home

setup_the_witcher3_dlc6_2.0.0.30.exe

GOG Limited

This is a setup program which is used to install the application. This is installed with multiple programs including Beard and Hairstyle Set and Alternative Look for Triss. The file has been seen being downloaded from tedinator2k.themis.feralhosting.com and multiple other hosts.
Publisher:
GOG.com   (signed by GOG Limited)

Version:
1.0.0.0

MD5:
ba6d68b7f4bb7e2296309681b0a408c0

SHA-1:
65c6e8bbca6437ebfdb2cf2b307986233d181ee4

SHA-256:
620ace80b2d3d833d249cd3f782093cfa67d06343c7b331fcee9ad81d4eda57f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
10/20/2025 9:08:39 AM UTC  (today)

File size:
11.5 MB (12,026,248 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2015 GOG.com LTD

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
GOG Limited

Authority:
DigiCert Inc

Valid from:
4/2/2015 2:00:00 AM

Valid to:
6/1/2016 2:00:00 PM

Subject:
CN=GOG Limited, O=GOG Limited, L=Nicosia, C=CY

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0B84CDECCABF7D06904BFBE923C3CFEA

File PE Metadata
Compilation timestamp:
12/11/2014 11:42:56 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:OF2CsG8lnGtZr8odqIVbpyGpT5E/kXA6JPpR5txc4Uvu8fs5uFBuEHYjEHJTo1ZP:NTGTrHqIVdy2qkXzN+dGu4JEHYj2Gvvx

Entry address:
0x236D8

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, AC, FE, 41, 00, E8, B0, 56, FE, FF, 33, C0, 55, 68, BE, 3D, 42, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 7A, 3D, 42, 00, 64, FF, 32, 64, 89, 22, A1, 4C, 8C, 42, 00, E8, 7A, B3, FF, FF, E8, C1, AE, FF, FF, 80, 3D, 00, 57, 42, 00, 00, 74, 0C, E8, 8F, B4, FF, FF, 33, C0, E8, 88, 27, FE, FF, 8D, 55, EC, 33, C0, E8, 86, 62, FF, FF, 8B, 55, EC, B8, 80, B7...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
136.5 KB (139,776 bytes)

The file setup_the_witcher3_dlc6_2.0.0.30.exe has been discovered within the following programs.

Alternative Look for Triss  by GOG.com
www.gog.com
12% remove it
Alternative Look for Yennefer  by GOG.com
4% remove it
Ballad Heroes - Neutral Gwent Card Set  by GOG.com
7% remove it
Beard and Hairstyle Set  by GOG.com
12% remove it
Elite Crossbow Set  by GOG.com
8% remove it
New Quest - Contract Missing Miners  by GOG.com
5% remove it
New Quest - Fool's Gold  by GOG.com
10% remove it
Nilfgaardian Armor Set  by GOG.com
9% remove it
Temerian Armor Set  by GOG.com
3% remove it
 
Latest 20 of 12 programs
Powered by Should I Remove It?

The file setup_the_witcher3_dlc6_2.0.0.30.exe has been seen being distributed by the following 2 URLs.

http://tedinator2k.themis.feralhosting.com/rutorrent/plugins/.../action.php?hash=2CDB0A8E27AE91FA7893716D75BF7CD7D71D83B5&no=6

https://www.gog.com/downlink/.../en1installer1

Scan setup_the_witcher3_dlc6_2.0.0.30.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.