home

cod-bo2-mp-zm-sp.exe

MD5:
4d81c859656dc86aa1a2141f67433893

SHA-1:
6291df60017d221eaef5d70cdfa88100b9b14ec8

SHA-256:
73f0ec8640560578f94513b69ec30981056565feebd83def9e5402260297c6c9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 9:46:25 AM UTC  (today)

File size:
55.8 MB (58,509,896 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cod-bo2-mp-zm-sp.exe

File PE Metadata
Compilation timestamp:
12/1/2013 12:08:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:B94t4Ddc5ELDp3CEKZnASKTYTpVjfg8DRKsB60hg38ckP6ANhkFnFBADADktztNq:w+5Hp3DKZAwVjfgIA5uJcBssqtYyqN

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Entropy:
7.0686

Code size:
98 KB (100,352 bytes)

The file cod-bo2-mp-zm-sp.exe has been seen being distributed by the following 5 URLs.

http://fileshare1290.dfiles.eu/auth-14625515872611b33c19fde70174c9d2-37.77.113.103-2555096935-162163524-guest/.../COD-BO2-MP-ZM-SP.exe

http://fileshare1290.depositfiles.com/auth-1483048859572b953d9c7f3627951743-63.246.163.155-76743397-162163524-guest/.../COD-BO2-MP-ZM-SP.exe

http://fileshare1290.dfiles.eu/auth-1459355719261a90db9fb7ef1a9e410d-151.15.179.209-2516479026-162163524-guest/.../COD-BO2-MP-ZM-SP.exe

http://fileshare1290.depositfiles.com/auth-14345648928429fcecbae839d1b6e6bc-109.186.175.157-2133349928-162163524-guest/.../COD-BO2-MP-ZM-SP.exe

http://fileshare1290.depositfiles.com/auth-1456360230810f8189c3b1b2e0681a3f-24.95.129.122-2481676102-162163524-guest/.../COD-BO2-MP-ZM-SP.exe

Scan cod-bo2-mp-zm-sp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.