» world-of-warcraft-setup-dede.exe
Overview
Analysis
File Details
Programs (1)
Downloads (20)

world-of-warcraft-setup-dede.exe

Blizzard Setup

Blizzard Entertainment, Inc.

This is a setup and installation application. The file has been seen being downloaded from secure.giga-downloads.de and multiple other hosts.

File name:

Publisher:

Blizzard Entertainment (signed by Blizzard Entertainment, Inc.)

Product:

Blizzard Setup

Description:

World of Warcraft Setup

Version:

1.1.0.0

MD5:

1c23d3797ee977c651a96a98f3d8cd61

SHA-1:

3a8088fb4ea77a5521390f61d3aa25b4932fc01b

SHA-256:

36cf55a6539b03e0a027c832212574930e20ccb0d15e6f56d9825067c5089f84

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/27/2024 12:45:22 AM UTC (today)

File size:

79.4 MB (83,293,072 bytes)

Product version:

1.1.0.0

Original file name:

World of Warcraft Setup.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\world-of-warcraft-setup-dede.exe

Digital Signature

Signed by:

Blizzard Entertainment, Inc.

Authority:

Thawte, Inc.

Valid from:

9/30/2011 2:00:00 AM

Valid to:

12/5/2013 12:59:59 AM

Subject:

CN="Blizzard Entertainment, Inc.", OU=TECHNICAL SUPPORT, O="Blizzard Entertainment, Inc.", L=Irvine, S=California, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

7DF5743025E2C2202A6BBD0AF8E570FC

File PE Metadata

Compilation timestamp:

12/19/2012 11:48:52 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

1572864:gwgooRExgaMJ7WVdp+Bq0OEWvarT8V3xOiN9GJl6gU6XYPMS0:qoYJK7QrOEUwSNYThXY0S0

Entry address:

0x44783

Entry point:

E8, 64, 6B, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, F1, C6, 46, 0C, 00, 85, C0, 75, 63, E8, 6F, 59, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, C8, 9D, 58, 00, 74, 12, 8B, 0D, 80, 9B, 58, 00, 85, 48, 70, 75, 07, E8, 5E, 75, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, 88, 9A, 58, 00, 74, 16, 8B, 46, 08, 8B, 0D, 80, 9B, 58, 00, 85, 48, 70, 75, 08, E8, BD, 6D, 00, 00, 89, 46, 04, 8B, 46, 08, F6, 40, 70, 02, 75, 14, 83, 48, 70, 02, C6, 46, 0C, 01, EB, 0A... 
[+]

Code size:

1.3 MB (1,318,912 bytes)

The file world-of-warcraft-setup-dede.exe has been discovered within the following program.

League of Legends by Riot Games

League of Legends (LoL) is a multiplayer online battle arena video game developed and published by Riot Games for Microsoft Windows. Players are formed into 2 even teams of Champions, 3v3 or 5v5. League of Legends is a session-based game.

www.RiotGames.com

12% remove it

The file world-of-warcraft-setup-dede.exe has been seen being distributed by the following 20 URLs.

https://secure.giga-downloads.de/dl/.../

http://dist.blizzard.com/downloads/wow-installers/.../World-of-Warcraft-Setup-deDE.exe

Scan world-of-warcraft-setup-dede.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.