home

craftofaltis.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1998.mediafire.com and multiple other hosts.
MD5:
e6a438a62aa19caa8b287667bab16e87

SHA-1:
44f2f13d444ce9294a0306e7348463261dc4ce09

SHA-256:
4ec577f2db62e3f5a9a3a578124fdc593d434cd398279a54eb3e9cdf4a8396b4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/12/2025 5:15:34 AM UTC  (today)

File size:
1.2 MB (1,298,169 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\skype\my skype received files\craftofaltis.exe

File PE Metadata
Compilation timestamp:
11/2/2015 5:52:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.22

CTPH (ssdeep):
24576:ZYfWNeuxVpyxywi8cpwDbzT/RCx3CgqO8dkGt5Hw4/8PxyYCP:4WN/x22utCxhqOQkGt+4/8P9CP

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 90, 22, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, C8, 22, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, B4, 22, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, FF, 57, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 97, 0D, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Packer / compiler:
MingWin32

Code size:
23.5 KB (24,064 bytes)

The file craftofaltis.exe has been seen being distributed by the following 30 URLs.

http://download1998.mediafire.com/2lmj6t5j2ncg/.../CraftOfAltis.exe

http://download1622.mediafire.com/wzs5i45vixng/.../CraftOfAltis.exe

http://download1998.mediafire.com/lof0luj8q9xg/.../CraftOfAltis.exe

http://download1998.mediafire.com/riji6y3gfzxg/.../CraftOfAltis.exe

http://download1622.mediafire.com/zbz3ta2z2v0g/.../CraftOfAltis.exe

http://download1622.mediafire.com/ci0jgl85rszg/.../CraftOfAltis.exe

http://download1622.mediafire.com/a37k5bsr3vkg/.../CraftOfAltis.exe

http://download1622.mediafire.com/s9f92h0jnwbg/.../CraftOfAltis.exe

http://download1157.mediafire.com/l3t2mtw676lg/.../CraftOfAltis.exe

http://download1407.mediafire.com/hwzf45xu39jg/.../CraftOfAltis.exe

http://download1622.mediafire.com/4b7b82vs2b7g/.../CraftOfAltis.exe

http://download1622.mediafire.com/py45v961t8gg/.../CraftOfAltis.exe

http://download1479.mediafire.com/wtkmbiil4reg/.../CraftOfAltis.exe

http://download1479.mediafire.com/n24o28wrgdwg/.../CraftOfAltis.exe

http://download1157.mediafire.com/maqpz9450o6g/.../CraftOfAltis.exe

http://download1479.mediafire.com/66bacsu0jxmg/.../CraftOfAltis.exe

http://download1286.mediafire.com/xd2ptziyt1og/.../CraftOfAltis.exe

http://download1157.mediafire.com/16wq6tjftgxg/.../CraftOfAltis.exe

http://download1479.mediafire.com/fruk9lmltcmg/.../CraftOfAltis.exe

http://download1157.mediafire.com/x645wn4x76ng/.../CraftOfAltis.exe

http://download1157.mediafire.com/sv342otb8rag/.../CraftOfAltis.exe

http://download1479.mediafire.com/i43r4uaszhng/.../CraftOfAltis.exe

http://download1157.mediafire.com/02n1xd5kixug/.../CraftOfAltis.exe

http://download1157.mediafire.com/m3zlalh76e2g/.../CraftOfAltis.exe

http://download1157.mediafire.com/8re4a1hu0i9g/.../CraftOfAltis.exe

http://download1286.mediafire.com/1z9w53n247gg/.../CraftOfAltis.exe

http://download1479.mediafire.com/utj99umml9qg/.../CraftOfAltis.exe

http://download1479.mediafire.com/vedto4ojt1og/.../CraftOfAltis.exe

http://download1479.mediafire.com/n22ls8v8j9zg/.../CraftOfAltis.exe

http://download1479.mediafire.com/wxwo8210x5lg/.../CraftOfAltis.exe

Latest 30 of 30 download URLs

Scan craftofaltis.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.