home

neomc.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s6115.chomikuj.pl and multiple other hosts.
MD5:
77120b7c8fe0983b6e84b9a19649b39a

SHA-1:
a51ad60a7637370796f099493a6bc4242de578e4

SHA-256:
475b60033281d7576a39a41dfd2761c185b4cdd69edd54a14589596fe51efae5

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/26/2024 6:11:55 PM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
HKTL_GAMEHACK
7.2.221

Trend Micro
HKTL_GAMEHACK
10.465.09

File size:
9.5 KB (9,728 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
3/24/2011 3:40:30 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
192:cn2FHSUMI2PcZvx+/yVNKWhvJJ98qg7x:cn2MPuwqVrvh

Entry address:
0x1756

Entry point:
E8, 7D, 04, 00, 00, E9, 9F, FD, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 50, 31, 40, 00, 89, 0D, 4C, 31, 40, 00, 89, 15, 48, 31, 40, 00, 89, 1D, 44, 31, 40, 00, 89, 35, 40, 31, 40, 00, 89, 3D, 3C, 31, 40, 00, 66, 8C, 15, 68, 31, 40, 00, 66, 8C, 0D, 5C, 31, 40, 00, 66, 8C, 1D, 38, 31, 40, 00, 66, 8C, 05, 34, 31, 40, 00, 66, 8C, 25, 30, 31, 40, 00, 66, 8C, 2D, 2C, 31, 40, 00, 9C, 8F, 05, 60, 31, 40, 00, 8B, 45, 00, A3, 54, 31, 40, 00, 8B, 45, 04, A3, 58, 31, 40, 00, 8D, 45, 08, A3, 64, 31, 40...
 
[+]

Code size:
3.5 KB (3,584 bytes)

The file neomc.exe has been discovered within the following programs.

Tibia  by CipSoft GmbH
www.cipsoft.com
About 2% of users remove it
 
Powered by Should I Remove It?

The file neomc.exe has been seen being distributed by the following 23 URLs.

http://s6115.chomikuj.pl/File.aspx?e=VPoMpohg75CPW1rw1jRN1cJuI9pVx85qromDgHj83tD0mxOGVgi4IDjsb4l0lKJl8IsGe7Wx5kq4q2Ga1U_x36mSLC24p3A43KNQ970ITTa0TwV-3fYqcu3N-ISUVDOku7q43th9OANTrsrReEvOPQ&pv=2

http://www.fyx.cl/NeoMC.exe

http://download2100.mediafire.com/bgzelbck2cag/.../Neo MC.exe

http://neo-mc.com/neomc.exe

https://mega.nz/temporary/.../wkYC0b7Z

http://www.speedyshare.com/Gw46M/88811a1c/.../NeoMc.exe

http://downloads.sourceforge.net/project/.../NeoMc.exe

http://scripts.blakw.com/downloads/.../NeoMc.exe

http://download1325.mediafire.com/v7stq9msr42g/.../Neo MC.exe

http://shanera-global.net/NeoMc.exe

http://www.speedyshare.com/D5PJu/6a6ac73b/.../NeoMc.exe

https://mega.co.nz/temporary/.../2lxiCLzT

http://down2.baixe.net/3/.../neomc.exe

http://tibiawar.com.br/.../TibiaMC.exe

http://dc771.4shared.com/download/.../neomc.exe

http://www.tibiamulticlient.org/.../NeoMC.exe

http://dc253.4shared.com/download/.../NeoMc.exe

http://www.tibiamulticlient.org/neomc.exe

http://www.speedyshare.com/8RPxs/43964c18/.../NeoMc.exe

https://mega.nz/temporary/.../2AsylSDZ

https://mega.nz/temporary/.../2lxiCLzT

http://down1.net/files/.../neomc.exe

https://dl.dropboxusercontent.com/u/.../NeoMc.exe

Scan neomc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.