home

minecraft.exe

MD5:
d14ba7be37e9a859c35027fbc48156e3

SHA-1:
7c8edcd841e8be4cfc1c03277e70e44e563d7d10

SHA-256:
ff7335a7afc9c65a24e53fc4f0d8b16bc0323fbb31f556d4318e2a720c0388f4

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 12:25:28 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Kazy!6.86F
23.00.65.14128

File size:
227.1 KB (232,501 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\minecraftalpha\minecraft.exe

File PE Metadata
Compilation timestamp:
9/20/2010 5:02:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
1536:dGtgHEjS2MkDvXR/TMZtQkZpcHHHkLL/LL/LL/LLkNHRv879NHpovcfNwV7cNHzt:ALjSeDvhoZK4mpYpccpWIzMjNCxpdl

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 9C, 12, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, DC, 12, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, C4, 12, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, B7, 3F, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 07, 0B, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Entropy:
6.3334

Packer / compiler:
MingWin32

Code size:
18 KB (18,432 bytes)

The file minecraft.exe has been seen being distributed by the following 16 URLs.

http://s6753.chomikuj.pl/File.aspx?e=ge6IAVkxVUnWmp1_nvy2USBURbSmB6L72qszP7-CrIcQSsWxeqAv3T_pGam9wN0ry5WH6IBhtcB3rxY5UpEDFmZj-NEHEQnduny8rGrhTpVaYpVCIHtQqumpFKbN3pElv8u5ze2Vql7Ob3h0jOpp5g&pv=2

http://s6753.chomikuj.pl/File.aspx?e=ge6IAVkxVUnWmp1_nvy2UevRwk5lfqAYfCZHZHyQVN35c_9vILKuHZ5bY6pWAUZfz95HIQFrMGPxsBwTlEzKbTUJIo--aFyFwNrXI72041mwRsMb4CxVRMzfiRmz_3zWiOTXm3n33AOOL9PTVkYWig&pv=2

http://s6753.chomikuj.pl/File.aspx?e=ge6IAVkxVUnWmp1_nvy2USBURbSmB6L72qszP7-CrIfYriPXDeT4KQqj1eVaED3jqqFuO_31SRDDFHlnXwH4FYZlsIUgm3u0Wd5Tr0ptDyPxVNQTg-FeuSVpbQ_NXcd7r67ryLxEkB3G-zaZvto_Zg&pv=2

http://s6753.chomikuj.pl/File.aspx?e=ge6IAVkxVUnWmp1_nvy2UevRwk5lfqAYfCZHZHyQVN1t9olnMmTHgrnucFfixe9OX9wsx4iuJK8kV5u1_YtIi2rZ8F3u8wyY_xF8gCrcOrliSMdI8NVrRLS6Ht-Q2t2EVEBwvMuGstwbC-3jM0YTUg&pv=2

http://serv7.f2h.co.il/.../3786786640994|d1e70c3843d6233ce262813151a0a7c6|.exe

http://s6753.chomikuj.pl/File.aspx?e=ge6IAVkxVUnWmp1_nvy2USBURbSmB6L72qszP7-CrIdDz7ptKepr2rjpM0G0suaZTRVegvsb3Obzf1RcraJL0DYr0VMRzGe2sAEt3V10GaPvMM9KRjxi6XGSwEfbbi6I2zXK-z-hU3IhK639jDGqVQ&pv=2

http://f2h.nana10.co.il/.../3786786640994|127a18c9432c9693b78a306bbb889924|.exe

http://s6753.chomikuj.pl/File.aspx?e=ge6IAVkxVUnWmp1_nvy2UevRwk5lfqAYfCZHZHyQVN0LzFqOSgkW5JkeeAGCa0-Xc-nY0RbHWfbOnMfi7BWvopoDcADO5ZiLJUWMUDkxnrqxDf2IJVKgFURQWXCENYR7ElbzSJ9lTpozdReYsRmeYA&pv=2

http://s6753.chomikuj.pl/File.aspx?e=ge6IAVkxVUnWmp1_nvy2USBURbSmB6L72qszP7-CrIfQZZgRso8PSysoQUGoRsOYdT-sllM3nHIT09YvmJo-k-6OxmGduokVx-9qk0GgwfX2Gaz7DdvlRVjDUGlEjAyqW6i8XHMXepL7gubneGwKUg&pv=2

http://s6753.chomikuj.pl/File.aspx?e=ge6IAVkxVUnWmp1_nvy2Ue-ZSY_S_3EtyLDIoiIZfZghNzI4uzIAZdrOQKn_8lrxLE9bJ3KCKp2hOSeB0RoTKZs3v08azVABENSzxG5jjyhF4_EVDVS5X8pCO1of8NnnI4gQRFCYTFU5ZLuxQNjOWA&pv=2

https://launcher.mojang.com/.../Minecraft.exe

http://s6753.chomikuj.pl/File.aspx?e=ge6IAVkxVUnWmp1_nvy2Ue-ZSY_S_3EtyLDIoiIZfZiv-Pe02rMF8zdEbytFirsrioGRznOjJTJ_UO9b0152XpsbsoqzFddJ4709xsixnhsAqAjNGJGNySrQqBr_PKubqUBHLzeYtonA3V1tPQ3OVg&pv=2

http://www.fayloobmennik.net/files/.../52971688.html?check=0e3d9b5b896fd4490b624a1eabfccd6e&file=189500

http://s10304.chomikuj.pl/File.aspx?e=ge6IAVkxVUnWmp1_nvy2Ue-ZSY_S_3EtyLDIoiIZfZjdYdtI6Sh3Efi4eZBnO4L7EcTsScAYeWW0GwxtfyX__gpA2EUXFxfK_NdEPzpt6mkWW5FHTiAGLXRUmKGUgeynarllPxCVhyrENjsNiZQDog&pv=2

http://www.minecraft.net/.../Minecraft.exe

http://dc194.2shared.com/download/.../Old_Minecraft_Launcher.exe

Scan minecraft.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.