File name:

ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe

Full analysis: https://app.any.run/tasks/b516648b-6a90-4c5a-86c4-2494ef8b272d
Verdict: Malicious activity
Analysis date: November 19, 2024, 16:41:02
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections
MD5:

BEF9B0D54F50E20AE94DF12E4A0E73C8

SHA1:

753D4D7C7CD246564EB1B835345DBF3D2E16B2EA

SHA256:

9DE3F020F978BE2579586D2101C20984D7BAA3F327960BD7B80CFEF8C7728659

SSDEEP:

98304:yLbkHLWqniKHqv2YatowEq4iJwwTkGBIb9LhhtTFZ0Y6lvRrJpVaUZqFkP8kK6SN:jJp2eNsj1MJOMEkeuLuzvwO

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Changes the autorun value in the registry

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 6120)
      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)
      • rundll32.exe (PID: 6560)

    • The process creates files with name similar to system file names

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Searches for installed software

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Reads security settings of Internet Explorer

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Creates a software uninstall entry

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Process drops legitimate windows executable

      • msiexec.exe (PID: 6404)

    • Suspicious use of NETSH.EXE

      • EPS.Devices.WPFServiceHost.App.exe (PID: 6612)
      • EPS.Devices.ClientNstall.App.exe (PID: 6980)

  • INFO

    • Checks supported languages

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 6120)
      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)
      • msiexec.exe (PID: 6404)

    • Create files in a temporary directory

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 6120)
      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Reads the computer name

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)
      • msiexec.exe (PID: 6404)

    • Creates files or folders in the user directory

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Sends debugging messages

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Reads the machine GUID from the registry

      • ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe (PID: 4976)

    • Executable content was dropped or overwritten

      • msiexec.exe (PID: 6404)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win64 Executable (generic) (64.6)
.dll | Win32 Dynamic Link Library (generic) (15.4)
.exe | Win32 Executable (generic) (10.5)
.exe | Generic Win/DOS Executable (4.6)
.exe | DOS Executable Generic (4.6)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:09:17 05:33:38+00:00
ImageFileCharacteristics: Executable, 32-bit, Removable run from swap, Net run from swap
PEType: PE32
LinkerVersion: 14.16
CodeSize: 299008
InitializedDataSize: 161792
UninitializedDataSize: -
EntryPoint: 0x2df71
OSVersion: 5.1
ImageVersion: -
SubsystemVersion: 5.1
Subsystem: Windows GUI
FileVersionNumber: 5.10.9025.21150
ProductVersionNumber: 5.10.9025.21150
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Windows, Latin1
CompanyName: Jack Henry & Associates
FileDescription: EPS Device Control
FileVersion: 5.10.9025.21150
InternalName: setup
LegalCopyright: Copyright (c) Jack Henry & Associates. All rights reserved.
OriginalFileName: ProfitStarsDeviceControlLauncher.exe
ProductName: EPS Device Control
ProductVersion: 5.10.9025.21150
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
145
Monitored processes
27
Malicious processes
3
Suspicious processes
2

