home

launcher.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download2172.mediafire.com and multiple other hosts.
MD5:
63ccf5ce1338aac40380cc10d558bf15

SHA-1:
893271d344d348ef4a5a09991675dbb31dc9df9a

SHA-256:
f292500ce450151a91923c05d8373133aa28ecab978087b770418f943e147864

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/27/2024 3:49:26 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Trojan.Packed.38208
9.0.1.0333

Rising Antivirus
PE:Trojan.Agent!6.DCB [F]
23.00.65.151127

Zillya! Antivirus
Downloader.DownloaderGuide.Win32.2015
2.0.0.2599

File size:
1.2 MB (1,205,947 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\launcher.exe

File PE Metadata
Compilation timestamp:
11/20/2015 3:38:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.22

CTPH (ssdeep):
24576:zylWl3b3oMBQJeRsbMJiOKILxiFBDecEXF0oPjH15MWTBVs7:yA3J+aiOKILxIdEVv9TBVs7

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 8C, 22, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, C4, 22, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, B0, 22, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, CF, 57, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 67, 0D, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Entropy:
7.9439

Packer / compiler:
MingWin32

Code size:
23.5 KB (24,064 bytes)

The file launcher.exe has been seen being distributed by the following 37 URLs.

http://download2172.mediafire.com/kxx2b9r98otg/.../Launcher.exe

http://download1099.mediafire.com/n5p9gwq763sg/.../Launcher.exe

http://download658.mediafire.com/sykdljxgxulg/.../Launcher.exe

http://download1099.mediafire.com/jbi2xbfcsitg/.../Launcher.exe

http://download1099.mediafire.com/cwemmia3c8qg/.../Launcher.exe

http://download658.mediafire.com/c3gzmd9xl7ag/.../Launcher.exe

http://download658.mediafire.com/gbnodl851dgg/.../Launcher.exe

http://download658.mediafire.com/w77hszmamc7g/.../Launcher.exe

http://download1099.mediafire.com/lwgbd4mb7vdg/.../Launcher.exe

http://download658.mediafire.com/ode9oxubkepg/.../Launcher.exe

http://download658.mediafire.com/b7idq05001mg/.../Launcher.exe

http://download658.mediafire.com/mogru2rguywg/.../Launcher.exe

http://download658.mediafire.com/zvfw4c36roxg/.../Launcher.exe

http://download1099.mediafire.com/i5i96u3fxsug/.../Launcher.exe

http://download658.mediafire.com/tq3rgtztr7kg/.../Launcher.exe

http://download1099.mediafire.com/zc2j0agsllwg/.../Launcher.exe

http://download2172.mediafire.com/9cbut8m3q8cg/.../Launcher.exe

http://download658.mediafire.com/t30f9ofee2lg/.../Launcher.exe

http://download950.mediafire.com/fn8a7do9kwsg/.../Launcher.exe

http://download658.mediafire.com/rxg8unceo03g/.../Launcher.exe

http://download1099.mediafire.com/5eizh09icjlg/.../Launcher.exe

http://download1099.mediafire.com/dbylt5s7kldg/.../Launcher.exe

http://download1099.mediafire.com/1006117yvvcg/.../Launcher.exe

http://download658.mediafire.com/a8vouun0t5mg/.../Launcher.exe

http://download1099.mediafire.com/ab4d2r233rdg/.../Launcher.exe

http://download658.mediafire.com/0j0p4fgd8a3g/.../Launcher.exe

http://download658.mediafire.com/rk62i48k8kzg/.../Launcher.exe

http://download658.mediafire.com/wrn8qr1dlqeg/.../Launcher.exe

http://download658.mediafire.com/d2ywda5f77hg/.../Launcher.exe

http://www.funnetzwerk.eu/1.8Launcher.exe

Latest 30 of 37 download URLs

Scan launcher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.