home

thehen101's xray mod installer 1.7.9.exe

thehen101's Xray Mod

Minecraft Installers

This is a self-extracting archive and installer. The file has been seen being downloaded from download1509.mediafire.com and multiple other hosts.
Publisher:
Minecraft Installers

Product:
thehen101's Xray Mod

Description:
thehen101's Xray Mod Installer 1.7.9

Version:
1.0.0.0

MD5:
5ec45b412a2562c8a5518670a6b8b6c9

SHA-1:
e0695c7a7a946793b7c736164559ffbe233a52a6

SHA-256:
c810192027b147631120ca068366e87b4f69816baec5aed7b0f60e5dbb9c607c

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/28/2024 5:14:12 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0417
7.2.132

File size:
6.4 MB (6,699,520 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014 - Minecraft Installers

Original file name:
xraymod_2.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\thehen101's xray mod installer 1.7.9.exe

File PE Metadata
Compilation timestamp:
4/14/2014 2:34:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:clmIzEa/7zphsTwMfey0gMaLa3vQvi8KlIub1mHfxMLKhN4ayM0QFqkRAzZHlYxI:2zJVhwnnlOsizIub1m/xXhN4aaXfk

Entry address:
0x609BEE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 29, 38, 4C, 53, 00, 00, 00, 00, 02, 00, 00, 00, 98, 00, 00, 00, 1C, A0, 60, 00, 1C, 80, 60, 00, 52, 53, 44, 53, AB, 47, 4F, 0D, AC, AF, 02, 4A, 8E, EA, CD, 2B, F7, 7A, 03, A5, 01, 00, 00, 00, 43, 3A, 5C, 55, 73, 65, 72, 73, 5C, 4E, 65, 6F, 5C, 44, 65, 73, 6B, 74, 6F, 70, 5C, 49, 6E, 73, 74, 61, 6C, 6C, 65, 72, 73, 5C, 4D, 6F, 64, 73, 5C, 4E, 6F, 6E, 20, 2D, 20, 46, 6F, 72, 67, 65, 20, 2D, 20, 31, 2E, 37, 2E, 39, 5C, 62...
 
[+]

Entropy:
7.6611

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
6 MB (6,323,200 bytes)

The file thehen101's xray mod installer 1.7.9.exe has been seen being distributed by the following 4 URLs.

http://download1509.mediafire.com/njlwebxkqz2g/.../thehen101\'s Xray Mod Installer 1.7.9.exe

http://download1880.mediafire.com/ngpf159a7czg/.../thehen101\'s Xray Mod Installer 1.7.9.exe

http://download1172.mediafire.com/wp4e4qw584ng/.../thehen101\'s Xray Mod Installer 1.7.9.exe

http://dl.minecraftinstallers.net/.../thehen101's Xray Mod Installer 1.7.9.exe

Scan thehen101's xray mod installer 1.7.9.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.