home

XPva03.dll

XPva03

Product:
XPva03

Description:
XPva03

Version:
1, 0, 0, 1

MD5:
c2f948e0bb60a5fc8094514cf9f48844

SHA-1:
355d7ecbf252a710afb966be2566950bba275024

SHA-256:
b5f9f236cd6da0c9b57ab8b7e7b121464b09cb852b51ec3445f1c32bb070669d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/5/2024 8:10:12 PM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0803
7.2.355

File size:
271.5 KB (278,016 bytes)

Product version:
1, 0, 0, 4

Copyright:
Copyright ⓒ 2008

Original file name:
XPva03.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Korean (Korea)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\xpva03.dll

File PE Metadata
Compilation timestamp:
7/2/2012 11:14:59 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:vCd5ApzdYCiriQX6S5Jh/4VRmISKdmcQEVwU5gO41e/3Pr9LyXELsX4ZE:6d5pdrxx5JhgVR9dm9E75741e/3z9qET

Entry address:
0x94C90

Entry point:
80, 7C, 24, 08, 01, 0F, 85, E2, 01, 00, 00, 60, BE, 00, 20, 05, 10, 8D, BE, 00, F0, FA, FF, 57, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46...
 
[+]

Code size:
268 KB (274,432 bytes)

The file XPva03.dll has been discovered within the following programs.

Cross Fire  by Mail.Ru
CrossFire is a first-person shooter that features two Mercenary corporations fighting each other in an epic global conflict.
cfire.mail.ru
20% remove it
Cross Fire En  by Z8Games.com
Publisher's description - “Cross Fire is a free online first-person shooter featuring persistent rankings and five game modes – including the exclusive stealth-action Ghost Mode.”
www.z8games.com
24% remove it
GrandChase version v1404032  by KOGGAMES
www.grandchase.elswordonline.com
About 6% of users remove it
Heva Clonia v130090401  by PlayBuster
About 1% of users remove it
Lost Saga North America  by IO Entertainment
lostsaga.z8games.com
About 1% of users remove it
LostSagaUS  by IO Entertainment Co., Ltd.
About 2% of users remove it
OPERATION7  by Netgame
Publisher's description - “Operation7 is different from other FPS games. 1. Most realistic FPS game. One shot one kill, Available to use more than 90 weapons which were from real world ,Breathe holding to hunt your enemy, weight effect. Players can tilt their body each side left and right. 2.”
www.operation7.eu
About 1% of users remove it
PointBlank  by Ongame S.A & Zepetto
pb.ongame.com.br
About 9% of users remove it
TalesRunner  by Rhaon Entainment
www.RhaonEntainment.com
About 3% of users remove it
TwelveSky2  by HunGames
www.12sky2online.com
About 3% of users remove it
 
Latest 20 of 17 programs
Powered by Should I Remove It?

The file XPva03.dll has been seen being distributed by the following 12 URLs.

http://fhl-lcdn.pandonetworks.com/.../XPva03.dll

http://download.gameclub.com/cf/.../XPva03.dll

http://cdn.lostsaga.z8games.com/.../XPva03.dll

http://cabal.ws/client/.../XPva03.dll

http://cdn4.playhis.com/eu/.../XPva03.dll

http://update.parapa.ru/.../XPva03.dll

http://hanbitueweb.nefficient.jp/hanbitueweb/Secure/Xtrap/AIKA/.../XPva03.dll

http://xtraplive.trdownload.in.th/.../XPva03.dll

http://dls3.microvolts.com/update/.../XPva03.dll

http://update.cfire.ru/.../XPva03.dll

http://kill3rcombo-ecdn.pandonetworks.com/Kill3rCombo/ES/.../XPva03.dll

http://download.ongame.vn:3001/gamedownload/.../XPva03.dll

Scan XPva03.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.