Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegSetValueExW, RegDeleteValueW, RegDeleteKeyW, RegEnumKeyW, RegQueryValueW, RegCloseKey, RegEnumKeyExW, RegEnumValueW
comctl32.dll
InitCommonControlsEx, ImageList_GetIconSize
comdlg32.dll
GetFileTitleW
gdi32.dll
GetLayout, SetLayout, DeleteObject, SelectClipRgn, CreateRectRgn, GetViewportExtEx, GetWindowExtEx, BitBlt, GetPixel, PtVisible, RectVisible, TextOutW, ExtTextOutW, Escape, SelectObject, SetViewportOrgEx, OffsetViewportOrgEx, SetViewportExtEx, ScaleViewportExtEx, SetWindowOrgEx, OffsetWindowOrgEx, SetWindowExtEx, ScaleWindowExtEx, ExtSelectClipRgn, DeleteDC, CreatePatternBrush, CreateCompatibleDC, GetStockObject, SelectPalette, GetObjectType, CreatePen, CreateSolidBrush, CreateHatchBrush, CreateDIBitmap, CreateFontIndirectW, CreateCompatibleBitmap, GetTextMetricsW, EnumFontFamiliesW, GetTextCharsetInfo, GetBkColor, GetRgnBox, GetTextExtentPoint32W, SetRectRgn, CombineRgn, GetMapMode, DPtoLP, CreateDIBSection, CreateRoundRectRgn, CreatePolygonRgn, CreateEllipticRgn, Polyline, Ellipse, Polygon, CreatePalette, GetPaletteEntries, GetNearestPaletteIndex, RealizePalette, GetSystemPaletteEntries, OffsetRgn, SetDIBColorTable, StretchBlt, SetPixel, Rectangle, EnumFontFamiliesExW, LPtoDP, GetWindowOrgEx, GetViewportOrgEx, PtInRegion, FillRgn, FrameRgn, GetBoundsRect, ExtFloodFill, SetPaletteEntries, GetTextFaceW, SetPixelV, SetTextAlign, MoveToEx, LineTo, IntersectClipRect, ExcludeClipRect, GetClipBox, SetMapMode, SetROP2, SetPolyFillMode, RestoreDC, SaveDC, GetObjectW, SetBkColor, CreateDCW, CopyMetaFileW, GetDeviceCaps, CreateBitmap, PatBlt, CreateRectRgnIndirect, GetTextColor, SetBkMode, SetTextColor
gdiplus.dll
GdipCreateFromHDC, GdiplusShutdown, GdiplusStartup, GdipSetInterpolationMode, GdipDisposeImage, GdipDeleteGraphics, GdipAlloc, GdipFree, GdipDrawImageRectI, GdipCloneImage, GdipGetImageWidth, GdipGetImageHeight, GdipGetImagePixelFormat, GdipGetImagePaletteSize, GdipGetImagePalette, GdipCreateBitmapFromStream, GdipCreateBitmapFromScan0, GdipBitmapLockBits, GdipBitmapUnlockBits, GdipGetImageGraphicsContext, GdipCreateBitmapFromHBITMAP, GdipDrawImageI
imm32.dll
ImmGetOpenStatus, ImmReleaseContext, ImmGetContext
kernel32.dll
DllMain
msimg32.dll
AlphaBlend, TransparentBlt
ole32.dll
CoFreeUnusedLibraries, OleUninitialize, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, StgOpenStorageOnILockBytes, CoGetClassObject, CoUninitialize, CoInitialize, CoCreateInstance, OleDuplicateData, CoTaskMemAlloc, OleInitialize, CoTaskMemFree, CLSIDFromString, CLSIDFromProgID, CoInitializeEx, OleCreateMenuDescriptor, OleDestroyMenuDescriptor, OleTranslateAccelerator, IsAccelerator, OleLockRunning, CreateStreamOnHGlobal, OleIsCurrentClipboard, OleFlushClipboard, CoCreateGuid, CoRegisterMessageFilter, RevokeDragDrop, CoLockObjectExternal, RegisterDragDrop, OleGetClipboard, ReleaseStgMedium, CoRevokeClassObject, DoDragDrop
oleacc.dll
LresultFromObject, AccessibleObjectFromWindow, CreateStdAccessibleObject
oledlg.dll
OleUIBusyW
shell32.dll
ShellExecuteW, SHGetFileInfoW, DragFinish, DragQueryFileW, SHGetDesktopFolder, SHBrowseForFolderW, CommandLineToArgvW, SHAppBarMessage, SHGetSpecialFolderLocation, SHGetPathFromIDListW
shlwapi.dll
PathRemoveFileSpecA, PathFindExtensionW, PathFindFileNameW, PathStripToRootW, PathIsUNCW, PathIsDirectoryA, PathRemoveFileSpecW
user32.dll
DllMain
wininet.dll
InternetReadFile, InternetOpenA, InternetConnectA, HttpOpenRequestA, HttpSendRequestA, InternetSetOptionA, HttpQueryInfoA, InternetCloseHandle
winmm.dll
PlaySoundW
winspool.drv
ClosePrinter, OpenPrinterW, DocumentPropertiesW

NWZPatcher.exe

NWZPatcher Application by NEOWIZ GAMES CORP. (Signed)

Remove NWZPatcher.exe
Version:   1.0.0.2
MD5:   867a8f88241fab442ed59b59b4465381
SHA1:   d1c05a6fa749df74e8341da1e1f54fdf49749f88

Overview

nwzpatcher.exe executes as a process with the local user's privileges typically within the context of its parent nwzlauncher.exe (NWZLauncher Application by NEOWIZ GAMES CORP.). It is installed with a couple of know programs including Alliance of Valiant Arms published by RED DUCK Inc., FAKEFACTORY Cinematic Mod 2013 from FAKEFACTORY and FAKEFACTORY Cinematic Mod 2013 by FAKEFACTORY. The file is digitally signed by NEOWIZ GAMES CORP. which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).

DetailsDetails

File name:nwzpatcher.exe
Publisher:Neowiz Games
Product name:NWZPatcher Application
Typical file path:C:\aeriagames\ava\nwzpatcher.exe
File version:1.0.0.2
Size:1.81 MB (1,901,408 bytes)
Build date:11/15/2012 9:29 AM
Certificate
Issued to:NEOWIZ GAMES CORP.
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Aeria Ignite
 Aeria Games & Entertainment
8% remove
“One-stop shop for all your games, friends and updates Plus the only place you can find our Free Loot Box.”
FAKEFACTORY Cinematic Mod 2013
 FAKEFACTORY
6% remove
“Raises the outdated graphical appearance of the Half-Life 2 trilogy to a state-of-the-art level, while giving it a more stressed, darker and minatory look. All low-res textures are replaced by high-res counterparts. Cinematic Mod adds an emotional cinematic music soundtrack, optional HD models and unused content from the original games.”
Alliance of Valiant Arms
 RED DUCK Inc.
7% remove
Alliance of Valiant Arms AVA
 RED DUCK Inc.
8% remove
“AVA is a free-to-play MMOFPS that plunges you into the middle of a world at war. Side with the European Union (E.U) or the Neo-Russian Federation (NRF) and take up arms across vicious urban battlegrounds. Test your skills against your friends and see if you have what it takes to come out on top. Class System: Select from the 3 classes (Point Man, Rifle Man, Sniper) to best support your teammates. Rank System: Rank up from Trainee to P...”
A.V.A - Alliance of Valiant Arms
 RED DUCK Inc.
2% remove
“AVA is a high-octane MMOFPS that plunges you into the middle of a world at war. Side with the European Union (E.U.) or Neo-Russian Federation (NRF) and take up arms across vicious urban battlegrounds. Test your skills against your friends and see if you have what it takes to come out on top. Powered by the Unreal3 engine, AVA offers immersive gameplay with HD quality graphics. Engross yourself in stunningly rendered battlefields and fee...”
Network connections
  • [TCP] 195.8.11.137:80

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00349345%
    0.028634%
    Kernel CPU:0.00082702%
    0.013761%
    User CPU:0.00266643%
    0.014873%
    Kernel CPU time:42,900,275 ms/min
    100,923,805ms/min
    CPU cycles:2,179,000/sec
    17,470,203/sec
    Memory
    Private memory:2.27 MB
    21.59 MB
    Private (maximum):7.59 MB
    Private (minimum):7.5 MB
    Non-paged memory:2.27 MB
    21.59 MB
    Virtual memory:73.6 MB
    140.96 MB
    Virtual memory (peak):80.6 MB
    169.69 MB
    Working set:7.54 MB
    18.61 MB
    Working set (peak):7.66 MB
    37.95 MB
    Page faults:2,071/min
    2,039/min
    I/O
    I/O read transfer:7.08 MB/sec
    1.02 MB/min
    I/O read operations:1,819/sec
    343/min
    I/O write transfer:93 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:183 Bytes/sec
    448.09 KB/min
    I/O other operations:9/sec
    1,671/min
    Resource allocations
    Threads:5
    12
    Handles:153
    600
    GUI GDI count:41
    103
    GUI GDI peak:52
    142
    GUI USER count:23
    49
    GUI USER peak:26
    71

    BehaviorsProcess properties

    Integrety level:High
    Platform:32-bit
    Command line:nwzpatcher.exe 722478 reserved
    Owner:User
    Parent process:nwzlauncher.exe (NWZLauncher Application by NEOWIZ GAMES CORP.)

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 100.00%

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Toshiba 100.00%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE