home

WoW.exe

World of Warcraft

Blizzard Entertainment

This is a setup program which is used to install the application. The file has been seen being downloaded from cloclo24.datacloudmail.ru.
Publisher:
Blizzard Entertainment

Product:
World of Warcraft

Description:
World of Warcraft Retail

Version:
3, 3, 5, 12340

MD5:
f04f3dbb998fd5f2ab29ad8f4820e06a

SHA-1:
3a15b6e4a6b29ae573bd646cecb996b01b4a4786

SHA-256:
6eecf69ddeaace8bd1e9a8f79ebcee9873aa052908a1f786699c4ac30882ac7d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 11:23:10 PM UTC  (a few moments ago)

File size:
7.5 MB (7,882,194 bytes)

Product version:
Version 3.3

Copyright:
Copyright © 2004

Original file name:
WoW.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\wow.exe

File PE Metadata
Compilation timestamp:
6/25/2010 9:55:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:aSWhGvPwsP+Wc36vu00ovRwqZPNprDlYtUb17TLFdGr4QtT+W50Iu0t:afgTyovRwqZPNB9b1S4Qlu+

Entry address:
0x9FD000

Entry point:
90, B8, 5E, C8, 33, 00, BE, 18, D0, DF, 00, 90, BF, 98, 05, 00, 00, 31, 04, 3E, 90, 4F, 83, EF, 03, 90, 75, F5, B6, B5, 32, 00, 5E, C8, 33, 00, 5E, C8, 73, 00, 5E, D8, 33, 00, C6, 46, 46, 00, 8C, 5D, 46, 00, 5E, 78, 31, 00, 5F, C8, 33, 00, 46, 39, AE, 00, 6C, F3, 98, 00, 7E, F3, 98, 00, CE, DF, 58, 00, 6E, F3, 58, 00, 40, F3, 58, 00, 46, 11, 6E, 00, 6E, F3, 58, 00, 40, F3, 58, 00, 5E, C8, 33, 00, 5E, C8, 33, 00, 5E, C8, 33, 00, 1E, 39, AE, 00, 76, 39, AE, 00, 5E, C8, 33, 00, 5E, C8, 33, 00, 5E, C8, 33, 00...
 
[+]

Code size:
5.9 MB (6,149,120 bytes)

The file WoW.exe has been seen being distributed by the following URL.

https://cloclo24.datacloudmail.ru/weblink/get/.../Wow.exe

Scan WoW.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.