home

[setup]neocraftsv2.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1034.mediafire.com and multiple other hosts.
MD5:
53542b907ca94870ee3e1942c160a0a7

SHA-1:
d2a8aa5ad263dbe012b9c6af881a2af08b21d86e

SHA-256:
600cb949c240f01ad3d08cf6b506e88e4a90b1a31fe1b449170d3886cbe8c657

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 4:23:18 AM UTC  (today)

File size:
651.2 MB (682,876,369 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\programs\[setup]neocraftsv2.exe

File PE Metadata
Compilation timestamp:
1/15/2016 9:12:05 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12582912:C42pOKFkQVOFpCegyl9DC2Ba+MhKEDeStohc8kOUOEemf5O8UrfUgPa0gPqrL5tA:7+buCevl9DHnMVD1ohrkOnGf5ija/21g

Entry address:
0x119FC

Entry point:
E8, 2D, 64, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Entropy:
7.9988  (probably packed)

Code size:
114 KB (116,736 bytes)

The file [setup]neocraftsv2.exe has been seen being distributed by the following 28 URLs.

http://download1034.mediafire.com/hcac7uhf7tjg/.../[SETUP]NeocraftSV2.exe

http://download1909.mediafire.com/o8m418hekj8g/.../[SETUP]NeocraftSV2.exe

http://download1030.mediafire.com/3d2utm20g7yg/.../[SETUP]NeocraftSV2.exe

http://download1711.mediafire.com/jey16r2vj1tg/.../[SETUP]NeocraftSV2.exe

http://download1754.mediafire.com/yugxalpy83ig/.../[SETUP]NeocraftSV2.exe

http://download1830.mediafire.com/4wcw33ch61pg/.../[SETUP]NeocraftSV2.exe

http://download1053.mediafire.com/1axr59xygveg/.../[SETUP]NeocraftSV2.exe

http://download1118.mediafire.com/rnb94odj7zdg/.../[SETUP]NeocraftSV2.exe

http://download1298.mediafire.com/j9u04pd31o3g/.../[SETUP]NeocraftSV2.exe

http://download1190.mediafire.com/c7bd345znkwg/.../[SETUP]NeocraftSV2.exe

http://download1345.mediafire.com/d4wsq0wdn8yg/.../[SETUP]NeocraftSV2.exe

http://download723.mediafire.com/ffhtddcqsldg/.../[SETUP]NeocraftSV2.exe

http://download1112.mediafire.com/8ggn0il356fg/.../[SETUP]NeocraftSV2.exe

http://download2070.mediafire.com/2w6vxn8l9hdg/.../[SETUP]NeocraftSV2.exe

http://download1765.mediafire.com/8cd52q62c2yg/.../[SETUP]NeocraftSV2.exe

http://download1344.mediafire.com/7fdvssr26vhg/.../[SETUP]NeocraftSV2.exe

http://download1726.mediafire.com/076s10mdmlyg/.../[SETUP]NeocraftSV2.exe

http://download1616.mediafire.com/jo4m0qt8s9dg/.../[SETUP]NeocraftSV2.exe

http://download1370.mediafire.com/7tq9ukdm1xsg/.../[SETUP]NeocraftSV2.exe

http://download1322.mediafire.com/l9hmvebcbujg/.../[SETUP]NeocraftSV2.exe

http://download1817.mediafire.com/seu52vlh55zg/.../[SETUP]NeocraftSV2.exe

http://download723.mediafire.com/97zury6jwwwg/.../[SETUP]NeocraftSV2.exe

http://download1726.mediafire.com/iuexism161bg/.../[SETUP]NeocraftSV2.exe

http://download1765.mediafire.com/5h1cn8zsonmg/.../[SETUP]NeocraftSV2.exe

http://download620.mediafire.com/n9l7wqnhl6kg/.../[SETUP]NeocraftSV2.exe

http://download734.mediafire.com/xnk45b5ilvwg/.../[SETUP]NeocraftSV2.exe

http://download620.mediafire.com/d3e6dq798ppg/.../[SETUP]NeocraftSV2.exe

http://download1322.mediafire.com/tjno43aqt7og/.../[SETUP]NeocraftSV2.exe

Scan [setup]neocraftsv2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.