Behavior graph

Click at the process to see the details
start profitstarsdevicecontrollauncher_5.10.9025.21150.exe profitstarsdevicecontrollauncher_5.10.9025.21150.exe msiexec.exe msiexec.exe no specs rundll32.exe eps.devices.wpfservicehost.app.exe eps.devices.clientnstall.app.exe netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs netsh.exe no specs conhost.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
712"netsh" http show sslcert ipport=0.0.0.0:37131C:\Windows\SysWOW64\netsh.exe—EPS.Devices.WPFServiceHost.App.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Network Command Shell
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
1224"netsh" http add sslcert ipport=0.0.0.0:37121 appid={b674c0af-2aa7-4451-b9f4-cc7379fab63f} certhash=13DB61A64C4B993C2AB40E382185625432554C47 certstorename=RootC:\Windows\SysWOW64\netsh.exe—EPS.Devices.ClientNstall.App.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Network Command Shell
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
1348\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—netsh.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
2420"netsh" http show sslcert ipport=0.0.0.0:37131C:\Windows\SysWOW64\netsh.exe—EPS.Devices.ClientNstall.App.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Network Command Shell
Exit code:
1
Version:
10.0.19041.1 (WinBuild.160101.0800)
2796"netsh" http delete sslcert ipport=0.0.0.0:37131C:\Windows\SysWOW64\netsh.exe—EPS.Devices.ClientNstall.App.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Network Command Shell
Exit code:
1
Version:
10.0.19041.1 (WinBuild.160101.0800)
2860\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—netsh.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
3772\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—netsh.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
4976"C:\Users\admin\AppData\Local\Temp\{BA27640A-17A9-4AC7-837E-9C87F12EE491}\.cr\ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe" -burn.clean.room="C:\Users\admin\AppData\Local\Temp\ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe" -burn.filehandle.attached=676 -burn.filehandle.self=692 C:\Users\admin\AppData\Local\Temp\{BA27640A-17A9-4AC7-837E-9C87F12EE491}\.cr\ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
User:
admin
Company:
Jack Henry & Associates
Integrity Level:
MEDIUM
Description:
EPS Device Control
Exit code:
0
Version:
5.10.9025.21150
Modules
Images
c:\users\admin\appdata\local\temp\{ba27640a-17a9-4ac7-837e-9c87f12ee491}\.cr\profitstarsdevicecontrollauncher_5.10.9025.21150.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\aclayers.dll
5660\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—netsh.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
5864"C:\Windows\System32\netsh.exe" http add urlacl url=https://+:37131/ user=\EveryoneC:\Windows\SysWOW64\netsh.exe—EPS.Devices.ClientNstall.App.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Network Command Shell
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Total events
6 948
Read events
6 747
Write events
185
Delete events
16

Modification events

(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleCachePath
Value:
C:\Users\admin\AppData\Local\Package Cache\{91bd815e-7588-4618-a38f-32c5c2b77f91}\ProfitStarsDeviceControlLauncher.exe
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleUpgradeCode
Value:
{7A74CB9A-9FFB-47AC-B704-0810E2D3AF9E}
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleAddonCode
Value:
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleDetectCode
Value:
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundlePatchCode
Value:
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleVersion
Value:
5.10.9025.21150
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:VersionMajor
Value:
5
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:VersionMinor
Value:
10
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleProviderKey
Value:
{91bd815e-7588-4618-a38f-32c5c2b77f91}
(PID) Process:(4976) ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91bd815e-7588-4618-a38f-32c5c2b77f91}
Operation:writeName:BundleTag
Value:
Executable files
76
Suspicious files
27
Text files
44
Unknown types
2

