home

war3.exe

Warcraft III

Blizzard Entertainment

Publisher:
Blizzard Entertainment

Product:
Warcraft III

Version:
1, 26, 0, 6401

MD5:
d0fcfe5155e2c8ab858c128147f916fb

SHA-1:
ffda20fc5a1080ae21016f4b954dce3ad2d1f4e8

SHA-256:
28173101fcbeb4cdcac0f83e0e724aa444209b479a2ac1c1784e0d4310889909

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 9:05:57 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Cloddc3.Trojan
1.3.0.4613

File size:
460 KB (471,040 bytes)

Product version:
Version 1.26.0

Copyright:
Copyright © 2003-2011

Original file name:
war3.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\warcraft iii\war3.exe

File PE Metadata
Compilation timestamp:
3/18/2011 4:03:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:JWuCyfqXozHpwIH4ymoSBWrK75V2e2Ma+es/nOy03rpoylFdFUU:J1aIFSBKKtsa07RlxUU

Entry address:
0x3606

Entry point:
E8, 6D, 04, 00, 00, E9, D9, FC, FF, FF, FF, 25, D8, 62, 45, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C, 24, 0C, 75, 09, 8B, 44, 24, 04, F7, E1, C2, 10, 00, 53, F7, E1, 8B, D8, 8B, 44, 24, 08, F7, 64, 24, 14, 03, D8, 8B, 44, 24, 08, F7, E1, 03, D3, 5B, C2, 10, 00, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 00, 63, 46, 00, 89, 0D, FC, 62, 46, 00, 89, 15, F8, 62, 46, 00, 89, 1D, F4, 62, 46, 00, 89, 35, F0, 62, 46, 00, 89, 3D, EC, 62, 46, 00, 66, 8C, 15, 18, 63, 46...
 
[+]

Entropy:
6.2938

Code size:
340 KB (348,160 bytes)

The file war3.exe has been discovered within the following programs.

Borderlands  by 2K Games
Borderlands is an action role-playing first-person shooter video game, that was developed by Gearbox Software. Borderlands includes character-building elements found in role-playing games, leading Gearbox to call the game a "role-playing shooter".
www.borderlandsthegame.com
5% remove it
Empire Earth III  by Sierra Entertainment, Inc.
Publisher's description - “For the first time in the Empire Earth series it is you who creates history – Earth is divided into provinces and you can conquer them in any order.”
www.sierra.com
12% remove it
Eurobattle.net  by Eurobattle.net
www.eurobattle.net
About 2% of users remove it
Frozen Throne  by V.N.V. Inc.
www.vnv.ir
About 4% of users remove it
League of Legends  by Riot Games
League of Legends (LoL) is a multiplayer online battle arena video game developed and published by Riot Games for Microsoft Windows. Players are formed into 2 even teams of Champions, 3v3 or 5v5. League of Legends is a session-based game.
www.RiotGames.com
12% remove it
Stronghold Crusader Extreme  by Firefly Studios Ltd
Publisher's description - “Crusader provides huge armies and huge battles - over 10000 units on the battle field. New buildings – Outposts provide hordes of attacking enemies to deal with.”
www.fireflyworlds.com
5% remove it
WarCraft 3 - The Frozen Throne  by Decepticon
About 1% of users remove it
Warcraft 3 The Frozen Throne + Reign Of Chaos  by torrent-igruha.org
About 1% of users remove it
Warcraft III  by Blizzard Entertainment
Warcraft III: Reign of Chaos is a real time strategy video game released by Blizzard Entertainment. It is the second sequel to Warcraft: Orcs & Humans, and it is the third game set in the Warcraft Universe.
us.blizzard.com/support
7% remove it
Warcraft III - Dota  by Blizzard Entertainment
www.Weplaes.com
About 5% of users remove it
 
Latest 20 of 14 programs
Powered by Should I Remove It?

The file war3.exe has been seen being distributed by the following 9 URLs.

https://onedrive.live.com/download.aspx?cid=33AA3953FA2FBC9C&authKey=!AMDB-QqxxdjVh10&resid=33AA3953FA2FBC9C!442&ithint=.exe

http://download1499.mediafire.com/zb41yjdoyjcg/.../war3.exe

http://download902.mediafire.com/xnj5gf584btg/.../war3.exe

http://es.originaldll.com/.../19257.exe

http://dc165.2shared.com/download/.../war3.exe

temp:war3.exe

http://download902.mediafire.com/iggpvx94ggrg/.../war3.exe

http://download877.mediafire.com/8vqi0bbwu2gg/.../war3.exe

http://originaldll.com/.../19257.exe

Scan war3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.