home

castleminer_z_v1.6.3.6_setup.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download1051.mediafire.com and multiple other hosts.
MD5:
a0951efb8a16672957c892219ee3119b

SHA-1:
4b2dddb175e05103098a3a5d4ba0f1d590b2659b

SHA-256:
5c626f5d2046de1b3b1bf2bd97192979f60424c18658bd32d0bef9bdee5f671a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:12:08 PM UTC  (today)

File size:
184.7 MB (193,650,122 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\castleminer_z_v1.6.3.6_setup.exe

File PE Metadata
Compilation timestamp:
6/6/2009 4:41:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3145728:dQ8GcekEDVyy2k1XKb75bO1tMQ7L6j8HtIGrtEgTEos8Hl+8my:unJ192k185b8tMQv6YIGrtvT7HHl+8X

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9999

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file castleminer_z_v1.6.3.6_setup.exe has been seen being distributed by the following 45 URLs.

http://download1051.mediafire.com/xadgbexn3hxg/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download1877.mediafire.com/e7pp7gyyey3g/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download1487.mediafire.com/4d3i238422pg/.../Castle Miner Z.exe

http://download1223.mediafire.com/1ltkr17z3dug/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download1101.mediafire.com/bwbalo8bs2dg/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download636.mediafire.com/4y3y6e1xe2ug/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download2068.mediafire.com/gvwzc58k89xg/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download1422.mediafire.com/tffp48k9wa3g/.../Castle Miner Z.exe

http://download1877.mediafire.com/0h0razm6axrg/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download636.mediafire.com/6dw6bmtx2mcg/.../Castle Miner Z.exe

http://download2001.mediafire.com/fc7gxcjsrdpg/.../Castle Miner Z.exe

http://download636.mediafire.com/6dxmrx5sgidg/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download1359.mediafire.com/f12jwm75csyg/.../Castle Miner Z.exe

http://download1877.mediafire.com/rvnsi8318p1g/.../Castle Miner Z.exe

http://download2068.mediafire.com/u95p78xmj6mg/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download1877.mediafire.com/u19anea7991g/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download2001.mediafire.com/1yh22lzv8kug/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download1359.mediafire.com/so4pq4lqs7qg/.../CastleMiner_Z_v1.6.3.6_setup.exe

temp:Castle Miner Z.exe

http://download1101.mediafire.com/4o7skmi77nsg/.../Castle Miner Z.exe

http://download1150.mediafire.com/w9xhpwks91mg/.../Castle Miner Z.exe

http://download1359.mediafire.com/18t0b8861hmg/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download1806.mediafire.com/rsr5meqn15og/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download1101.mediafire.com/ds322t2lh6lg/.../Castle Miner Z.exe

http://download861.mediafire.com/el6m8u058ujg/.../Castle Miner Z.exe

http://download2001.mediafire.com/xt5vq2kp65kg/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download1359.mediafire.com/vnhk812ahqpg/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download2001.mediafire.com/r3grorau3ltg/.../CastleMiner_Z_v1.6.3.6_setup.exe

http://download1901.mediafire.com/633vquyc667g/.../Castle Miner Z.exe

http://download1150.mediafire.com/7jjhkt6smmsg/.../Castle Miner Z.exe

Latest 30 of 45 download URLs

Scan castleminer_z_v1.6.3.6_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.