home

keinett launcher.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from lcs.sourcesdaure.clg14.ac-caen.fr and multiple other hosts.
MD5:
a1c3395c290fb57974829b6a09a1790e

SHA-1:
da4cdce0e0cb6a089a326a49c5627dbd08d698e0

SHA-256:
92d078637237aae545f12afec256d7856e702a1c7dae381c9b3efdb4700ad501

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/5/2024 8:18:00 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V1213
7.2.12

File size:
1.1 MB (1,106,756 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\keinett launcher\windows\keinett launcher.exe

File PE Metadata
Compilation timestamp:
12/12/2013 2:45:04 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.22

CTPH (ssdeep):
24576:VEgQF3W7o9B+lWKSx0ExCumGlhbNJyv8bQzTs1YtePk:V2F3rB4WKSx0EoTGlhHxQfn

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 8C, 02, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, C4, 02, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, B0, 02, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, 3F, 3A, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 07, 0B, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Packer / compiler:
MingWin32

Code size:
16 KB (16,384 bytes)

The file keinett launcher.exe has been discovered within the following program.

Minecraft  by MINECRAFTinstall.net
Publisher's description - “Minecraft is a game about breaking and placing blocks. At first, people built structures to protect against nocturnal monsters, but as the game grew players worked together to create wonderful, imaginative things. ”
minecraftinstall.net
26% remove it
 
Powered by Should I Remove It?

The file keinett launcher.exe has been seen being distributed by the following 50 URLs.

http://lcs.sourcesdaure.clg14.ac-caen.fr/smbwebclient/smbwebclient.php?path=home/.../KeiNett Launcher.exe

https://mega.co.nz/temporary/.../Y4AECTDa

http://zalacznik.wp.pl/0/.../KeiNett Launcher.exe

https://mega.nz/temporary/.../5sISGJQK

http://download901.mediafire.com/4sxqdjswj7ig/.../Minecraft Launcher.exe

http://download1611.mediafire.com/lof71faifavg/.../Minecraft Launcher.exe

https://docs.google.com/uc?id=0B4V6XZp6pmVydlkyam5oU0p0NjA&export=download

https://mega.nz/temporary/.../7MRWHB4B

https://mega.nz/temporary/.../9QcW3TLK

http://dc655.4shared.com/download/.../Mine_Craft__1_.exe

https://zqahua.bn1304.livefilestore.com/.../KeiNett Launcher.exe

https://doc-0k-88-docs.googleusercontent.com/docs/securesc/7iqgco7a40altcs4nvt5lf9g13ut7m62/jmpetlu17etibde5poru0d8aoc9hlrlm/1467475200000/.../05491493828984087747/0B-SNW9hWNap7RFh4bV9ETll1U00?e=download

http://f2h.nana10.co.il/.../r1gvslkg6y9m|169ea9fcdfbe0d63819d55eddfc0ecbd|.exe

http://cdnfiles.4shared.com/web/cdn/popular/download/saUpgO-c?contDisp=attachment; filename="KeiNett Launcher 1.7.4.exe"; filename*=utf-8''KeiNett Launcher 1.7.4.exe&contType=APPLICATION/.../

https://mega.nz/temporary/.../sUhX1KyS

https://doc-0k-as-docs.googleusercontent.com/docs/securesc/vr9vv2pfrak2tqaf8em5o2q81vsurujj/ajik48iopmj6a5pm12car228i0skf64i/1472169600000/05117874548460750883/.../0BwPUpkjtPiR9Zmdhc2lwREhtMTQ?e=download

http://s6511.chomikuj.pl/File.aspx?e=PdXrqOzgJtA3MKh1oEGIfMFoypeKomTIRMjMRKwOQ1uoS_GA0HYgJ-cgFSwUID8NL8Thn5MwR0DGonvVkrSUu7TUfnFs992BJdQr1N3HucdIMNL3u-bbhxZcRblDLbRIVdBezvAW7I-VBj1YkbjJxQ&pv=2

http://dc700.4shared.com/download/.../KeiNett_Launcher.exe

http://download1176.mediafire.com/z976ov8dmvqg/.../KeiNett Launcher.exe

https://doc-08-2o-docs.googleusercontent.com/docs/securesc/pcfmjhki8pjvovp43ac4krj87outee1k/g20du392ldfrbr7nn59t2e57bsngqdk3/1479456000000/.../01695155665150472539/0B2Y9De8llESCZkxmaG1uLU1USEU?h=11921088671183455197&e=download

http://f2h.nana10.co.il/.../r1gvslkg6y9m|41dceee1ee26d3b6fe17a1c165858107|.exe

https://docs.google.com/uc?authuser=0&id=0B0pE_xNJcjQmeW8xcTU4VGV4bVk&export=download

http://f2h.nana10.co.il/.../r1gvslkg6y9m|9db5be9a579b0efeb32b3c94703957fa|.exe

https://docs.google.com/a/.../uc?authuser=0&id=0B4V6XZp6pmVydE8yNldsc3Q1cFk&export=download

https://mega.nz/persistent/.../Y0R00JZJ

http://www.raidcall.com.tw/direct.php?url=http://minecraftspring04.weebly.com/uploads/2/2/9/2/22929724/keinett_launcher.exe&uid=6728001&param=lNfH/.../4j4vwMmCufVSySkaM1a6WTAmfwB2Y51yNYSaKoILG4Ka26QwcTkTmPIRMDm8=

https://mega.nz/temporary/.../UwdkERSD

http://download2011.mediafire.com/4rkb5g2f45jg/.../Minecraft Launcher.exe

http://f2h.nana10.co.il/.../r1gvslkg6y9m|16505dfb5d34e750d1986fb11bc49961|.exe

http://www.speedyshare.com/WtqE6/bc8021ad/.../KeiNett-Launcher.exe

Latest 30 of 214 download URLs

Scan keinett launcher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.