home

ek016.exe

n/a

This is a setup program which is used to install the application. The file has been seen being downloaded from www.moddb.com and multiple other hosts.
Publisher:
n/a

Product:
n/a

Version:
1,0,0,0

MD5:
b1896a46b5e5029a277347c781ac3af9

SHA-1:
e2da04dc3cc0c9c03065d4c1c51c45dc04fec04f

SHA-256:
0cdb0641fcedbe7a895e3106ef5b71f0199533e01da8ab6ab97d1b9f0bfbf3c4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 11:31:10 PM UTC  (a few moments ago)

File size:
159.8 MB (167,519,217 bytes)

Product version:
n/a

Copyright:
n/a

Original file name:
n/a

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\ek016.exe

File PE Metadata
Compilation timestamp:
1/9/2013 1:52:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
3145728:CxHMo/Fatu2u2m83cFd0L5FFljEyjpO0w6//6p9oHxmYtbV5kJPgT7gTHAs+fDnS:QHD9G1u2dWd0LbjESpp//o9oHxm8oJ4G

Entry address:
0x1000

Entry point:
68, 10, 05, 00, 00, 68, 00, 00, 00, 00, 68, 68, 19, 47, 00, E8, 66, 62, 04, 00, 83, C4, 0C, 68, 00, 00, 00, 00, E8, 5F, 62, 04, 00, A3, 6C, 19, 47, 00, 68, 00, 00, 00, 00, 68, 00, 10, 00, 00, 68, 00, 00, 00, 00, E8, 4C, 62, 04, 00, A3, 68, 19, 47, 00, B8, DC, 6F, 46, 00, A3, 90, 19, 47, 00, E8, 52, 7E, 05, 00, E8, 75, 73, 05, 00, E8, FA, 65, 05, 00, E8, 0D, 58, 05, 00, E8, BB, 55, 05, 00, E8, A9, 53, 05, 00, E8, C4, 39, 05, 00, E8, A0, 2E, 05, 00, E8, 63, 2D, 05, 00, E8, E2, 13, 05, 00, E8, 71, C1, 04, 00...
 
[+]

Packer / compiler:
PKLITE32, 0x1.1

Code size:
386 KB (395,264 bytes)

The file ek016.exe has been seen being distributed by the following 23 URLs.

http://www.moddb.com/downloads/mirror/92401/.../810d4ee9a09397d08fe6b7671c4ebd1f

http://www.moddb.com/downloads/mirror/92401/.../627a2f441892146fa6e5ae73a32dc38c

http://www.moddb.com/downloads/mirror/92401/114/8e36fe5e6c3f782e9cab92f9073bf2e1/?referer=http://www.moddb.com/.../elder-kings

http://www.moddb.com/downloads/mirror/92401/.../1858a50148ba557d22797f054182d8b8

http://www.moddb.com/downloads/mirror/92401/.../44d5e08ddde42721ed054ada7c737ace

http://www.moddb.com/downloads/mirror/92401/.../25e2ea3594fa1d69e4da82f2624c3b7e

http://www.moddb.com/downloads/mirror/92401/.../8e36fe5e6c3f782e9cab92f9073bf2e1

http://www.moddb.com/downloads/mirror/92401/.../8280cec82a6d9b5fd253ba9160acceae

http://www.moddb.com/downloads/mirror/92401/.../a62bf97fc7120c3fa1d0f0c8b02aed95

http://www.moddb.com/downloads/mirror/92401/.../8280cec82a6d9b5fd253ba9160acceae

http://www.moddb.com/downloads/mirror/92401/.../39aedaa46e94cc7c76a25cb460ceae58

http://www.moddb.com/downloads/mirror/92401/.../8f11e6fa074a08e3556e53f3ebe8e4e7

http://www.moddb.com/downloads/mirror/92401/.../22f34fc02e29fde8ab2ad28f3812bf62

http://www.moddb.com/downloads/mirror/92401/.../25e2ea3594fa1d69e4da82f2624c3b7e

http://www.moddb.com/downloads/mirror/92401/.../c8be09857f1a4dd9d3685172567a0493

http://www.moddb.com/downloads/mirror/92401/.../8a2a6e902d1ba62cd8a7ad1dbe7965c5

http://www.moddb.com/downloads/mirror/92401/.../a62bf97fc7120c3fa1d0f0c8b02aed95

http://www.moddb.com/downloads/mirror/92401/.../39aedaa46e94cc7c76a25cb460ceae58

http://www.moddb.com/downloads/mirror/92401/.../8a2a6e902d1ba62cd8a7ad1dbe7965c5

http://www.moddb.com/downloads/mirror/92401/.../7e68e2d71e5de973058e0742a5202c84

http://www.moddb.com/downloads/mirror/92401/.../8f11e6fa074a08e3556e53f3ebe8e4e7

http://ams4.dl.dbolical.com/2015/10/.../EK016.exe

http://www.moddb.com/downloads/mirror/92401/.../92b3753f4279e55c91dc97c779bb7463

Scan ek016.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.