Gridinsoft Logo
File Icon

The Launcher.exe (Photon Launcher) File Analysis

Updated 2 months ago
Checked by Malaware Check
Launcher.exe

Technical Analysis

File Name Launcher.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
SSDEEP Hash
98304:0LElcq9Aj27JHAwZQw5PAmORpd+XAclmDi9C/lVGEhsz8E+Zx20hq850+5KHO:AElcq9z7Kw/Amm3DomDlfGkhZx20hsHO
Scanner Version 1.0.210.174
Database Version 2025-03-09 19:00:37 UTC
⚠

Suspicious File Detected

Detected by 13 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
18%
Detection Rate
6,872,048
File Size (bytes)
13/72
Engines Detected
2025-03-09
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
3306c8ffe15fea29a0a59fac9805daf4
SHA1
980506195b477689a29f1e94a00ffb56808012dd
SHA256
2ad12bf130d62371e2eceb66955178e26d929899e8e49b84c18925068e867d7a
SHA512
41190e3c2e7d35b24f2dc799c5a10070672bd1e0ae8b369fd8a96bfae0ef9284372d28f94eea8c02dbdf96d2274f63ebd50591b387558a33548e9798c88ba4a7
ImpHash
f34d5f2d4577ed6d9ceec516c1f5a744

Security Engines with Detections (13 of 72)

Bkav
W32.AIDetectMalware.CS Malicious
McAfee
GenericRXAA-AA!3306C8FFE15F Malicious
Zillya
Trojan.VMProtect.Win32.61320 Malicious
Sangfor
Trojan.Win32.Agent.V9li Malicious
CrowdStrike
win/grayware_confidence_100% (W) Malicious
K7GW
Trojan ( 00574e2d1 ) Malicious
K7AntiVirus
Trojan ( 00574e2d1 ) Malicious
Google
Detected Malicious
Varist
W32/ABRisk.VIVV-1732 Malicious
Antiy-AVL
Trojan[Packed]/MSIL.VMProtect Malicious
AhnLab-V3
Malware/Win32.RL_Generic.C4218953 Malicious
SentinelOne
Static AI - Suspicious PE Malicious
Fortinet
PossibleThreat Malicious
59 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 1dabaab8971df237a57f15de5112cb52
Fuzzy: 09453d01fde6534a0a3a504b32fcbb9a
dHash: 70f0ba8aa4e2e070
Image Base 0x00400000
Entry Point 0x01bb6483
Compilation Time 2098-08-17 10:08:59
Checksum 0x0069b802 (Actual: 0x0069b802)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Digital Signature Chain verification from CN=OnlineFix, OU=OnlineFix, O=OnlineFix, L=OnlineFix, ST=OnlineFix, [email protected], C=DE (serial:433694251294498309266283604441513354082034644047, sha1:20e734ee0210946ffde5cf212537251a34f840da) failed: Unable to build a validation path for the certificate "Common Name: OnlineFix, Organizational Unit: OnlineFix, Organization: OnlineFix, Locality: OnlineFix, State/Province: OnlineFix, Email Address: [email protected], Country: DE" - no issuer matching "Common Name: Ascertia Root CA 2, Organization: Ascertia, Country: GB" was found
Imports 1 libraries
mscoree
Exports 0 functions
Resources 8 Resources
Sections 5 Sections

Version Information

▼
Translation 0x0000 0x04b0
Comments Photon Launcher
CompanyName Online-Fix
FileDescription Photon Launcher
FileVersion 1.0.1.0
InternalName Launcher.exe
LegalCopyright Copyright © 2020, 0xdeadc0de
LegalTrademarks Online-Fix
OriginalFilename Launcher.exe
ProductName Photon Launcher
ProductVersion 1.0.1.0
Assembly Version 1.0.1.0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00002000 9,055,736 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.of0 0x008a6000 9,208,962 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.of1 0x01170000 6,733,552 bytes 6,733,824 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 232B5EF5E50B0F46D16103EBE6A758B4
.rsrc 0x017dc000 128,536 bytes 129,024 bytes 5.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0058C5A19FACFE0896DFE32AFC0D9EA4
.reloc 0x017fc000 12 bytes 512 bytes 0.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 8CD2A8E61809ED2C337C086D3F306D73
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 8 (128,058 bytes)
Resource Type Count Total Size Percentage
RT_ICON 6 127,056 bytes
99.2%
RT_GROUP_ICON 1 90 bytes
0.1%
RT_VERSION 1 912 bytes
0.7%

Certificate Chain Analysis

▼
Certificate Information
Product Photon Launcher
Description Photon Launcher
File Version 1.0.1.0
Original Name Launcher.exe
Verification Status A certificate chain could not be built to a trusted root authority.
Internal Name Launcher.exe
Copyright Copyright © 2020, 0xdeadc0de
Certificate Chain Summary
OnlineFix #1 Primary
Validity Period: 2020-10-29 16:31:42 → 2020-11-29 16:31:42
Signature Algorithm: sha256RSA
Serial Number: 4B F7 85 D7 F3 B3 B3 B3 E7 A6 92 77 8E 0D CA 33 3F 6F F4 4F
Ascertia Public CA 1 #2 Chain
Validity Period: 2009-04-21 12:15:17 → 2028-04-14 23:59:59
Signature Algorithm: sha1RSA
Serial Number: E6
TIMESTAMP-SHA256-2019-10-15 #3 Chain
Validity Period: 2019-10-01 00:00:00 → 2030-10-17 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 04 CD 3F 85 68 AE 76 C6 1B B0 FE 71 60 CC A7 6D
DigiCert SHA2 Assured ID Timestamping CA #4 Chain
Validity Period: 2016-01-07 12:00:00 → 2031-01-07 12:00:00
Signature Algorithm: sha256RSA
Serial Number: 0A A1 25 D6 D6 32 1B 7E 41 E4 05 DA 36 97 C2 15

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

Chain verification from CN=OnlineFix, OU=OnlineFix, O=OnlineFix, L=OnlineFix, ST=OnlineFix, [email protected], C=DE (serial:433694251294498309266283604441513354082034644047, sha1:20e734ee0210946ffde5cf212537251a34f840da) failed: Unable to build a validation path for the certificate "Common Name: OnlineFix, Organizational Unit: OnlineFix, Organization: OnlineFix, Locality: OnlineFix, State/Province: OnlineFix, Email Address: [email protected], Country: DE" - no issuer matching "Common Name: Ascertia Root CA 2, Organization: Ascertia, Country: GB" was found

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
13 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware