home

terramining_launcher_v1.3.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1392.mediafire.com.
MD5:
2a68db441fb08b1ca83ef2656617cea1

SHA-1:
b86049122346be03c7db5f7e074b6449ec455b98

SHA-256:
2a6d468254b6c9a57ac2c1f74e656ef0ffe73344c0c1081965de432a4d22d90f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:50:28 PM UTC  (today)

File size:
1.2 MB (1,225,657 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\terramining_launcher_v1.3.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:e3T8QJ+kHU5+pzPWWS0c1zNiYdIwZ/PIb1D+NRMnQxMfuFc5DZAlq:e3d+cpzkx14aDn+1CNRMnQxw+lq

Entry address:
0x25468

Entry point:
47, 00, 09, 00, 47, 01, 09, 00, C7, 00, 09, 00, C7, 01, 09, 00, 27, 00, 09, 00, 27, 01, 09, 00, A7, 00, 09, 00, A7, 01, 09, 00, 67, 00, 09, 00, 67, 01, 09, 00, E7, 00, 09, 00, E7, 01, 09, 00, 17, 00, 09, 00, 17, 01, 09, 00, 97, 00, 09, 00, 97, 01, 09, 00, 57, 00, 09, 00, 57, 01, 09, 00, D7, 00, 09, 00, D7, 01, 09, 00, 37, 00, 09, 00, 37, 01, 09, 00, B7, 00, 09, 00, B7, 01, 09, 00, 77, 00, 09, 00, 77, 01, 09, 00, F7, 00, 09, 00, F7, 01, 09, 00, 0F, 00, 09, 00, 0F, 01, 09, 00, 8F, 00, 09, 00, 8F, 01, 09, 00...
 
[+]

Code size:
145.5 KB (148,992 bytes)

The file terramining_launcher_v1.3.exe has been seen being distributed by the following URL.

http://download1392.mediafire.com/oo79ib5ujreg/.../Terramining_Launcher_v1.3.exe

Scan terramining_launcher_v1.3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.