home

wow-3.3.5.12213-to-3.3.5.12340-enus-patch.exe

Updater

Blizzard Entertainment, Inc.

This is a self-extracting archive and installer. This file is installed with the program World of Warcraft. The file has been seen being downloaded from mega.nz and multiple other hosts.
Publisher:
Blizzard Entertainment, Inc.  (signed and verified)

Product:
Updater

Description:
Blizzard Installer

Version:
4.1.1.3953

MD5:
6bc5ba10c64fd9d27c797b8bf37ce035

SHA-1:
b20c1cf3d8f2baa28aa6229847e8c5774120af44

SHA-256:
e874b558dcc58dfa48a3a8058da9e1cc0717e5991a9448ca54f30733f6cd8577

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/20/2024 3:00:18 AM UTC  (today)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Trojan.Generic.KDV.651178
8.14.02.13.06

File size:
12.6 MB (13,180,472 bytes)

Product version:
4.1.1.3953

Copyright:
Copyright (C) 2004-2009 Blizzard Entertainment

Original file name:
Updater.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\world of warcraft\wow-3.3.5.12213-to-3.3.5.12340-enus-patch.exe

Digital Signature
Signed by:
Blizzard Entertainment, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/7/2010 4:00:00 PM

Valid to:
12/5/2011 3:59:59 PM

Subject:
CN="Blizzard Entertainment, Inc.", OU=TECHNICAL SUPPORT, O="Blizzard Entertainment, Inc.", L=Irvine, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
7B715B3347BC57B25C66B34202F4A1A0

File PE Metadata
Compilation timestamp:
10/15/2009 9:01:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:eIDFlkfbOqztE6UKGY9NStXiQfI60+60Yo56n:7Et7UxYatyQfI60+60Yo56n

Entry address:
0x7553

Entry point:
E8, D3, 47, 00, 00, E9, 16, FE, FF, FF, 56, 57, 33, F6, BF, B8, 80, 41, 00, 83, 3C, F5, 5C, 70, 41, 00, 01, 75, 1E, 8D, 04, F5, 58, 70, 41, 00, 89, 38, 68, A0, 0F, 00, 00, FF, 30, 83, C7, 18, E8, 51, 48, 00, 00, 85, C0, 59, 59, 74, 0C, 46, 83, FE, 24, 7C, D2, 33, C0, 40, 5F, 5E, C3, 83, 24, F5, 58, 70, 41, 00, 00, 33, C0, EB, F1, 53, 8B, 1D, 8C, 00, 41, 00, 56, BE, 58, 70, 41, 00, 57, 8B, 3E, 85, FF, 74, 13, 83, 7E, 04, 01, 74, 0D, 57, FF, D3, 57, E8, BB, E9, FF, FF, 83, 26, 00, 59, 83, C6, 08, 81, FE, 78...
 
[+]

Entropy:
7.9988  (probably packed)

Code size:
60 KB (61,440 bytes)

The file wow-3.3.5.12213-to-3.3.5.12340-enus-patch.exe has been discovered within the following programs.

World of Warcraft  by Blizzard Entertainment
World of Warcraft is the fourth released game set in the fantasy Warcraft universe.
us.blizzard.com/support
8% remove it
 
Powered by Should I Remove It?

The file wow-3.3.5.12213-to-3.3.5.12340-enus-patch.exe has been seen being distributed by the following 6 URLs.

https://mega.nz/temporary/.../kIdhSZwC

http://uk2.strategyinformer.com/v2/download/939f81a7/.../WoW-3.3.5.12213-to-3.3.5.12340-enUS-patch.exe

http://uk2.strategyinformer.com/v2/download/baee50b3/.../WoW-3.3.5.12213-to-3.3.5.12340-enUS-patch.exe

http://uk2.strategyinformer.com/v2/download/85f70aa8/.../WoW-3.3.5.12213-to-3.3.5.12340-enUS-patch.exe

http://uk2.strategyinformer.com/v2/download/380853e3/.../WoW-3.3.5.12213-to-3.3.5.12340-enUS-patch.exe

http://shacknews.s3.amazonaws.com/fileshack/rpg/world_of_warcraft/.../WoW-3.3.5.12213-to-3.3.5.12340-enUS-patch.exe

Scan wow-3.3.5.12213-to-3.3.5.12340-enus-patch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.