home

wow-colombiav434.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.wow-colombia.com and multiple other hosts.
MD5:
7957b973d3ae4c8eecdd78ac920e3924

SHA-1:
d0b30e0653687c11b2fdec4af8bc2cd6a4ce855c

SHA-256:
771e33a4d6019de81ced73d5e08c764e9f0ed5f570b2a83cd99a025139980873

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/13/2025 1:22:40 PM UTC  (today)

File size:
10.6 MB (11,067,492 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\wow-colombiav434.exe

File PE Metadata
Compilation timestamp:
3/29/2016 2:18:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
196608:vec0qqZCArei6OHBrRr0C9rkr8VpODvLXOWJAMHJgAhj4KyOM+jsywsdvC2:vKfcOhrRrRVhnovL+eyAdPw23

Entry address:
0x1000

Entry point:
68, 20, 02, 00, 00, 68, 00, 00, 00, 00, 68, 80, AF, 46, 00, E8, 10, 91, 00, 00, 83, C4, 0C, 68, 00, 00, 00, 00, E8, 0F, 91, 00, 00, A3, 84, AF, 46, 00, 68, 00, 00, 00, 00, 68, 00, 10, 00, 00, 68, 00, 00, 00, 00, E8, FC, 90, 00, 00, A3, 80, AF, 46, 00, B8, 58, A8, 43, 00, A3, 98, AF, 46, 00, E8, 32, 87, 02, 00, E8, 5B, 69, 02, 00, E8, 97, 65, 02, 00, E8, EE, 63, 02, 00, E8, BB, 62, 02, 00, E8, A2, 59, 02, 00, E8, 9B, 4B, 02, 00, E8, D6, 47, 02, 00, E8, B3, 30, 02, 00, E8, B7, EA, 01, 00, E8, 19, B8, 01, 00...
 
[+]

Packer / compiler:
PKLITE32, 0x1.1

Code size:
196.5 KB (201,216 bytes)

The file wow-colombiav434.exe has been seen being distributed by the following 2 URLs.

https://www.wow-colombia.com/.../wow-colombiav434.exe

https://docs.google.com/uc?authuser=0&id=0B-Su8yp6lW_JQXdZSVlLcTlTUlE&export=download

Scan wow-colombiav434.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.