home

lol.launcher.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s1720.chomikuj.pl and multiple other hosts.
MD5:
6d0ceaf819e45420f0987b63a051e558

SHA-1:
63992e1dcb0943b88cc72b2dbcd79b339941c7af

SHA-256:
9b4d241f2d6ec29a4e590369e5151c35714f5bb95147558b497a5e3750615f4b

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
1/13/2025 9:44:25 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Clod1d3.Trojan
1.3.0.4613

File size:
88 KB (90,112 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\lol.launcher.exe

File PE Metadata
Compilation timestamp:
4/28/2011 6:32:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:ZKT0ghJktORloIBLIHqKqvZORIKskz/oo16rXS:0wghCtORlKqxO6rqIri

Entry address:
0x4161

Entry point:
E8, BA, 04, 00, 00, E9, 39, FD, FF, FF, CC, FF, 25, E4, 81, 40, 00, 53, 8A, 5C, 24, 08, F6, C3, 02, 56, 8B, F1, 74, 24, 57, 68, A6, 47, 40, 00, 8D, 7E, FC, FF, 37, 6A, 0C, 56, E8, 80, 05, 00, 00, F6, C3, 01, 74, 07, 57, E8, 2B, 00, 00, 00, 59, 8B, C7, 5F, EB, 13, E8, FE, 05, 00, 00, F6, C3, 01, 74, 07, 56, E8, 15, 00, 00, 00, 59, 8B, C6, 5E, 5B, C2, 04, 00, CC, FF, 25, 90, 81, 40, 00, FF, 25, 8C, 81, 40, 00, FF, 25, 88, 81, 40, 00, 6A, 14, 68, A0, CC, 40, 00, E8, 9E, 03, 00, 00, FF, 35, 18, F9, 40, 00, 8B...
 
[+]

Code size:
28 KB (28,672 bytes)

Windows Firewall Allowed Program
Name:
C:\Riot Games\League of Legends\lol.launcher.exe


The file lol.launcher.exe has been discovered within the following programs.

League of Legends  by Riot Games
League of Legends (LoL) is a multiplayer online battle arena video game developed and published by Riot Games for Microsoft Windows. Players are formed into 2 even teams of Champions, 3v3 or 5v5. League of Legends is a session-based game.
www.RiotGames.com
12% remove it
LOLReplay  by LeagueReplays.com
Publisher's description - “Just leave the LOLReplay recorder application running in the background. It’s as simple as that! As long as it’s running then LOLReplay will record your matches to your replay directory for you to watch or upload at a later date! ”
www.leaguereplays.com
About 8% of users remove it
Uninstall LSI  by Aequus Gaming Ltd.
www.leaguelsi.com
About 2% of users remove it
 
Powered by Should I Remove It?

The file lol.launcher.exe has been seen being distributed by the following 4 URLs.

http://s1720.chomikuj.pl/File.aspx?e=mh61Fij0Uc3Gpz4YoanezK_F_I5N1CylTONNhCzGjsaGh-4yz_BAHYRY4_aGM57NgVUWgflyFSkDAgP51x3E5cSE9NdQuR4eVAfqTbj6jYOxbIeDUM4OfxUfYRvbpExKrnMw1YndGYUvLnXaxCBAOw&pv=2

http://s1720.chomikuj.pl/File.aspx?e=mh61Fij0Uc3Gpz4YoanezK_F_I5N1CylTONNhCzGjsaIKQa7ePLUQGVDuahY-EgG1dJImjMnIS6iCoenBn9LaUKqJ3q67y_nFcGpzhQ9fyXxGYoiV8LDEDKcCWn_b6IuqNfXbkJa27h3hSoi1vZ8sg&pv=2

http://s1720.chomikuj.pl/File.aspx?e=mh61Fij0Uc3Gpz4YoanezK_F_I5N1CylTONNhCzGjsbDB-XbLn4ll_buDPFZAlWRXVsH2la81hMGtN2-voIoy1Irjock5SUhB0LvbO9gUTuEW-9ppWwZyAJjDbWwdpznca94Ysisrbueq2ipFKZs9Q&pv=2

http://s1720.chomikuj.pl/File.aspx?e=mh61Fij0Uc3Gpz4YoanezK_F_I5N1CylTONNhCzGjsYkdI4cFCHzz9zOth0y56NVL_igDoVjHRmkQqJG_G23OQlPEjxDdDehipDu2M0c1cCqCz_GKomOpyKJwKVSpxiA2HAETz8okbjkiRE5tmzo_g&pv=2

Scan lol.launcher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.