home

q3ad.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.lo4d.com and multiple other hosts.
MD5:
044b6b00452ef34b2598834166f8f45a

SHA-1:
95fb0e8f595506dd30b57635db151f2e0762be02

SHA-256:
6af96cb1b5c97535c9923d8855ca85ec21b21b65b48738b2c5e674e17c65835d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 10:11:12 PM UTC  (today)

File size:
46.6 MB (48,907,862 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\q3ad.exe

File PE Metadata
Compilation timestamp:
6/9/1999 10:57:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:XFbBp740JZvbZP3QSpd7k+SDQn9i/l/so63AGYgL1Nzr7PER6WMejccHgtYg:1bBp7Bv3Q2k+n9i9sFFYgL1BS6J/r

Entry address:
0x71A0

Entry point:
55, 8B, EC, 6A, FF, 68, 80, D1, 40, 00, 68, 70, 91, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, BC, D0, 40, 00, 33, D2, 8A, D4, 89, 15, 18, F2, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 14, F2, 40, 00, C1, E1, 08, 03, CA, 89, 0D, 10, F2, 40, 00, C1, E8, 10, A3, 0C, F2, 40, 00, 33, F6, 56, E8, 3C, 1E, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 7C, 1C, 00, 00, FF, 15, B8, D0, 40, 00, A3, 88, F9, 40, 00, E8...
 
[+]

Entropy:
7.9976

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
48 KB (49,152 bytes)

The file q3ad.exe has been seen being distributed by the following 29 URLs.

http://www.lo4d.com/get-file/quake-iii-arena/.../

http://ftp-stahuj.centrum.cz/dl/de33af5f8380e8c8f2b4db491dd00eec/58132d49/stahuj/download/software/secured/q/quake-iii-arena/.../q3ademo.exe

http://www.bytesendclear.com/DFGWLoeVxDs_GPXhDTmMnHKwr12y3KVrA8sczrFNWG8tDbfJEOUtD5L3DaCF2ECbQnkL4mUKbC31r43nB0yGPXEs9umLJdy6ffZjFAwYgUYmmYMOrsh9Wl88F1bn4gncpyQmenc4bJQiny9kdGNv_tTgZQ5ouhCRa2QlboHW7DBTXTPvKZEPJzxcIX3STts3jKn1ry0F3ZDwsXSBXNhe3AsQbKvO6RAnIhe7xzWK5YFEHKBjc0twv4k8_rfpTkR46enyfg34f4pfQRwwEMTiOvvTRXwhoO8YtC8_2BT6y_mSPF21xU7O MWP0B81Zg1oycO6gU6iHl3iP8svWv_dGX3I4 NIsOnmdGCy0O0D505gLeSBVdfLWUQPJ9TzweCI8WelduanXuGG6ob6Ze18PJ1vlu1l9Fd3eKXysLcswGN0KAPxUXc4_sphDecemguxuv9VDkn2ovS4SyKy59CxyNTi38vQNrNY4r8d1vx_ftp7SZl88G2qC35MvOxflZNkheKDv5dMxQ_VeJbjqylD87 81Ewhu83m1dMov4IUYC4BC8b7wguiJNhhduv6O87LAZJlMaNh4MKTuVhhtnIkCfumzOWRbQ==-G1AAAMS23Di9Dg1TS FYw3bwEmG8JkQZTOTAoaUJHBzf2PaBvDFGNdyFwhN9nNb9yKK4eM2S3f s18BLBG8PTEVkTh3ge0IqI_0U

http://www.lo4d.com/get-file/quake-iii-arena/.../

http://data2.stahnu.cz/downloadFile.php?n=cXVha2UtaWlpLWFyZW5hXy5leGU=&s=hjkfga47dfs4l7diei99ns8fa4&r=98bc996be691c3ee57c4fdad45e6a4a8

http://www.lo4d.com/get-file/quake-iii-arena/.../

http://www.gamershell.com/download.html?id=4291&mirror=cdn&cat=demo&filename=Q3ADemo.exe&ts=1453216238&auth=liszg48k

http://ftp-stahuj.centrum.cz/dl/136c9a8333da32ce72809b6cf2bb4ae6/58134662/stahuj/download/software/secured/q/quake-iii-arena/.../q3ademo.exe

http://dpcdn-s11.pl/.../Q3ADemo.exe

ftp://ftp.idsoftware.com/idstuff/quake3/.../q3ademo.exe

https://archive.org/download/.../Q3ADemo.exe

http://davinder.dccircle67.com/betterdownloadeasyhours/276cd7fdfb47dc904346836386b30206fceb3740/.../q3ademo.exe

http://www.lo4d.com/get-file/quake-iii-arena/.../

ftp://ftp.debian.nl/disk2/idsoftware/idstuff/quake3/.../Q3ADemo.exe

http://www.lo4d.com/get-file/quake-iii-arena/.../

http://ftp-stahuj.centrum.cz/dl/593ff72f112096cfe93a914663862441/575ea2fc/stahuj/download/software/secured/q/quake-iii-arena/.../q3ademo.exe

http://www.lo4d.com/get-file/quake-iii-arena/.../

http://www.lo4d.com/get-file/quake-iii-arena/.../

http://www.lo4d.com/get-file/quake-iii-arena/.../

http://downloads.pcworld.com/pub/new/fun_and_games/.../q3ad.exe

http://www.gamershell.com/download.html?id=4291&mirror=17&cat=demo&filename=Q3ADemo.exe&ts=1462035371&auth=hi0h8vjs

http://bi.sciagnij.pl/0/gry/q/.../q3ademo.exe

http://www.lo4d.com/get-file/quake-iii-arena/.../

http://soft-jeux.telecharger.com/jeux/.../Q3ADemo.exe

http://www.lo4d.com/get-file/quake-iii-arena/.../

http://download.fileplanet.com/ftp1/action/quake3/.../Q3ADemo.exe

http://download2.gamershell.com/filehell/3ef5793c8ca2afa8b09cf6c7b6aa6ecc51f1314d0010c3/.../Q3ADemo.exe

http://www.gamershell.com/download.html?id=4291&mirror=2&cat=demo&filename=Q3ADemo.exe&ts=1374156431&auth=m9ozop85

http://downloads.pcworld.com/pub/new//fun_and_games/.../q3ad.exe

Scan q3ad.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.