Is this a real Malware or Trojan? MU online Game Server

***

Hello, is this a malware? VirusTotal flagged it with a detection, but this is a Game Server file (DarksTeam MuServer 0.99.60/62T 1.0M). According to the MMO Dev Forums—specifically the forum admins—this is just a false positive. They claim it’s due to the nature of how the game server communicates with player clients and the specific packers used to compress the file. They insist it is safe and clean.

Could you please analyze this for any malicious behavior? I tried monitoring it via TCPView, and I didn't see any suspicious external IPs—only localhost (127.0.0.1) and my own local IPv4 address.

The standard behavior for this application involves Server-to-Client communication using these specific ports:

Port 44405: ConnectServer
Port 55901: GameServer (Main)
Port 55970 or 55960: JoinServer / DataServer

I just want to verify if it is truly not a malware. If a professional malware analyst could examine this, we would be able to determine if there are any suspicious activities or hidden malicious traits.
I uploaded the Game Server, so you can analyze them.

Virus Total Hash:

GameServer.exe - VirusTotal - File - b67869ae1954c80e964fd0ad786e0f5141a13f1f86882afc6bf6a9fba51c8cc5

JoinServer.exe - VirusTotal - File - 0195ce59157db75d83a6315c28b40c5fb7807f9e3c3354c0f75105a8b97ff746

Exdb.exe - VirusTotal - File - 9003e0eda28aae33bc50cb92e8b2ca175c79fa90cc34b42fea11e0036c53793a

*** EDITED: File(s) and/or URL(s) removed by @Gjoksi
"Posting malware samples and /or URLs is not allowed in the community! Do not post direct links to any executable files, malicious/suspicious software or websites in threads, comments or private messages, even if you think the software or site is clean and incorrectly detected by Bitdefender."

Find more posts tagged with

malware false positive

malware

Accepted answers

All comments

Gjoksi

Hello.
Only the anti-malware researchers at Bitdefender Labs can help you with the issue.
You should report the file(s) and/or the URL(s) as false positive to Bitdefender Labs here:
https://www.bitdefender.com/consumer/support/answer/29358/
You could also share the VirusTotal link of the scanned file(s) and/or the scanned URL(s) to the anti-malware researchers.
Regards.

thegamerr

Thanks Sir and sorry for uploading the sample, I didn't know the rules, sorry.

Gjoksi

nothing to worry, we are cool :)))