home

world-of-warcraft-setup-eses.exe

World of Warcraft Setup

Blizzard Entertainment, Inc.

This is a setup and installation application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Blizzard Entertainment  (signed by Blizzard Entertainment, Inc.)

Product:
World of Warcraft Setup

Version:
1.11.5.2408

MD5:
f98a01e017f657b8d62326e398f9639c

SHA-1:
836e96cf3a7acc71fd36834fd6197da99735a1df

SHA-256:
5636fa0b0ce6ae1eea23acef94e7ed76bccdbe4e5f497d0f29c5d2eab2b4366d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 2:02:58 PM UTC  (today)

File size:
2.8 MB (2,908,728 bytes)

Product version:
1.11.5.2408

Copyright:
© 2005-2015 Blizzard Entertainment Inc.

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Blizzard Entertainment, Inc.

Authority:
Thawte, Inc.

Valid from:
12/3/2013 1:00:00 AM

Valid to:
12/5/2015 12:59:59 AM

Subject:
CN="Blizzard Entertainment, Inc.", OU=TECHNICAL SUPPORT, O="Blizzard Entertainment, Inc.", L=Irvine, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
54A1AA6802EAD5F58A6A016D4D84C565

File PE Metadata
Compilation timestamp:
1/31/2015 3:29:15 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:R58jaPt/iGtowiTGUoap3oyzMNLk8ykvtIA7eMTMymbk1ebLJcwAT6KAG1wB7yrF:iaV/iGtfUoUYylklIrckiwiAGi

Entry address:
0xEC8A0

Entry point:
E8, 7A, 73, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, CC, 05, 00, 00, 8B, C1, 83, 60, 04, 00, C7, 00, 34, DC, 58, 00, C6, 40, 08, 00, C3, 8B, FF, 55, 8B, EC, 8B, C1, 8B, 4D, 08, C7, 00, 34, DC, 58, 00, 8B, 09, 89, 48, 04, C6, 40, 08, 00, 5D, C2, 08, 00, 8B, 41, 04, 85, C0, 75, 05, B8, 3C, DC, 58, 00, C3, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 57, 8B, F9, 74, 2D, 56, FF, 75, 08, E8, 59, 30, 00, 00, 8D, 70, 01, 56, E8, B7, 22, 00, 00, 59, 59, 89, 47, 04, 85, C0, 74, 11, FF, 75, 08, 56, 50, E8, 97...
 
[+]

Code size:
1.5 MB (1,618,432 bytes)

The file world-of-warcraft-setup-eses.exe has been seen being distributed by the following 10 URLs.

http://dw.uptodown.com/dwn/xu-iceU7KnZFt9tsgEcWQowUaNDNLiKarfF4KNxraSw3dQ-3lXywxxGSGzhgtIymWS9vbZnvbl4Pqzq8fPLE9Gwk68mL7sD7Vy3cWj3YAshDkJodkrrkkVJXoCCFp-Py/TfCWqdQV3Gm98HWXxMmZut3eplwX8-C1_p9umdkMqDaYtfzdj0EIuFB6-_G5rJc_nr_Tr1jjL6gIXLARyz5p083gbYA_5AJFscXxA4-_TqjReFPi7IpHt_wwbsYV1MiQ/FNI5bon7zDpWezwh1_ysttiZqxQi3Q1b0BEtb6Vn4fJvXpxRmcGsJpw75QOqFC3LXGHF2gIJuDPveK1zFMSuZXYynQwakQMel2MWysnkvkQ9v7u0BG8MiQ05bYUKl9pv/.../

https://dw3.uptodown.com/dwn/7uPYhYmyTXdl2lf_J2mJXaA-n1MvjG3H59S1KtAQ7Pm70T6zALRjeYRE7mpaPUQTiL6tUdWEWtIlgXdJqXdkYXzz7Mu8mJQMQDr-j81yY6Pd_zM4odpVsXKQZTsj6dGY/Jv49szqFMNzJI2gVD6w8hNdbBHJfFwLyppCVFbdMHF5b7-HzT701nZlvLKVNoRwSrKT5O8M-CXiD_ig1coW0i_zQh7_dnO6_VR-XN3XWGwQEGIueoRBbDw0k5-edG43l/w1us-mNtosJCLiTN4iZvc5Cuy9ljSP4wgJK5H92m9nvFe8qoyp0e95NwXJSo-U4lXjpLGSk2FWYcqTV6iqi8N8zpAp1p4uBAIS5c-DRpptO56vEMJ6-7cM7TAfG3HpwL/.../world-of-warcraft-1-11-es-win.exe

http://dw.uptodown.com/dwn/W8un5U7MYk_NUR8AejIPmkxgtZUmvu-YVxIYWwpUb-pzLEpgD_noFaYIciAK0bZ7SoG-rthfAzGOf5ZgPcBj9Hzy5kdEnVdzjWdPHo9S501W5IfE0UjCAh5n7AFzSB2T/RXJk2nMZtfzggz9Hb4lNrD6RqkV76kowiDk_TB1npwM6RCWomZG--FZKc6LtAqZp2z7DHygm4YrqFN03TBhDPKlBRTaBnzz5UAidkI43udAk7c0En8udl3Z4LNs3HmTV/dm7HK_Hyn79j0dhMUhhBGrMEMUenWsubt6BtSGnMNKyL-wfuPVHs0YGvUKTF0ZBIRe1AImJS7Vl0zQj4u3DYdaC_uIH9YpcoOZZIhwdLll4T4swke3VRTY_uutzXWbaL/.../

