Gridinsoft Logo
File Icon

The Launcher.exe (Launcher) File Analysis

Technical Analysis

File Name Launcher.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
196608:hCqllBPmdvQ7J82T0i0opVYCwlEzHPaZ0dEAtyh6YEKFJm5SiFcVNfvTDok9KKKD:QqhPhu5bVlWPw2XGEKnmCDp
Scanner Version 1.0.217.174
Database Version 2025-05-31 20:00:19 UTC

Suspicious File Detected

Detected by 40 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
56%
Detection Rate
13,606,912
File Size (bytes)
40/72
Engines Detected
2025-05-31
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
37b897874008088e4e2d5439cbd7e5b3
SHA1
af0c085bfd46e9cad4974eade79e5fac2a9725b6
SHA256
7bd5ebecf003e7c83d5b0f17edc43bb0b3f3b04bcb99c0e3cbe18abb5ed269c6
SHA512
d70b48c11b9bd1290f9fbb730242e74ddec87161f299acdd700cf00de692d421a1244c4088be11b3507b574f4a7d31db72553ec148146215a38c3bbb4b1e546f
ImpHash
ecdb5cd75e454d306a604b04024a7e0e

Security Engines with Detections (40 of 72)

Bkav
W32.AIDetectMalware Malicious
Lionic
Trojan.Win32.Generic.4!c Malicious
Elastic
malicious (high confidence) Malicious
MicroWorld-eScan
Trojan.GenericKD.75843412 Malicious
CTX
exe.trojan.crypt Malicious
CAT-QuickHeal
Trojan.Ghanarava.1740520743d7e5b3 Malicious
McAfee
Artemis!37B897874008 Malicious
Cylance
Unsafe Malicious
Sangfor
Trojan.Win32.Agent.Vhys Malicious
K7GW
Riskware ( 00584baa1 ) Malicious
K7AntiVirus
Riskware ( 00584baa1 ) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09BF25 Malicious
Paloalto
generic.ml Malicious
BitDefender
Trojan.GenericKD.75843412 Malicious
Avast
Win32:Malware-gen Malicious
Rising
[email protected] (RDML:3R7X5UUrDAgTprh6+sxabQ) Malicious
Emsisoft
Trojan.GenericKD.75843412 (B) Malicious
F-Secure
Trojan.TR/Crypt.XPACK.Gen4 Malicious
VIPRE
Trojan.GenericKD.75843412 Malicious
McAfeeD
ti!7BD5EBECF003 Malicious
Trapmine
malicious.high.ml.score Malicious
Sophos
Mal/Generic-S Malicious
Ikarus
Trojan.Crypt Malicious
GData
Trojan.GenericKD.75843412 Malicious
Google
Detected Malicious
Avira
TR/Crypt.XPACK.Gen4 Malicious
Varist
W32/ABTrojan.SMFD-3139 Malicious
Antiy-AVL
GrayWare/Win32.Wacapew Malicious
Kingsoft
malware.kb.a.843 Malicious
Arcabit
Trojan.Generic.D4854754 Malicious
Microsoft
Trojan:Win32/Yomal!rfn Malicious
Cynet
Malicious (score: 99) Malicious
AhnLab-V3
Trojan/Win.Generic.C5730912 Malicious
ALYac
Trojan.GenericKD.75843412 Malicious
Malwarebytes
Malware.AI.1693356573 Malicious
Panda
Trj/Chgt.AD Malicious
MaxSecure
Trojan.Malware.325019807.susgen Malicious
Fortinet
W32/PossibleThreat Malicious
AVG
Win32:Malware-gen Malicious
32 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

Icon
Hash: bbd6c5f449a92710684e6cd8cdc5b603
Fuzzy: 88e7314b7e72e7be4093898583037805
dHash: e4d292d292121edc
Image Base 0x00400000
Entry Point 0x00406f10
Compilation Time 2010-07-05 08:19:14
Checksum 0x00000000 (Actual: 0x00d01b3f)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path E:\LP2WINAPI\launcher\Release\Launcher.pdb
Digital Signature No valid SignedData structure was found.
Imports 8 libraries
DINPUT8, COMCTL32, SHLWAPI, KERNEL32, USER32, GDI32, ADVAPI32, SHELL32
Exports 0 functions
Resources 103 Resources
Sections 5 Sections

Version Information

CompanyName CAPCOM CO., LTD.
FileDescription Launcher
FileVersion 1, 0, 0, 129
LegalCopyright (c)CAPCOM CO., LTD. 2010 ALL RIGHTS RESERVED.
ProductName LOST PLANET 2
ProductVersion 1, 0, 0, 129
Translation 0x0000 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 82,457 bytes 82,944 bytes 6.55 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 809601CE67CDDFCF73D52FCEBCCAD17A
.rdata 0x00016000 214,868 bytes 215,040 bytes 7.09 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 74C5AF611C32BF30FF206A4C4AC26DC7
.data 0x0004b000 18,040 bytes 8,704 bytes 3.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 14ECF2316C56EE795EA1CF1A3662EDF2
.rsrc 0x00050000 13,293,304 bytes 13,293,568 bytes 7.40 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C3EC897F8466EAE643D4E6D8E01980D1
.extra 0x00cfe000 8,192 bytes 5,472 bytes 7.20 (Compressed) IMAGE_SCN_MEM_DISCARDABLE 93ABC37002EEC8BC08979327C5F15E93
Entropy Analysis Alert

4 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 103 (13,289,049 bytes)
Resource Type Count Total Size Percentage
DATA 20 1,222,840 bytes
9.2%
RT_BITMAP 10 11,100,746 bytes
83.5%
RT_ICON 40 956,610 bytes
7.2%
RT_MENU 11 2,424 bytes
0%
RT_DIALOG 10 4,134 bytes
0%
RT_GROUP_ICON 10 620 bytes
0%
RT_VERSION 1 660 bytes
0%
RT_MANIFEST 1 1,015 bytes
0%

Certificate Chain Analysis

Certificate Information
Product LOST PLANET 2
Description Launcher
File Version 1, 0, 0, 129
Copyright (c)CAPCOM CO., LTD. 2010 ALL RIGHTS RESERVED.
Certificate Chain Summary
VeriSign Time Stamping Services Signer - G2 #1 Primary
Validity Period: 2007-06-15 00:00:00 → 2012-06-14 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 38 25 D7 FA F8 61 AF 9E F4 90 E7 26 B5 D6 5A D5
VeriSign Time Stamping Services CA #2 Chain
Validity Period: 2003-12-04 00:00:00 → 2013-12-03 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 47 BF 19 95 DF 8D 52 46 43 F7 DB 6D 48 0D 31 A4
VeriSign Class 3 Code Signing 2009-2 CA #3 Chain
Validity Period: 2009-05-21 00:00:00 → 2019-05-20 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 65 52 26 E1 B2 2E 18 E1 59 0F 29 85 AC 22 E7 5C
CAPCOM Co.,Ltd. #4 Chain
Validity Period: 2010-04-08 00:00:00 → 2011-04-08 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 6C 63 57 8E 31 7E 08 C0 9C B4 7E B6 77 13 20 B4

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
40 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware