home

Necro MP v1.9 Installer.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from fs07n2.sendspace.com and multiple other hosts.
Version:
0.0.0.0

MD5:
243b38ee0c9d49d6cfe0a07d053b5e08

SHA-1:
220cd4cc6393cd1d1f017fb53b0369d19c349d9d

SHA-256:
09271c7c919f59c6f0d043a885dc814e1544b1ce52c6c021a52c8cbbacc4fbeb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/9/2024 5:39:21 AM UTC  (today)

File size:
2.9 MB (3,024,384 bytes)

Product version:
0.0.0.0

Original file name:
Necro MP v1.9 Installer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\necro mp v1.9 installer.exe

File PE Metadata
Compilation timestamp:
9/19/2013 10:23:09 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:vW9wbLenOctruCxKZDYnsPM6IaF3IPBV8rX5n+QDwupBkLm4gSUrIm6N0kH1:vCbbvjnsPYaprXtnDw0k6ZSUrImil1

Entry address:
0x2E3A9E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9998

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.9 MB (3,021,824 bytes)

The file Necro MP v1.9 Installer.exe has been seen being distributed by the following 3 URLs.

https://fs07n2.sendspace.com/dl/860f894ad92d672910a0fe7817ae0b7c/57407c953e77aae0/.../Necro MP v1.9 Installer.exe

https://fs07n1.sendspace.com/dl/adaa836ee176d91eab44ec8e71d09a17/574f93a14c72174e/.../Necro MP v1.9 Installer.exe

https://fs07n5.sendspace.com/dl/2980b2541347ddf7fb9e99a7300c93bc/5407a6eb7ac06c41/.../Necro MP v1.9 Installer.exe

Scan Necro MP v1.9 Installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.