home

minecraftinstaller.exe

Minecraft Client Demo

RICH MEDIA SYSTEMS INC.

The application minecraftinstaller.exe by RICH MEDIA SYSTEMS INC has been detected as a potentially unwanted program by 15 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from minecraft-client.pt.1800download.com and multiple other hosts.
Publisher:
RICH MEDIA SYSTEMS INC.  (signed and verified)

Product:
Minecraft Client Demo

Version:
1.0.0.0

MD5:
8799c590469539bcd3654e4ed7a5f811

SHA-1:
3beb1c75ed9e4005e71a4d37c10e935511610e65

SHA-256:
57d12a62e64566ca42b8d7831e30fb57ecc1fda29a506044cc1a6ff43adf65bb

Scanner detections:
15 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
10/12/2025 10:01:50 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Riskware.Agent
7.1.1

AhnLab V3 Security
PUP/Win32.OpenCandy
2015.04.12

AVG
OpenCandy
2016.0.2980

Baidu Antivirus
Adware.Win32.OpenCandy
4.0.3.15920

Clam AntiVirus
Win.Trojan.Agent-855157
0.98/21511

Dr.Web
Adware.Downware.10304
9.0.1.0263

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
9.11460

G Data
Win32.Adware.OpenCandy
15.9.25

K7 AntiVirus
Trojan
13.202.15566

Malwarebytes
PUP.Optional.OpenCandy
v2015.09.20.07

McAfee
Artemis!8799C5904695
5600.6636

Qihoo 360 Security
HEUR/QVM42.0.Malware.Gen
1.0.0.1015

Reason Heuristics
PUP.RICHMEDIASYSTEMS.Installer (M)
15.9.20.19

Trend Micro House Call
Suspicious_GEN.F47V0401
7.2.263

VIPRE Antivirus
Trojan.Win32.Generic
39256

File size:
415.7 KB (425,664 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\minecraftinstaller.exe

Digital Signature
Signed by:
RICH MEDIA SYSTEMS INC.

Authority:
Symantec Corporation

Valid from:
2/17/2015 7:00:00 AM

Valid to:
2/18/2016 6:59:59 AM

Subject:
CN=RICH MEDIA SYSTEMS INC., O=RICH MEDIA SYSTEMS INC., L=HENDERSON, S=Nevada, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3F87144C25AF8BCF29F29C5A1FEEF4BA

File PE Metadata
Compilation timestamp:
5/20/2013 6:53:00 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:YiuB93pGSfYMr5b3ec3s5w5ziJyiecuF41W4h:k9fgYw5k8gT4kI

Entry address:
0x331C

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 30, 92, 40, 00, 89, 6C, 24, 14, FF, 15, 34, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, BC, 70, 40, 00, 55, FF, 15, AC, 72, 40, 00, 6A, 08, A3, 98, 92, 42, 00, E8, A8, 2E, 00, 00, A3, E4, 91, 42, 00, 55, 8D, 44, 24, 34, 68, B4, 02, 00, 00, 50, 55, 68, 90, 06, 42, 00, FF, 15, 7C, 71, 40, 00, 68, 7C, 93, 40, 00, 68, E0, 81, 42, 00, E8, 13, 2B, 00, 00, FF, 15, 34, 71, 40, 00, BB, 00, 40, 43, 00, 50, 53, E8, 01, 2B, 00, 00...
 
[+]

Entropy:
7.8807

Packer / compiler:
Nullsoft install system v2.x

Code size:
24 KB (24,576 bytes)

The file minecraftinstaller.exe has been seen being distributed by the following 14 URLs.

