home

wot_internet_install_eu.exe

World of Tanks

Wargaming.net LLP

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Wargaming.net   (signed by Wargaming.net LLP)

Product:
World of Tanks

Description:
World of Tanks Setup

Version:
1.3.585954

MD5:
0a05e95555d86f0b5f706b06f68c0938

SHA-1:
c5149b8f4ccd675a28101a67485f34bf1cd5fcab

SHA-256:
bff5d8ebcb0f56ba848105cb4a78d93e1fafba87a81f95be1d3376c5131ad4cb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:56:31 PM UTC  (today)

File size:
6.4 MB (6,693,128 bytes)

Product version:
1.3.585954

Copyright:
Copyright © 2009-2015 Wargaming.net

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\wot_internet_install_eu.exe

Digital Signature
Signed by:
Wargaming.net LLP

Authority:
DigiCert Inc

Valid from:
11/5/2014 1:00:00 AM

Valid to:
1/10/2018 1:00:00 PM

Subject:
CN=Wargaming.net LLP, O=Wargaming.net LLP, L=London, C=GB

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0159EAEE9B3974D49AE77DE5AAF83BA9

File PE Metadata
Compilation timestamp:
12/20/2011 3:16:50 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:tazSf3QHSZGKCOeT/cj683lEgvdQL4MFm6Hz:taz7HZOebK68nvdsE6

Entry address:
0x16478

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, B0, 52, 41, 00, E8, AC, 03, FF, FF, 33, C0, 55, 68, 45, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 01, 6B, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 4E, EC, FF, FF, E8, F5, E7, FF, FF, 8D, 55, EC, 33, C0, E8, 7F, 84, FF, FF, 8B, 55, EC, B8, AC, D6, 41, 00, E8, E2, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, AC, D6, 41, 00, B2, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
84 KB (86,016 bytes)

The file wot_internet_install_eu.exe has been seen being distributed by the following 14 URLs.

https://dw.uptodown.com/dwn/NltBJJrvdIjB7YxslQY2LdhSCK1vznMWfRJZoGkJOjmJihlZsELIeG9YjBAvmWa-tp46uwwHiFOVi9B2OuaRiT6YcXvzgjUcRpouujDsB2Y_qdZCgqYJj2NNVli_r8Np/8m1r2U6ua-H8xYnc1E_hZ8vh4fr9giDHLkt45UtROna1WAVHVf5kFJhvLtxhMsHq8nYvy8C2ywgj-mPRb1e0_gDHr1IYPCMeoxwQYnR1PBdiuYy252NyRMeOTTsZv7-L/JV0BHZCQdnuU9xb4LAARLh_-ag8J_d4TaYphDVeO0PmUVADk-n_qAO9zQtXOU-C1ktkRwoFi-ceCOhJBpzaUwtWuRloefuTkNWDJ42WdxaRU-4i6cMZfo6_mwiynCyNx/.../

https://dw.uptodown.com/dwn/gwn3htw06S_nKrO27wiLH_r6WBAAncKnrFLt1Ee4f1u5q0E3pwaTWGUfFXKPGEFhP57LFc0kp-nZbVGjFIKQX7qH_Aed2QVPQVy295HsF4V9z_1VcDRcNAGk2nI6hUKh/bBP1uMM2L-5l_qo23nXCv-MHfFoaPWyCxVOC-GcPs6yzoNGXrqcwORWP-Kc3-9j5tlhT_Pr2wXG99yi0_AmSZmnT6HQ2QcXOQ7sWldtJaLyJh2z9gNW3ZZG7b757PDoN/H2DBLmR-NnJWalw1qZwRluLC14RQhZY8YMTtzR2e-SWGakHA0buaSBc_pWIsvjs59UsAIoZRFCrIBaqaB4TqZNn9XvZp088Gyz_DqNcDgDfsMyIZ2wRWb_1do2AfZN32/.../

http://world-of-tanks.hu.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fl6iPnp6gmJc=

https://dw.uptodown.com/dwn/HIdePfHYW3utDXHRqYiQD1rI5q7TiX0ffU_885YTqieFhKPQUOh7CtZrJkOZ8UEC88nGikhimEgP3TCNclugBr1gFgZlD26n8lH6d5Uy_F5OhMcYW7D23tOUqpYwQh1G/OlfQVo6BvAsgZz9sjus4UVrMM7CJ1hmKuLZOyMmzNrNmuFhK5pVqFhvXf68oZWpolFHti-qdEG7-fdfRxUbkd_vKq10A1aKIjVXXditH1Y_v2_akVvcMsglLMg7ofrqR/P-HXTTj02RPXcTPzqfHZqs58KYSNrqcUSJKBBaYEGb2wJmmYOuSBCn5veP0NWfs0u4-lt3aMhrycThUdnN1EMqQtryQfGmh27TeZfsaSzP8eKEZBVKazEeTrg9FVOwx6/.../

http://dw.uptodown.com/dwn/ooPyVhX8tsFgu7dJdpC6YSv-Sk1dr0mAHgv0yw4SniFgKnfcMM-9DcO6Yzy84CVGTM4Fj-Q0aT0FdfcyohdJ8ZchM-XAYemUZBJGz8gdLNQgynNHESquie14v5FQqFb7/4ItEhkbI5fKjfKobRbHdyAuemKku9eGQZNYY3OZTFvFhGCfgWcSmxDObepILfDK2Tb8wtnj1b3-6tksPluF3LpEdtDzr1PyFoM1ZxnZNlflPeqQK3HxuwBle00f3dNDL/.../

http://dw.uptodown.com/dwn/IiXqV5HkGwrQS_viKtbEE0niSm5lKYnH4zEvAaONxcHVrhM_bWt-rMydDsDdc114KTobtu6PbVXjwU015bDn57otuJAGekmsGyA3y9q4rOZGs769CJAHvBjHGkrJzjK2/4TPWLAZsdkccgeQ77wBhUioltqXbrr1lw3o5vNWB0_d3X4QSJW2vQju8cjLGHcLYHvXcDyX9La9NruViSK5b_IX1r9-DCi2j-tPOf0aHF7VKDDH3ehy9EZ2Hb4H3AYxm/_Tvzq_VzwzBaNmyu9jFp0RKR0HLdZZMmOs_HVMOQjhNi2_kYruqT5Zpj8xUeJR4JnaURWVbjMVzG4AEeytlESTGc3xsKfGhkER6JTHYU3lXnP4lltarxmPDRObsgXDJ1/.../

https://dw.uptodown.com/dwn/8xVI_mJ3f9IgPBRevlSeuKBixgSN95azM79P1UX8fTqGH7UQEcwZ4oXFFb7tD1YpNe7O3Kqd8D_tw-Jv8-DPwLJ0DZ5bJEMJf4pS8VroWAHoIhRNlIbRk3UufUa3FmXZ/bEneuBpUwLXrj44U-ulGrBuTED2ezOcWi5nf4nFmUpkMwQynxKQHY7QVC7zTuIhBSI4BWuRPCPTZk5_6WFYVzKqcH9LjEM6JJrJevVplEbvhriPwG2J8h9Q4TLqivyQc/wQ9MsNiQRMy__lqh7Wa_Bj45imNuwteI46LErnA6CFCJ4g9q8dpivK2xs5jwvPFkqPz5ipB4R5aHXTFzvAw1X3YRNSl9PqB_QIyW_4qXIusrq2rtK3OVWGRGZfAi_sSc/.../

http://kolayurl.net/337

http://dw.uptodown.com/dwn/3mb9gfk4OnS0gP95XiiI6H7tEwlPcu6vudtJhkV0wWfZNjzf6-0nHYus-ja6QKBcHYpUpRwOseD1N-43etOLALMiHDPLKpCBkxCUKFuk4145tiMJF7eSKEZ3f7zHLOCD/Q_5WGGmd4ktQhLHr7DIqaO0eQB4jBnNm4fTcjAEi6nUGusyMduaT1r05sRnUquMVlxxMW5Nrv2IzLJ0uUqDwcqVhJlC3c4GuztLIEz4ByKK_ndAAwXOViK5Tt3471Ef-/.../

http://redirect.wargaming.net/.../latest_install_eu

http://dw9.uptodown.com/dwn/KZE5BD3FkiMLcxSZWCqFYfiiFBSvalZDEScN6Hl610eBDc7-Z4HGE-qkOiIR_rmBo_A4djcCIyqaPEAXAuh5dzlRQpWEjJdkyYPLEPYLgTPrrOk2sECd7g7P8MKRpcRd/j12Sd_r9RZOEHca5HxqHIaFuLGrY45HWvrJG0ZPgLGfvgVA3nfp4LrSTFwTVyNgAelRFMQGYKNt_UghLynj4Tmoig49vWVPolsr4d9Zu9aOI5C2VH9M5ekV1tdpT5Odv/.../world-of-tanks-9-9-multi-win.exe

http://dl.wargaming.net/wot/eu/.../WoT_internet_install_eu.exe

http://downloads.worldoftanks.com/.../latest_web_install_eu

http://redirect.wargaming.net/.../latest_web_install_eu

Scan wot_internet_install_eu.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.