home

cs16patch_full_v36-active.exe

COUNTER-STRIKE 1.6 v36 - NS PROTOCOL 48 Install Program

This is a self-extracting archive and installer. The file has been seen being downloaded from dla.uloz.to and multiple other hosts.
Product:
COUNTER-STRIKE 1.6 v36 - NS PROTOCOL 48 Install Program

Version:
2, 0, 0, 32

MD5:
dcdd7ca72d709f1b7cf029d1c8d2e77f

SHA-1:
379fd26412996f63c5338f89f3216ba5602fe0f9

SHA-256:
27bc2a035f023570af28244ef096da46f88b4927e3c831d98762a288683a5e2c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 2:44:15 AM UTC  (today)

File size:
32 MB (33,534,483 bytes)

Product version:
2, 0, 0, 32

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
10/23/2008 1:17:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:QV4l3EWuznWcaS7BoU2gKo/sJJkn9sGnwzZTD2:QChYn/aS7B9J/uNJ2

Entry address:
0x13DBC

Entry point:
55, 8B, EC, 6A, FF, 68, 98, 87, 41, 00, 68, E0, 6A, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, A4, 80, 41, 00, 33, D2, 8A, D4, 89, 15, B0, F2, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, AC, F2, 41, 00, C1, E1, 08, 03, CA, 89, 0D, A8, F2, 41, 00, C1, E8, 10, A3, A4, F2, 41, 00, 33, F6, 56, E8, BB, 03, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, FD, 2A, 00, 00, FF, 15, 10, 81, 41, 00, A3, CC, F7, 41, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
92 KB (94,208 bytes)

The file cs16patch_full_v36-active.exe has been seen being distributed by the following 3 URLs.

http://dla.uloz.to/Ps;Hs;fid=5341394;cid=1971987472;rid=2140855897;up=0;uip=31.130.162.253;tm=1463576997;ut=f;aff=uloz.to;did=uloz-to;He;ch=ff53b8e9ae3382e1dffbb005568263ac;Pe/.../patch-na-couter-strike-1-6-nejlepsi-exe?bD&c=1971987472&De

http://freecache16-free.uloz.to/Ps;Hs;fid=5863218;cid=719428598;rid=495836009;up=0;uip=82.99.140.33;tm=1407440110;ut=f;aff=uloz.to;did=uloz-to;He;ch=8bd47f3d654f38abe21ef54af873c4bb;Pe/.../cs-1-6-non-steam-patch-36-v48.exe

http://dla.uloz.to/Ps;Hs;fid=5863218;cid=719428598;rid=495836009;up=0;uip=82.99.140.33;tm=1407440110;ut=f;aff=uloz.to;did=uloz-to;He;ch=8bd47f3d654f38abe21ef54af873c4bb;Pe/.../cs-1-6-non-steam-patch-36-v48.exe

Scan cs16patch_full_v36-active.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.