home

warzlauncherserver2.exe

InfestationMMO Launcher

Arktos Entertainment Group

This is a setup program which is used to install the application. The file has been seen being downloaded from download1819.mediafire.com.
Publisher:
Arktos Entertainment Group

Product:
InfestationMMO Launcher

Version:
2.0.0.0

MD5:
bef4acab09d0c5da98531f75086181b4

SHA-1:
cbd8239fdb9b5700129ae90e25a1dfaf3f5e3f0a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 7:35:50 PM UTC  (today)

File size:
6 MB (6,340,608 bytes)

Product version:
2.0.0.0

Copyright:
(c) Arktos Entertainment Group. All rights reserved.

Original file name:
RSUpdate.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\programs\warzlauncherserver2.exe

File PE Metadata
Compilation timestamp:
8/30/2015 11:50:23 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:Zs3P8ABHN96C+ohFOdjXoS4tBPV3r4z5hfOjQMpfgOJxb5B7i0v+:S0Az96C+CkdjXo5t3g7W0MpnI0

Entry address:
0x7EE3F4

Entry point:
EB, 00, 60, 69, D1, D8, C2, 4C, CA, 0F, BC, DD, 0F, C1, FE, 68, F8, 77, 01, 00, 03, C1, EB, 06, DF, 85, 35, 7D, 61, FD, 5A, F2, EB, 07, B1, 3B, C3, 18, BB, 5C, 8F, 30, F5, FF, CE, 68, 29, 90, 47, 37, D1, EF, 59, 88, D4, E8, 09, 00, 00, 00, F4, E0, 56, 6D, A4, 00, 86, DE, 94, 5E, D0, C0, 0F, A4, F7, 88, 81, F8, 87, 11, B1, 30, 0F, AD, DD, 47, 56, 5B, C1, C8, 2B, BD, B4, 00, 00, 00, BE, 30, 0B, 56, 1E, E8, 05, 00, 00, 00, B1, 24, A7, 6C, 3D, 58, F6, D8, EB, 02, 57, AA, 03, DD, 85, D1, 80, D8, 5D, D0, C8, 69...
 
[+]

Entropy:
7.9759  (probably packed)

Code size:
1.9 MB (1,961,472 bytes)

The file warzlauncherserver2.exe has been seen being distributed by the following URL.

http://download1819.mediafire.com/bpgkz92oggwg/.../WarZlauncherServer2.exe

Scan warzlauncherserver2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.