Dropped files

PID
Process
Filename
Type
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\BootstrapperCore.dllexecutable
MD5:B0D10A2A622A322788780E7A3CBB85F3
SHA256:F2C2B3CE2DF70A3206F3111391FFC7B791B32505FA97AEF22C0C2DBF6F3B0426
6120ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{BA27640A-17A9-4AC7-837E-9C87F12EE491}\.cr\ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeexecutable
MD5:8D3608EBAC2D536C545BED41E1995D66
SHA256:D8D1A1BE657540AF53EDD1FDD19F5F82735AB72119B162472BC443108920A393
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\InfragisticsWPF4.Editors.v11.2.dllexecutable
MD5:80488AE9CB631E8CC4CF66711F7CE012
SHA256:F1AF70C5C5055E77709629A260E2119AEB45A12158F9FAA7DB7DC64FAC46FDB6
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\mbapreq.wxlxml
MD5:4D2C8D10C5DCCA6B938B71C8F02CA8A8
SHA256:C63DE5F309502F9272402587A6BE22624D1BC2FEACD1BD33FB11E44CD6614B96
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\mbahost.dllexecutable
MD5:C59832217903CE88793A6C40888E3CAE
SHA256:9DFA1BC5D2AB4C652304976978749141B8C312784B05CB577F338A0AA91330DB
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\1030\mbapreq.wxlxml
MD5:7C6E4CE87870B3B5E71D3EF4555500F8
SHA256:CAC263E0E90A4087446A290055257B1C39F17E11F065598CB2286DF4332C7696
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\Microsoft.Deployment.WindowsInstaller.dllexecutable
MD5:1A5CAEA6734FDD07CAA514C3F3FB75DA
SHA256:CF06D4ED4A8BAF88C82D6C9AE0EFC81C469DE6DA8788AB35F373B350A4B4CDCA
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\mbapreq.dllexecutable
MD5:FE7E0BD53F52E6630473C31299A49FDD
SHA256:2BEA14D70943A42D344E09B7C9DE5562FA7E109946E1C615DD584DA30D06CC80
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\1035\mbapreq.wxlxml
MD5:E338408F1101499EB22507A3451F7B06
SHA256:B7D9528F29761C82C3D926EFE5E0D5036A0E0D83EB4CCA7282846C86A9D6F9F3
4976ProfitStarsDeviceControlLauncher_5.10.9025.21150.exeC:\Users\admin\AppData\Local\Temp\{A5934D19-9673-4285-BDEA-9412B1A5FD0D}\.ba\1029\mbapreq.wxlxml
MD5:CC8C6D04DC707B38E0F0C08BA16FE49B
SHA256:DC445E2457ED31ABF536871F90FF7CC96800A40B6BC033F37D45E3156A3B4FA9
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
9
TCP/UDP connections
32
DNS requests
15
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
—
—
GET
200
2.16.164.115:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
—
—
GET
200
2.16.164.115:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
—
—
GET
200
88.221.169.152:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
—
—
whitelisted
—
—
GET
200
88.221.169.152:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
—
—
whitelisted
1176
svchost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
5064
SearchApp.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
6232
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
3856
backgroundTaskHost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D
unknown
—
—
whitelisted
6232
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
—
—
40.127.240.158:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
4
System
192.168.100.255:138
—
—
—
whitelisted
—
—
2.16.164.115:80
crl.microsoft.com
Akamai International B.V.
NL
whitelisted
—
—
88.221.169.152:80
www.microsoft.com
AKAMAI-AS
DE
whitelisted
5660
RUXIMICS.exe
40.127.240.158:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
4932
svchost.exe
40.127.240.158:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
4
System
192.168.100.255:137
—
—
—
whitelisted
5064
SearchApp.exe
2.23.209.176:443
www.bing.com
Akamai International B.V.
GB
whitelisted
1176
svchost.exe
20.190.159.0:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
5064
SearchApp.exe
192.229.221.95:80
ocsp.digicert.com
EDGECAST
US
whitelisted

DNS requests

Domain
IP
Reputation
google.com
  • 142.250.184.206
whitelisted
crl.microsoft.com
  • 2.16.164.115
  • 2.16.164.114
  • 2.16.164.131
  • 2.16.164.96
  • 2.16.164.98
  • 2.16.164.99
  • 2.16.164.16
  • 2.16.164.83
  • 2.16.164.90
whitelisted
www.microsoft.com
  • 88.221.169.152
  • 184.30.21.171
whitelisted
www.bing.com
  • 2.23.209.176
  • 2.23.209.183
  • 2.23.209.158
  • 2.23.209.156
  • 2.23.209.179
  • 2.23.209.161
  • 2.23.209.160
  • 2.23.209.177
  • 2.23.209.182
whitelisted
login.live.com
  • 20.190.159.0
  • 20.190.159.68
  • 20.190.159.73
  • 40.126.31.69
  • 20.190.159.23
  • 40.126.31.73
  • 20.190.159.71
  • 20.190.159.75
whitelisted
ocsp.digicert.com
  • 192.229.221.95
whitelisted
go.microsoft.com
  • 184.28.89.167
whitelisted
slscr.update.microsoft.com
  • 4.175.87.197
whitelisted
fe3cr.delivery.mp.microsoft.com
  • 13.85.23.206
whitelisted
arc.msn.com
  • 20.223.36.55
whitelisted

Threats

No threats detected
Process
Message
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
Launching custom InstallerBA UX
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
FillApplicationData: installerVersion Version: '5.10.9025.21150'
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
EPS1 MSI Detected
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
ProfitStars: Setting up Trace Listeners
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
ProfitStars: Setting up FileStream
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
ProfitStars: Trace Directory Doesn't Exist. Creating it..
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
ProfitStars: Trace File: C:\Users\admin\AppData\Local\ProfitStars\Devices\Logs\Launcher.txt
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
Setting Resource Assembly...
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
I Launcher InstallerBA - Start Time: '2024-11-19 16:41:17.314'
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe
I Launcher InstallerBA - Brand - ProfitStars
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN LLC. ALL RIGHTS RESERVED
ANY.RUN
Reports
ProfitStarsDeviceControlLauncher_5.10.9025.21150.exe