home

XPva03.dll

XPva03

Product:
XPva03

Description:
XPva03

Version:
1, 0, 0, 1

MD5:
3fb901e5be94e8241866cc2120ef44d3

SHA-1:
a52fb797a856d477a238c09c2dbed3ad0847e86b

SHA-256:
fb674ce106e3ee9d50b01c17bda8a884e9ad9eda40c5d4760da8e173d737ff72

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/27/2024 4:23:47 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
DLOADER.Trojan
9.0.1.0128

File size:
273.5 KB (280,064 bytes)

Product version:
1, 0, 0, 4

Copyright:
Copyright ⓒ 2008

Original file name:
XPva03.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\xpva03.dll

File PE Metadata
Compilation timestamp:
3/18/2014 9:13:38 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:Q+Ga2YX44OdOSHsUAxs08ixvWC2/MF/wcc4Sd1ygacw6z7hfhSYI:Q+Gay4O5sls4MkSV4Sd1ygG6Ph7

Entry address:
0x97520

Entry point:
80, 7C, 24, 08, 01, 0F, 85, E2, 01, 00, 00, 60, BE, 00, 40, 05, 10, 8D, BE, 00, D0, FA, FF, 57, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46...
 
[+]

Entropy:
7.8509  (probably packed)

Code size:
272 KB (278,528 bytes)

The file XPva03.dll has been discovered within the following programs.

Cross Fire  by Mail.Ru
CrossFire is a first-person shooter that features two Mercenary corporations fighting each other in an epic global conflict.
cfire.mail.ru
20% remove it
GrandChase version v1404032  by KOGGAMES
www.grandchase.elswordonline.com
About 6% of users remove it
GrandChase version v1405085  by KOGGAMES
About 8% of users remove it
OPERATION7  by Netgame
Publisher's description - “Operation7 is different from other FPS games. 1. Most realistic FPS game. One shot one kill, Available to use more than 90 weapons which were from real world ,Breathe holding to hunt your enemy, weight effect. Players can tilt their body each side left and right. 2.”
www.operation7.eu
About 1% of users remove it
TalesRunner  by Rhaon Entainment
www.RhaonEntainment.com
About 3% of users remove it
 
Powered by Should I Remove It?

The file XPva03.dll has been seen being distributed by the following 46 URLs.

http://download.tr.ogplanet.com/.../XPva03.dll

http://download.talesrunner.com/Talesrunner/.../XPva03.dll

http://xtrap.mayngames.com/.../XPva03.dll

http://zmrdl.axeso5.com/.../XPva03.dll

http://fctw.awstw.garenanow.com/fctw/xtrap/.../XPva03.dll

http://pristontale.ucsjapan.com/PatchRoot/.../XPva03.dll

http://wiadl.axeso5.com/.../XPva03.dll

http://123.30.200.6//XPva03.dll

http://lostsaga-patch.gscdn.com/lostsaga_Service/Protect//XPva03.dll

http://o7dl.axeso5.com/.../XPva03.dll

http://dls3.microvolts.com/update/.../XPva03.dll

http://download.gameclub.com/cf/.../XPva03.dll

http://acecdn2.axeso5.com/.../XPva03.dll

http://xtrap.tr.funtown.hk/XPva03.dll

http://xtrap.ongame.com.br/.../XPva03.dll

http://cf.cdn.patchgamerage.com/livepatch/.../XPva03.dll

http://fhl.cdn.reloadedtech.com/.../XPva03.dll

http://cdn.eu.brick-force.com/.../XPva03.dll

http://patch.worldinayodance.com/adtpatch/.../XPva03.dll

http://xtrap.run.sgame.vn/XPva03.dll

http://cfsapatch.z8games.com/.../XPva03.dll

http://patch.cdn.gamigo.com/folauncher/live/us/.../XPva03.dll

http://dl.cf.vtc.vn/.../XPva03.dll

http://hbsge.nowcdn.co.kr/.../XPva03.dll

http://fhl.cdn.reloadedtech.com/.../XPva03.dll

http://download.ongame.vn:3001/gamedownload/.../XPva03.dll

http://update.parapa.ru/.../XPva03.dll

http://xtrap.toywars.in.th/XPva03.dll

http://cfpatch.z8game.com/.../XPva03.dll

http://xtrap.au.vtcgame.vn/XPva03.dll

Latest 30 of 46 download URLs

Scan XPva03.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.