home

thewitcherpatch.1.5.exe

InstallShield

CD Projekt RED Sp. z o.o.

The program is a setup application that uses the InstallShield Setup installer. This is installed with multiple programs including Rise of the White Wolf and The Witcher Enhanced Edition. The file has been seen being downloaded from www.the-witcher.de and multiple other hosts.
Publisher:
Macrovision Corporation  (signed by CD Projekt RED Sp. z o.o.)

Product:
InstallShield

Description:
Setup.exe

Version:
14.0.162

MD5:
30ef893614f62dd712b3855f6d0fa663

SHA-1:
71c860d9ac0d58c2f39c75edfc013cf307b6e7ce

SHA-256:
917503f5172fedc6e45f9a2535b7303904cc2f78010ffe7d01eca132eab4bfd2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 6:38:06 PM UTC  (today)

File size:
371.6 MB (389,615,448 bytes)

Product version:
14.0

Copyright:
Copyright (C) 2007 Macrovision Corporation

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\thewitcherpatch.1.5.exe

Digital Signature
Signed by:
CD Projekt RED Sp. z o.o.

Authority:
Unizeto Sp. z o.o.

Valid from:
8/11/2008 4:55:59 PM

Valid to:
8/11/2009 4:55:59 PM

Subject:
E=cdprojekt@cdprojekt.com, CN=CD Projekt RED Sp. z o.o., OU=Warszawa, O=CD Projekt RED Sp. z o.o., C=PL

Issuer:
CN=Certum Level III, O=Unizeto Sp. z o.o., C=PL

Serial number:
044851

File PE Metadata
Compilation timestamp:
4/19/2007 2:08:20 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6291456:j2L822LIZmsulwQOqINz88+7ajRNTnHveqXe4BnMNmRiAcQ97a6uhsOXcaKJwjrZ:gl+IhEwQyNY8+ERRvFx8Aa6NOXcaKwjN

Entry address:
0x22094

Entry point:
55, 8B, EC, 6A, FF, 68, F0, A2, 44, 00, 68, 48, 50, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 40, 91, 44, 00, 33, D2, 8A, D4, 89, 15, 70, 8D, 45, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 6C, 8D, 45, 00, C1, E1, 08, 03, CA, 89, 0D, 68, 8D, 45, 00, C1, E8, 10, A3, 64, 8D, 45, 00, 6A, 01, E8, DC, 1C, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, A8, 11, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
288 KB (294,912 bytes)

The file thewitcherpatch.1.5.exe has been discovered within the following programs.

Rise of the White Wolf  by CD Projekt RED
www.nexusmods.com/witcher/mods/669/?
About 7% of users remove it
The Witcher  by CD Projekt Red
www.thewitcher.com
About 5% of users remove it
The Witcher Enhanced Edition  by CD Projekt Red
Publisher's description - “Become The Witcher, Geralt of Rivia, a legendary monster slayer caught in a web of intrigue woven by forces vying for control of the world. Make difficult decisions and live with the consequences in an game that will immerse you in an extraordinary tale like no other.”
1% remove it
The Witcher Enhanced Edition Director's Cut  by GOG.com
The Witcher Enhanced Edition Director's Cut is a video game distributed through the GOG.com service, a digital rights management (DRM) free cloud service.
www.gog.com
10% remove it
 
Powered by Should I Remove It?

The file thewitcherpatch.1.5.exe has been seen being distributed by the following 5 URLs.

https://www.the-witcher.de/dlfile--dl-TRUE-id-183.html

http://www.4players.de/services/.../download.php?action=start_now&DOWNLOADID=52513

http://cdn.gazeta.pl/bi.gazeta.pl/pub/.../TheWitcherPatch.1.5.exe

http://downloads.atari.com/TheWitcher/.../TheWitcherPatch.1.5.exe

http://download.fileplanet.com/ftp1/.../TheWitcherPatch.1.5.exe

Scan thewitcherpatch.1.5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.