home

c.and.c.generals.zero.hour.exe

Command & Conquer: Generals Zero Hour

RICH MEDIA SYSTEMS INC.

The application c.and.c.generals.zero.hour.exe by RICH MEDIA SYSTEMS INC has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from generals-zero-hour.joydownload.com and multiple other hosts.
Publisher:
RICH MEDIA SYSTEMS INC.  (signed and verified)

Product:
Command & Conquer: Generals Zero Hour

Version:
1.0.0.0

MD5:
6cc14951f09153e82c52ebb74dddf785

SHA-1:
c620ead01ca1a005d2fa4f250fe8848a1c618946

SHA-256:
4efa86a7418012c532df9fdcf3b5e25f04eb0690bdd40915fcf605711e116796

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/25/2024 12:44:14 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.RICHMEDIASYSTEMS.Installer (M)
15.12.20.16

File size:
415.9 KB (425,864 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\c.and.c.generals.zero.hour.exe

Digital Signature
Signed by:
RICH MEDIA SYSTEMS INC.

Authority:
Symantec Corporation

Valid from:
2/16/2015 7:00:00 PM

Valid to:
2/17/2016 6:59:59 PM

Subject:
CN=RICH MEDIA SYSTEMS INC., O=RICH MEDIA SYSTEMS INC., L=HENDERSON, S=Nevada, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3F87144C25AF8BCF29F29C5A1FEEF4BA

File PE Metadata
Compilation timestamp:
5/19/2013 7:53:00 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:Uiu2fXzK81OOY+2/YU+w7JOI2VsZTgEODxP1IzHyyYQuLS:I2B1OrgUv/ZTgEOPqS3QuG

Entry address:
0x331C

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 30, 92, 40, 00, 89, 6C, 24, 14, FF, 15, 34, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, BC, 70, 40, 00, 55, FF, 15, AC, 72, 40, 00, 6A, 08, A3, 98, 92, 42, 00, E8, A8, 2E, 00, 00, A3, E4, 91, 42, 00, 55, 8D, 44, 24, 34, 68, B4, 02, 00, 00, 50, 55, 68, 90, 06, 42, 00, FF, 15, 7C, 71, 40, 00, 68, 7C, 93, 40, 00, 68, E0, 81, 42, 00, E8, 13, 2B, 00, 00, FF, 15, 34, 71, 40, 00, BB, 00, 40, 43, 00, 50, 53, E8, 01, 2B, 00, 00...
 
[+]

Entropy:
7.8402

Packer / compiler:
Nullsoft install system v2.x

Code size:
24 KB (24,576 bytes)

The file c.and.c.generals.zero.hour.exe has been seen being distributed by the following 18 URLs.

