home

AGE2_X1.EXE

Age of Empires II Expansion

Microsoft Corporation

This is installed with multiple programs including Microsoft Age of Empires II: The Conquerors Expansion and Microsoft Age of Empires II. The file has been seen being downloaded from justforfunlmao.app.box.com and multiple other hosts.
Publisher:
Microsoft Corporation

Product:
Age of Empires II Expansion

Version:
00.07.26.0809

MD5:
f27238dfa1c3ec444152c85f01af30a0

SHA-1:
98d56f2f22f8c174ca3c8d0e6840e36457caf815

SHA-256:
1aa8c9ba37e08caaa80b530dec63a6689f956d4eb0448f2d372573744028e95e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:38:09 PM UTC  (today)

File size:
2.6 MB (2,699,309 bytes)

Product version:
2.1

Copyright:
Copyright © Microsoft Corp. 2001

Original file name:
AGE2_X1.EXE

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
8/11/2001 3:20:12 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:Y3Gh8/cCz2pesb2lWnZtWGpm/DqdOCN/oL5uH3c1fwuHAn8dr79QNiqiH2Hgku7O:teNkPGGLdOCNW5pi4r7T2Afi88kHfE

Entry address:
0x217522

Entry point:
55, 8B, EC, 6A, FF, 68, 10, 03, 66, 00, 68, FC, CD, 61, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 74, 52, 63, 00, 33, D2, 8A, D4, 89, 15, F0, 2A, 79, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, EC, 2A, 79, 00, C1, E1, 08, 03, CA, 89, 0D, E8, 2A, 79, 00, C1, E8, 10, A3, E4, 2A, 79, 00, 33, F6, 56, E8, CD, 02, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 0D, 32, 00, 00, FF, 15, 70, 52, 63, 00, A3, 64, 41, 79, 00, E8...
 
[+]

Entropy:
6.4190

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
2.2 MB (2,310,144 bytes)

4 Windows Firewall Allowed Programs
Name:
D:\遊戲\AOEII_all\AOE\age2_x1.exe

Name:
E:\Games\AOE\age2_x1.exe

Name:
C:\Downloads\AOC\age2_x1.exe

Name:
C:\Documents and Settings\Ninzo\Desktop\Age of Empires II\Age2_x1\age2_x1.exe


The file AGE2_X1.EXE has been discovered within the following programs.

Microsoft Age of Empires II  by Microsoft Corporation
Age of Empires is a history-based real-time strategy video game. Developed by Ensemble Studios and published by Microsoft, the game uses the Genie, a 2D sprite-based game engine.
1% remove it
Microsoft Age of Empires II: The Conquerors Expansion  by Microsoft Corporation
Age of Empires II: The Conquerors Expansion is the expansion pack to the real-time strategy game Age of Empires II: The Age of Kings. The Conquerors is the fourth installment in the Age of Empires series by Microsoft Game Studios and Ensemble Studios.
2% remove it
 
Powered by Should I Remove It?

The file AGE2_X1.EXE has been seen being distributed by the following 8 URLs.

https://justforfunlmao.app.box.com/index.php?rm=box_download_file_via_post

http://download1056.mediafire.com/cix1ni2wg8jg/.../AGE2_X1.EXE

http://download1098.mediafire.com/6rr900xzs36g/.../age2_x1.exe

http://download842.mediafire.com/0eglwbxurxhg/.../age2_x1.exe

https://docs.google.com/uc?authuser=0&id=0B85H4YgMPF-hRDM0c2ZmQ2ZDekE&export=download

http://download1098.mediafire.com/lkckzr682oqg/.../AGE2_X1.EXE

https://doc-14-9o-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/09528qvrrpdddscurbnca0gojpv4i2lr/1427018400000/08749751243516310505/.../0B6XDZlEX0gqKUUQtQjJjOFViUEE

https://docs.google.com/uc?id=0B6XDZlEX0gqKUUQtQjJjOFViUEE

Scan AGE2_X1.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.