home

war3tft_124d_english.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from files.downloadnow.com.
MD5:
30851298787cc0c0927acc472648067f

SHA-1:
c960177a71c159f77bf1944ab5186257f581ff55

SHA-256:
86dc4801d409360a44c0b61d2d82a4ad305f665344e65d6f66ca65d3223f9fd1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/22/2024 5:11:32 PM UTC  (today)

File size:
2.6 KB (2,636 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\war3tft_124d_english.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
48:cLEFZtNorAVdH1zssJLl3vK99tPExEDKzeeUSHps9TRScANmO2k1UAxT7mvQ2r:cmZtNWI7PuHTDKzRZsVcL8aPYHr

Entry point:
BD, F4, E0, F4, 39, F3, 2C, F0, 8B, EC, FB, E9, 73, EB, 45, EE, B4, EF, 9D, EE, DD, EA, 98, E6, 1F, E4, 31, E5, 8A, EB, 8D, F1, 57, F4, 4E, F4, D1, EF, D3, E9, 45, E4, 1A, E0, 18, DD, 0D, D9, 28, D4, 19, D1, 1F, D0, 01, D0, E2, D0, EA, D1, D6, D3, 98, D5, EC, D3, 69, D2, D4, D0, AD, CF, D7, CF, 31, CF, F4, CE, 96, D3, B4, DA, A6, E0, 1A, E3, AF, DD, 03, D4, 8F, CC, 76, C7, 75, C5, 2F, C4, F5, C3, 96, C7, FF, CB, 0B, D1, E3, D7, DB, DC, 62, DD, 9C, DA, 60, D5, EC, D1, CC, D2, EF, D2, EC, D1, CF, D4, 2F, DA...
 
[+]

Entropy:
7.7530  (probably packed)

The file war3tft_124d_english.exe has been seen being distributed by the following URL.

http://files.downloadnow.com/s/software/11/20/80/.../War3TFT_124d_English.exe

Scan war3tft_124d_english.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.