home

techniclauncher.exe

Technic laucnher Moded by H34T0

The phoenix

This is a setup program which is used to install the application. The file has been seen being downloaded from download1387.mediafire.com and multiple other hosts.
Publisher:
The phoenix

Product:
Technic laucnher Moded by H34T0

Description:
TECHNICH LAUNCHER MODED BY H34T0 for 64 bit machine

Version:
2.2

MD5:
46c2a6de28aff5a3971bf3a4863c4875

SHA-1:
4fad25dba9bae9ffa85eed8bbb5361a74692229b

SHA-256:
2de46e8329e67e67873d41c32acf1b9411ecc4c99f150127fb301efd8f9cf45e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 7:55:36 PM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
Suspicious_GEN.F47V0712
7.2.326

File size:
2.8 MB (2,955,963 bytes)

Product version:
2.2

Copyright:
Copyright (c) 2014 - 2015

File type:
Executable application (Win32 EXE)

Language:
Turkish (Turkey)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\techniclauncher.exe

File PE Metadata
Compilation timestamp:
11/5/2012 8:50:06 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:QyvT462Dlc0YxUzd3IULaTZvC8TWjYUxIq/HNAMGKbPFAGUf:QyL2DlN5VISul69xIqFmKjaf

Entry address:
0x13F40

Entry point:
55, 8B, EC, 6A, FF, 68, 38, 45, 43, 00, 68, 00, 80, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 10, 53, 56, 57, 89, 65, E8, FF, 15, 94, 40, 43, 00, 33, D2, 8A, D4, 89, 15, B8, 19, 44, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, B4, 19, 44, 00, C1, E1, 08, 03, CA, 89, 0D, B0, 19, 44, 00, C1, E8, 10, A3, AC, 19, 44, 00, 6A, 01, E8, FA, 3F, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, AB, 00, 00, 00, 59, E8, 05, 3D, 00, 00, 85, C0, 75, 08, 6A, 10, E8, 9A, 00, 00, 00, 59, 83, 65, FC, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
204 KB (208,896 bytes)

The file techniclauncher.exe has been seen being distributed by the following 18 URLs.

http://download1387.mediafire.com/8q70s6t902vg/.../TechnicLauncher x32.exe

http://download1644.mediafire.com/b8rc5tkm18jg/.../TechnicLauncher x32.exe

http://dla.uloz.to/Ps;Hs;fid=100469054;cid=838452443;rid=702695627;up=0;uip=46.135.110.250;tm=1479640000;ut=f;aff=ulozto.cz;did=ulozto-cz;He;ch=8296f6db93f2fd34b80d7fd6e9c524a5;Pe/.../lancher-crafting-dead-exe?bD&c=838452443&De

http://download1690.mediafire.com/fuosf20vdudg/.../TechnicLauncher x32.exe

http://download1910.mediafire.com/8c937hx0pdhg/.../TechnicLauncher x32.exe

http://download1910.mediafire.com/86u9o59qsj7g/.../TechnicLauncher x32.exe

http://download1387.mediafire.com/38b0192g8frg/.../TechnicLauncher x32.exe

http://dla.uloz.to/Ps;Hs;fid=88933033;cid=616554083;rid=2045257056;up=0;uip=185.91.167.80;tm=1454441327;ut=f;aff=uloz.to;did=uloz-to;He;ch=19b76d0242d2a4b15f5bd41c34605b27;Pe/.../minecraft-launcher-100-funukcni-exe?bD&c=616554083&De

http://download1910.mediafire.com/8w19dpahuxlg/.../TechnicLauncher x32.exe

http://download1910.mediafire.com/pw18z8v15akg/.../TechnicLauncher x32.exe

http://freecache23-free.uloz.to/Ps;Hs;fid=75459157;cid=1141146373;rid=1721244127;up=0;uip=188.167.233.4;tm=1461258758;ut=f;aff=uloz.to;did=uloz-to;He;ch=94027239755208320bd3b73057fdf41d;Pe/.../lancher-crafting-dead-exe?bD&c=1141146373&De&redirs=1

http://download1387.mediafire.com/abetscn5c22g/.../TechnicLauncher x32.exe

http://dla.uloz.to/Ps;Hs;fid=88933033;cid=1851945825;rid=2141026258;up=0;uip=46.167.230.26;tm=1453820569;ut=f;aff=uloz.to;did=uloz-to;He;ch=3e32e0f4463b33c52d02e86e0c6f3f16;Pe/.../minecraft-launcher-100-funukcni-exe?bD&c=1851945825&De

http://download1387.mediafire.com/4hb71x0ab22g/.../TechnicLauncher x32.exe

http://download1387.mediafire.com/n6b9hp6337tg/.../TechnicLauncher x32.exe

http://download2121.mediafire.com/51wt9hxi7ijg/.../TechnicLauncher x32.exe

http://download1387.mediafire.com/2v3xtkghz4hg/.../TechnicLauncher x32.exe

http://download2121.mediafire.com/4bw9b9zgzw7g/.../TechnicLauncher x32.exe

Scan techniclauncher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.