home

Scan.dll

Blizzard Scan

Blizzard Entertainment

This is installed with World of Warcraft. The file has been seen being downloaded from repo.midgar-online.com and multiple other hosts.
Publisher:
Blizzard Entertainment

Product:
Blizzard Scan

Version:
2, 2, 84, 77

MD5:
beaa5d244a8551117cfb37f843800ef6

SHA-1:
91b7e639ed921b94c55f6324ad9caf81e7b80937

SHA-256:
4fe56f1bf1bfa4171af7c53a731576bfc7818d36c6ea73658739f2f286d12da3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 10:24:31 PM UTC  (today)

File size:
48.8 KB (49,924 bytes)

Product version:
2, 2, 84, 77

Copyright:
© 2005-2014 Blizzard Entertainment

Original file name:
Scan.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\ProgramData\blizzard entertainment\battle.net\cache\download\scan.dll

File PE Metadata
Compilation timestamp:
8/21/2014 6:14:07 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:6uM8TjZPxpi1GOBuThy2KuxV3lQSmdifVX3g:S0i1OThVVQ3ifVHg

Entry address:
0x1D0D0

Entry point:
80, 7C, 24, 08, 01, 0F, 85, B9, 01, 00, 00, 60, BE, 00, 20, 40, 37, 8D, BE, 00, F0, FE, FF, 57, 83, CD, FF, EB, 0D, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB...
 
[+]

Entropy:
7.7635

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 - v1.22, 0x

Code size:
48 KB (49,152 bytes)

The file Scan.dll has been discovered within the following programs.

World of Warcraft  by Blizzard Entertainment
World of Warcraft is the fourth released game set in the fantasy Warcraft universe.
us.blizzard.com/support
8% remove it
 
Powered by Should I Remove It?

The file Scan.dll has been seen being distributed by the following 4 URLs.

http://repo.midgar-online.com/1337/.../Scan.dll?q=daf3b1e4-de07-405e-815c-761b4fa183cd

http://repo.midgar-online.com/1337/.../Scan.dll?q=ed5b4b3a-a8ab-4030-af17-8606104c9a8b

http://repo.midgar-online.com/1337/.../Scan.dll?q=a60460d2-40f2-40af-ab09-3e0c07572b10

http://repo.midgar-online.com/1337/.../Scan.dll?q=a1bc4a53-961d-4742-b9e4-f4ed94530584

Scan Scan.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.