home

dragon age 2 editor.exe

FirstBlight

cybersam

This is a setup program which is used to install the application. The file has been seen being downloaded from download2033.mediafire.com.
Publisher:
cybersam

Product:
FirstBlight

Version:
1.0.6.5

MD5:
13c762988a27dc43a1e0832c5565996c

SHA-1:
37ddee2e23aa835ad1ba30283fb1aa90d2e1369b

SHA-256:
3ca4a1906f7686a57cf542d6f31862badd3c57d5be0908d04e5412250f5f107f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 1:31:05 AM UTC  (today)

File size:
1.3 MB (1,351,680 bytes)

Product version:
1.0.6.5

Copyright:
Copyright © Undiscoveredland.net 2011

Original file name:
FirstBlight.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\dragon age 2 editor.exe

File PE Metadata
Compilation timestamp:
3/7/2011 7:49:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:E2+61hRYtqvkoAVCBblnOeq8ImI/A6yHXAZRmiJZgivMljzP:B1QBoAMDXq31FZhJyiv6zP

Entry address:
0x1A838

Entry point:
FF, 25, 28, A8, 41, 00, 00, 00, 5F, 43, 6F, 72, 45, 78, 65, 4D, 61, 69, 6E, 00, 6D, 73, 63, 6F, 72, 65, 65, 2E, 64, 6C, 6C, 00, BC, 27, 12, 00, 7B, 7A, 7D, 02, 71, 3F, BD, FD, 01, BD, 1C, 2C, 71, 62, B1, D3, 26, F4, 92, 53, B3, 4C, E5, A2, F9, 33, 32, 08, DF, CC, 45, 4A, 86, F0, 89, AC, 23, 7B, 39, 92, 8B, DA, DD, C0, 26, E5, F8, 58, 22, 02, 60, D3, D5, 00, 08, FE, 1B, 11, F2, 61, 36, C2, 1F, 65, FC, 13, A0, E4, A3, C9, 16, 31, EC, 0C, 13, 0B, 71, 9B, 48, EC, 64, 0F, 94, 5A, D1, 40, 6A, AB, 1A, 2B, E2, 31...
 
[+]

Entropy:
7.9288  (probably packed)

Code size:
1.3 MB (1,331,712 bytes)

The file dragon age 2 editor.exe has been seen being distributed by the following URL.

http://download2033.mediafire.com/7k0hvc3h6krg/.../Dragon Age 2 Editor.exe

Scan dragon age 2 editor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.