home

3dwarlord-1_xijado.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from admin-ds.top1game.com.
MD5:
d18590aca3d90ee6981395039e24dfa1

SHA-1:
46291eabd24430c7197f139c681b936df15a4775

SHA-256:
771ca30e3549404797f1382838c2d2ecd063a9505bf80302f1966e55a0564ed6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/15/2024 3:04:47 PM UTC  (today)

File size:
2.7 MB (2,833,912 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\3dwarlord-1_xijado.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:Z2VIlbu+AvQs9HLBlp9AngEEq7bsUuaFT5vmP+XdWoFmrhUuiuhiG683yfRENaxD:Zju+A/9FHASqcUjFuydW5dUuQGgSAxSQ

Entry point:
E2, 18, E9, C4, 3E, B7, 07, FE, 42, 9A, 90, 04, B5, 0F, B8, E6, 58, D4, 87, 63, D3, 74, C2, CA, F3, 64, F2, F7, 05, 3E, 39, 27, 56, C8, 62, CC, CE, DF, 55, B9, 21, 3B, 40, DF, C2, 10, 29, 0F, 02, 4F, 10, 67, 71, D5, AC, F8, BB, 68, 19, 73, 38, 8B, F2, A4, 12, 13, 8C, 08, 9A, 66, 27, 2D, 01, 35, 1C, 15, 51, 6B, E7, A0, C2, 5F, 54, 1D, 55, 08, EA, A0, 3C, AC, 62, C1, 26, 9E, BC, A0, 33, A3, E5, D8, 3E, BA, 08, 22, BF, AE, 45, 6F, 82, 46, CE, 89, 0B, D7, F2, EB, 46, 68, B1, FE, 27, 74, 82, C6, 6A, 3B, 57, ED...
 
[+]

Entropy:
7.9964  (probably packed)

The file 3dwarlord-1_xijado.exe has been seen being distributed by the following URL.

http://.../dl?t=dl&from=1&s=http://.../25.html?pscode=94hau7t55ibpmntbo08rjkerp5&uid=top1game_563145&sid=25&time=1452576261&fcm=1&exts=e30&platform=top1game&channel=1&mutil=1&type=web&bind=10&sign=ac65115e325e8407f0ac0242db7114c6

Scan 3dwarlord-1_xijado.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.