aqworlds_acs_generator_v1.00testing.exe

WindowsApplication1

The executable aqworlds_acs_generator_v1.00testing.exe has been detected as malware by 11 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from download1976.mediafire.com and multiple other hosts.
Product:
WindowsApplication1

Version:
1.0.0.0

MD5:
e676df3caaa81170933f9f7662063358

SHA-1:
f3909ec8e32cb2d18e5d02599a39c223bced58df

SHA-256:
29e25b17b918d90428e3c586a97132ec04ee5ccbfdf357cfd8ed677b63b9f715

Scanner detections:
11 / 68

Status:
Malware

Analysis date:
4/24/2024 2:26:41 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Kazy.132309.3
8.3.1.6

avast!
Win32:Malware-gen
2014.9-150609

AVG
Pakes_c
2016.0.3084

Comodo Security
UnclassifiedMalware
22380

G Data
Win32.Trojan.Agent.W4ZIYQ
15.6.25

IKARUS anti.virus
Trojan.Kazy
t3scan.1.9.5.0

McAfee
Artemis!E676DF3CAAA8
5600.6740

Panda Antivirus
Trj/OCJ.C
15.06.09.09

Trend Micro House Call
TROJ_GEN.R047C0EAU15
7.2.160

Trend Micro
TROJ_GEN.R047C0EAU15
10.465.09

VIPRE Antivirus
Trojan.Win32.Generic
40938

File size:
319 KB (326,656 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2012

Original file name:
aqwolrds.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
10/8/2012 10:07:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:BdzwE1ptpwbZI66xAkxLz4WqS5+SffIUhjMZpUN9/4Elr8:Dwi+Gxnd/klUhjMZ9El

Entry address:
0x5076E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
314 KB (321,536 bytes)

The file aqworlds_acs_generator_v1.00testing.exe has been seen being distributed by the following 2 URLs.

Remove aqworlds_acs_generator_v1.00testing.exe - Powered by Reason Core Security