Gridinsoft Logo
File Icon

The File-Call.of.Duty.Black.Ops.3.ALL.DLCs.tor_118880.exe (SPARK Full) File Analysis

Technical Analysis

File Name File-Call.of.Duty.Black.Ops.3.ALL.DLCs.tor_118880.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
SSDEEP Hash
49152:LkQqe5vs+HbhCc7YvgLPkLUX0FilDCIr1QN/WaW:LkQqeJs+HbhF7YvMvUiMI+Od
Scanner Version 1.0.151.174
Database Version 2023-12-14 23:01:24 UTC

Suspicious File Detected

Detected by 6 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
8%
Detection Rate
2,837,488
File Size (bytes)
6/72
Engines Detected
2023-12-14
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
b06029e68c041684751eed9e63dcf164
SHA1
cbc52ee56366468d0dbcf43f4058f6fd7ea70167
SHA256
7d4311b7caba4881f54c5193b85ef22797896f30964cfc9deb9721e12f84969c
SHA512
ffd8995e20a3601b3589fad68e633e27e2405e84119fa1bea6a18986dd3ce388168dc21e52bacb34ef3bc91fb782d2353858d14976da2720f384aa203a46e906
ImpHash
c818f0e720fa73c83a1e6c1fe7f04039

Security Engines with Detections (6 of 72)

Rising
Adware.Snackarcin!8.18E14 (CLOUD) Malicious
Ikarus
PUA.DownloadAdmin Malicious
Jiangmin
Trojan.Banker.ClipBanker.bhb Malicious
Webroot
W32.Malware.Gen Malicious
Microsoft
PUADlManager:Win32/Snackarcin Malicious
DeepInstinct
MALICIOUS Malicious
66 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

Icon
Hash: 033742370ebe464335441b382d5837cd
Fuzzy: 015d4d58d10a639fea46fa726821ed03
dHash: f0cc92868692ccf0
Image Base 0x00400000
Entry Point 0x00402ed0
Compilation Time 1970-01-01 00:00:00
Checksum 0x002be7db (Actual: 0x002be7db)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Digital Signature OK
Imports 10 libraries
kernel32, oleaut32, user32, advapi32, gdi32, version, shell32, ole32, comctl32, psapi
Exports 0 functions
Resources 92 Resources
Sections 8 Sections

Digital Signatures

SSL.com EV Code Signing Intermediate CA RSA R3 Digital Media Pros LLC (US)
SSL.com EV Root Certification Authority RSA R2 SSL Corp (US)

Version Information

CompanyName SPARK Full Applications Systems
FileDescription SPARK Full
InternalName SPARKFull.exe
LegalCopyright SPARK Full Applications Systems
OriginalFilename SPARKFull.exe
ProductName SPARK Full
ProductVersion 1.0.0.0
Comments
FileVersion 1.0.0.0
LegalTrademarks
Translation 0x0409 0x04e4

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,437,920 bytes 1,438,208 bytes 6.25 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 947972E8CDA2624AE344196E2C229A2D
.data 0x00161000 725,412 bytes 725,504 bytes 7.38 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F4BFEC033C094224FB277DEF358F4FE7
.rdata 0x00213000 382,756 bytes 382,976 bytes 5.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3F68943DF7A93262C7E0B4ADB2FA5724
.bss 0x00271000 48,768 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.CRT 0x0027d000 12 bytes 512 bytes 0.06 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A703520858BF44A71D9CB449B416F049
.idata 0x0027e000 12,565 bytes 12,800 bytes 5.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1D5FA42B33F25EFDDD2010CECB8FA188
.rsrc 0x00282000 132,680 bytes 133,120 bytes 5.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 66199CC8343A20663E2689EED2C46B2A
.reloc 0x002a3000 135,404 bytes 135,680 bytes 6.54 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 932FC65DAE62E480E16275FF4835ADF1
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 92 (126,526 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 26 16,968 bytes
13.4%
RT_ICON 1 67,624 bytes
53.4%
RT_DIALOG 1 50 bytes
0%
RT_RCDATA 49 38,822 bytes
30.7%
RT_GROUP_CURSOR 12 436 bytes
0.3%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 836 bytes
0.7%
RT_MANIFEST 1 1,770 bytes
1.4%

Certificate Chain Analysis

Certificate #1
Subject Digital Media Pros LLC
Digital Media Pros LLC
US
Issuer SSL.com EV Code Signing Intermediate CA RSA R3
Serial Number 88401790483330143697796390301419409373
Certificate #2
Subject SSL.com EV Code Signing Intermediate CA RSA R3
SSL Corp
US
Issuer SSL.com EV Root Certification Authority RSA R2
Serial Number 88120626561545005758442085613766983940
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
6 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware