home

atlauncher.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from downloader.disk.yandex.ua and multiple other hosts.
MD5:
fb3ca71c926d518d5cbc4a022bb855ea

SHA-1:
b2c6a14e71615354ce0d689c1cd095f1d0c8ce1f

SHA-256:
c47873c639bbf0f6dd3fc1e20ec406e200e88206609e60b62d2386aa3b42ad67

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:03:11 PM UTC  (today)

File size:
968.5 KB (991,760 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\atlauncher.exe

File PE Metadata
Compilation timestamp:
6/28/2014 8:13:25 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
24576:m5olrJxOSA7rCUPknUzssdoTq0FrtEsDDp:msrJx0rVEUzssdoTFZEsDd

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 9C, 12, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, DC, 12, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, C4, 12, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, 37, 40, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 07, 0B, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Entropy:
7.8190

Packer / compiler:
MingWin32

Code size:
18.5 KB (18,944 bytes)

The file atlauncher.exe has been seen being distributed by the following 15 URLs.

https://downloader.disk.yandex.ua/disk/c823071d991f9dd64bdb36c29eab12f433a5e6736e434e2d8d6a19d7b35a465f/57e15e41/.../x-msdownload&fsize=991760&hid=d2f87c309172fa54b35dbe8ad8bfeee5&media_type=executable&tknv=v2

http://download1400.mediafire.com/bmkmk0r5jwog/.../ATLauncher.exe

https://cloclo16.cldmail.ru/2u7kE2xujNALzQko8C8s/G/.../ATLauncher.exe

https://downloader.disk.yandex.ru/disk/ac8efb98a5c554f75637ac85209c76722d3959cf639af4c838d1dc1532f828cf/57d730de/.../x-msdownload&fsize=991760&hid=d2f87c309172fa54b35dbe8ad8bfeee5&media_type=executable&tknv=v2

http://www.atlauncher.com/.../ATLauncher.exe

https://downloader.disk.yandex.ru/disk/e584000645a8e3fe15c8e191a219a2ca293f32e33d281ba55d7e721cf3764019/5761589b/.../x-msdownload&fsize=991760&hid=d2f87c309172fa54b35dbe8ad8bfeee5&media_type=executable&tknv=v2

https://cloclo15.datacloudmail.ru/weblink/get/.../ATLauncher.exe

https://zima28e.storage.yandex.net/rdisk/d5c9dacbab77b6b3e42f919a3e9e65681de440e9ee3f7a7daf4d4f87a15ff44c/56d71e1e/.../x-msdownload&fsize=991760&hid=d2f87c309172fa54b35dbe8ad8bfeee5&media_type=executable&tknv=v2&rtoken=tGYB9QzAVHvk&force_default=no&ycrid=na-d7c885a9f4e0b7e87d632f4c4e94c4f5-downloader9d

https://cloclo14.cldmail.ru/7QMMcGXdr1gb9U895Vs/G/.../ATLauncher.exe

https://cloclo18.cldmail.ru/UBAQZLgeoD8TprEJbiw/G/.../ATLauncher.exe

https://cloclo27.cldmail.ru/2jMiQUkEWWfBKYzRw2Co/G/.../ATLauncher.exe

https://downloader.disk.yandex.ru/disk/9703765bef0e047b1e6f20439478f2ea1d6f570ce2be4f185153522fe3958a43/56d81e81/.../x-msdownload&fsize=991760&hid=d2f87c309172fa54b35dbe8ad8bfeee5&media_type=executable&tknv=v2

http://www.atlauncher.com/downloadfile.php

http://www.atlauncher.com/.../ATLauncher.exe

http://www.atlauncher.com/download/.../

Scan atlauncher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.