home

darkera_client.exe

Fancy3D Launcher

Beijing FancyGuo Tech Ltd

Publisher:
Hongfeng Hengyu (Beijing) Tech Ltd.  (signed by Beijing FancyGuo Tech Ltd)

Product:
Fancy3D Launcher

Version:
0,15,0811,1111

MD5:
52e5ac647dd2036e320a392cd3efe376

SHA-1:
afa551255248f7355bf6aacd2b96e6d981b99503

SHA-256:
90a4a74169899bd6245c1a671a64cefa1cea04986c48ae7e909cfed773b650e0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
9/22/2024 4:35:02 AM UTC  (today)

File size:
1.8 MB (1,899,760 bytes)

Product version:
0,15,0811,1111

Copyright:
Copyright (C) Hongfeng Hengyu 2009 - 2015. All rights reserved.

Language:
English (United States)

Common path:
C:\users\{user}\downloads\darkera_client.exe.part

Digital Signature
Signed by:
Beijing FancyGuo Tech Ltd

Authority:
VeriSign, Inc.

Valid from:
6/11/2015 8:00:00 PM

Valid to:
7/14/2017 7:59:59 PM

Subject:
CN=Beijing FancyGuo Tech Ltd, OU=IT Support, O=Beijing FancyGuo Tech Ltd, L=BeiJing, S=BeiJing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6D09E707C0C807139E9F7382746AF7CF

File PE Metadata
Compilation timestamp:
8/10/2015 11:12:04 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:kCNoQJPdY5v0ld8CBVrwPBG1m53f3+tCsKfs18OnOPTCw:kCNowYx0/BVc5N5xsKfl+w

Entry address:
0x2A9D70

Entry point:
60, BE, 00, F0, 4E, 00, 8D, BE, 00, 20, F1, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, FA, 75, 2A, 00, 57, 83, C3, 04, 53, 68, 64, AD, 1B, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9730  (probably packed)

Code size:
1.7 MB (1,818,624 bytes)

The file darkera_client.exe has been seen being distributed by the following 50 URLs.

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../5.html?uid=39157803&gw=1&time=1448818184&sid=5&sign=74ecd8d6b127696760b38b9d2d07263b&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../9.html?uid=39718585&gw=1&time=1451600675&sid=9&sign=3b18d68efd6bec6cbc5d8d72cd4974bc&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../7.html?uid=39475461&gw=1&time=1450349136&sid=7&sign=db538908ea8b145e29888bfdba27f660&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../8.html?uid=39567778&gw=1&time=1450772733&sid=8&sign=e9e0c9de2159c5b91809a3094346dff7&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../29.html?uid=41894543&gw=1&time=1465172038&sid=29&sign=c845bc53331ec68fe9b6e04e4ebc14a1&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../30.html?uid=42069864&gw=1&time=1466441375&sid=30&sign=86954d6d5a07a6a4fd85b57774bc92cb&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../30.html?uid=41988996&gw=1&time=1465826171&sid=30&sign=fcf5c3a9804ccf58b5386f8c48e59cef&mutil=1&op=game321&usertype=game321

http://.../dl?t=dl&s=http://.../4.html?uid=39088919&gw=1&time=1448470932&sid=4&sign=8ce21a39668f8f029227e3273044d380&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../29.html?uid=41950688&gw=1&time=1465556103&sid=29&sign=15a4d98b142849e7de8711815442daff&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../22.html?uid=41062966&gw=1&time=1459072099&sid=22&sign=799dfe370ad5c9fc4b6892d89e3ff071&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../5.html?uid=39218282&gw=1&time=1449171483&sid=5&sign=03a9e37f7e01bcee6e27743f17f5aa39&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../30.html?uid=42153733&gw=1&time=1467006833&sid=30&sign=051f33ab70711e185e21ff34f2abd4bb&mutil=1&op=game321&usertype=game321

http://f0397e0-a.akamaihd.net/darkera/mclient/.../darkera_client-dojira.exe

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../9.html?uid=39700888&gw=1&time=1451500221&sid=9&sign=6204c1064535adbb938aac303195bcea&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../30.html?uid=42161450&gw=1&time=1467056868&sid=30&sign=15cd5b70033d04064dff8d55b2a4f2a2&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../28.html?uid=41765612&gw=1&time=1464208014&sid=28&sign=0ec9ac98d2ccc40ab9408ee142687ac6&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../26.html?uid=41443763&gw=1&time=1461612214&sid=26&sign=8db5f43d1c37bb803fc69e2a630cf662&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../26.html?uid=41469357&gw=1&time=1461859263&sid=26&sign=749d99a07bdd153ae669adb5fcf95432&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../14.html?uid=40210307&gw=1&time=1454428219&sid=14&sign=352ebf33f2f094ca5853e5b4a5e80e54&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../12.html?uid=39936217&gw=1&time=1452889911&sid=12&sign=500cc96cd378ef4770f265c447a30b01&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../10.html?uid=39744537&gw=1&time=1451756494&sid=10&sign=3f32fdc3f6b1ca56a80a52775e4479fc&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../6.html?uid=39350920&gw=1&time=1449770106&sid=6&sign=6cf65e10ef079659bfe78cac45f22a5f&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../11.html?uid=39844409&gw=1&time=1452331030&sid=11&sign=cdff5c50b35ace0ccf5dc52eb6e8c847&mutil=1&op=game321&usertype=game321

http://.../dl?t=dl&s=http://.../4.html?uid=39075338&gw=1&time=1448404416&sid=4&sign=5eec788bc40fb15b343739ac851d29c1&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../6.html?uid=39296239&gw=1&time=1449517044&sid=6&sign=6172777550bd179510da1383436a5229&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../10.html?uid=39812681&gw=1&time=1452165880&sid=10&sign=719e9b13ef76adbaadf532fef990fb77&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../7.html?uid=39441050&gw=1&time=1450182847&sid=7&sign=a9d3df36ff17d55d939684503c3210ba&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../13.html?uid=40062085&gw=1&time=1453628127&sid=13&sign=b6b04466344e757054c039497c69da11&mutil=1&op=game321&usertype=game321

http://passport.game321.com/api/webgame/darkera/microDown.php?source=LP&url=http://.../dl?t=dl&s=http://.../7.html?uid=39388619&gw=1&time=1449937340&sid=7&sign=3bdbd8f6ff4826edc5c7cc8849f82284&mutil=1&op=game321&usertype=game321

http://.../dl?t=dl&s=http://.../4.html?uid=39105923&gw=1&time=1448549297&sid=4&sign=6e1e46c4697afa12062efb21e9368d25&mutil=1&op=game321&usertype=game321

Latest 30 of 346 download URLs

Scan darkera_client.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.