File name:

ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe

Full analysis: https://app.any.run/tasks/b516648b-6a90-4c5a-86c4-2494ef8b272d
Verdict: Malicious activity
Analysis date: November 19, 2024, 16:41:02
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections
MD5:

BEF9B0D54F50E20AE94DF12E4A0E73C8

SHA1:

753D4D7C7CD246564EB1B835345DBF3D2E16B2EA

SHA256:

9DE3F020F978BE2579586D2101C20984D7BAA3F327960BD7B80CFEF8C7728659

SSDEEP:

98304:yLbkHLWqniKHqv2YatowEq4iJwwTkGBIb9LhhtTFZ0Y6lvRrJpVaUZqFkP8kK6SN:jJp2eNsj1MJOMEkeuLuzvwO

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Changes the autorun value in the registry

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

  • SUSPICIOUS

    • The process creates files with name similar to system file names

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Executable content was dropped or overwritten

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 6120)
      • rundll32.exe (PID: 6560)
      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Reads security settings of Internet Explorer

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Suspicious use of NETSH.EXE

      • EPS.Devices.ClientNstall.App.exe (PID: 6980)
      • EPS.Devices.WPFServiceHost.App.exe (PID: 6612)

    • Process drops legitimate windows executable

      • msiexec.exe (PID: 6404)

    • Searches for installed software

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Creates a software uninstall entry

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

  • INFO

    • Create files in a temporary directory

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 6120)
      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Checks supported languages

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 6120)
      • msiexec.exe (PID: 6404)
      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Executable content was dropped or overwritten

      • msiexec.exe (PID: 6404)

    • Reads the computer name

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)
      • msiexec.exe (PID: 6404)

    • Sends debugging messages

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Reads the machine GUID from the registry

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Creates files or folders in the user directory

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win64 Executable (generic) (64.6)
.dll | Win32 Dynamic Link Library (generic) (15.4)
.exe | Win32 Executable (generic) (10.5)
.exe | Generic Win/DOS Executable (4.6)
.exe | DOS Executable Generic (4.6)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:09:17 05:33:38+00:00
ImageFileCharacteristics: Executable, 32-bit, Removable run from swap, Net run from swap
PEType: PE32
LinkerVersion: 14.16
CodeSize: 299008
InitializedDataSize: 161792
UninitializedDataSize: -
EntryPoint: 0x2df71
OSVersion: 5.1
ImageVersion: -
SubsystemVersion: 5.1
Subsystem: Windows GUI
FileVersionNumber: 5.10.9025.21150
ProductVersionNumber: 5.10.9025.21150
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Windows, Latin1
CompanyName: Jack Henry & Associates
FileDescription: EPS Device Control
FileVersion: 5.10.9025.21150
InternalName: setup
LegalCopyright: Copyright (c) Jack Henry & Associates. All rights reserved.
OriginalFileName: ProfitStarsDeviceControlLauncher.exe
ProductName: EPS Device Control
ProductVersion: 5.10.9025.21150
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
145
Monitored processes
27
Malicious processes
3
Suspicious processes
2

Behavior graph

Click at the process to see the details
start profitstarsdevicecontrollauncher_5.10.9025.21150.exe profitstarsdevicecontrollauncher_5.10.9025.21150.exe msiexec.exe msiexec.exe no specs rundll32.exe eps.devices.wpfservicehost.app.exe eps.devices.clientnstall.app.exe netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
712"netsh" http show sslcert ipport=0.0.0.0:37131C:\Windows\SysWOW64\netsh.exe—EPS.Devices.WPFServiceHost.App.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Network Command Shell
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
1224"netsh" http add sslcert ipport=0.0.0.0:37121 appid={b674c0af-2aa7-4451-b9f4-cc7379fab63f} certhash=13DB61A64C4B993C2AB40E382185625432554C47 certstorename=RootC:\Windows\SysWOW64\netsh.exe—EPS.Devices.ClientNstall.App.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Network Command Shell
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
1348\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—netsh.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
2420"netsh" http show sslcert ipport=0.0.0.0:37131C:\Windows\SysWOW64\netsh.exe—EPS.Devices.ClientNstall.App.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Network Command Shell
Exit code:
1
Version:
10.0.19041.1 (WinBuild.160101.0800)
2796"netsh" http delete sslcert ipport=0.0.0.0:37131C:\Windows\SysWOW64\netsh.exe—EPS.Devices.ClientNstall.App.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Network Command Shell
Exit code:
1
Version:
10.0.19041.1 (WinBuild.160101.0800)
2860\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—netsh.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
3772\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—netsh.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
4976"C:\Users\admin\AppData\Local\Temp\{BA27640A-17A9-4AC7-837E-9C87F12EE491}\.cr\ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe" -burn.clean.room="C:\Users\admin\AppData\Local\Temp\ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe" -burn.filehandle.attached=676 -burn.filehandle.self=692 C:\Users\admin\AppData\Local\Temp\{BA27640A-17A9-4AC7-837E-9C87F12EE491}\.cr\ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
User:
admin
Company:
Jack Henry & Associates
Integrity Level:
MEDIUM
Description:
EPS Device Control
Exit code:
0
Version:
5.10.9025.21150
Modules
Images
c:\users\admin\appdata\local\temp\{ba27640a-17a9-4ac7-837e-9c87f12ee491}\.cr\profitstarsdevicecontrollauncher_5.10.9025.21150.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\aclayers.dll
5660\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—netsh.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
5864"C:\Windows\System32\netsh.exe" http add urlacl url=https://+:37131/ user=\EveryoneC:\Windows\SysWOW64\netsh.exe—EPS.Devices.ClientNstall.App.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Network Command Shell
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Total events
6 948
Read events
6 747
Write events
185
Delete events
16

Modification events

(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleCachePath
Value:
C:\Users\admin\AppData\Local\Package Cache\{91bd815e-7588-4618-a38f-32c5c2b77f91}\ProfitStarsDeviceControlLauncher.exe
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleUpgradeCode
Value:
{7A74CB9A-9FFB-47AC-B704-0810E2D3AF9E}
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleAddonCode
Value:
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleDetectCode
Value:
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundlePatchCode
Value:
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleVersion
Value:
5.10.9025.21150
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:VersionMajor
Value:
5
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:VersionMinor
Value:
10
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleProviderKey
Value:
{91bd815e-7588-4618-a38f-32c5c2b77f91}
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleTag
Value:
Executable files
76
Suspicious files
27
Text files
44
Unknown types
2

