lh_2012_by_amPLitud3'zZ.exe

http://lspublic.net/.../lh2012.exe

https://fs05n2.sendspace.com/dl/f6830e106c0547dbcdc0c9c3fb004c77/56bef75e7c62d21d/.../lh_2012_by_amPLitud3'zZ.exe

http://lspublic.com/.../lh2012.exe

http://esportskosova.com/lh2012.exe

Scan lh2012.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.