home

launcher_setup.exe

Automation Install Program

This is a setup and installation application. The file has been seen being downloaded from automationgame.com and multiple other hosts.
Product:
Automation Install Program

Version:
2, 0, 0, 43

MD5:
ea6ad673e2598a225530b8860849c138

SHA-1:
7e189d0dcc4d7fa0815366decca751ec4ee94ad7

SHA-256:
400a2dc7e5da696ff1333e7e16443e71d7fd9b716a660d4f75c46e38a526b19a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/16/2024 7:18:29 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
Suspicious_GEN.F47V0909
7.2.60

File size:
3.7 MB (3,928,584 bytes)

Product version:
2, 0, 0, 43

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\launcher_setup.exe

File PE Metadata
Compilation timestamp:
12/8/2011 1:35:06 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:/bgXtzFxZM+WBcUumcHDMUK11U6mCFTa4G3Gw:kbxZF4d1eMRGWw

Entry address:
0x1BCF2

Entry point:
55, 8B, EC, 6A, FF, 68, 98, 37, 42, 00, 68, 38, F4, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, C4, 30, 42, 00, 33, D2, 8A, D4, 89, 15, 34, BC, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 30, BC, 42, 00, C1, E1, 08, 03, CA, 89, 0D, 2C, BC, 42, 00, C1, E8, 10, A3, 28, BC, 42, 00, 33, F6, 56, E8, C5, 03, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 1E, 35, 00, 00, FF, 15, 34, 31, 42, 00, A3, 4C, C2, 42, 00, E8...
 
[+]

Entropy:
7.9812

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
136 KB (139,264 bytes)

The file launcher_setup.exe has been seen being distributed by the following 4 URLs.

http://automationgame.com/download.php?f=g4m4k4p4y254u254u4n4k4g4i5t4d4s5w59454u5a4r264j4r5o2b4u5o5c4c4e4x5o2v464n4n4i5d4d4k4z3w35426s4k4v284t484

http://automationgame.com/download.php?f=p50606j463n2w284q4k4l4m4g5z5a4s5f4g434h4k5q2h5v5i4s2i5k484o5h4d4w5v2h384l4e4j594m5y5f5q3d4k4u4n4r254u4e4

http://automationgame.com/download.php?f=94l4m4n4b4441464q4s4h4e4a4o4p5h4h4c4h5u5m5n284t5s5v2k5e4m5i4r564s4t2h3j5u4l4g5p564j414u3i516z5l4r2d4q464

http://automationgame.com/download.php?f=e4t4y5v5e4u2p244y526t5l434m4e4h4n4p564j4n5u294s5r5t274e4f4i4j4d4x5s2g374r4k484q5b4r4d525l5r4n4j4z3n526d4

Scan launcher_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.