http://minecraft-client.pt.1800download.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPDu1E1v4YtbB6qAk5ib0pWJgjIJQeRigK6n3fHm/ykYbazeeELCtGb08gLNjztTbXliD9GzyCkzlunm6jvXTvNKbm2JLq4dk2hYCCCfuT3wphshq9Cr8UHHEGeIJm4WwYXMaO VrekZLIaS0XHx1apiRek93zrPvUSwmcpfz1e8nBSqwsVDd3KY4Fpn esekfXZe18O0D JnlRsf/921zQG6O7h zianB81V6MW7S33guNKaniYyMe8fEJY2enUhsui1YEM/.../8 m2Vpta2DP 2AW18uXdGCjBkvcguh ewm9

http://minecraft-client.1800download.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmV89fDKjEgqkOYCGp h152f8qHoPkoVbfgW2Pv FYTD4kQgEZyGSTqHyCr50ybtq1pneFQfS9SjyHgGu5i/gzLbDpZrSl2lZ9N1w2hcXRn3 AD9xlsso SP XWuSA7ZfwtWhbmMVY/o4KhIdNK3/VHNtc43EJBEwyOX2GWUveY/g0P8 TWO7slDdyKYvRM7sOYfsM2NXnMu8G M2wkRLuNu/3A68c/kpznn4R91Wrc29SWu/7M3Ez24ybPVJRo4vOHshounkFxlrnFDpg89PUCbnDB/.../hxw03NTHOu2AGhICHInnrT0PXmvl8ewm9

http://minecraft-client.1800download.com/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklU0NSraQUanM56C46dPsya68zQunpkQeA yerC/NXK8ykYMayDMR7juXfdr0bIjzsebDR7MpnGtXwSm7j i2KmI 4ecg2gIq5Y6kRUbAGSsSTRwntEu/CP4U3GSA7ZfwtW4bmMVY/.../FesjlxUQ6YO h1vyfOwswz6tQMVb5NW5QXzss5OCkW8qZbxRAcAvMjwpsei1HAhqzRyz3c8HSnjzDVT5opLvhAUjNGCS5zZAiJvBOzGiRkvPif59ewm9

http://minecraft-client.pt.1800download.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPDu1E1v4YtbB6qAk5ib0pWJgjIJQeRigK6n3fHm6ykYNeiPVWby1E w9wr1izMKZAwuT/iS7Bkf3smnr0raR8oiR1CEXs55ziVREXmT6U2Agx4F4qG/nCT/AFeIY2syiPTMNeu9rc00dOOz9VHh1arOXeE5xzvCyVl97O8GjjbFgTHfv g/dl7xmB5ivNpv6fXof1ce3D smmhgV75r2zlL6ZLgx0z6tQMVc5NW6UXKquZeaiHp/.../u1QgnNnDNqmFX19rZIjHxEVPW0fB YQm9

http://minecraft-client.1800download.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhnyas6H7KB2sTS35you2dBNJ0bhYqmhZi3pkxYJZCeRSLX Tetz0bIjzsCXFVnZv3a6WVT84XG j/fWp9HbkGFLqtY6gF9QDS/zGDU2nsEj7Cj5SGjaSrpW2pG a2NSKqs5bBIMOb32Unhtc43EJBEw0 L2GWUvf4/glrRrWjb98UjE3/VoDoDrKZ77fXof1cO/F/.../uUXKquZKaiG95M6RIHI48MXRguuGtD1w42gS7lNdCGT7jBAj2o5j2zEwvPXjW DNAz9KQOneiV0bfgPh2ewm9

http://minecraft-client.il.1800download.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv A8/yan9np5ktEPJUykYrn2LTf40l8bOGKGCei1E/Y9xbNykpnBU1nT7SS7BkX9qnq7iefa7dPbm3EN MEiiBZIUny1CDxwkcMr7CC5UGKZSq4IkYSha2ZOLftuPRNMOa7xXGgiIZCbdVlz2uX5QXp8Ldu2w Z2BG woA H3KYuUYC2Kciva3NU2cS5H 0klF4f6YLv2wGkO7h 1CakAcVPk57lFiqr4sfU43JjI cfGdF/.../rBAfhoJn2zEwvPXjW DNAz9KQOneiV0bfgPh2ewm9

http://minecraft-client.pt.1800download.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv A8/yWn9np5iNELJ1XgarP NmG3g15eOHHaRLXzTfclyPpqx8yPBgiT7SS7BkT9qj/7mf6SpNjSg2JZqtY6gF9QFy/zGDUsnsIh9WjwWWmLGeUI2syiPTUNeroxPRNMOav9RCwmJJvcLVgojqPuAFt8JtChk7xjShDk8R6ewKM5RozoOJe8ZDJW2cuvSKFkxl9A/.../20XyhosADn 9X1it54jvhAUmNGCC4T4G1prZNni6R0PYjfp9ewm9

http://minecraft-client.1800download.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxLzZtbB6LpouDa88z421ohSdBK5LKn3fHm/ykYBazeeEKqtGr8lwLpyz4WXAwaDqXakWVT8 3G9if/D04CGxDAJ8MN0 gsBECf7Vms3ipZhqznxGWmaSq4fkZPzPG4NabE5bBINOb2oFWh0O8TJLAll1f wTWFmao6x2 8/HC3 oFGMlv5mFpOve4GkbHtOmZjpD JnlRsf/4r/.../44JDizR1wdjKd j8G1oDZMXaqTUXbjPh9bQm9

http://1800dcdn.blob.core.windows.net/dir195/wi/18/33/1/.../MinecraftInstaller.exe

http://minecraft-client.1800download.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsnV0kODqvGhHga5/Zs kkuzqi9j0w2dBNJ0Tterr4PWG3g15bOHHVQr21E/Y9wbNyx8WPDE b/SXqUwXlszi1jP/D6YCGxTwM4oc7wF9GXmTxU2Ighshq9Cn4UHHkGeIJm4WwYXN Nvp2fkRTZu3pAzIqasWNLBgonue9RjQuO4/02/.../sljdl7xmApivJYruNjMJzcrkF ggnRUR6475jFjzLaB0lya0V5YerpvqCjyr74Ob2SYhYbxRGN1jbCxh4bTjAEk910Puk89PUCbjDB 354jvhAUkNGDFqmFX19rZIjHxEVPW0fB YQm9

http://minecraft-client.pt.1800download.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsnV0kODqvGhHga5/.../5nnG sAcVP7cSpSDrjsJuC3HV0db0AT4I3K30hteenHwhqzRyy3c8bUD7qRQf0qYijnlFxYTWHqmFX19rZIjHxEVPW0fB YQm9

http://minecraft-client.pt.1800download.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhz4coqK6bYk5ib0oGp42aZXcxK0KuqqewrigxAJbj/ZWffyUOAlyPpqx8yPXlXF7SS7BkT9qni8mf6SpNrSgyUS9Yc7wF9EXmSlCDtwlME79WjwW2OTUugFi4e9Zn5CKuUgJFsFMqn9RCcmJpudZEp0yLy3Tn9wJsHg2q4/DWOo8QObjvQ1DpO1e4GkbXtOgIKvFqoumBcHqtGj2Qe/.../vhAUjNGCS5zZAiJvBOzGiRkvPif59ewm9

http://minecraft-client.pt.1800download.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqiHRjwcteQv I253eq ysyl4pHaAW7erC/NXK6ykYFaz3ZSKv2TvEqkOU5kZjZFQfS9SnyHhO/ CL93ufa99PZlWFDp5Y2h1NEXzWtCDRn0Ic79WjwW2mLQa5Xi83jPSVYK6s5bBIIOb2wDyQrJ4mNNBBhhqXuAHB8JNDg2q4/DGuwoCeWwqo/RsPrNLvwLDUNg53oX/dx10gH5sv3jlLqN/MhhSflCc1X/.../O IWB5Y2enUguvCmGRhzhVW61NdWUHW1FAaqqZvszEwvPXjW DNAz9KQOneiV0bfgPh2ewm9

http://minecraft-client.1800download.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv I253eq ysyl4pHaAW7erC/.../UpMvfk2tJqIc7wF9EXmTyQn4s1pY79XLwW2ebSLtYyMPlMzxEYro4PUFWZ738FXB9ctzNJQkpz6vmGDRhPJf5kuc0BHu7oFGMlvtmFsTkLJe8ZDJW3cO3D5R9wUhGr9mrySGmLe4ky3DzQdEIppKpSDrjtZuCzHN8M MBV49 M3wpouOjHwhqzRyz3c8HSnjzDVT5opLvhAUmNGCC4T4G1prZNni6R0PYjfp9ewm9

Remove minecraftinstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.