home

installwow.exe

MD5:
f99a6ed5098bc81d4b0999fde1c748fe

SHA-1:
8cef6f3b0732356d4ed6d85b5ab71c87e10c429d

SHA-256:
a5d04d879487f4e3cb8c3328794beb207e258b41c3f2ee64042d9d85be69ea60

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 5:37:09 AM UTC  (today)

File size:
1.3 MB (1,411,674 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\installwow.exe

File PE Metadata
Compilation timestamp:
2/19/2009 9:28:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:1T5Hk/aKVUpZzJ8O6g/817rQpVPWMnTDcNrxW6CI3a0yoo:1WaKup1mLw817rQHOMnTWrxW6CG

Entry address:
0x8886B

Entry point:
76, 6F, 6E, 20, 57, 6F, 72, 6C, 64, 20, 6F, 66, 20, 57, 61, 72, 63, 72, 61, 66, 74, 20, 75, 6E, 64, 20, 77, 69, 72, 64, 20, 6E, 61, 63, 68, 20, 64, 65, 6D, 20, 42, 65, 65, 6E, 64, 65, 6E, 20, 64, 65, 73, 20, 53, 70, 69, 65, 6C, 73, 20, 66, 6F, 72, 74, 67, 65, 73, 65, 74, 7A, 74, 2E, 00, 44, 6F, 77, 6E, 6C, 6F, 61, 64, 20, 77, 69, 6C, 6C, 20, 73, 74, 61, 72, 74, 20, 77, 68, 65, 6E, 20, 79, 6F, 75, 20, 6C, 61, 75, 6E, 63, 68, 20, 57, 6F, 72, 6C, 64, 20, 6F, 66, 20, 57, 61, 72, 63, 72, 61, 66, 74, 2C, 20, 61...
 
[+]

Entropy:
7.2614

Code size:
648 KB (663,552 bytes)

The file installwow.exe has been seen being distributed by the following URL.

http://www.wowrean.com/.../InstallWoW.exe

Scan installwow.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.