pokecraft_launcher_offi.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from launcher.pokecraft.fr.
MD5:
2d8c5dd3c703f51d822d621a77954f48

SHA-1:
def2b6b425ea9838976852cfb04223b62e25c2bb

SHA-256:
852104f9104f24ee92fb27c986855241b20159bb14df6a6867be6999842cec3c

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
1/9/2025 6:28:15 AM UTC  (today)

Scan engine
Detection
Engine version

NANO AntiVirus
Trojan.Win32.Agent.duowbx
0.30.24.2668

File size:
621.5 KB (636,464 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/14/2015 12:11:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.22

CTPH (ssdeep):
6144:+JM0IbesPea33sMfuULbQC8Y+9Bu9xp1Bq50a1sN0aodFFV8RMhX7:+EeK3vlLh8YxxlyL2N0ldFM4X7

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 90, 22, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, C8, 22, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, B4, 22, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, FF, 57, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 97, 0D, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Packer / compiler:
MingWin32

Code size:
23.5 KB (24,064 bytes)

The file pokecraft_launcher_offi.exe has been seen being distributed by the following URL.

Scan pokecraft_launcher_offi.exe - Powered by Reason Core Security