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPD 1E1v4ZNbB47pquHf14WJxy9EcXlm2Nu/iTG3LlQoNcDLQWPfNTfdo3cE/gYSDUkTE7SS7BkX9qj3m3 fa7dPem3FJo5Q3hlZQXzWtCz5/hpdwvWumCyrcAuBOw4TrNj8Neu5ncU1NYvO0SzAqOpHTfkRnzrPvUSwmcpexiLknBTCws1GMlv1mFtb5YsntZXBWzcCvFqounBcHrdGpn1O7ZKx/.../ykG1prZNni6Ex6B3K89ewmz3yPdFg4we3ES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxLzaNbB4rZouCev/itvgY5Mclq/N/6 LXj/ylJSIDbEW7DlTac8mrNhwMOZAASW/y3/BwX9vHGt3ayN 8vT0mlIoZ8i8EsTCiK5eSACwZ18vHqmGX3zFf4D1r cnUZPfFnPRNMOa39RD47asWNLBoonqD2GWUve4/gkrRhHGLjuFvE3/VqDoDrL576OjNO1IK3H M2mxgH5sv3jlLqN/MhhSflCc1X/.../zDU75pJD2gFZ7ai2D 3gfntPQOmDoHBXPg7l1bwji1CnfAAkze3ES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhz4coqK6bYk5ib0oWh42agQfBmzdsjiSCbilRYJbiCScbzlR6tPnPwi2pPVUh6avCX7BlSx4S tgLbbqNPKk2FKppAzkV4BXnStGGE2hshq9CzwSCTAHugDj4TzPHQNabk4PUxWcO rBzM6OpLcLVgojanuAHFwJtCwgLF2EyPv8AXSxKApRoC2M8ioZWMKgJ3pSKs2lF4f74LviV3qZel/lCa0Q5YJ/.../joZCYkigjYaRIBo4 M21g6ba1FkNrjx3z3dtOAXmpRlSx9ojvngUkOnTEuG4W3dvVOzGiRkvP0aMrewmz3yPdFgkye3ES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjyiGhD1Y9jVteh152f0sDcx2dBNJ0DtevylYSfjhxdKOSCGHeO1Tuprl wi1s3eDQ6b7Sv9Hk20sn 1maOI8ozKmiBBopU6kSZcBSjzFE1r45Z3q2mrBiCHKukel9mZaHJFdux6egoEcKX2VnBtLJeNZkdzxeSmTjQuO4/z2ecnWTzk5xiewLxxTsf/L9/2MDQezcr F oujV1MuZr2zlL ZLh0nySiAMlP5YSxQHP79cjEiCdjbbBJV4Y/.../CsXhBihATzjolWGHXrBwawqZnu1VZ8amDP 2AW18vQN2CjBkvfgug7LRD7livWDhg0e3ES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEh74coqM6bdjr3f14WJwwckKKFXsK7H/NWHlmQBKOSCGGeO1G7IlyPpqx8yPRFXF7SShBkf8 3G9geeO7cvT0mlMq4d32gsWCzHkGDU2nsUj7H6yGjrbFa5Xkc3gMzIFbbo1LB4HOOz9VXBtPpeaNBBhhqfuACQneYL30v8 TWO5uEiPxat D9G3dsi8bnlU28K7D JnlRkf/96k0Q3qZel/lCysEbxDv5nvXQr3xMTOz25xO/.../ZmFb76flA08p2wS7lNdFEybzUlSw48a1jkpnYmDP 2AV1dPBZyf2EAOM1LliI1eyijyPW093e3ES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxLzaNbB4rZouCev/itvgY5Mclq/N/6 LXj/ylZSICfICeLkErQ90bhyz4WXBQaDoGzqBwX9v3GtzKyP oaf0nFA4p8ziUcCDSK1AX1/ksk7/yPyXmCfUrcfwsTrJXFePKs5bBIJOb31VHt4fc3cLVgoiqv2RHl5LNCww Z2BGuwoF7KjvQvDpG3Ypv3O2NXnMu/F/snmA8eroL h0q7N/5nnHWsAsQe5MOxUS w78SCkW8qZLZJV/cjaCF3rpG5ak8/.../N m2Vpta2DP 2AS18uGeDLxBxTPg6N1aAb13SXeBwo0bnES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsnl0kPjCvHBv0cteQv A8/yan9np5ktEPJgTtbLHuaSrglUZTcWmPG O1a6tmne1 t9jqUlLEvX6kT1id7TnglY2O65vGxCses55ziVdIRjLjGDU2nsIj7CroUSCTQ7ZOkZ61JTxEYrs4PRsIIaS0XHx1apuGZkJg2bPvSywkfID12e0yC2 7uRnFnf9mFsbkM4LyPjgZnZ2vFqounhUf/9 o0w26P/.../JKRIBo46M21k6bzzQl0inB3z3dtOAXq Wlmm4YjvhAUnNGDAvXgfntPQOmDuHBXPg7l1bwji1yPWAw82e3ES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqmHx3xcteQv U8/zC24jEwnskFdE3mbL71PHW4w1NZOSCGGOO1Qexj0bIjzsSXFQ W7SS7BkD9qi3g16GE7MvT0mlJq4c0hkdJF3ymCjRnwJpqvnerEybbHK5Xi83gPz0VP xselpeb zqHC89J9OWeV5gnqqnGCUvasarhf8 V2O7uRnFmPV UsvhJdClLHtf38uvbvd1wUkLnpaK2AatLPsp1DLMVo0C8L/.../zDU75pJD2gFZ7ai2D 3gfntPQOmDoHBXPg7l1bwji1CnfAAkze3ES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cp K4fE9tG//qSt4yNEcax6zerC/NXW20lZaM2SJGPusW781yas/h9SWRAaW9T2/.../Rmvi8JuTkD55PuJRTsc3O3Uxs W1FllrjRyil4QQASeiDAv5sZvszwsmOGDP 2AS18uGeDLxBxTPg6N1aAb13CTVDQg1anES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxLzaNbB4rZouCev/itvgY5Mclq/N/6 LXj/ylZSICfICeLkErQ90bhyz4WXBAaDv3asHk20sn21mfTZpt3bl3FA4p8ziUcBDSK1AWd/.../hS hEcQe5MGxUSyh88jSzz4rPrxCQYE0OnoiueChFllrihyigYQYRj7qRQfwo5D2tBF0YCbay3RjiIeGciP0Bl 33bggd3qvkGPJUUJge3ES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmVx1NT6tCk26IIWR4PE9tG//pm16z98GLEDmY/j2PHmuhg0MIGjPEe tCrc1wr5lx9SWRAaV9T2uVRqiqnD8gfbRpMurjzIV9YtDnSIXCiPlW2I2iql8vHTkIjzcAqIJgJLzPHQNabk4PUxWcO rBzM6OpLcLVgojanuAHFwJtCwgLF2EyPv8AXSxKApRoC2M8itZWMchpWvFqoumRcH7ID1iVv fKE2nS sEZYEutWwAHPruYOTnT4rJLxFT5ZrZiN35aC1FllrjByi09hWGG/.../B4YxC3jH DW012e3ES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqmHx3xcteQv E8/yG6sGMxwdoEP0b1Y/.../4eMjxBV1sBu1hcTCDW5YGs3y91RoW64RDbRFa5Xi83jPSVYK6s5bBIIOb2wDyQrJ4mNNBBhhqDkGDRxIcayjbx8SyvmoFGMlv5kDoDqJZz7LSAAnNz3SKt7gkVKqMrvhhvybaBn13XyEcQe5MGxUXjhu5WTnD4rJLxFT5ZocT968re1FkNrjxK10NxDFSTmAgawqZnu1Ux8amDP4WAV1prZNni6Ex6B3K89ewmz3yPdFg4we3ES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjyiGx/0ZN7atuh152b0sCgrn8kFbk3hYqn9N3u4w1JKOSCGGumtCuFugPk8lY/YRVCD9GzyDU79qizq1aCT/4WbjCke48ot2woHFmSsSTR2ntFwp3/oUSCTQrZOy8DzPHQNbLMgeUFTZr38FXB8eMTcVQVz0vX6YThSLdunk7xpTXfQ5xiQgoczQdCjJYr7fXof1ce3D797w0lAr5r2zlL6ZLhxkj6tQMVf5NX/B2vi8JuRkD4hdb0AT4c3Kzl65PCsXhBnhASy1dxDFi/zDU75oZD2mEw3NTHOv2AGmoCNZC3vBlPWy/.../aHES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklQ2NSrUBkmsNMKgq5RjszC88zQx1bFbbxj5EOS5fW3piAFKOSCGGOO1W xj0bI5zseWRAaT9T28SFT8 3G gefQvNKbm2FBs8pzkV4BXnGtGHksypd2uWjoUSCTRrZOnY hbnVSerJrJRkLNqv/X3t4fMfFZREjjKv2Rn9mONmjmKh3Unux8VDOlPV U8fjJYD/MzJBlZT/.../4O h17yfPwqy3jzQd1Wrc25SWvttoOb2SYjbaQaHNAvMjwpsui1Hh1zhVW61NdWVXW1FAawqZzu1Q0nP3XBu3gfntPQOmDoHBXPg7l1bwji1CnfAAkze3ES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjyiHB76Ztjbveh152b0sCsrn8kFdE3mY/j2PXmunxdKOSCGHOO1X xpl Ynh9SWRAaX9T2uUxqj7TmtgLbbrNPKlWZZqtY6h19QAi/7Xyx 18kq/iHoKX3IHuhCu9mWYmlSKuhubAZlZu2oSAIgPYzQc1N3nqqnGCclcpemiK51Ujjz9xiTjvQvDpO1etD5Oi8JnZDhXvRuyl9K8NCiyBrqZel/lSa0R4tP5YSxQnP7soOb2SYjbaQFHNAvMjwptui1HxhgiROzxdYHGS/.../BOzGiRkvP0aMrewmz3yPdFgkye3ES

http://sdnsoftorg.blob.core.windows.net/fas/wi/1/37/1/.../C.and.C.Generals.Zero.Hour.exe

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PTK1HB3ga5/ZtukkqzyqsGMxwd0EP0Xlabz5PGG3g15ZMmmeT7DkWOlmivwimNSWRAaQ9yXqWxOp7Tnu17bM5Iyazn4T/tBykV4BXnCtGGs91JprqznxA2mYRLldyMPgND8HY/o4LBIdc/ajRHE8csjENBoqhKXnFDQuO4/w2/9xSnux8VDOlu1tFpn esakfScFg5SvFqounB0f//vj3AascNlr4Hn4Vo0MsoSlKSyr7I/oxWlieeMLEJY2enUguvDkRE5zhU 61tYHGS/.../B4YxC3jH DW012e3ES

http://generals-zero-hour.joydownload.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PTK1HB3ga5/Zt kkqSHsqSt4ytEcLFXsK7H6NWHpiBQBcDaeELCtGbEyw7xmw8WUBQfS9SzyHh u7Gm0yP/TpMvblnFA4p80iUcUDSryGDU2nsAp9DmJRDLHFKIv1rC0aWJFOeVxMXJacfDpLiU6OtCbbk4wh LuESw3Ptymw Z2BG woFjNnfhpB4C2M8itZWMchpWvFqoumRcH7ID1iVv fKE2nS2mCd0Jt4T7Hyig9tPMiCdjbbdLT5ZqbCF28rP7Xgcr21TvyoUbVm7zDU75oZD2mEw3NTHOv2AGmoCNZC3vBlPWy/.../aHES

Remove c.and.c.generals.zero.hour.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.