home

minecraft 1.8.9.exe

App

Platform Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application minecraft 1.8.9.exe, “App Setup ” by Platform Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Minecraft but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Software Lite   (signed by Platform Beta (Fried Cookie Ltd))

Product:
App

Description:
App Setup

Version:
4.8.2.3

MD5:
16116fd3c72366739a4f809d3ab11108

SHA-1:
2adc97da2527c93787df3177bc21fe0f95ed79c1

SHA-256:
8f55d8356d605447b8eba4c2a89e3485c6aff1e572d7ac2fb48c65c4da4cd84b

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/15/2024 10:28:08 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.11.14

File size:
980.6 KB (1,004,160 bytes)

Product version:
2.6

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\minecraft 1.8.9.exe

Digital Signature
Signed by:
Platform Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:41:12 PM

Valid to:
7/7/2016 5:55:56 PM

Subject:
CN=Platform Beta (Fried Cookie Ltd), O=Platform Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C446C50C8915C47DFD619121C2806B7E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:9bQCQ5wyt+G3zJpYxe2k2SorL5Bw72HhwX2qIZE4A9:9cr5wyDYx2POM7zIeD9

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file minecraft 1.8.9.exe has been seen being distributed by the following 13 URLs.

http://www.bestappshead.com/c?x=jwMXLC4XE0AdofUlU6Maq1HdwzSAFllzygeXUHhvguo=&c=QtHw/XOOVkY45ZImPjdGYZaiX4hgAUQXQBXbtS oKbxglt/4RzrkqcnNUArhVWqvb4UYZJ2wO83c23mxyoyPBxSpVU53LI7RWs/kQ6Cjud3bgWXH9DXaznqsBPTRXwNo&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe

http://www.quickquickhosthostonctnent.com/c?x=TqqrWnhLygLHMTJyuukISNlNrGtFOeIRYJvNqUFGAmo=&c=Rau4fasrrlMAVyGm1PVS3Q QhSFPFKsbDhQNgfx0mF0IbzseK7XZBfStnOHMyaipz7gpDlXh0FJC11VpLUMG4Q6ZOmqs8L9hETXlF2LVHzYPAV4 MSfue3UlrO5g2 Ji&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe

http://www.quickquickhosthostonctnent.com/c?x=l7Jjc WZ16Llu4aEFsMulugMh6HRbo89aMQkKrkqd1k=&c=p2ZQ1esbShlxfS3kwJf4IJEKAWKapNsWHp5eKLTADdZxcyNsSWySnM/LIIVSQ90CHJG3Ovr51j9GKUFu2ZCsW63qDdX7KEceql/Wxw62CHcYPXeG4YyOo/PR3Mkp2ld &fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe

http://www.megasharetowers.com/c?x=q/0DkDl5P3fLKRN kUGIDisqr6OtdzLncbt6DzdxXzc=&c=jbwv2WF/6RVunvrzKKANKKnZfiyaqg/tR2OHULarGjJWU8XPFmlYHugTR54MhjU/OwKUhY0P9xduQq3sSu7hOU/AV5D0BRL4gHUmerg216/Z5CfFw2EAheXV8G3mFrs8&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe

http://www.bestappshead.com/c?x=OSi3Tfg2weKtwdfRM9Kbc2cRlMA8xOFEsJzBfsEA81I=&c=iwc uz6iQ0Bquun33VSc3U2Q8V QEHYXTGQCCRAL7 qk14Uz/2EjHl3E9mIgQ aRjrqJ0e81oTZg48J6L/IWhFsLWTa/1sZyN9AEliJu7i7ep9tU/ry1MILoD/Cly17q&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe

http://www.quickquickhosthostonctnent.com/c?x=NVSYsrGX3i9/9pd2IDuyIOjgF6kteL1L0o 2tUfZfvI=&c=p6FF64dnJY55ZlbUuLhG6PJe1cjm/YM4uFyAG5KcaFYVfq5XovehLIhGzVS9qTgTCf4vlm/6xCQ50A7eAPgZiQz4cgYWCWHodmojVd2wY7IQdOq4EsNKycdK6znsfUSM&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe

http://www.signingidomain.com/c?x=osaUoD/GuxvfMapf9xHrTKGS5XE5j9loV/y4tPqI E=&c=LYb3wTGDgFD5EC16YlDpmfJNX28dwWNKFBVJ0t/wdVV3TN mB7o/6ULF9iG59WiH7Ekkgx1WlrtbsO2fbOYQqxyp557htLuogj4ghARbGid9TJXS5rCV3XOn9WsfNWsx&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe

http://www.megasharetowers.com/c?x=htxHvtsiQoRoBoy7iOcnjqiPfbQVm6sDMNO4/ObsSus=&c=Rgz9oXpHjxnd/GBSOqniOEeIaledEdkW2wzrsBsnkYxmsp xu61qMEuMM559lO2uEUeoP4pHh5gQ3teJxxGBeT39sjHPqPHSBx00h DPYQY9sLrTgGban2pVdgintfTZeX1TMRANMjyoTVHGQMgBiyWLsh1hAut70527F2BUzY0=&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe;

http://www.quickquickhosthostonctnent.com/c?x=thl2eAfmaK4syqzB/UzJAno64Lu0eAeqQVGbfkAEJuI=&c=UJz9NtkXeP4RWDyd5AuhHWnnl0vfDYm4oxTmazqJBDarq6zHU8N7KRIZ3 caUzV/zOZoY4o2JjGoRksxYfdsY2pJeIImOzv kgWzT8H8d gFyhHFFq/ib/8m7ADM82Cb&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe

http://www.quickquickhosthostonctnent.com/c?x=FJZF R7nOQOdvo ny Wto5D0Bu6xPJ7KKhyMHzBEso=&c=fk9CnY7jlQTCr1QAye/cqlFDw0 3ms3tfu3ZDTTf/ySKHUqZGoltRSrQ8yrifewogGsvowMtWtbWNmK0jt1iG65LlM8FI8fHvqNGba06mPByW3irLZns/ QM81fDQIGW&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe

http://www.megasharetowers.com/c?x=QePVWRVM0QdMMsPwPgNfSf5EYxyvIEBk651VYuxRRfs=&c=eFml0OyFWryx2WTJ7y9cXCzuIRA7Tdd8gt7p6rBjF/aWKPtZ17FlE9lfq/Bm8BtXec5fhaKVE6/Wc9DAw4Is1dDOwRh3OdkNkGscUgW7JO4hae9IxJAO6qIZz2BALgMn&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe

http://www.megasharetowers.com/c?x=YbtABViAw42bTcUB27dEsteqcutFwaYh9tCEh4SAivQ=&c=qBoi0c2qo/RFe6z04 Rmil/E2AxmIpiGAkiAAGQd3J0ALQaRFUew2Owu6I6zoKG1WSjfw2kPaxuNwadgaV VzbQare2U01ejGhq7NyfeqltHMHv/IZDYUYSjUeJbOzOf&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe

http://www.megasharetowers.com/c?x=e4Pt8WebfP4dzhgEyCsUaynzF8dRRVCoowUPX6bBnCo=&c=R7SOG SuUdqUInxhNFAgrlSaQl OpTlzxkZ7rECWlXI5rAIroNznnWQtkORAEiDuWWT1DTmrnrDs6TZB9WnabR/p29CYMFU6cBrDbNTg0vpQ83l dlNGE2rn4BvshqZ/&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Symulacje/.../Minecraft.exe

Remove minecraft 1.8.9.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.