Gridinsoft Logo
File Icon

The WoW.exe File Analysis

Technical Analysis

File Name WoW.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-14 19:00:25 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
4,907,008
File Size (bytes)
2025-05-14
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
a0eee768e0c4244c881d906293be4ad6
SHA1
96e0f0be850aa3fe75f383812ae6445b7b028658
SHA256
bb1436183cc1f2b719c89b0cf23546ff056c5fcadee10fc4cfb9fef4cc0dd589
SHA512
582e67db2c3c09907cab36435c10d0899298f03b8768358191843809abdb79c14da804b5aa1e5e2021c37c3a222e4693a6f0533a59641d112c6638a533f94ce7
ImpHash
d3b2b03a372318d910f1e6699519ef18

PE Analysis

Basic Information

Icon
Hash: 246c00a31052b013a6768dbcb7320742
Fuzzy: 9683071286da7ce14262ac907d1abed4
dHash: f8dc4c6c69aa8ee0
Image Base 0x00400000
Entry Point 0x00401000
Compilation Time 2006-09-20 03:34:51
Checksum 0x00000000 (Actual: 0x004b447c)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 13 libraries
Exports 0 functions
Resources 15 Resources
Sections 6 Sections

Version Information

Comments
CompanyName Blizzard Entertainment
FileDescription World of Warcraft
FileVersion 1, 12, 1, 5875
InternalName World of Warcraft
LegalCopyright Copyright © 2004
LegalTrademarks
OriginalFilename WoW.exe
PrivateBuild
ProductName World of Warcraft
ProductVersion Version 1.12
SpecialBuild
Translation 0x0000 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 4,185,516 bytes 4,186,112 bytes 6.53 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 1451249FB824ADF7DAAC8223E5839838
.rdata 0x003ff000 160,344 bytes 163,840 bytes 5.67 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D464C1A97D110B514B37626FEB282910
.data 0x00427000 5,058,900 bytes 376,832 bytes 5.89 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 631EFDD9627B4E23E3C85EA08CD0D310
.sxdata 0x008fb000 8 bytes 4,096 bytes 0.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_LNK_INFO|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9B3121C87A53879AB6B6648E0B9B28B8
.rsrc 0x008fc000 36,920 bytes 40,960 bytes 5.64 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B2E206D56329E645D1A4904733FE6EE4
.tdata 0x00906000 131,072 bytes 131,072 bytes 0.08 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 599A6DB0034A8DF9DAF5A07AB047657F
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 15 (35,892 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 1 308 bytes
0.9%
RT_BITMAP 1 620 bytes
1.7%
RT_ICON 9 33,832 bytes
94.3%
RT_GROUP_CURSOR 1 20 bytes
0.1%
RT_GROUP_ICON 1 132 bytes
0.4%
RT_VERSION 1 896 bytes
2.5%
None 1 84 bytes
0.2%

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware