home

launcher.exe

NEW LAUNCHER!_5.5

Space Earth Studio

This is a setup program which is used to install the application. The file has been seen being downloaded from ru-minecraft.ru.
Publisher:
Space Earth Studio

Product:
NEW LAUNCHER!_5.5

Version:
5.5.0.1589

MD5:
0aa34be6cb5997d7ea8ae0d6cde63ab6

SHA-1:
f7b27c7db6068b9853b34b4caba9d3f326ec0369

SHA-256:
094a60e3805f961b72fa38ecea21c8b0234acc78c0dd5b988b9a74538a4b0adc

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 11:58:05 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0204
7.2.160

File size:
9 MB (9,450,496 bytes)

Product version:
5.5.0.1589

Copyright:
Copyright SES© 2013

Original file name:
NEW LAUNCHER!_5.5.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\launcher.exe

File PE Metadata
Compilation timestamp:
1/19/2014 8:12:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
196608:ayusEY/nxJRE4BG+1+5UFKn3U2zDHowT33TE:aGEYf/R/BGU+5UZ2zDIwz3T

Entry address:
0x8EFFEE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 78, 56, 34, 12, 89, 67, 45, 23, 90, 78, 56, 34, 01, 00, 00, 00, 04, 00, 00, 00, 0D, 00, 00, 00, 28, 00, 00, 00, 79, 00, 00, 00, 6C, 01, 00, 00, 45, 04, 00, 00, D0, 0C, 00, 00, 71, 26, 00, 00, 54, 73, 00, 00, FD, 59, 01, 00, F8, 0D, 04, 00, E9, 29, 0C, 00, BC, 7D, 24, 00, 42, 5A, 68, 00, 42, 5A, 68, 00, 6B, 02, 00, 00, D0, 02, 00, 00, 7F, 00, 00, 00, E1, 01, 00, 00, A3, 03, 00, 00, 30, 03, 00, 00, 2D, 03, 00, 00, E9, 00, 00, 00, 36, 02...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
8.9 MB (9,363,456 bytes)

The file launcher.exe has been seen being distributed by the following URL.

http://ru-minecraft.ru/engine/dude/.../leech_out.php?a:aHR0cDovL2ZpbGUucnUtbWluZWNyYWZ0LnJ1L3VwZGF0ZS9uZXdsYXVuY2hlcmxhdGVzdC5leGU=

Scan launcher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.