» minecraftsetup.exe
Overview
Analysis
File Details
Downloads (60)

minecraftsetup.exe

The executable minecraftsetup.exe has been detected as malware by 2 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from www.my-free-game.org and multiple other hosts.

File name:

minecraftsetup.exe

MD5:

feab0935ff9659316e4afc6305d09c39

SHA-1:

0bba92db0865e8486a7c4b662bb43c7445c92e95

SHA-256:

90ef64ca2e1095ebd823d6b40ab5e3a1ffd519c030cdd35b5f7418f19183209a

Scanner detections:

2 / 68

Status:

Malware

Analysis date:

11/15/2024 6:36:44 PM UTC (today)

Scan engine

Detection

Engine version

NANO AntiVirus

Trojan.Win32.Agent.dhbpge

0.28.6.62995

Reason Heuristics

(M)

16.6.5.21

File size:

347 KB (355,310 bytes)

File type:

Executable application (Win64 EXE)

Common path:

C:\users\{user}\downloads\minecraftsetup.exe

File PE Metadata

OS bitness:

Win64

CTPH (ssdeep):

6144:BV8S4K9HtcbAWnR5g6MqcaMfJL5Hlfl9KGsHDPv/PLRgF027fC5iXKhWMc:B+nKObAW/6dp5Ffl9KGyf12uEMc

Entry point:

50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, BC, 60, 30, 43, 54, 43, C7, B4, 4E, 6B, 05, 00, 94, 50, 0A, 00, 0D, 00, 00, 00, 4D, 69, 6E, 65, 63, 72, 61, 66, 74, 2E, 65, 78, 65, EC, 7D, 09, 5C, D5, D7, 95, FF, 0F, 44, 03, 8A, 82, 11, 15, 77, 54, 10, 50, 59, 1E, FB, BE, EF, 8B, EC, 22, CA, F6, 80, 27, A0, 6C, C2, 43, 51, 41, 51, 20, F1, E5, F9, A2, 49, 34, 31, 8B, 4D, AC, D9, 93, 26, 69, 13, 13, 97, BA, 24, B6, 49, 6C, 9B, 69, 6A, DA, 89, A9, 9D, 69, 3A, 6D, A6, 38, 3A, FF, 49, 27, 69, 96, AA, B9, FF, F3, 3D, F7... 
[+]

Entropy:

7.9929 (probably packed)

The file minecraftsetup.exe has been seen being distributed by the following 50 URLs.

http://www.my-free-game.org/?dl=1&dr=cHaWck1NIKFl73vPDEim2r0WDENwvENyhXNy7yDphXAmD3vpDZ0m rcWDK4m7dAWx0am7dREhKVuvmAWASDChTMm7dlChV8yOTi3ATayAzAm7K2pDZ1fAjL0NjA4AjnROTn=&campaignId=9jn0ATC0OTgwAZMq

http://www.freetop-app.com/?dl=1&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV8yNZ70AZMFAzamI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfSDzcj1zcmAm2r0Wc32lDXimcHaWck1NIKFl73vPDEim7K2pDZ1fAjaFNTg3NjC4Njn=&campaignId=9jn0ATcyOTAwAZMq

http://clean-softclean.com/?dl=1&pi=Ajg4NzcRNTM0AM==&osos=VdluDrW3cw==&gclid=CMmNyeDA6cQCFWjlwgodsZAArw&dr=cHaWck1NIKFl73vPDEim2r0Wc32lDXiFvENyhXNy7yDphXAmD3vpDZ0m rcW2Ham7dAWV5am7dREhXxyvmAWASDChTMm7dlChV8yAjL1ATidNjam7K2pDZ1fAja1AjgzNja4OTn=&pd=cdVlIKFz2r5B kFj d0=&campaignId=9jn0Ajg1OTndAZMq

http://www.freetop-app.com/?dl=1&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWcHim7dAWilam7dREhXs0vmAWASDChTMm7dlChV8yOZg4NZnFAzamI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfSDzcj1zcmAm2r0Wc32lDXimcHaWck1NIKFl73vPDEim7K2pDZ1fAjiyNTn3AzaFNjn=&campaignId=9jn0AT7dNzc0AZMq

http://www.freetop-app.com/?dl=1&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcW2Ham7dAWV5am7dREhXxyvmAWASDChTMm7dlChV8yAjnFNZnFAzamI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfSDzcj1zcmAm2r0Wc32lDXimcHaWck1NIKFl73vPDEim7K2pDZ1fAjM4NjnzNZaFNjn=&campaignId=9jn0ATc0NTLwAZMq

