home

ecdl2.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from failiem.lv.
MD5:
f0cd7f7569703d9642e443727574ab95

SHA-1:
d7e6c1650cd823c0027a0acd12281f87f6be3bea

SHA-256:
63063a84ddff3ed5b41666d3c102d29a628670cf3a852439760ebe559cc53da1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 4:00:42 AM UTC  (today)

File size:
2 MB (2,121,597 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:htM/rnejPex7FpzHN6uYati3+dn0ATlb4mz7vuvNvp5FxBv0W48xv:htUrYeNtYati6vuvNvZM98t

Entry address:
0x1000

Entry point:
68, 01, D0, 8A, 00, C3, AA, 00, 33, CF, 3C, E7, 3C, 92, 79, 38, 70, 39, C8, 12, 12, 42, 43, D1, 1E, 1E, 91, 80, 92, 10, 50, 87, 24, 4E, 12, 42, 04, 3D, B9, 24, 08, 42, 00, 94, 68, 89, 45, A8, 50, F3, C0, 7D, 20, 49, 2F, 09, D4, F2, 7F, 58, A5, 5B, 5A, DE, AF, 6F, 52, 8B, 7D, 5B, E9, 1B, E9, D4, B5, 7A, BC, 27, 02, 42, 29, 42, 00, A1, 02, 2A, 08, 3E, 92, 3E, 0A, C4, 0A, 1C, 02, 27, 3C, 90, 21, 0E, F6, EB, DA, EE, 6E, 66, E3, BD, EF, E1, A7, E1, BF, 81, 77, 73, 37, 24, 2F, 7B, BB, 02, DB, B7, 80, DB, B9, 21...
 
[+]

Packer / compiler:
ASProtect v1.2

Code size:
648 KB (663,552 bytes)

The file ecdl2.exe has been seen being distributed by the following URL.

http://failiem.lv/down.php?i=ssfmlmh&n=ecdl2.exe

Scan ecdl2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.