» ECRSC.dll
Overview
Analysis
File Details
Programs (1)
Downloads (2)

ECRSC.dll

ESTsoft Crash Reporting System

ESTsoft Corp.

This is installed with ALSee 6.22. The file has been seen being downloaded from www.alseeonline.co.kr and multiple other hosts.

File name:

ECRSC.dll

Publisher:

ESTsoft Corp. (signed and verified)

Product:

ESTsoft Crash Reporting System

Description:

ESTsoft Crash Reporting System Client

Version:

11, 4, 28, 1

MD5:

9c911180f3478d8de91b07ff91e9938b

SHA-1:

3e5f71c7d280270fb736217fca950ae12e03da8d

SHA-256:

a8a5acaecc1372d886d30610cf4594561bdb970e85570f2aa6cfcc0f8ade0e74

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/27/2024 5:39:14 AM UTC (today)

File size:

507.5 KB (519,728 bytes)

Product version:

2, 0, 0, 7

Original file name:

ECRSC.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\estsoft\alcapture\ecrsc.dll

Digital Signature

Signed by:

ESTsoft Corp.

Authority:

VeriSign, Inc.

Valid from:

12/1/2011 9:00:00 AM

Valid to:

12/1/2013 8:59:59 AM

Subject:

CN=ESTsoft Corp., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ESTsoft Corp., L=Seocho-gu, S=Seoul, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

70D1A0AC1A81A201BFC43091FFBE99A0

File PE Metadata

Compilation timestamp:

9/1/2011 4:48:42 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:8M0qViAcJteLee8WuyVL4xT06FwTriWh9/la9v5nKnJRhYvWTxvpt:OMY9e8WuCkT06FwTrPh9iBnQJRh3T1r

Entry address:

0x307D2

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, E7, 9A, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 8B, 7D, 08, 33, C0, 83, C9, FF, F2, AE, 83, C1, 01, F7, D9, 83, EF, 01, 8A, 45, 0C, FD, F2, AE, 83, C7, 01, 38, 07, 74, 04, 33, C0, EB, 02, 8B, C7, FC, 5F, C9, C3, 8B, FF, 55, 8B, EC, 51, 6A, 00, 8D, 45, FC, 50, FF, 75, 10, 6A, 40, FF, 75, 0C, FF, 75, 08, E8, 35, A2, 00, 00, 83, C4, 18, 85, C0, 74, 05, 83, C8... 
[+]

Entropy:

6.5841

Code size:

371.5 KB (380,416 bytes)

The file ECRSC.dll has been discovered within the following program.

ALSee 6.22 by ESTsoft Corp.

advert.estsoft.com/?event=200911233012845

About 5% of users remove it

The file ECRSC.dll has been seen being distributed by the following 2 URLs.

http://www.alseeonline.co.kr/dll/.../ECRSC.dll

Scan ECRSC.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.