http://www.install-here.com/?dl=1&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWDK4m7dAWi0nm7dREhKVuvmAWASDChTMm7dlChV8yAZazAZMFAzamI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfSDzcj1zcmAm2r0Wc32lDXimcHaWck1NIKFl73vPDEim7K2pDZ1fAjg4OT7RAjC4Njn=&campaignId=9jn0ATg1OZMwAZMq

http://www.free-pcapps.com/?dl=1&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhLFAvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNTCyNzMyATiRvm5EIKiWXzLdNZa0NZczOZa=&campaignId=9jn0ATg4NZidAZMq

http://softsoftclean.info/?dl=1&pi=Ajg4NzcRAzL3Aw==&osos=VdluDrW3cw==&gclid=CMOSg6GygMUCFSbJtAodsicA2Q&dr=cHaWck1NIKFl73vPDEim2r0Wc32lDXiFvENyhXNy7yDphXAmD3vpDZ0m rcWDEam7dAWxlam7dREhKDyvmAWASDChTMm7dlChV8yNjL0OTnwOTam7K2pDZ1fAjMyNTcRATc4AZa=&pd= mW3UXNlDSFj d0=&campaignId=9jn0AjCzNzgyAZMq

http://www.bodycapitalcentral.com/c?x=0edjFUJdxx/ncTaKjAAyS52sZ9eu4/FjgJEAJv5qsOc=&c=gy48fXhqny5nvGxXxYlBoNCKhunZltU1BXsBvMFRQH3GgTlk df1zDr6ucf4o23aVQuuyEckp/m7jXMkj Nf4B2qEgH1xBwY485quWGlXbw12G9NxLBWBdKPfqiKpoSF&downloadAs=MinecraftSetup.exe&fallback_url=http://allmyapps.com/binary/1603/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://upsnew.info/?dl=1&pi=Ajg4NzcyATA4OM==&osos=VdluDrW3cw==&gclid=COD96aHh_8QCFWMF7AodHzQAjg&dr=cHaWck1NIKFl73vPDEim2r0Wc32lDXiFvENyhXNy7yDphXAmD3vpDZ0m rcWcHim7dAWilam7dREhXs0vmAWASDChTMm7dlChV8zNz70ATL1NZam7K2pDZ1fAzn3AZ7RATi3Njn=&pd=IKFz2r5B k1zDKLu7dWt&campaignId=9jn0AjCzNT7dAZMq

http://to-goal.info/?dl=1&pi=Ajg4NzcRNzg0Ni==&osos=VdluDrW3cw==&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXi1vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzMyATgFOZMFASDPDdlChV8RATMwAjczAjiy&pd=2323UmRlDdVuDrVyeS1PcHszUmNJ i==&campaignId=9jn0Ajg4NjcwAZMq

http://www.freetop-app.com/?dl=1&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWDK4m7dAWiLLm7dREhKVuvmAWASDChTMm7dlChV8yOZMzAZMFAzamI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfSDzcj1zcmAm2r0Wc32lDXimcHaWck1NIKFl73vPDEim7K2pDZ1fAji4NzC1ATC4Njn=&campaignId=9jn0ATLFNTLdAZMq

http://get-goal.info/?dl=1&pi=NjCdNz7yAT70&osos=VdluDrW3cw==&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChVWZiL1iiLlHTlWvxkDG2z1YIdVF2dWyDH0m XiWed1P2rNo2HlwDX0m K4We3sB7KNl KVu2H0m73iWe3xPcm2l2H0m EiWedlmidWu2rVu2ZpnfXtpDlNl7XvjIZpLfSDleHsyhXtP7dVpDH0m7XMWed5CcrWzIXxp dFWvmxdhXtCDXDp7dVWvEsyhXMt KluDKNy7KD0vExthXN3DKV0OSDzcj1QDyDPDdlChVWsxn2ST1ViX0ln&pd=2323UEsB7XCt rlGDSFj d0=&campaignId=9jn0AzawNZiwAZMq

http://www.townuniverseclear.com/c?x=CnqOC89e mxSs8S hlG2gjqIdmTlY7boVNdHzjCrz7E=&c=MUwMiZktcPxa7RERjRjL9ShjFjbZNuSoyuYXfnR2kQRvje8/azYQl/UpLp4faz KjWt8u0a02Zfo9VvxVHlWbDZzK/KPIysWcDy1eVkoSR cfK88dUo6NYUL86xUunq&downloadAs=MinecraftSetup.exe&fallback_url=http://allmyapps.com/binary/1603/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://www.freetop-app.com/?dl=1&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWDK4m7dAWL0Lm7dREhKVuvmAWASDChTMm7dlChV8yAjAzAZMFAzamI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfSDzcj1zcmAm2r0Wc32lDXimcHaWck1NIKFl73vPDEim7K2pDZ1fAj7RAjgdAjC4Njn=&campaignId=9jn0ATLzNza0AZMq

