home

neverball-1.5.4-setup.exe

The program is a setup application that uses the Nullsoft Install System installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
89e52d7b462f19a229674a3eb4c28292

SHA-1:
022019f8d0277c78c0509b2270220e324a796b48

SHA-256:
e254ac103b5af27b4731bbccb922593ceca81625f0e1b4f7b8f8c5ee341c7c21

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:30:27 AM UTC  (today)

File size:
35.8 MB (37,547,968 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

Common path:
C:\users\{user}\downloads\neverball-1.5.4-setup.exe

File PE Metadata
Compilation timestamp:
8/19/2009 12:25:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
786432:uwLhBQ+P/lbkVvWT2lz9npuMgcJ3NCoauxbgpksgncMicgDmbHEhrOsvPZ+OK:uwL7AVOilhnpX7N/b524cly6vh+OK

Entry address:
0x4044

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, AC, 01, 00, 00, E8, 1B, 57, 00, 00, C7, 04, 24, 01, 80, 00, 00, E8, 7F, 50, 00, 00, 56, C7, 04, 24, 00, 00, 00, 00, E8, 52, 57, 00, 00, A3, 88, 5C, 42, 00, 53, C7, 04, 24, 08, 00, 00, 00, E8, 26, 32, 00, 00, A3, 38, 5D, 42, 00, 8D, 85, 84, FE, FF, FF, 51, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, A4, B2, 40, 00, E8, EC, 55, 00, 00, 83, EC, 14, C7, 44, 24, 04, A5, B2, 40, 00, C7, 04, 24, 68, 5D...
 
[+]

Code size:
34.5 KB (35,328 bytes)

The file neverball-1.5.4-setup.exe has been seen being distributed by the following 23 URLs.

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_en&type=PROGRAM&Expires=1484100505&Signature=a73OvoN1Zmj5j0PSAwzmvcrxNoKg~JFqpco5oVGuG7MRN-iYFZ0CHZva~BLce11SXBcmi0G3Om2lD5NSdb6sOhkXjo~sNnWRpuOqoScM54U0OrltLp3MRlu26d8~My~9DFm30plRH~KYzWJaKZWikcOBkxDdUmrO5orHGQP8UZU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

https://neverputt.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtAJKug4ApNfQLscYPFtCg 8 01mUIxRaDavqmSwSp0IMlJ/.../N44HZg2HYhok cLEvPrPXjeg4 TBDTg5T6uQ0wfydUTccXfVvRIoM5s=

http://www.indiedb.com/downloads/mirror/36681/107/88d3ef13348e6920f53b64a7ebdfdd21/?referer=https://.../

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_es&type=PROGRAM&Expires=1475894197&Signature=ExUBmR5MkmNCOwNCjOOLcn6i7eh1JqdycJZJPwgXuhbHpoZI-mwSi-2~~YPIuH2FRBcJ1GOfMi7DtBc2tA28HvlkClCQUMf~VHQHh26qib~kPz54nzufcGNpbziM8-a8dXVKol8hFPkWoTpZgEX3g41G2x36NF4NcxM9BLlYN4o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_en&type=PROGRAM&Expires=1481930878&Signature=cRB8DbGh~HwXRL~HjBlLXHLWOHePG4aUMDy3h6VLOHvb5-AXaBV7PLReAXIthOb8fMI3ZqmJqpe7UjyZkrRB2J7nYGrKCckOp0q3~QTRkcmOHs6ILSZc03-3PrnoiPBoFfYRiqTTIvjYZSFEW0~Qys~MJtS6ezKSL4GlBDtMw2U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://www.indiedb.com/downloads/mirror/36681/109/b849bd16856d1fd20b894e1d95132528/?referer=http://.../url?sa=t&rct=j&q=&source=imgres&cd=1&ved=0ahUKEwiJp5qx1ZLQAhXBuxQKHUUMAr0Q5BMICTAA&url=http://www.indiedb.com/games/neverball/downloads/neverball-154-windows&usg=AFQjCNHnE2Ar-Tyq1Mgo4tqEA4bIbDGVtA

