home

prologuewow.exe

World of Warcraft

Blizzard Entertainment, Inc.

This is installed with World of Warcraft. The file has been seen being downloaded from wowcraft.eu and multiple other hosts.
Publisher:
Blizzard Entertainment  (signed by Blizzard Entertainment, Inc.)

Product:
World of Warcraft

Description:
World of Warcraft Retail

Version:
3, 3, 5, 12340

MD5:
f73134d3635878a1abbebabd006f5871

SHA-1:
e3e0b5a4f8e1f6d18916adfea6a9d165f94e8542

SHA-256:
28287cd94e6ab2d6e68865f49314b456d2750dcb5d0b8ecca12eeddf72b7bf80

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 3:38:35 AM UTC  (today)

File size:
7.3 MB (7,704,216 bytes)

Product version:
Version 3.3

Copyright:
Copyright © 2004

Original file name:
WoW.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
Blizzard Entertainment, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/7/2010 4:00:00 PM

Valid to:
12/5/2011 3:59:59 PM

Subject:
CN="Blizzard Entertainment, Inc.", OU=TECHNICAL SUPPORT, O="Blizzard Entertainment, Inc.", L=Irvine, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
7B715B3347BC57B25C66B34202F4A1A0

File PE Metadata
Compilation timestamp:
6/24/2010 11:55:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:DSWhGvPwsP+Wc36vu00ovRwqCPNprDlYtUb17TLFdGX4QtT+W50hlm:DfgTyovRwqCPNB9b1+4Ql+m

Entry address:
0x1000

Entry point:
E8, 8B, D4, 36, 00, E9, 91, AA, 00, 00, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 8B, 45, 08, 6A, 00, 6A, FF, 68, 14, 0E, 9E, 00, 50, E8, 1B, D5, 36, 00, 5D, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 8B, 45, 08, 85, C0, 74, 0F, 6A, 00, 6A, FF, 68, 18, 0E, 9E, 00, 50, E8, 57, D5, 36, 00, 5D, C3, CC, CC, CC, CC, CC, 8B, C1, 33, C9, C7, 00, 24, 0E, 9E, 00, 89, 48, 04, 89, 48, 08, 89, 48, 0C, 89, 48, 10, C7, 40, 14, FF, FF, FF, FF, C3, CC, CC, 55, 8B, EC, 8B, 41, 08, 8B, 55, 08, 3B, D0, 53, 56, 8D, 71, 08...
 
[+]

Entropy:
6.7327

Code size:
5.9 MB (6,149,120 bytes)

The file prologuewow.exe has been discovered within the following program.

World of Warcraft  by Blizzard Entertainment
World of Warcraft is the fourth released game set in the fantasy Warcraft universe.
us.blizzard.com/support
8% remove it
 
Powered by Should I Remove It?

The file prologuewow.exe has been seen being distributed by the following 7 URLs.

http://wowcraft.eu/Wow.exe

http://download1804.mediafire.com/59nzfuv50trg/.../wowcustom.exe

https://mega.nz/persistent/.../9JdyEKiD

http://download823.mediafire.com/8bbz6i48q1lg/.../wow.exe

http://crazy.uwow.biz/.../WoW.exe

https://mega.nz/temporary/.../nYoVyDZL

http://download722.mediafire.com/vw9h5lbs37cg/.../Wake.exe

Scan prologuewow.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.