home

installwow.exe

Blizzard InstallWoW

Blizzard Entertainment

This is installed with World of Warcraft. The file has been seen being downloaded from 205.196.120.183 and multiple other hosts.
Publisher:
Blizzard Entertainment  (signed and verified)

Product:
Blizzard InstallWoW

Version:
1, 4, 0, 185

MD5:
def7a59d72b972eba825b98c41a1e081

SHA-1:
8b448745d617faae94cb9dde651b783ea0d9e554

SHA-256:
ee59614ca98beff4f3f493510dc6a9fec45ae83e3a0f772aaf502d00ac8175ae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 5:51:58 AM UTC  (today)

File size:
1.1 MB (1,131,176 bytes)

Product version:
1, 4, 0, 185

Copyright:
(c) 2007-2008 Blizzard Entertainment Inc.

Original file name:
InstallWoW.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\installwow.exe

Digital Signature
Signed by:
Blizzard Entertainment

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/10/2008 7:00:00 PM

Valid to:
1/14/2010 6:59:59 PM

Subject:
CN=Blizzard Entertainment, OU=TECHNICAL SUPPORT, O=Blizzard Entertainment, L=Irvine, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
18AAF92246B92D249454D16DA899F12E

File PE Metadata
Compilation timestamp:
11/5/2008 9:59:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:cx6/mol8UScFMVbP9/jDENL79MQWMyTaphFoodO:qat8UXuVbP9//ENL7m/MyTuh5O

Entry address:
0x7134B

Entry point:
E8, EC, AD, 00, 00, E9, 16, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 8B, 7D, 08, 33, C0, 83, C9, FF, F2, AE, 83, C1, 01, F7, D9, 83, EF, 01, 8A, 45, 0C, FD, F2, AE, 83, C7, 01, 38, 07, 74, 04, 33, C0, EB, 02, 8B, C7, FC, 5F, C9, C3, CC, CC, CC, 80, F9, 40, 73, 15, 80, F9, 20, 73, 06, 0F, AD, D0, D3, EA, C3, 8B, C2, 33, D2, 80, E1, 1F, D3, E8, C3, 33, C0, 33, D2, C3, 6A, 10, 68, 48, 69, 4C, 00, E8, 01, 22, 00, 00, 33, C0, 33, DB, 39, 5D, 08, 0F, 95, C0, 3B, C3, 75, 20, E8, F4...
 
[+]

Entropy:
6.9387

Code size:
548 KB (561,152 bytes)

The file installwow.exe has been discovered within the following program.

World of Warcraft  by Blizzard Entertainment
World of Warcraft is the fourth released game set in the fantasy Warcraft universe.
us.blizzard.com/support
8% remove it
 
Powered by Should I Remove It?

The file installwow.exe has been seen being distributed by the following 8 URLs.

http://205.196.120.183/76wqvepy4z3g/.../Instalador_WoW_esMX (Descargar-pc.blogspot.com).exe

http://dla.uloz.to/Ps;Hs;fid=9217633;cid=735000380;rid=1615836186;up=0;uip=178.41.119.22;tm=1479409893;ut=f;aff=uloz.to;did=uloz-to;He;ch=113fd8cd2ea945435bbaffde66ad76fc;Pe/.../wow-tbc-wotlk-installer-sketcz-exe?bD&c=735000380&De

http://s10605.chomikuj.pl/File.aspx?e=RkkujV5vh9XuRpHblM9lp49uEJEFKay1XJw-3Wr_Ib-bFO-ORyfJwdj96k9J7vZOHiXTIExTXAzXb2gS6VU9B5S7cJu60OTKpLGNc1zDQt_37jwWIcnEkHgJ0cUHhdUl8gcyaHP8gOdMzftJRHVHCg&pv=2

http://download1157.mediafire.com/tokyb3pe5pdg/.../InstallWoW.exe

http://download1286.mediafire.com/x6rcx7ui6xyg/.../InstallWoW.exe

http://freecache8-free.uloz.to/Ps;Hs;fid=5386446;cid=951058035;rid=639401067;up=0;uip=178.255.168.61;tm=1388996554;ut=f;aff=uloz.to;did=uloz-to;He;ch=613de03dd040b93cab20ffbc7b10ce6b;Pe/.../wow-downloader.exe

http://dla.uloz.to/Ps;Hs;fid=5386446;cid=951058035;rid=639401067;up=0;uip=178.255.168.61;tm=1388996554;ut=f;aff=uloz.to;did=uloz-to;He;ch=613de03dd040b93cab20ffbc7b10ce6b;Pe/.../wow-downloader.exe

http://gamedaily.newaol.com/.../InstallWoW.exe

Scan installwow.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.