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_en&type=PROGRAM&Expires=1460342678&Signature=BS3DdYZirbfPUbpD2MqK-W85E530Ey0xnf7lYOOQXAO8cKogskqEvcWmT2VY-FyWkXjmCytjQiuh5DMnVXToXRsJm4CNZZ54YmqYU3V10IbHCP-5lut~-1ca0seXwK0LXZjMgY84yGlvx7hY8dcMXv9~HRIoEgq-p1Gfr~UYTWc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_en&type=PROGRAM&Expires=1478822668&Signature=FeekWjAEeCRt72-Y706OW~J~ZfxI~yCbyUF2Obm1kvH7ZAw~yqh1oEPGJGxCuMCPm7R0EdF-KG8jw0Janua2C8zIRrkeQOF6Uq58ayxBOCxQsQcUUpUbGJpCnC3jq5TQy-BM6fhoOiLgRq4PpX8LPmVW~gZdLBft-aSYttHzfDk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_en&type=PROGRAM&Expires=1480579880&Signature=TofQ10GJVXjeqwVi~MsFe60emK6vyXRfjq0li3oJjJuo1ZKjOKKzkZUQboY69OyXX2BkQXHzFICPVOe17ZiOfYuRW9QtyCEq5IBgwxVpDpHKZFRWXObrzoM3G~WCaGPW0hMbC1Rzbt80uo0u2nBPN-ajlkrAHTZdF8oApX3c0kk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_es&type=PROGRAM&Expires=1475987331&Signature=UbBpGudxdbBLRSIhLVK7aTlbN3mj2fAeJ0f87yO4DhTCMI0U5D3rzB6a-tdhVAvsxnT~nAzUkjLDDKDjonYVNbxhX~qSCvUtjAnC-LpiWwe6E4Jxc3KpKsALLc8MPM~UsdEm-6vHl-sWIAxTnc3M4MRvgH12O3pTZ4aqZf3aHQI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_en&type=PROGRAM&Expires=1478242396&Signature=QLS2D2~SBr-0O~ZwZcUgLjk7xmi4ecTO4TLOfateCY1gu30~DlUlcx5I9SZ9g-pRb7PHxuAY0cSRPLecJeXaF0u4aZiX5qzWuR5UEHT1gEGzYXno9i8IwCEUvQa20q8KnFU2XzAcwPJ-mLUHMRJLYa~fZMA0Bah6MsIQezXwRDU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_en&type=PROGRAM&Expires=1449806684&Signature=DQNsf2UPziXLzI8YlJahVTUSx7jr8QmT7SOH7Rekd~jL-J7ZbUJZO3jb7v4f4o49MKvy0omh6kTkEhj1GUXot7MxKBNR8SgsLqRMRj0Fpr~UKky4NFd93Q-5wvTQxULJeCGHpHYRIoWWXDaN3GiLCfOsNvGCrxSgLwrLlRwzBZY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_en&type=PROGRAM&Expires=1468114413&Signature=Z2oFhs35eXUX0Tlbyv9sXWRKATWdUYO974TnHWP6X-06cpXclC~3rxncxxV0iBs1HdLjVZVMxkm0sHKV1S1zmCeoKrhJ9NNifNb1V~1np19ppvnSYwfF~VZuNwiBZcgxVxKnM~C3AtHhIaZU-7jF2etTrEjL064QxHGHwlBU-tQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_es&type=PROGRAM&Expires=1467717472&Signature=B1ulvqzYIbet4Di87ceitdwGFRYjo5Fwy7S121L03AXVWR1JGcm6z5kFM0zwqxT1o0t2xvRHP6W0q5UMF7FnlCAyl4kJ2JKC4~uAkCNhX2QMrD6m~IObw5QGcKySu3zAvTIX2YnS9kkkc2EdpH18V3VdQ34434sp45SoMtORIzs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=80276&instance=softonic_en&type=PROGRAM&Expires=1462092401&Signature=U4shXSHC6K6zqW5BQDUD78aIrDn0Ii4atw0NpeHpdwWVdaoSM-6790y3jrFAJuOKi~EA-cBV7mzEe8mQkEEcRALRReL5xiTa0eR0LC-9uKHahyPbkVJdhYiifG75Cm6r89G3p6oKKqtsWkfOQWgDSVzPZ9d-utnR0m6tyY-fPhI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_en&type=PROGRAM&Expires=1454119285&Signature=ijnEKOS9f6x4gI3Wawry6zqw3ATZlA45ery~bihooZfruWM5bhznv00iyh8NoViWK7xZQNlvaOXXCQknuzj~qxC9EoOVt5C32-hiEhu57G5j-dvV2BEvnTN2utbXncN3wxCVfmnNP1rtyE9GrU1ViWyFq-gzn-7By6busxGTDj8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_en&type=PROGRAM&Expires=1436180449&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=afgBNQ4lzUMcY~rv0wJuj4sMNJhrWW7Sb5LZQb5QBHdrQSJc9FySPKYlof~WiGI2mge5iYDoSUBQqiJZyEOEaKO-58qWzFMuDhCBuanLCB7quhV5MruQ6e0ka~XA34P~T9fJZ~nhxCG7kNSd2DUN9Q4m2dnDlzqIxbM-KYZrUtY_&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_en&type=PROGRAM&Expires=1457406869&Signature=VOrLg~j2XxEFTFY~-H1GEP0CERPkQIcV15l5Xgi9eqb2NT6xwWzuch0YYLyEo9y4WkcCFafisGgyns5G929qMk9Jq7Ehrvb4-S5qKXv3avDrOWga0jM75doqpaqeRSDrtoqqYGENICdGSaD6WASOEgyOcZ4I3C-3PvezSLuk77k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_es&type=PROGRAM&Expires=1456079317&Signature=WhNVN~NZvK7hxjMywK4QNZxObZ3V25PcDQLWuOg7I9Vl6muVjXrispE5QPuH2qT48~U5Cb6-8F80IixUwJQfXyN~7t5oYloLhbsLyKZaDQjYJIAzpZRGdxj2C7J6-MdZcftK3xfD~TY5awyIpVnCkSEhzckODU6AKCJCu6RqB0o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://gsf-cf.softonic.com/022/019/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30112&instance=softonic_en&type=PROGRAM&Expires=1455499645&Signature=Mv~DscUtU4O2NzrBeK7VjGAesuu13zrsrSl5QLuR914JSOM~vM6wfqVZG-M7CRmfra3YyXbFZc-VhQZSPgTUdjT4gdj8pVFC6NPdgHV9QmBViKa5LsSvh5OAb0el4Axwz-SN21eXd-Rj~nI7hjQYVE6IZZ0Rt6JlHp11UQp9YgE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=neverball-1.5.4-setup.exe

http://caffeinatedcontent.com/neverball/files/.../neverball-1.5.4-setup.exe

http://icculus.org/.../neverball-1.5.4-setup.exe

http://neverball.org/neverball-1.5.4-setup.exe

Scan neverball-1.5.4-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.