home

Activation.dll

EA DRM

Electronic Arts

This is installed with multiple programs including FIFA 12 and FIFA 13. The file has been seen being downloaded from dla.uloz.to and multiple other hosts.
Publisher:
Electronic Arts, Inc.  (signed by Electronic Arts)

Product:
EA DRM

Description:
EA DRM Helper

Version:
4.2.0.19

MD5:
0609602801e1c765d151b25a762f6cf9

SHA-1:
334b79f0a4ce0f432ea9d3cbcce74d2a1b53e3ac

SHA-256:
2fd2a0088270372dc5e5be73aecc417d9547a49debaed561c90d1d90ba92c30e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 2:07:28 AM UTC  (today)

File size:
1 MB (1,095,848 bytes)

Product version:
4.2.0.19

Copyright:
(c) Electronic Arts, Inc. 2009 All rights reserved.

Original file name:
Activation.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\origin games\fifa 13\game\core\activation.dll

Digital Signature
Signed by:
Electronic Arts

Authority:
Root CA

Valid from:
6/9/2011 5:51:04 PM

Valid to:
9/11/2015 4:53:32 AM

Subject:
CN=Origin Development, OU=Origin, O=Electronic Arts

Issuer:
CN=Root CA, DC=ad, DC=ea, DC=com

Serial number:
1A7D1BEA000000001E88

File PE Metadata
Compilation timestamp:
8/7/2012 5:16:48 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:VR/KO6Jq43ooPq73y70+ph8xoyOVvTtGi9hNDJytVL17rzcFufcQX:7zHn73P+1fj4AufcQX

Entry address:
0x59358

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, E9, 0D, 01, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, CC, CC, CC, CC, 8B, 4C, 24, 0C, 57, 85, C9, 0F, 84, 92, 00, 00, 00, 56, 53, 8B, D9, 8B, 74, 24, 14, F7, C6, 03, 00, 00, 00, 8B, 7C, 24, 10, 75, 0B, C1, E9, 02, 0F, 85, 85, 00, 00, 00, EB, 27, 8A, 06, 83, C6, 01, 88, 07, 83, C7, 01, 83, E9, 01, 74, 2B, 84, C0, 74, 2F, F7, C6, 03, 00, 00, 00, 75, E5, 8B, D9, C1, E9, 02, 75, 61, 83, E3, 03, 74, 13, 8A, 06, 83, C6, 01...
 
[+]

Entropy:
6.6836

Code size:
774.5 KB (793,088 bytes)

The file Activation.dll has been discovered within the following programs.

Angry Birds Space  by Rovio
Angry Birds Space is a puzzle game and the fourth game in the Angry Birds video game series.
www.rovio.com
2% remove it
FIFA 12  by Electronic Arts
FIFA 12 is the nineteenth game in Electronic Arts' FIFA series of association football video games. It was developed by EA Canada, and published by Electronic Arts worldwide under the EA Sports label.
www.ea.com
7% remove it
FIFA 13  by Electronic Arts
FIFA 13 is developed by EA Canada. There are 26 stadia in FIFA 13, including two new real ones: Tottenham Hotspur's White Hart Lane and the Saudi Arabia's King Fahd International Stadium. and one new generic stadium, Sanderson Park.
www.ea.com/ru
5% remove it
League of Legends  by Riot Games
League of Legends (LoL) is a multiplayer online battle arena video game developed and published by Riot Games for Microsoft Windows. Players are formed into 2 even teams of Champions, 3v3 or 5v5. League of Legends is a session-based game.
www.RiotGames.com
12% remove it
 
Powered by Should I Remove It?

The file Activation.dll has been seen being distributed by the following 4 URLs.

http://dla.uloz.to/Ps;Hs;fid=25174342;cid=168114440;rid=1693257942;up=0;uip=93.99.145.33;tm=1467974849;ut=f;aff=ulozto.cz;did=ulozto-cz;He;ch=3b910f3b382788d028eb92ce0d35b6c1;Pe/.../activation-dll?bD&c=168114440&De

http://freecache34-free.uloz.to/Ps;Hs;fid=25174342;cid=2122539979;rid=1626010968;up=1;uid=6469995;uip=79.141.245.21;tm=1392658065;ut=f;aff=uloz.to;did=uloz-to;He;ch=d69fbf08bccc3daaa7df8e7687a9d7eb;Pe/.../activation.dll?bD&u=6469995&c=2122539979&De&redirs=2

http://storage2-free.uloz.to/Ps;Hs;fid=25174342;cid=2122539979;rid=1626010968;up=1;uid=6469995;uip=79.141.245.21;tm=1392658065;ut=f;aff=uloz.to;did=uloz-to;He;ch=d69fbf08bccc3daaa7df8e7687a9d7eb;Pe/.../activation.dll?bD&u=6469995&c=2122539979&De&redirs=1

http://dla.uloz.to/Ps;Hs;fid=25174342;cid=2122539979;rid=1626010968;up=1;uid=6469995;uip=79.141.245.21;tm=1392658065;ut=f;aff=uloz.to;did=uloz-to;He;ch=d69fbf08bccc3daaa7df8e7687a9d7eb;Pe/.../activation.dll?bD&u=6469995&c=2122539979&De

Scan Activation.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.