File Name | WoW.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.216.174 |
Database Version | 2025-05-14 19:00:25 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
a0eee768e0c4244c881d906293be4ad6
|
|
SHA1 |
96e0f0be850aa3fe75f383812ae6445b7b028658
|
|
SHA256 |
bb1436183cc1f2b719c89b0cf23546ff056c5fcadee10fc4cfb9fef4cc0dd589
|
|
SHA512 |
582e67db2c3c09907cab36435c10d0899298f03b8768358191843809abdb79c14da804b5aa1e5e2021c37c3a222e4693a6f0533a59641d112c6638a533f94ce7
|
|
ImpHash |
d3b2b03a372318d910f1e6699519ef18
|
Icon |
Hash: 246c00a31052b013a6768dbcb7320742
Fuzzy: 9683071286da7ce14262ac907d1abed4 dHash: f8dc4c6c69aa8ee0 |
Image Base | 0x00400000 |
Entry Point | 0x00401000 |
Compilation Time | 2006-09-20 03:34:51 |
Checksum | 0x00000000 (Actual: 0x004b447c) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports | 13 libraries |
Exports | 0 functions |
Resources | 15 Resources |
Sections | 6 Sections |
Comments | |
CompanyName | Blizzard Entertainment |
FileDescription | World of Warcraft |
FileVersion | 1, 12, 1, 5875 |
InternalName | World of Warcraft |
LegalCopyright | Copyright © 2004 |
LegalTrademarks | |
OriginalFilename | WoW.exe |
PrivateBuild | |
ProductName | World of Warcraft |
ProductVersion | Version 1.12 |
SpecialBuild | |
Translation | 0x0000 0x04b0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
4,185,516 bytes | 4,186,112 bytes | 6.53 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
1451249FB824ADF7DAAC8223E5839838 |
.rdata |
0x003ff000 |
160,344 bytes | 163,840 bytes | 5.67 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
D464C1A97D110B514B37626FEB282910 |
.data |
0x00427000 |
5,058,900 bytes | 376,832 bytes | 5.89 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
631EFDD9627B4E23E3C85EA08CD0D310 |
.sxdata |
0x008fb000 |
8 bytes | 4,096 bytes | 0.01 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_LNK_INFO|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
9B3121C87A53879AB6B6648E0B9B28B8 |
.rsrc |
0x008fc000 |
36,920 bytes | 40,960 bytes | 5.64 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
B2E206D56329E645D1A4904733FE6EE4 |
.tdata |
0x00906000 |
131,072 bytes | 131,072 bytes | 0.08 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
599A6DB0034A8DF9DAF5A07AB047657F |
1 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_CURSOR | 1 | 308 bytes | |
RT_BITMAP | 1 | 620 bytes | |
RT_ICON | 9 | 33,832 bytes | |
RT_GROUP_CURSOR | 1 | 20 bytes | |
RT_GROUP_ICON | 1 | 132 bytes | |
RT_VERSION | 1 | 896 bytes | |
None | 1 | 84 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important