Dropped files

PID
Process
Filename
Type
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\mbapreq.dllexecutable
MD5:FE7E0BD53F52E6630473C31299A49FDD
SHA256:2BEA14D70943A42D344E09B7C9DE5562FA7E109946E1C615DD584DA30D06CC80
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\mbapreq.thmxml
MD5:A20778EC90A094A62A6C3A6AB2A6DC7D
SHA256:F8C3A03F47F0B9B3C20F0522A2481DA28C77FECDBB302F8DD8FBED87758CBAEA
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\1029\mbapreq.wxlxml
MD5:CC8C6D04DC707B38E0F0C08BA16FE49B
SHA256:DC445E2457ED31ABF536871F90FF7CC96800A40B6BC033F37D45E3156A3B4FA9
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\mbapreq.pngimage
MD5:A356956FD269567B8F4612A33802637B
SHA256:A401A225ADDAF89110B4B0F6E8CF94779E7C0640BCDD2D670FFCF05AAB0DAD03
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\InfragisticsWPF4.Editors.v11.2.dllexecutable
MD5:80488AE9CB631E8CC4CF66711F7CE012
SHA256:F1AF70C5C5055E77709629A260E2119AEB45A12158F9FAA7DB7DC64FAC46FDB6
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\BootstrapperCore.dllexecutable
MD5:B0D10A2A622A322788780E7A3CBB85F3
SHA256:F2C2B3CE2DF70A3206F3111391FFC7B791B32505FA97AEF22C0C2DBF6F3B0426
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\1028\mbapreq.wxlxml
MD5:1D4B831F77EFEC96FFBC70BC4B59B8B5
SHA256:1B93556F07C35AC0564D57E0743CCBA231950962C6506C8D4A74A31CD66FD04C
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\mbahost.dllexecutable
MD5:C59832217903CE88793A6C40888E3CAE
SHA256:9DFA1BC5D2AB4C652304976978749141B8C312784B05CB577F338A0AA91330DB
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\1036\mbapreq.wxlxml
MD5:AA32A059AADD42431F7837CB1BE7257F
SHA256:88E7DDACD6B714D94D5322876BD50051479B7A0C686DC2E9EB06B3B7A0BC06C9
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\JHAWPFCtls_2012.9.0.dllexecutable
MD5:8F6CD3D7851ED0189E2863A0D0AD9B4D
SHA256:0193EB2026E64D43C7106C24B587272E0880047D19A5D421DBEF69C7DBFA5173
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
9
TCP/UDP connections
32
DNS requests
15
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
—
—
GET
200
2.16.164.115:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
—
—
GET
200
2.16.164.115:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
—
—
GET
200
88.221.169.152:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
—
—
whitelisted
—
—
GET
200
88.221.169.152:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
—
—
whitelisted
5064
SearchApp.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
1176
svchost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
6232
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
6232
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
3856
backgroundTaskHost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
—
—
40.127.240.158:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
4
System
192.168.100.255:138
—
—
—
whitelisted
—
—
2.16.164.115:80
crl.microsoft.com
Akamai International B.V.
NL
whitelisted
—
—
88.221.169.152:80
www.microsoft.com
AKAMAI-AS
DE
whitelisted
5660
RUXIMICS.exe
40.127.240.158:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
4932
svchost.exe
40.127.240.158:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
4
System
192.168.100.255:137
—
—
—
whitelisted
5064
SearchApp.exe
2.23.209.176:443
www.bing.com
Akamai International B.V.
GB
whitelisted
1176
svchost.exe
20.190.159.0:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
5064
SearchApp.exe
192.229.221.95:80
ocsp.digicert.com
EDGECAST
US
whitelisted

DNS requests

Domain
IP
Reputation
google.com
  • 142.250.184.206
whitelisted
crl.microsoft.com
  • 2.16.164.115
  • 2.16.164.114
  • 2.16.164.131
  • 2.16.164.96
  • 2.16.164.98
  • 2.16.164.99
  • 2.16.164.16
  • 2.16.164.83
  • 2.16.164.90
whitelisted
www.microsoft.com
  • 88.221.169.152
  • 184.30.21.171
whitelisted
www.bing.com
  • 2.23.209.176
  • 2.23.209.183
  • 2.23.209.158
  • 2.23.209.156
  • 2.23.209.179
  • 2.23.209.161
  • 2.23.209.160
  • 2.23.209.177
  • 2.23.209.182
whitelisted
login.live.com
  • 20.190.159.0
  • 20.190.159.68
  • 20.190.159.73
  • 40.126.31.69
  • 20.190.159.23
  • 40.126.31.73
  • 20.190.159.71
  • 20.190.159.75
whitelisted
ocsp.digicert.com
  • 192.229.221.95
whitelisted
go.microsoft.com
  • 184.28.89.167
whitelisted
slscr.update.microsoft.com
  • 4.175.87.197
whitelisted
fe3cr.delivery.mp.microsoft.com
  • 13.85.23.206
whitelisted
arc.msn.com
  • 20.223.36.55
whitelisted

Threats

No threats detected
Process
Message
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
Launching custom InstallerBA UX
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
FillApplicationData: installerVersion Version: '5.10.9025.21150'
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
EPS1 MSI Detected
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
ProfitStars: Setting up Trace Listeners
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
ProfitStars: Setting up FileStream
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
ProfitStars: Trace Directory Doesn't Exist. Creating it..
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
ProfitStars: Trace File: C:\Users\admin\AppData\Local\ProfitStars\Devices\Logs\Launcher.txt
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
Setting Resource Assembly...
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
I Launcher InstallerBA - Start Time: '2024-11-19 16:41:17.314'
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
I Launcher InstallerBA - Brand - ProfitStars
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe