home

minecraft-warez-nejnovější-verze.exe

Product Name

Tangrin Entertainment

The executable minecraft-warez-nejnovější-verze.exe has been detected as malware by 2 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from storage35-free.uloz.to.
Publisher:
Tangrin Entertainment

Product:
Product Name

Description:
Kyno

Version:
00.00.00.00

MD5:
01025b796da807dc54a78f0545a5a423

SHA-1:
3d12da849065cbfc0f8ee54ac12e3cf9284e5524

SHA-256:
a62cfcbb2d6d6bf0a3cd215700acf8298a47d500af3f4a2363874ff9e4675237

Scanner detections:
2 / 68

Status:
Malware

Analysis date:
2/25/2025 2:27:17 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
MSIL/Injector.NIK trojan
6.3

F-Secure
Variant.Razy.87189
5.15.96

File size:
688 KB (704,512 bytes)

Product version:
00.00.00.00

Copyright:
Copyright

Trademarks:
Trademark

Original file name:
KYN.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\minecraft-warez-nejnovější-verze.exe

File PE Metadata
Compilation timestamp:
8/7/2016 3:29:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:bii0zy8zh6o8baUdwLrQSsfCWIM+HC6Q4d+JEUarjpql3bPf4nAKTh2e40RTc3kJ:bL6y8dH8baUdsQZCWIMYQ3MYRbf4AKTX

Entry address:
0xAAC4E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
676 KB (692,224 bytes)

The file minecraft-warez-nejnovější-verze.exe has been seen being distributed by the following URL.

http://storage35-free.uloz.to/Ps;Hs;fid=116801293;cid=1166168358;rid=1639450691;up=0;uip=82.113.62.174;tm=1470592994;ut=f;aff=uloz.to;did=uloz-to;He;ch=3bf59ffd10d0521d91b93b283fe547d5;Pe/.../minecraft-warez-nejnovejsi-verze-exe?bD&c=1166168358&De&redirs=3

Remove minecraft-warez-nejnovější-verze.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.