home

ncse_nueva_concordancia_strong_exhaustiva_20120215.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1200.mediafire.com and multiple other hosts.
MD5:
d8e9abd38228545b325364450600c78e

SHA-1:
89b7ceccc5c2936b530a8dff97ebf86f5881a95e

SHA-256:
a86da3175e5c83943fa0d9494197daa9780764f7e676d6d14310c16fea9f6181

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/27/2024 5:34:37 PM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/Malware.QVM06.Gen
1.0.0.1015

Trend Micro House Call
Suspicious_GEN.F47V0302
7.2.94

File size:
5.1 MB (5,315,669 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\minhabox\e-sword - pacotão de módulos (margareth.alberico)\e-sword - pacotão de módulos\ncse_nueva_concordancia_strong_exhaustiva_20120215.exe

File PE Metadata
Compilation timestamp:
9/16/2008 11:17:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:HGy12VbEfI8eoANw6eEBPX5R+dgFEaY56Yl6fkSgUbBi00KAAN8:X1aozvAWnCPXqdgbY56Yl6f3Xga8

Entry address:
0x1000

Entry point:
E8, 6F, 2B, 00, 00, 50, E8, 73, 36, 01, 00, 00, 00, 00, 00, 90, 55, 8B, EC, 53, 56, 57, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, D3, FF, 75, 14, 68, E5, 50, 41, 00, 6A, 00, 6A, 00, 8B, C6, 8B, CF, E8, 7A, 48, 00, 00, 81, EB, 10, 01, 00, 00, 74, 05, 4B, 74, 14, EB, 57, FF, 75, 14, 6A, 66, 56, E8, DE, 38, 01, 00, B8, 01, 00, 00, 00, EB, 47, 66, 81, E7, FF, FF, 66, FF, CF, 74, 07, 66, FF, CF, 74, 23, EB, 30, 68, 80, 00, 00, 00, 68, AC, 69, 41, 00, 6A, 65, 56, E8, 24, 38, 01, 00, 6A, 01, 56, E8, FE, 37, 01, 00...
 
[+]

Code size:
80 KB (81,920 bytes)

The file ncse_nueva_concordancia_strong_exhaustiva_20120215.exe has been discovered within the following program.

e-Sword  by Rick Meyers
e-Sword is a Bible study computer software package created by Rick Meyers and developed for Microsoft Windows. The user interface is available in twenty seven different languages. Resources are available in over eighty languages.
www.e-sword.net
6% remove it
 
Powered by Should I Remove It?

The file ncse_nueva_concordancia_strong_exhaustiva_20120215.exe has been seen being distributed by the following 13 URLs.

http://download1200.mediafire.com/x0hd0bcsen9g/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

http://download2084.mediafire.com/s9r5f96urt6g/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

http://download1200.mediafire.com/g9mofl0pw8zg/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

http://download2128.mediafire.com/cs273o3lxspg/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

http://download2128.mediafire.com/ksqtecbn2l1g/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

http://download1200.mediafire.com/4qb2ixt4f84g/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

http://download1200.mediafire.com/jrik1aehezrg/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

http://download1441.mediafire.com/zp7joa5e9fzg/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

http://esword.iglesiaunion.net/diccionarios/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

http://download1441.mediafire.com/4mfkdz9ntavg/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

http://download677.mediafire.com/ufrdqbfpcphg/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

http://download1281.mediafire.com/qhc4zbdgqgig/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

http://download1696.mediafire.com/mrmkmsq775fg/.../NCSE_Nueva_Concordancia_Strong_Exhaustiva_20120215.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.