» Neuz.exe
Overview
Analysis
File Details
Programs (1)

Neuz.exe

Masquerade

Gala Lab Corp.

File name:

Neuz.exe

Publisher:

Aeonsoft (signed by Gala Lab Corp.)

Product:

Masquerade

Description:

Neuz

Version:

3, 8, 22, 1

MD5:

7fa354d7c03ffc7c56f27bdd1e6940b1

SHA-1:

2d4d614afa364e9eaac7056424095368ac1125de

SHA-256:

e97f94d4ea559f5383b3dce67919a011fc96b18de65403f6ede23f6415bac5b5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 6:41:46 AM UTC (today)

File size:

2 MB (2,078,272 bytes)

Product version:

1, 0, 0, 1

Original file name:

Neuz.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\gpotato\flyff\neuz.exe

Digital Signature

Signed by:

Gala Lab Corp.

Authority:

Thawte, Inc.

Valid from:

8/22/2012 8:00:00 PM

Valid to:

8/23/2014 7:59:59 PM

Subject:

CN=Gala Lab Corp., OU=Tech Support Headquarters, O=Gala Lab Corp., L=Gangnam-gu, S=Seoul, C=KR

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

0DF9EE3CFBC6D8DEE0777F9263CE06DF

File PE Metadata

Compilation timestamp:

4/4/2013 10:45:35 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:77awFip52DHn2Bv4+q+oSXG37ZINIe8JzV7rsrzg6:77lsnaH2BTXG3FgP8RlorzL

Entry address:

0x1000

Entry point:

68, 01, 20, B3, 00, E8, 01, 00, 00, 00, C3, C3, 91, 8F, CD, 5D, B2, 0C, F7, CD, EF, 39, 4D, F9, 87, B2, B5, 4E, 7D, 9E, AA, F3, DE, B0, 05, 9B, 30, 94, FF, 04, 2E, 39, 96, BF, 1E, E0, A7, 98, 2B, C4, 7F, 15, F2, CB, E2, 6C, 4A, 3D, BF, AF, 70, FF, 40, 5D, 93, 15, 94, D0, A9, 9F, 3E, 2E, 76, F1, 22, 2D, 8F, 2B, A5, 43, 9B, 14, 91, D4, DC, D1, C7, EC, ED, 50, 80, 7C, EA, 25, C4, D4, DC, F1, 1D, 0A, 3C, FD, A9, 95, A7, 27, 17, 75, 7D, BC, 5D, 02, AE, 61, 5B, DB, 9A, 4B, DE, 90, F7, 17, 5C, 8A, FF, FC, E6, BB... 
[+]

Entropy:

7.9468

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

4.1 MB (4,317,184 bytes)

The file Neuz.exe has been discovered within the following program.

Flyff by GALA-NET

flyff.gpotato.com

About 7% of users remove it

Scan Neuz.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.