home

minecraft.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from ftp-stahuj.centrum.cz and multiple other hosts.
MD5:
b90c47bf3482831d3af9be2449fd8eb0

SHA-1:
87639a6249805c2913b75e25bf3d3f4f126683aa

SHA-256:
45f94cd216856b9dbac90f53807e4e0edcb61b58cc92be6b8acbf6d9c590646d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/15/2024 5:55:51 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Kazy!6.86F
23.00.65.14117

File size:
263.1 KB (269,432 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\??????\minecraft.exe

File PE Metadata
Compilation timestamp:
2/21/2011 11:08:32 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
3072:bLjSuDvhoZK4mpYpccpWbV0L/ZJWgpEc/mCryL7IG3tBjRdn:b6ujhM7e1bV0FJWChf87TtBjRdn

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 9C, 12, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, DC, 12, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, C4, 12, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, B7, 3F, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 07, 0B, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Packer / compiler:
MingWin32

Code size:
18 KB (18,432 bytes)

The file minecraft.exe has been seen being distributed by the following 6 URLs.

http://ftp-stahuj.centrum.cz/dl/5ebc2e5d3aa99f953457148429c26621/57cb2dd2/stahuj/download/software/secured/m/minecraft/179/.../Minecraft.exe

http://dla.uloz.to/Ps;Hs;fid=131856443;cid=1906001433;rid=2029939313;up=0;uip=90.177.222.19;tm=1484588773;ut=f;aff=uloz.to;did=uloz-to;He;ch=765a75d9d0fb30358b862472797911a7;Pe/.../minecraft-exe?bD&c=1906001433&De

https://docviewer.yandex.ru/source?id=uavbx-dwdxkfudogzmz6qruyjyknzyw0m22cbwa5ut6tdifzu47uns1m2ridxdg0tye8k48mfaw49mubqldg84roow2lzx3gv6zkdxwvx&archive-path=//.../Minecraft.exe&ts=14da0f3c54b&token=TSa0ucFdMjovSDjEW9CSoQ==&name=klient-minecraft-Minecraft-1.5.2-Redstone-Update-server-skachat.rar&uid=319439437

about:internet

https://s3.amazonaws.com/MinecraftDownload/.../Minecraft.exe

http://cs11.userfiles.me/f/0/1390292180/25570129/0/.../Minecraft-spaces.ru.exe

Scan minecraft.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.