home

ek014b.exe

n/a

This is a setup program which is used to install the application. The file has been seen being downloaded from www.moddb.com and multiple other hosts.
Publisher:
n/a

Product:
n/a

Version:
1,0,0,0

MD5:
73d5e808f80727fd98abb6a6bd3a981a

SHA-1:
a48cb37ace1d92ea1547d40c0017809cf85a0f8e

SHA-256:
69ec033717ba367dd259fbdc6b5d6e3f61ee7e2f81fab1296bc191b0e9c9c4bf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 12:09:24 PM UTC  (today)

File size:
108 MB (113,297,960 bytes)

Product version:
n/a

Copyright:
n/a

Original file name:
n/a

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ek014b.exe

File PE Metadata
Compilation timestamp:
1/9/2013 8:50:21 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
3145728:prSKtE91Nr20w0DavnwoviL/P9tExQ6JPgT7gTHlR7h96f:0g+r20wjwoviL/PTY1J4TaHlph98

Entry address:
0x1000

Entry point:
48, 83, EC, 28, 49, C7, C0, 98, 07, 00, 00, 48, 31, D2, 48, B9, D0, 87, 0A, 40, 01, 00, 00, 00, E8, 94, B1, 06, 00, 48, 31, C9, E8, 92, B1, 06, 00, 48, 89, 05, AC, 77, 0A, 00, 4D, 31, C0, 48, C7, C2, 00, 10, 00, 00, 48, 31, C9, E8, 7F, B1, 06, 00, 48, 89, 05, 8B, 77, 0A, 00, 48, B8, F0, D3, 09, 40, 01, 00, 00, 00, 48, 89, 05, 92, 77, 0A, 00, E8, 85, 42, 08, 00, E8, 38, 33, 08, 00, E8, 1B, 1D, 08, 00, E8, CE, 0A, 08, 00, E8, 5D, 07, 08, 00, E8, 88, 04, 08, 00, E8, F7, E3, 07, 00, E8, 02, D6, 07, 00, E8, 25...
 
[+]

Entropy:
7.9987  (probably packed)

Code size:
574.5 KB (588,288 bytes)

The file ek014b.exe has been seen being distributed by the following 20 URLs.

http://www.moddb.com/downloads/mirror/63737/.../5030515d0fb1cc83c9a7d0b1b977354e

http://www.moddb.com/downloads/mirror/63737/.../b6c6d043b3f268f004d8696987ab9e6f

http://www.moddb.com/downloads/mirror/63737/.../e6416e51ed97f3d965c66dbd7301d54e

http://www.moddb.com/downloads/mirror/63737/.../14eaef0c565b896bd01a3409d4d72fd7

http://www.moddb.com/downloads/mirror/63737/.../1762ad3cb99f12e4c13324a7abaac587

http://sjc2.dl.dbolical.com/2014/.../01/EK014b.exe

http://www.moddb.com/downloads/mirror/63737/.../f36eb9bc9e61e6a95b3d2394ee3cc264

http://us5.dl.desura.com/dl/9bc8e7617cd6d201507e220cb0b36384/52d0e86f/2014/.../01/EK014b.exe

http://www.moddb.com/downloads/mirror/63737/.../207ee662d36c67d941a26c75450b57aa

http://sjc1.dl.dbolical.com/dl/ff57467c78e809ade4948ede0be006b9/52e9b64d/2014/.../01/EK014b.exe

http://www.moddb.com/downloads/mirror/63737/.../9f80bb8bf8ddf1c8e23bf0767dba6f4f

http://ams1.dl.dbolical.com/2014/.../01/EK014b.exe

http://www.moddb.com/downloads/mirror/63737/.../5030515d0fb1cc83c9a7d0b1b977354e

http://sjc3.dl.dbolical.com/dl/007fd200084f7946d0425431f164fce9/531e71a1/2014/.../01/EK014b.exe

http://www.moddb.com/downloads/mirror/63737/.../48fbdeddaa7317a3948b1a5df52b9e6e

http://media1.gamefront.com/moddb/2014/.../01/EK014b.exe

http://ams1.dl.dbolical.com/dl/aab1052ad604eb28360357941d4a0d06/52eae6ba/2014/.../01/EK014b.exe

http://www.moddb.com/downloads/mirror/63737/.../9f80bb8bf8ddf1c8e23bf0767dba6f4f

http://ams2.dl.dbolical.com/dl/b84b1633e6fe7cdde600df7adc3d8f89/530a42c3/2014/.../01/EK014b.exe

http://www.moddb.com/downloads/mirror/63737/.../f23548cea1b56f66b4a4e0bfa5c8c10e

Scan ek014b.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.