http://dw.uptodown.com/dwn/wh52Aka-MMgadwSLAS7lXXVx2P25_YHCPv3rf1dtwf7ua5cW5Rbhx7_Tkh2PYBJDCkmOhBYe9JM3CHCHTTLb8LG0FpHMq-UUCVNqui23aSndJqnx2GKKy2ZduDXA8i6g/pemIhUMlhLP-BFiDbeRL9POkN13KU_N0aJ56Y5JI2dKFr31_atftV2rcMyKR4i69AOJ0ryuwS4r8oSgQR3LfdPQpPLb-L09imo67vOnaEWVRH8TKTMUVnZe4wTZwim5H/hAxDYUzzS6zewQISEXaby58cJYZ4M05C265Wy0yphT9YQ0P4_ckcQ4mYhrxFCTnI7ptJs6XaAxZ1DkQFvsvMYmVJs_QS6tI_gM8epX2cJ75DhOXCAenArFu42kJt72rF/.../

http://dw.uptodown.com/dwn/IOF6I99qs7o5hosqhYE3EAy0xQ8PMVz_aWAuYQnBb-w015EX93u_CUUWw2HDG_2MUSrMSGJmZNXxLMTjC3CVGI1McTYnjs8jgfSlsOEcUcDrRf94O-1fSDWTLnshVs9H/AkJI17LCC0zxNmKpR47NPSP73_FfHUWHwk7Q4UHi5lONVL_tqAHW-I4cGZcyNgoYUIbuY0ix6GqeoTteRHsWynPU8JW2Wx17mmcwhdKNKvET_vlzG7pc9BGeB7COqZhn/fcCbmVGyjlnJpqTCLVvDSLaUBmSAnYJxplMoTrsgNHIM4bWDxUZyMEBLY6yTBKBx7WpBvi6h0Rvg0LXMP1gkOgm-sgOQP-EBr6zonMet09YsL52gnLb132hpnKrUY7Ge/.../

http://dw.uptodown.com/dwn/_WkpbIp2JNEn2sXwdQdNJi_UtIXph-RjXUjOCj5Pb5_z6fRqMQkgLlJzPKhOYbxHdQlJfEXvu3uwfPeCrJNA9Ah8s7J2iMjTraMATVXz_kbyx78bLOS1GwfCYFpnXeGY/2zC62fN4y5RcbwmtpVfaDsHZvrfOIRng4ppO6YOT24lCn8wim4R28REtW2GJeXfjqE7NCjcjg8vPG8cKwZO4Wvf6mgaO6iTGvmXFHrbM64OgAXE5cH16mPB5BbWWL41K/SG0Dh1W3Ypu9hU4UAlQ56d7fiKk9uGhvQ4QoMCqUSNvTorwqlHglhDd7hWD3N8YlcJLB7IEsfNwAWUOp2qxsgL6jKAzUopCZKI6vRqSN4hSmCtyqoAbWVQRot9Tj_whI/.../

http://dw3.uptodown.com/dwn/YXo4JY-y7y9Q9WvZoG0FpF8y8XRsFedvnciq_GXZHnDGMbLmsajKlT1W5Lj1yZO2Y2fsrGlQ6X4b22OKxOpsyE8aV-BxFMw1vsdUII3NjThqhfkpYCxJROpjW8bfrEUy/c0oxOGGaHPHrJmXec5pxfdbha1YVornNa6ptUS9RmqCK8Mmcv74qxDHkD4bIKlpT6fRN6tog5HI1xxadLMd9CXkj33OB6S-9GXXZQZz0rplT7OPxBYuQEnxXTL7dLkgC/qg6H3m4SMquZiptfecGRS7aEGzDud91TYqZE88dtCL8w3pTUxj9hJVFZ_QoMU-sGj2Q4dUlGa6HUSQEvxrzwHFDwj8IrSgXngfP6XopD2xYLcQHLcYGNl2TlDysViBJU/.../world-of-warcraft-1-11-es-win.exe

http://dw.uptodown.com/dwn/pfuMuSmgvh4WHlFToA92iPw9pBpW7fKNZDnCs7Y4r_BiNUZlpO-VG5jQB8uSiG0tUYvJhkCKoMU2JS2SvvRp7FYn_gqF3L7yR7LvAKpdeNQzUT-jb62owJ0Vv-nJN3_E/.../

http://dw.uptodown.com/dwn/gon6jVzoGEqbqWkVXUuZW2zpIyDZr3sVKrf98QRVSOgVQfr_py_LA3TJRv9iXb1WrOBvkyj3FDLR8rvyPd07XOyGRW6tZ7Uo5mGA9hE--NWvunI04VKhRiwuFfcxcQJ3/.../

http://dist.blizzard.com/downloads/wow-installers/.../World-of-Warcraft-Setup-esES.exe

Scan world-of-warcraft-setup-eses.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.