home

mclauncher.exe

MC Launcher by RAS FANTasy

Ras FANtasy Skype: rassoft1994

This is a setup program which is used to install the application. The file has been seen being downloaded from minecraft-alex.ru.
Publisher:
Ras FANtasy Skype: rassoft1994

Product:
MC Launcher by RAS FANTasy

Description:
This is MineCraft Launcher by RAS FANtasy

Version:
1.8.0.0

MD5:
55beba4ea755c0b99328e2d2adcbc38c

SHA-1:
4030b3a823caca01c27e72305ffa2ecba9c37676

SHA-256:
9509a47dd1e843a6a2cc3564915a9b370f2676ee1fce78f6c26471ecd15ae7ae

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 8:43:58 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0407
7.2.121

File size:
2.5 MB (2,599,424 bytes)

Product version:
1.8 (RC3)

Copyright:
RasSoft (c)

Original file name:
MCLauncher

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\mclauncher.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:YDKipB8tpgqH+6xYADn8zssANJl4R5TR6WTR6eO:kH5OcC65TRFTRs

Entry address:
0xBF560

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, E8, F0, 4B, 00, E8, BB, 74, F4, FF, 8B, 1D, 74, 49, 4C, 00, 8B, 03, E8, 6A, 39, FA, FF, 8B, 03, BA, 00, F6, 4B, 00, E8, 56, 35, FA, FF, 8B, 0D, 44, 4B, 4C, 00, 8B, 03, 8B, 15, 14, 89, 4B, 00, E8, 63, 39, FA, FF, 8B, 0D, 9C, 4B, 4C, 00, 8B, 03, 8B, 15, C8, 7F, 4B, 00, E8, 50, 39, FA, FF, 8B, 0D, F0, 48, 4C, 00, 8B, 03, 8B, 15, 20, EF, 4B, 00, E8, 3D, 39, FA, FF, 8B, 0D, D0, 46, 4C, 00, 8B, 03, 8B, 15, 7C, 81, 4B, 00, E8, 2A, 39, FA, FF, 8B, 0D, 5C, 4A, 4C, 00, 8B, 03, 8B, 15...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
762 KB (780,288 bytes)

The file mclauncher.exe has been seen being distributed by the following URL.

http://minecraft-alex.ru/.../MCLauncher.exe

Scan mclauncher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.