home

mafia-2_1.0.exe

The program is a setup application that uses the Nullsoft Install System installer. The file has been seen being downloaded from data2.softmania.sk and multiple other hosts.
MD5:
7bd2ab2ceb2ab1ad290453aa9d405d76

SHA-1:
c57cd96917d1c028af86fdf493f158b1e1997fc2

SHA-256:
26547cbd63713e4245435afa3e9b5288d1a10ebf2720c53ce5313c0fbb2c4858

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:12:42 AM UTC  (today)

File size:
946.1 MB (992,076,853 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

Common path:
C:\users\{user}\downloads\mafia-2_1.0.exe

File PE Metadata
Compilation timestamp:
2/19/2012 4:01:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.22

CTPH (ssdeep):
25165824:uxgoUinN4ECWbJaOpVaAH+/VHeeEwQUd3sl/1Jqe8/N6y:uN2DnOp/H4Ew53sEe8l6y

Entry address:
0x4131

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, AC, 01, 00, 00, FF, 15, 74, 43, 43, 00, C7, 04, 24, 01, 80, 00, 00, FF, 15, 58, 44, 43, 00, 53, C7, 04, 24, 00, 00, 00, 00, FF, 15, 98, 44, 43, 00, 56, A3, F4, 27, 43, 00, C7, 04, 24, 08, 00, 00, 00, E8, 8B, 3B, 00, 00, A3, 50, 28, 43, 00, 8D, 85, 84, FE, FF, FF, 57, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, A9, B2, 40, 00, FF, 15, AC, 44, 43, 00, 83, EC, 14, C7, 44, 24, 04, AA, B2, 40, 00, C7...
 
[+]

Code size:
33.5 KB (34,304 bytes)

The file mafia-2_1.0.exe has been seen being distributed by the following 20 URLs.

http://data2.softmania.sk/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=3181d5g4i1153r71uagcbft3f1&r=1bcf34fe2cbbaa69e9a154bd538eb29a

http://data2.stiahnut.sk/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=g7io1cuieh09jl3m3nqs9ndk52&r=a35e7739c27f12970f0c96cf54cc8311

http://data2.stiahnut.sk/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=3or00a0g2ulvd4r37o0njd2ic7&r=0f16140e0c210ab2e9f9db78031467c4

http://data2.stahnu.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=77bmiqs1gdi8rr7hu3gausif45&r=f9aa3989d890e489c6e309ccc469a96b

http://data2.stahnu.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=5m78n65go4l9nehju41q81km47&r=32bb1623eebfb99183f9ede344cb3023

http://data2.stahnu.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=c870tlmg5eh75lb8vecd7lsqu7&r=619ef5b4a2988026f8241144e3c0ec58

http://data2.mujsoubor.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=qt40rt9j4qvgvd17sr0sssomu5&r=6fa815411a16abd375dd76a95e5f0c85

http://data2.mujsoubor.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=ruqofhgi461nnh12j0k3qo2e02&r=265481cd4aa5aa6faa0a2154eb97abd1

http://data2.stiahnut.sk/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=8sac6nf2gik0c5rg22os9tkus7&r=1dac4f700294f4c9c4aac8049b88b86c

http://data2.stahnu.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=s7o4hqugos89ik2r4eitlbbn51&r=fc63a947b3ed423ebb76a7826b398620

http://data2.mujsoubor.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=hh0o0apcl1uie7dnjk57v61626&r=8623a03ee5d7cb9d9a140dfcb440d4ba

http://data2.stiahnut.sk/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=4anjla2c2rmtp4ghctc8lv7al5&r=298dee34b6b7dcafc5ee169030653f33

http://data2.stahnu.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=v8r1431ci7bs9qfslqq6hvqi16&r=77f87abd91d0c14e081934127e69e6b4

http://data2.mujsoubor.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=1t41kiktegjafnl2rf5f9baqt0&r=204fa7d177665cbf46a89d2a7765a5da

http://data2.stahnu.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=6sr74g7u6lejm0d3cn3sc31u77&r=76257d09ecaebc6a750bf30abebc1677

http://data2.mujsoubor.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=ouuu54omvhaumq4r4cp3fvl180&r=b52429ef840be4afd7cf926f12f4beb2

http://data2.stiahnut.sk/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=89d94u4es5dhdc56vo7urdqjn4&r=35ecb90fffd1af18437e128f2c00c9c7

http://data2.stiahnut.sk/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=ce75ikqjoeji7cv44o7og9bb65&r=edec10395233f10dec9144f995ca41c6

http://data2.stahnu.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=3mrae67bfik0j284osoruhv6j1&r=b79c17073cfee41a5212067ea30bff76

http://data2.stahnu.cz/downloadFile.php?n=bWFmaWEtMl8xLjAuZXhl&s=98t0fciftf2udc80tsbni2m9u4&r=880360cf91856c0f1f3e2d41bae08177

Scan mafia-2_1.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.