home

ecatservice.exe

RSA Security LLC

It runs as a separate (within the context of its own process) windows Service named “EcatService”.
Publisher:
RSA  (signed by RSA Security LLC)

Version:
4.3.0.1

MD5:
c35fc07fe14838a575496402c7670d32

SHA-1:
34d87339f207ee0d6d4f780863f0b8cb237c21dc

SHA-256:
5fc9b0ee2d605a3112883478f038c6bc3e23f9243f65dd26a7e9dc0edeb9e415

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/30/2024 3:17:21 AM UTC  (today)

File size:
1.1 MB (1,180,992 bytes)

Product version:
4.3.0.1

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\ecatservice.exe

Digital Signature
Signed by:
RSA Security LLC

Authority:
Symantec Corporation

Valid from:
2/9/2017 6:00:00 PM

Valid to:
2/10/2019 5:59:59 PM

Subject:
CN=RSA Security LLC, OU=RSA NetWitness, O=RSA Security LLC, L=Bedford, S=Massachusetts, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
01FC2E6F35715928AE8E11DD52001BA8

File PE Metadata
Compilation timestamp:
2/22/2017 1:07:44 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

Entry address:
0xBEE9D

Entry point:
E8, 19, 05, 00, 00, E9, 80, FE, FF, FF, 55, 8B, EC, 51, 56, FF, 75, 08, 8B, F1, 89, 75, FC, E8, 60, 00, 00, 00, C7, 06, 54, D9, 4D, 00, 8B, C6, 5E, 8B, E5, 5D, C2, 04, 00, 83, 61, 04, 00, 8B, C1, 83, 61, 08, 00, C7, 41, 04, 5C, D9, 4D, 00, C7, 01, 54, D9, 4D, 00, C3, 55, 8B, EC, 51, 56, FF, 75, 08, 8B, F1, 89, 75, FC, E8, 27, 00, 00, 00, C7, 06, 70, D9, 4D, 00, 8B, C6, 5E, 8B, E5, 5D, C2, 04, 00, 83, 61, 04, 00, 8B, C1, 83, 61, 08, 00, C7, 41, 04, 78, D9, 4D, 00, C7, 01, 70, D9, 4D, 00, C3, 55, 8B, EC, 56...
 
[+]

Entropy:
6.2215

Code size:
879 KB (900,096 bytes)

Service
Display name:
EcatService

Description:
ECAT Service

Type:
Win32OwnProcess


Scan ecatservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.