home

xrengine.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.ex.ua and multiple other hosts.
MD5:
4aff8da024ec21dcb31743d61f0735f8

SHA-1:
b6a2a43f51f3d5a91e44c520b7ba76de5597a691

SHA-256:
c84a637aae35ead6eb80c76f2b583878371f1d2885693506d8c13da105d40e22

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:00:32 AM UTC  (today)

File size:
1.1 MB (1,102,512 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\s.t.a.l.k.e.r. зов припяти\bin\xrengine.exe

File PE Metadata
Compilation timestamp:
9/15/2009 1:10:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
4.0

CTPH (ssdeep):
24576:FvI6AO4mtLQG1baQPzkRGj3367qvkucorAgJOC7H/uaZD30D:zAOTj1uQPz4KJcsbkCzhZDkD

Entry address:
0x6C28F

Entry point:
E8, 80, 05, 00, 00, E9, 35, FD, FF, FF, CC, FF, 25, 78, E1, 46, 00, FF, 25, 74, E1, 46, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 80, F9, 40, 73, 16, 80, F9, 20, 73, 06, 0F, AD, D0, D3, FA, C3, 8B, C2, C1, FA, 1F, 80, E1, 1F, D3, F8, C3, C1, FA, 1F, 8B, C2, C3, CC, FF, 25, 68, E1, 46, 00, CC, CC, CC, CC, CC, CC, CC, CC, 80, F9, 40, 73, 15, 80, F9, 20, 73, 06, 0F, A5, C2, D3, E0, C3, 8B, D0, 33, C0, 80, E1, 1F, D3, E2, C3, 33, C0, 33, D2, C3, CC, 83, 3D, 5C, 58, 49, 00, 00, 74, 2D, 55, 8B, EC, 83, EC, 08...
 
[+]

Code size:
462.5 KB (473,563 bytes)

The file xrengine.exe has been seen being distributed by the following 4 URLs.

http://www.ex.ua/.../187466937

about:internet

http://www.ex.ua/.../187466937

http://cs04.userfiles.me/f/0/1422595797/27544881/0/.../xrEngine-spaces_ru-spaces.ru.exe

Scan xrengine.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.