minecraft_server.1.6.2.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s6207.chomikuj.pl and multiple other hosts.
MD5:
2bde345d6d14cda7e2829193a7b30ec2

SHA-1:
a08ad9bdd208d0861cd62cef7251a2611b8217f5

SHA-256:
d8796e25bb9c8362be0ff89d4f68e0efdc3377897b2dc111056480c82791c070

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/5/2024 11:42:32 AM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.XPACK/RDM!5.1
23.00.65.131208

File size:
6.2 MB (6,530,107 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\minecraft_server.1.6.2.exe

File PE Metadata
Compilation timestamp:
7/5/2013 10:27:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.22

CTPH (ssdeep):
98304:5uNjD+Oxe+wMYU7q6Oh0HNhP/XVFEjA9UNqV1ewNB7FB1syR:5u1xe+BYUupmHNhlFmNqVA6BhPR

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 9C, 12, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, DC, 12, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, C4, 12, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, EF, 3F, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 07, 0B, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Code size:
17.5 KB (17,920 bytes)

The file minecraft_server.1.6.2.exe has been seen being distributed by the following 11 URLs.

http://s6207.chomikuj.pl/File.aspx?e=ytaOSZ41bdDQy5ob-XAkPka-Omx-bsVcCmqVwQoFQwxHTEk9OP2n5ozVVzm8ikmReJ81azS5Snmiu_LmAsbZAAqHloVwfH9FE-FCTbU4zXWoCGo4eTwMbpy8u0522F5CzkwNyEm9pNaqK_-UlBbBNAFukmTDD7s60FWfVPF03zA&pv=2

http://s3.amazonaws.com/Minecraft.Download/versions/.../minecraft_server.1.6.2.exe

http://s6207.chomikuj.pl/File.aspx?e=ytaOSZ41bdDQy5ob-XAkPuOv3ZpUOJWvT2mIgitueF_JJxvmYAG21N3wCBLSVbaSAnmAAnBEtyvxu_mreTDs_zuXSTGwrWABxSFIwDy_NNRI_BoQtM-Ac9rE8XzjlQdtJxs0wdMk4LaWr194kKwMTWGmVdoqVpX6cvM0kGejGFE&pv=2

http://s6207.chomikuj.pl/File.aspx?e=ytaOSZ41bdDQy5ob-XAkPuOv3ZpUOJWvT2mIgitueF9Lj2oLkKPSVfUbbQJctC_Q0rt9oyXgBPoqoylo6WA7rbboBp1T3OIvcF3eqnEAB4bboPrVL__wtMHyjJAQRCZIMFoHkMT4irYSvg9F453R1zn5XbUwRvja1a2ZoorBm40&pv=2

http://tomsguide.digidip.net/visit?url=https://s3.amazonaws.com/Minecraft.Download/versions/1.6.2/minecraft_server.1.6.2.exe&ppref=https://.../

http://tomsguide.digidip.net/visit?url=https://s3.amazonaws.com/Minecraft.Download/versions/1.6.2/minecraft_server.1.6.2.exe&ppref=https://.../

http://ow.ly/mKnNy

http://minecraft-server-162.softbull.com/descargar

Scan minecraft_server.1.6.2.exe - Powered by Reason Core Security