http://unipdfconverter.com/?dl=1&pipi=Ajg4NzcyAzi3Ai==&osos=VdluDrW3cw==&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhXs0vmNjhLvSvmNBDz1w2kDjhTnmDZ0wvmNpDZ1fNTAFNzg4AZCRvm5EIKiWXzn1OZgyNjayNZa=&pd=2323UmRlDdVuDrVyeS1PcHszUmNJ i==&campaignId=9jn0AjcyAjL0AZMq

http://www.free-pcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1tIKFl73vPDEimIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNZCwNTaRATiRvm5EIKiWXzi0NZ73AZARNja=&campaignId=9jn0AT73NjMyAZMq

http://www.free-pcapps.com/?dl=1&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhXs0vmNjhLvSvmNBDz1w2kDjhTnmDZ0wvmNpDZ1fNjizOZMyATiRvm5EIKiWXzLzNjM0ATCzOZa=&campaignId=9jn0ATcFNzndAZMq

http://www.freetop-app.com/?dl=1&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWcHim7dAWilam7dREhXs0vmAWASDChTMm7dlChV8yAZMFNZnFAzamI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfSDzcj1zcmAm2r0Wc32lDXimcHaWck1NIKFl73vPDEim7K2pDZ1fAjMdAjnzNZaFNjn=&campaignId=9jn0AT73ATLyAZMq

http://free-bliss.info/?dl=1&pi=ATL3AjL0Njn4Ag==&osos=VdluDrW3cw==&chnl=b_sa_temp|all_rest&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChVWZiL1iiLlHTlWvxkDG2z1YIdVF2dWyDH0m XiWed1P2rNo2HlwDX0m K4We3sB7KNl KVu2H0m73iWe3xPcm2l2H0m EiWedlmidWu2rVu2ZpnfXtpDlNl7XvjIZpLfSDleHsyhXtP7dVpDH0m7XMWed5CcrWzIXxp dFWvmxdhXtCDXDp7dVWvEsyhXMt KluDKNy7KD0vExthXN3DKV0OSDzcj1QDyDPDdlChVWsxn2ST1ViX0ln&pd=2323UEsB7XCt rlGDSFj d0=&campaignId=9jn0AzayAZa0AZMq

http://www.install-here.com/?dl=1&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV8yAjL4OTC4AzamI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfSDzcj1zcmAm2r0Wc32lDXimcHaWck1NIKFl73vPDEim7K2pDZ1fAj7FNTgyNTg4Njn=&campaignId=9jn0ATg0OZnwAZMq

http://www.install-here.com/?dl=1&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWcHim7dAWilam7dREhXs0vmAWASDChTMm7dlChV8yAZMFNZnFAzamI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfSDzcj1zcmAm2r0Wc32lDXimcHaWck1NIKFl73vPDEim7K2pDZ1fAjMdAjnzNZaFNjn=&campaignId=9jn0ATg0AZCwAZMq

http://to-great.info/?dl=1&pi=NjgFOTg0Nj7R&osos=VdluDrW3cw==&chnl=b_sa_temp|all&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChVWZiL1iiLlHTlWvxkDG2z1YIdVF2dWyDH0m XiWed1P2rNo2HlwDX0m K4We3sB7KNl KVu2H0m73iWe3xPcm2l2H0m EiWedlmidWu2rVu2ZpnfXtpDlNl7XvjIZpLfSDleHsyhXtP7dVpDH0m7XMWed5CcrWzIXxp dFWvmxdhXtCDXDp7dVWvEsyhXMt KluDKNy7KD0vExthXN3DKV0OSDzcj1QDyDPDdlChVWsxn2ST1ViX0ln&pd=2323UEsB7XCt rlGDSFj d0=&campaignId=9jn0AzA1AZc0AZMq

http://www.free-pcapps.com/?dl=1&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhLl5vmNBDz1l QDjhTnmDZ0wvmNpDZ1fNTMzNzMyATiRvm5EIKiWXzA0AZCzNZczOZa=&campaignId=9jn0ATL0NzLwAZMq

http://www.free-pcapps.com/?dl=1&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhXs0vmNjhLvSvmNBDz1w2kDjhTnmDZ0wvmNpDZ1fNjizOZMyATiRvm5EIKiWXzLzNjM0ATCzOZa=&campaignId=9jn0ATL0NjMdAZMq

http://www.free-pcapps.com/?dl=1&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhLlLvmNBDz1l QDjhTnmDZ0wvmNpDZ1fAZC3AjayATiRvm5EIKiWXziwOZAFAjM0OZa=&campaignId=9jn0ATgzOTa4AZMq

http://www.fun-minecraft.com/minecraft/min/.../?dl=1

Latest 30 of 60 download URLs

Remove minecraftsetup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.