home

metal slug 5.exe

The executable metal slug 5.exe has been detected as malware by 14 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from fileshare1130.depositfiles.org and multiple other hosts.
MD5:
3869739e119670fdb55792e8a3794e0f

SHA-1:
965da485009a73c50de7da279a1a69c162c2b926

SHA-256:
ce843a1b0d8e77910bc0fbf313eb2b85d158825e3d5ab529f2b5ac5fbbff9a6b

Scanner detections:
14 / 68

Status:
Malware

Analysis date:
4/29/2024 5:16:08 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.6129520
910

Agnitum Outpost
Trojan.PWS.OnLineGames
7.1.1

AVG
PSW.OnlineGames3
2015.0.3388

Comodo Security
UnclassifiedMalware
18656

Dr.Web
Trojan.PWS.Wsgame.25535
9.0.1.0220

Fortinet FortiGate
W32/Onlinegames.XOXT!tr
8/8/2014

F-Secure
Trojan.Generic.6129520
11.2014-08-08_6

MicroWorld eScan
Trojan.Generic.6129520
15.0.0.660

NANO AntiVirus
Trojan.Win32.OnLineGames.dmjsw
0.28.0.60475

Norman
Suspicious_Gen2.JUERR
11.20140808

Rising Antivirus
PE:Trojan.Win32.Generic.12763F10!309739280
23.00.65.14806

Trend Micro House Call
TROJ_SPNR.0BJ112
7.2.220

Trend Micro
TROJ_SPNR.0BJ112
10.465.08

VIPRE Antivirus
Trojan.Win32.Generic
30622

File size:
86.7 MB (90,907,131 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
9/20/2007 7:34:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
1572864:VEUKZ+trukV0/H+gLZKNelHnaoDBhRyXogiSCnZ3KT2QKYCzsuPf9AVNgSJ7f45k:VEUKau3euzHnao1ooFSCnxKExlPf9AV1

Entry address:
0x1000

Entry point:
E8, F3, 2A, 00, 00, 50, E8, 3B, 33, 01, 00, 00, 00, 00, 00, 90, 55, 8B, EC, 53, 56, 57, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, D3, FF, 75, 14, 68, E1, 50, 41, 00, 6A, 00, 6A, 00, 8B, C6, 8B, CF, E8, A2, 47, 00, 00, 81, EB, 10, 01, 00, 00, 74, 05, 4B, 74, 14, EB, 57, FF, 75, 14, 6A, 66, 56, E8, 9A, 35, 01, 00, B8, 01, 00, 00, 00, EB, 47, 66, 81, E7, FF, FF, 66, FF, CF, 74, 07, 66, FF, CF, 74, 23, EB, 30, 68, 80, 00, 00, 00, 68, A4, 69, 41, 00, 6A, 65, 56, E8, E0, 34, 01, 00, 6A, 01, 56, E8, BA, 34, 01, 00...
 
[+]

Entropy:
7.9964  (probably packed)

Code size:
80 KB (81,920 bytes)

The file metal slug 5.exe has been seen being distributed by the following 11 URLs.

http://fileshare1130.depositfiles.org/auth-1478812124218dffb4df04a6aca4950d-190.113.148.81-35432855-138846042-guest/.../MS5.exe

http://download1023.mediafire.com/2i0klgkodbtg/.../Metal Slug 5 Portable.exe

http://fileshare1130.depositfiles.org/auth-1467994519aac3289b2182bfa9d095f6-181.209.246.59-2615816738-138846042-guest/.../MS5.exe

http://download1747.mediafire.com/xr01188kzssg/.../Metal Slug 5 Portable.exe

http://fileshare1130.depositfiles.org/auth-14339104694aaab7b7f8060e162a1237-189.152.230.160-2110506296-138846042-guest/.../MS5.exe

http://fileshare1130.depositfiles.org/auth-147018464455312d4553d168f8a53d3a-200.28.44.137-2639134726-138846042-guest/.../MS5.exe

http://download1235.mediafire.com/8c65a5wwh3qg/.../Metal Slug 5 Portable.exe

http://download1736.mediafire.com/s6eq8ff37jlg/.../Metal Slug 5 Portable.exe

http://fileshare1130.depositfiles.org/auth-1461403102fda7262341a5f6953b6dd7-189.142.204.74-2541517642-138846042-guest/.../MS5.exe

http://fileshare1130.depositfiles.org/auth-1444600272f2ba85ff06479e38f7abd0-181.95.39.249-2311628022-138846042-guest/.../MS5.exe

http://fileshare1130.depositfiles.org/auth-1448419299bde8a06363404ed8683b2f-201.157.84.165-2367589033-138846042-guest/.../MS5.exe

Remove metal slug 5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.