home

Blackthorne-Setup.exe

Blackthorne

Blizzard Entertainment, Inc.

This is a setup and installation application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Blizzard Entertainment  (signed by Blizzard Entertainment, Inc.)

Product:
Blackthorne

Description:
Blackthorne Installer

Version:
1.0.0.1

MD5:
312860ef36898b41c7525290cccad680

SHA-1:
43f4af5e407e041fd8f213bad00cf9705d570a8c

SHA-256:
4b2b3cb764ecac8ae5b397117aaf8102a22288a88c01220453dcd14e74b24b8c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 10:50:43 PM UTC  (today)

File size:
6.1 MB (6,429,232 bytes)

Product version:
1.0.0.1

Copyright:
Copyright (C) 2013 Blizzard Entertainment

Original file name:
Blackthorne-Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\blackthorne-setup.exe

Digital Signature
Signed by:
Blizzard Entertainment, Inc.

Authority:
Thawte, Inc.

Valid from:
9/29/2011 8:00:00 PM

Valid to:
12/4/2013 6:59:59 PM

Subject:
CN="Blizzard Entertainment, Inc.", OU=TECHNICAL SUPPORT, O="Blizzard Entertainment, Inc.", L=Irvine, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7DF5743025E2C2202A6BBD0AF8E570FC

File PE Metadata
Compilation timestamp:
10/21/2013 2:08:38 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:rrxCnjoC5Ps9xoHSKIpo39W1If96JZuzgtwh:rrxCnI1ppC0If9WZuzowh

Entry address:
0x2B93

Entry point:
E8, C7, 19, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, F4, C1, 40, 00, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, 6C, C0, 40, 00, C9, C2, 08, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 68, 10, 41, 00, 89, 0D, 64, 10, 41, 00, 89, 15, 60, 10, 41, 00, 89, 1D, 5C, 10, 41, 00, 89, 35, 58, 10, 41, 00, 89, 3D...
 
[+]

Entropy:
7.8970  (probably packed)

Code size:
42 KB (43,008 bytes)

The file Blackthorne-Setup.exe has been seen being distributed by the following 7 URLs.

http://dw.uptodown.com/dwn/p2X3AAan_1HopGZBNbxpapStirerpERI1b2HZ7Mm3H9wOQuibQ7RuVQjdyieIJ42PY3uie4OzBZKDQe94JzMYUlUMieIFWvE5-iLpsPhu6ZpuSFVvMsMoxpebMwGmq-R/Sggq3p95w_b4-22whp7l6cjrFvm2LQjRQUU8yvIlqAlSsWx0cdWzcD3qAraopU0bq3jM_AEt2PP4zri5DMnooTrDUv-ErSqiUVdklJRRm_B68WBQ1nT5z4dbKUub-36a/UCMkgVfiXdq8EPNlmIoPco10UAoavBOCJ8P-A2k5EgvoWSfnAUcve34YVqzLkCcwupj-XtYlRatBERZiFC3_l59YbHeke0WjI2aqgu2sGS1eZQrnL-TXMhP0BkJenYyR/.../

https://dw.uptodown.com/dwn/L-w7-IeNDeXk6GbwneYTzZfv302X7erpIABAYMc8OYDHQbh07ArSKM4h5ATUOpDsYFtf1U6V2JC3u7YCza51HF9TFqcCOQC8ChnSziJD7lE8jdYsIP0UgsthFci8BGEM/0jQ8UDRkZxDblbsbm85kG-OUQmFKpidqbbB_7SrniK4ZslzfjHX4Iq93_onHHDV8l5w-1LeBcnj3x-06E6NllRZpl3ps34_ETrvk978K0pesNzTOrfYF7QFwlNQpxQiI/Ksk_zm3pJLe0WxzcXJqushzzJ5c_KtoW4jqo90Kro0AFLGCfOH4xzKUDBqh1bUAhnpksVOlHiPuQRo3MxWSawndOS7INBrLjYrzjQvzD-Oc-rPDKvf_j3OfDNvWI4hN3/.../

http://dw.uptodown.com/dwn/wo0ZDYeSo8tT66P08EOVfv6dYVQYvs5T9n9RGBoGzKerFRPQpZHrJtELd_pngpHnwio8-kCNhvjHZuDnTA4vlHfgL7G4T-t42iEvGFeE_EOblcRmn_WAUPROZ-D4gMUW/kv8Cc7njPFB7DxVxOWU6r6UoWJbh7nhzjV-db-_jEhgoJnO6yAMI_sIssVArGKLvAwtnPH9VYQ0vJXvAyf3rp2IcPEyf9-91lt6YUZiHcaQzmaDowKVfnD90Xz_Ahyv7/.../

http://dw.uptodown.com/dwn/HsxbhqEIXK2zRBVozdC2DcZlLVErR-BJbBdChqTTyphh7lu2NgLgwvJuGuAilvXOgyFUbtfEs2_zJvxfiKFS2k6frSCd_FoxQGCmyFLBYgEqniLYXPNPFNG2cI3WbWxC/Nyx-Laqp00bDMnvBMWe9a5J9r8Zl2XtECeg3MosnSbPQURAQWw4udVl1faansfHnzRyXxisf0BC6ab7jjOgJb2iXfTGWjzVo1DRpunMKh-vDwdcQHmwNyiLw3KwKTZvh/.../

http://dw.uptodown.com/dwn/cZ4JsPHBhHt-Xol8RKESmjN9MaI2sVFfgU05BMZVqdP8-fyjm7XALAgQyQAsT262k-Qh5Oj1ZbnGJDs1i9r5ZaFD6tKmMi_N1H8U-Af5T1imk4di0aP94XcHFbEOboOg/SFszFs2n_W1piwXHvfrL96WIIeTsNJM4fR9aMUWXPRO4lyTqT8_oWoJxBgDZuSq1EMaiI3GtwiHNVFudsnoI26lFWQsOUFgYrC_UPp5bmH2NvK50V4pvEaDiQiLu6ln4/.../

http://www.techtudo.com.br/_/software/.../download

http://dist.blizzard.com/downloads/blackthorne/.../Blackthorne-Setup.exe

Scan Blackthorne-Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.