home

ageofconan-es.exe

Age of Conan

FUNCOM

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Funcom   (signed by FUNCOM)

Product:
Age of Conan

Version:
0.15.26.63455

MD5:
f792a80715f769b02de86211759ba23a

SHA-1:
0c9e1e7527de59f81d1ea49b63833c7a6b711921

SHA-256:
3c05acb650503148722923dcb3be30054a3345435970d796c32a966e44296b02

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 4:47:38 AM UTC  (today)

File size:
14.8 MB (15,513,368 bytes)

Product version:
0.15.26.63455

Copyright:
Copyright (C) 2008 Funcom

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\ageofconan-es.exe

Digital Signature
Signed by:
FUNCOM

Authority:
VeriSign, Inc.

Valid from:
10/12/2008 7:30:00 PM

Valid to:
10/15/2009 7:29:59 PM

Subject:
CN=FUNCOM, OU=ACHA, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=FUNCOM, L=OSLO, S=OSLO, C=NO

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
44071CCAA76290390185D397D8A5D8D7

File PE Metadata
Compilation timestamp:
6/19/1992 5:52:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:UgC8+yYsY93FbLhmizV3pu66Mb63fOg0dHWQ1X00mGEL4MssA:UgCsI3FPQcG0emJwQ1XhmH4MssA

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9999

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file ageofconan-es.exe has been seen being distributed by the following 4 URLs.

http://dw.uptodown.com/dwn/V2VUfYJu0WEyoeo-D8JZSuBNkSK0x5vmSpGRdPXoV_C2zb49qM6oW_P0QHY3KGOskfH715dKWsSIXuiUsCODVGrk4hDJFObrC28GFMUjJ7o_UdcUH3MGngJhLUNTyRXJ/RIp1BtqVKyT9Wk4N0f_YBbRMDT33Og6WRfR4F5nBpEv21iwIfCrhT6YL7zMu7yhl8Chtka8VdVJiNtiNc0Aaxe4TSfg6AnqcdCHTve6stpNy4awyM9pIsHa3_J5TrD3h/K9ToUyOOkEh5wTMWlJwi0_t62L-XetwqitPQ5oFjjq3MhujS1noQHbKL9s760prkoA5oC5OjWxXKT0Z4NCRKW5Kavys2KAK5dAy33UO9S9-jJILUjUkGBUKfV17vFWPb/.../

http://dw.uptodown.com/dwn/u2lO6_kl368JFyvmfO5yNSq9C6gZetsK6ZlwlHLQ9BjbZaTbvIqAFCAm4ySaHX6D-XVt9dlITf8e5dQRaRe2SgaU91Z5kFmanhK5NOZlBrZ8b1C5f0Kt_BAZ7SLWbRRU/JyEeG2HDKNmzvGalD4E-sPAV5wMfu3EtC1hP5Fx_3YXBlJySsXB95W3TFtdXq536-0zpfLuSPU9rDBdg8QB2sqOO_SH6g3xrkxu0Ri6-1wj5kjyok13WWIsywnTppAN7/Fte_PVe5VOVuo0Oi2DjIAVZm1f4UJVf6FvwHei1iWGNXjYAIGsICXeyBVe5rpbmUKMa8ilprBWt22rUkX7Gc3pLWPJJCDZ5F8wKS0tafHfDqqCBrE9jWf1lkxU6cNDZx/.../

http://dw.uptodown.com/dwn/mwNQj8BtHTyTTCx7pFwZfxEKpEC2H4vaY8cwKMzJtBa-j6zrm5EHyvLfdv4bAhP3IGLC9DGFJq58GcwGUKhh4pwDtenNdFudZ0HDeUMAPQ_e-UTyQPwrn6HAsA01GHht/fflclcYW7seuqWxsDX72vgUWw8qbzxG4_fEURXAoeXNn3RhpNnMQVB7izkpVCn6FFhSAj70VBM0nyeBCukP2GJb0HuPeSz4UnkxEabYqsYyVUBN21PkJT1KISeAs8b08/CpkLjg3HXplMDXYvi7pZJuCeD7jJcDIpxk3iZGXYe3QfI_6NM5tPtPj7OfS_i6M4Due1rRI84mhyCEJ7-WoF6HSuo5A9CiM5_pdJc9yEd4eXrjwc_S8NdzgtVCHDXSkX/.../

http://cdn.funcom.com/aoc/download/.../ageofconan-es.exe

Scan ageofconan-es.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.