home

craft 1.8.1.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download15.mediafire.com.
MD5:
68c8a5dcc73b1c8307f849e93e408478

SHA-1:
c6db2e00e4c382917232c04b08000cca4d6cbee5

SHA-256:
93ce1e405e981e3b46f7e1e6edc6d2b1c72739614cf8425e9b33d05054a9b2ae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 6:48:07 AM UTC  (today)

File size:
4.3 MB (4,477,820 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\craft 1.8.1.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:33w87Ks1kVhDo0+UPSTyFsO9MuURfMhkfHPZUA6w+pkVRO2YRsWLVBWRLxopfezG:3A8aDDYOwREhLICsWxB6LwezDd4BhHX

Entry point:
52, 61, 72, 21, 1A, 07, 00, CF, 90, 73, 00, 00, 0D, 00, 00, 00, 00, 00, 00, 00, 46, F3, 74, C4, 84, 41, 00, B0, 1A, 03, 00, F9, 79, 03, 00, 02, B2, 2D, D6, B0, AA, 95, 30, 3F, 1D, 33, 19, 00, 20, 00, 00, 00, 2E, 6D, 69, 6E, 65, 63, 72, 61, 66, 74, 5C, 62, 69, 6E, 5C, 6A, 69, 6E, 70, 75, 74, 2E, 6A, 61, 72, 45, D9, DE, 1F, 94, 2D, E0, 70, 8C, E8, 72, 99, 40, FB, E9, E8, 38, E4, 6C, 01, A7, 0A, 91, 56, 29, 02, 03, 0E, 51, B4, 8D, 44, 60, A0, A8, B8, 00, 31, EF, DA, 20, DA, 20, 16, 3F, 77, 69, A1, 4D, F0, 88...
 
[+]

The file craft 1.8.1.exe has been seen being distributed by the following URL.

http://download15.mediafire.com/ynpc3crwcrwg/.../Craft 1.8.1.exe

Scan craft 1.8.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.