home

age-of-conan-unchained-en-fr-de-win.exe

Age of Conan

FUNCOM

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Funcom   (signed by FUNCOM)

Product:
Age of Conan

Version:
0.15.26.63455

MD5:
c3ecc73ea3241b22add804941bc1a85e

SHA-1:
a53b014b7b930bb0a7fa794a7432f92f21526c32

SHA-256:
b0d28b81de47486c3ff33f0eabe4ed6051080d00a9191f1d6fb76a730bb396d4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 4:47:02 PM UTC  (today)

File size:
14.8 MB (15,513,368 bytes)

Product version:
0.15.26.63455

Copyright:
Copyright (C) 2008 Funcom

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\age-of-conan-unchained-en-fr-de-win.exe.part

Digital Signature
Signed by:
FUNCOM

Authority:
VeriSign, Inc.

Valid from:
10/12/2008 8:00:00 PM

Valid to:
10/15/2009 7:59:59 PM

Subject:
CN=FUNCOM, OU=ACHA, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=FUNCOM, L=OSLO, S=OSLO, C=NO

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
44071CCAA76290390185D397D8A5D8D7

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:XC82YUqFbymo3pQJN6VOI0dHX1i00mGC4MmsA:XCnqFlHUYhR1ihmt4MmsA

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file age-of-conan-unchained-en-fr-de-win.exe has been seen being distributed by the following 3 URLs.

http://dw.uptodown.com/dwn/hyIwhVPV1vEOUvbYKbB_gisVB1v8vhdc2NscCE1ziSrQPb3Eau4Yl9_aFn0rbOrS-yLPYgEqn-oNoONQDNdV0FgHDJUWjPaFXu9H7_xDK__rpMHL68UvkxJPoxZgI2cv/CEDKtusK5x6qNshgUmQUx9Z4f9hyLKQcpDz3ntVqY41qpCKnGq5R6a_7YS4W4tgl4Phd9q3nhuCbafd4vgLX7u-z7rjUcE4W2P2HTYZnojgLb9kUSuRJe3VAjzMg0B95/uXMFJ8d6V6JeFwpgNhviEuGMekRso4IntK01Hnbw8qGRKe7kZpV3SbWa73Y3shp2IFXHxdpt4WRHipkCKyofpYRqSTfRBSA7ceFKEQNbvceXubJ5XW3alpoeEbRzoIso/.../

http://dw.uptodown.com/dwn/cjBtExfBlBCkGruPQ06CZjdSAV7liu9H4cQf5chniYSvcO7PTRRi2Gz-utlq0aw5d4sI8iqhYIpdehjJnDX3w18DmkV8-WpnatxoVrpotqafEdNI9jKso5kfAVDEtwzw/5sAOJzAZaMZf618SdR-PzQprZ4Lix95LVFg_lfGHNOW5krz384XJOfQpqyyIpo7B1yfXbEyNll8YS5fagM0e_ZyjlD-HQJPyPK-Tw4v9-7UY9tyYo4cipTdwqiwZiT4s/-NX6nQfTsdG_mBPnpTYydIZmzdPMjzWYimkX6VwCeQ-qeS_UmiKrRtq0qiW2__Djc_A70O6MOr3uzVvNmYvtriniwezQJhpXNkpUnD5dQ_lU_0m3vsgNF75RI5RrK8da/.../

http://dw.uptodown.com/dwn/eYM75W6ggUw_0tP02zEEJN8vAbQpI5PS2Wrjz7jJm4vyOmDzDiDHSCRVKxVXwoKohy5IJPLdGC0EjUxPgPm0sBj3uj1jDkIzckBq-M3kfngrTS_Q5XiNmyk5gFYxJq5I/IDATkQZfr3fs25bw6EUeoHuO7ioJPBIM8pUChRgIe6u9SsG2IDX5NkQHxOue8cdVVeEBmTMGIpL5Vv1ylpOnRP1bedesz2DClc67lKCZEwtoT4DPPhXP-wocO6dGyNdV/JCSWtSNsICeOuvgT4zD69YeuEkkvJ74u2OCTsdmUiEVDJoZdX7DqylPCD08zBZhOKzs3g2bwt7hqPMm73Pk5HRtP_NJo7i3nU1xhEe4euBxCsEn3kYS_wEWRPDeS5-XI/.../

Scan age-of-conan-unchained-en-fr-de-win.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.