home

benderchat-64x.exe

BenderChat Launcher

MCLab

This is a setup program which is used to install the application. The file has been seen being downloaded from downloader-default10j.disk.yandex.ru and multiple other hosts.
Publisher:
MCLab

Product:
BenderChat Launcher

Description:
Minecraft Launcher

Version:
1.0

MD5:
8bbee7195bed1f85c0c1b15eb6dbd17e

SHA-1:
d104020ee2b85bd70f9b42591660751b703d565b

SHA-256:
d46340fbdbae0d4e87baa88f9e34ddb93d5979a2dde366e1e248b3b926813b2e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 11:52:03 AM UTC  (today)

File size:
2 MB (2,132,214 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2014

Trademarks:
MCLab

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\benderchat-64x.exe

File PE Metadata
Compilation timestamp:
2/21/2014 3:56:30 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:aBABTNqWm2WbTH1PfZpfhguyQhU/6Q+5x7LVa5b:aKq0WbTXWv6Q+34F

Entry address:
0x230E0

Entry point:
48, 83, EC, 38, 48, 89, 5C, 24, 50, 48, 89, 7C, 24, 58, FF, 15, C4, A0, 02, 00, 48, 8B, C8, 33, D2, 41, B8, 94, 00, 00, 00, FF, 15, AB, A0, 02, 00, 48, 8B, D8, 48, 85, C0, 75, 0A, B8, FF, 00, 00, 00, E9, 32, 02, 00, 00, C7, 00, 94, 00, 00, 00, 48, 8B, C8, FF, 15, 82, A0, 02, 00, 85, C0, 75, 1E, FF, 15, 88, A0, 02, 00, 48, 8B, C8, 4C, 8B, C3, 33, D2, FF, 15, 62, A0, 02, 00, B8, FF, 00, 00, 00, E9, 01, 02, 00, 00, 8B, 43, 10, 89, 05, 5B, 32, 04, 00, 8B, 43, 04, 89, 05, 5E, 32, 04, 00, 8B, 43, 08, 89, 05, 59...
 
[+]

Code size:
300.5 KB (307,712 bytes)

The file benderchat-64x.exe has been seen being distributed by the following 2 URLs.

https://downloader-default10j.disk.yandex.ru/rdisk/77a501ef9772e8cf944db9905f31f164/53fddd01/.../x-msdownload&fsize=2132214&hid=d8106ca2b42cafde76af1903ec18ac71&media_type=executable&rtoken=ef39535ae89d0fc34b8f54f0fbcffa09&rtimestamp=53fda4c2&force_default=no

https://downloader.disk.yandex.ru/disk/77a501ef9772e8cf944db9905f31f164/53fddd01/.../x-msdownload&fsize=2132214&hid=d8106ca2b42cafde76af1903ec18ac71&media_type=executable

Scan benderchat-64x.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.