home

clashofclans_pc.exe

The executable clashofclans_pc.exe has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from e.websited.link.
MD5:
43c7653fac8aca5406f79163b11694a2

SHA-1:
713d2d16654f50403e52b1d9e97fe747ff26367e

SHA-256:
969bff0824d56e6cf7fb56542621a156293992944eccca1bdbe57fcd17f6e1fa

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
1/13/2025 4:56:43 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
16.7.2.21

File size:
295 KB (302,080 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\clashofclans_pc.exe

File PE Metadata
Compilation timestamp:
6/14/2012 8:11:08 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:G4nkFJN+6Mgz2I1nXOW+5nH+vh6kUKkFjb9imiFQ7EaG3lNcq:WnFzB1nXOW4e2imp7Exoq

Entry address:
0x1FFBB

Entry point:
E8, 54, 12, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 10, CA, 43, 00, E8, 5F, 17, 00, 00, E8, 21, 14, 00, 00, 0F, B7, F0, 6A, 02, E8, E7, 11, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, C8, 0B, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.8309

Code size:
148.5 KB (152,064 bytes)

The file clashofclans_pc.exe has been seen being distributed by the following URL.

http://e.websited.link/hp/?q=U34TNMWR8cs35ztvqo1KGy bMAZyzsp5uNn8 2bs6NpgABFU0FosWkm1huOUjrotYoPhd9GaqNm176iWdciGKZwLsFVe0xUF/6lcmIC2E2w3tiI8DaA9jd b7zVFsaHVyzrmsec6RQb4OEi9YIkaxepBAmXL2c0GPVpfGp4VVnQWpJOoIEMFQms3YvZ9/MPZNbbwa/x5P7ZHB5V/BCQVXgFNjxoBaOViZq Eiu16YRaPWRPWOYRdIldfzH9F/rZ85E6 6HD2Si26b/3RcBhPhu/i1wJAvnkniv6d3aPFa6Q7VBXjgbIMn7GWqxBhL/VeBDS7s4HbUESR2ikETXwJtvzucQRXNDfQ0EnZMT/91ShbWUNQ4Ov 2Bf4okoB7IZs r/oP0CVRsg9NmqhkmXMSGxqFYd96NLg LJFxOm/.../Yx3NZL0PHAwrD2fFTjtpU9efLHbFdrKyLJPToxfBmMBfuSCuz92wHdk8ADVmLre&external_id=1430861708353764182&uuid=PURiPkbzmywPcoXqt3Gkjz1yDr1Th4wRn1MbfCaYdRe6vU8Bn4cq0DQkyuYmeY2VluzmwOKjCx3KjCxmIX4vlgr5s1DJg61HnLCSxVicQqpbJcldYAs0u9UatwVg6nFNyIXoVTgQBgXIKJgvXwxz4RM2Gha0FTrRxFpHlHZQJfJXUVqK488cVY8tsp5RiP5zcsZN8TVpFpoiMUTJsHC9bnzIC8MQuZ6CL0Q3K2NVCTiCTzcEvby8oqlp1OJ47Eeqx7g1MiBuGGNuSiX0la1BkGXGuehlozlgGrsnFXXA6UeMGQWKaCOsGONTZBWtmk6ngPBf5jJQdweBLk18K24eAZarQVRN0050oEtUC

Remove clashofclans_pc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.