home

wowbrowserproxyt.exe

World of Warcraft

Blizzard Entertainment, Inc.

Publisher:
Blizzard Entertainment  (signed by Blizzard Entertainment, Inc.)

Product:
World of Warcraft

Description:
World of Warcraft: Browser Proxy

Version:
6, 1, 2, 19865

MD5:
68785f3619b1a310711cc60af80ea3cb

SHA-1:
718fe644d01f3dedb4af4266087736098a8b58dc

SHA-256:
42f2a7fba8e16c5ea19cd071dc69247d500c6c391d2487295f395fba50197dea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 2:31:02 AM UTC  (today)

File size:
739 KB (756,784 bytes)

Product version:
Version 6.1

Copyright:
Copyright © 2012 Blizzard Entertainment

Original file name:
WowBrowserProxy.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\world of warcraft public test\utils\wowbrowserproxyt.exe

Digital Signature
Signed by:
Blizzard Entertainment, Inc.

Authority:
Thawte, Inc.

Valid from:
12/2/2013 7:00:00 PM

Valid to:
12/4/2015 6:59:59 PM

Subject:
CN="Blizzard Entertainment, Inc.", OU=TECHNICAL SUPPORT, O="Blizzard Entertainment, Inc.", L=Irvine, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
54A1AA6802EAD5F58A6A016D4D84C565

File PE Metadata
Compilation timestamp:
4/3/2015 10:11:19 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:B+egYrTw8cuLDz+aLVYm8EUL5rvzNIZdS3Vj8L4ApEO+xeztFQL+fHmtZmZoOCsN:Btv7WwVYEUL5rvcSFVB8zbEiCtKAg5J

Entry address:
0x15C07

Entry point:
E8, 58, 6C, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 56, 33, C0, 50, 50, 50, 50, 50, 50, 50, 50, 8B, 55, 0C, 8D, 49, 00, 8A, 02, 0A, C0, 74, 09, 83, C2, 01, 0F, AB, 04, 24, EB, F1, 8B, 75, 08, 8B, FF, 8A, 06, 0A, C0, 74, 0C, 83, C6, 01, 0F, A3, 04, 24, 73, F1, 8D, 46, FF, 83, C4, 20, 5E, C9, C3, 55, 8B, EC, 57, 8B, 7D, 08, 33, C0, 83, C9, FF, F2, AE, 83, C1, 01, F7, D9, 83, EF, 01, 8A, 45, 0C, FD, F2, AE, 83, C7, 01, 38, 07, 74, 04, 33, C0, EB, 02...
 
[+]

Entropy:
6.2821

Code size:
225.5 KB (230,912 bytes)

The file wowbrowserproxyt.exe has been seen being distributed by the following URL.

http://repo.midgar-online.com/1337/Windows/.../WowBrowserProxyT.exe

Scan wowbrowserproxyt.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.