home

plants vs. zombies.exe

Application

This is a setup program which is used to install the application. The file has been seen being downloaded from s10284.chomikuj.pl and multiple other hosts.
Product:
Application

Version:
0, 0, 0, 0

MD5:
b5b2e907bc7f9fb31397ce0366dba83c

SHA-1:
517f59089086872ee214dace74bb602df49091b7

SHA-256:
e7e74e2af28ad44e9f598d54ca3fb91f7679ccf3e330e9ad970e6b758b45d931

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/28/2024 1:20:20 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
TrojWare.Win32.Refroso.fl
16743

File size:
28.4 MB (29,831,274 bytes)

Product version:
0, 0, 0, 0

Original file name:
Application.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\plants vs. zombies.exe

File PE Metadata
Compilation timestamp:
1/4/2008 6:51:49 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:pDuWBo18k6zA6SuDi14xQsaCgxALseM9xp:pDnBoakODdxfixALsz

Entry address:
0x3F50

Entry point:
55, 8B, EC, 6A, FF, 68, 68, 50, 52, 00, 68, C8, 9A, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, A4, 53, 56, 57, 89, 65, E8, FF, 15, EC, 14, 54, 00, A3, 5C, CB, 53, 00, A1, 5C, CB, 53, 00, C1, E8, 08, 25, FF, 00, 00, 00, A3, 68, CB, 53, 00, 8B, 0D, 5C, CB, 53, 00, 81, E1, FF, 00, 00, 00, 89, 0D, 64, CB, 53, 00, 8B, 15, 64, CB, 53, 00, C1, E2, 08, 03, 15, 68, CB, 53, 00, 89, 15, 60, CB, 53, 00, A1, 5C, CB, 53, 00, C1, E8, 10, 25, FF, FF, 00, 00, A3, 5C, CB, 53, 00, 6A, 01, E8, 3D...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.1 MB (1,171,456 bytes)

The file plants vs. zombies.exe has been seen being distributed by the following 9 URLs.

http://s10284.chomikuj.pl/File.aspx?e=67we0oZ2pk3cmkcqX4tUi1tCeQOmXc32WEay6H2tGIl9-J9LBauUy5_DsJyVSX7sQj_yGNt4r8OdkXBJLmLu1UwH08lm_oj3kEmMOjPUHXhNbRsWi7_7zDR4Oh_ur-3cKD_pV45v9TVe-3ZL9k9Pkw&pv=2

http://s10284.chomikuj.pl/File.aspx?e=67we0oZ2pk3cmkcqX4tUi1tCeQOmXc32WEay6H2tGImj39cNFrBdOm9DPfKbYzTfPKcooqzEerKWi3uMg9PCKjCwll84Tpth7AZh8k4rHxgBKRpWY_1uP0WsuifPrDegxKRKIsGo6XdOiO6nT0AhWMGx16k2CN9wFdVZfxgvMnQ&pv=2

http://s8299.chomikuj.pl/File.aspx?e=67we0oZ2pk3cmkcqX4tUi1tCeQOmXc32WEay6H2tGIkfB2Rd3UNc8_UBDS-0HdyengIimafY0U_M8QV3f0xQ0ltleD4fz6Bf4j2xmNRsvKQMHK8rLn7Kb0U8XlfFKh_b4Gnbi8JBZNK-Z2K7fV7_-A&pv=2

http://s10284.chomikuj.pl/File.aspx?e=67we0oZ2pk3cmkcqX4tUi1hrEVoJ11gpEl7YwdzLJPSCksk-lIXQXV7CWQZGkC_OU70upkHTnAFG-dA00yS6lxRoqFZO3mDcDXvpiGiV2soF50JJaaH9Zrhl_tzU6G-DTklUDNQwisH8iqsNq4MGTQ&pv=2

http://s10284.chomikuj.pl/File.aspx?e=67we0oZ2pk3cmkcqX4tUi1tCeQOmXc32WEay6H2tGInxmPV4dyvJJJVlh8RqchwChNgc-Sf4zc4mKErZDmXALpEzNCeJKFSx4RnfDHSHShw5apPYhWkNfB_T4k8fhkJjCNAHzeDpDFvRDvcoEgKXrQ&pv=2

http://s10284.chomikuj.pl/File.aspx?e=67we0oZ2pk3cmkcqX4tUi1tCeQOmXc32WEay6H2tGIn8qmbzzSNoDgO3KnvNLOUor3dLTSGN0BNhBRS2GWqsGTXAUQy-fV-Xz3twhsTE9KY-1-zJtqgzWiLA-l91ihTjrBAExohUHglE2BtIwNBZtQ&pv=2

http://s10284.chomikuj.pl/File.aspx?e=67we0oZ2pk3cmkcqX4tUi1tCeQOmXc32WEay6H2tGImWqqjnxJaQYa4Td5Wrmly21tR0NArsGEWzjT-IyMNmtZpq70YLGPv6HQFQRQaGMQ-tsHVAvH7bLmVRwpHnsPoiyu68jIRb9I_0hnG6kLo6eA&pv=2

http://s10284.chomikuj.pl/File.aspx?e=67we0oZ2pk3cmkcqX4tUi1tCeQOmXc32WEay6H2tGIk-7lG-UqBGGFi0IdFGtNtoBSVbp6jJiayoRBifbujDJiFI-AJ0tP3fARcBY5zGCugaz7C9lKcDLE6STgZWUA7feICYsl4dllqxQjoX24VRCw&pv=2

http://s10284.chomikuj.pl/File.aspx?e=67we0oZ2pk3cmkcqX4tUi1tCeQOmXc32WEay6H2tGIlOZ92XX6SE4dhxRSSuF1FVswJ2c0xFaODmiiYEdSThuutmQrWWan22-oE6FLuRuXTwiysh8MmoJVWU6RzDcEN-7ZmLEOJaJUvIv9WwAbow6Q&pv=2

Scan plants vs. zombies.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.