home

cykle.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.astro.uni.torun.pl.
MD5:
8cf23351b63921a643232646471e6424

SHA-1:
e77819f5bc188a41e5f9e4351c69564fa2b28757

SHA-256:
94dae6bd5a17ece90cafcbb27408d2c90ebd50e9e48d74cfc743cd7ae08d418b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 10:27:40 AM UTC  (today)

File size:
546.3 KB (559,367 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cykle.exe

File PE Metadata
OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
6144:Fe5Wcc+VPV1G/Nn5lZ4oqBKKd0fx/CO64LgDzeYMCMZnfd3ghlVjL2B+M0LqEe7T:Fe5WQ0hHZdK1Lt4SFjqDEe79Mngbe8

Entry address:
0x2000

Entry point:
EB, 2B, 43, 6F, 70, 79, 72, 69, 67, 68, 74, 20, 28, 43, 29, 20, 4C, 61, 68, 65, 79, 20, 43, 6F, 6D, 70, 75, 74, 65, 72, 20, 53, 79, 73, 74, 65, 6D, 73, 2C, 20, 49, 6E, 63, 2E, 00, B8, 7E, 3C, 02, 00, A3, D0, 72, 02, 00, C7, 05, D4, 72, 02, 00, 00, 00, 00, 00, 6A, 01, E8, B0, 6B, 00, 00, 59, C3, B8, 7E, 3C, 02, 00, A3, D0, 72, 02, 00, 33, C0, A3, D4, 72, 02, 00, 6A, 00, E8, 96, 6B, 00, 00, 59, C3, C3, 00, 00, 00, B9, 00, 00, 00, 80, B8, FF, FF, 47, 41, 89, CA, 50, 51, 50, 52, 68, 7E, 01, 50, 41, 68, 00, 00...
 
[+]

Code size:
87.3 KB (89,378 bytes)

The file cykle.exe has been seen being distributed by the following URL.

http://www.astro.uni.torun.pl/~kb/.../Cykle.exe

Scan cykle.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.