home

lela-3.11.9139.94.exe

It runs as a scheduled task under the Windows Task Scheduler. The file has been seen being downloaded from downloads.linksys.com.
MD5:
22edcfd3d91815545d34435c12782b86

SHA-1:
0da42c646b4e55713c7acb133b0f4c596d95120e

SHA-256:
9db698406f1e5f49f5f4b89884480336c329041f81736e1f7bfe977e62da5696

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 5:32:58 AM UTC  (today)

File size:
21 Bytes

File type:
Executable application (Win64 EXE)

File PE Metadata
Compilation timestamp:
3/3/1996 8:29:21 AM

OS bitness:
Win64

CTPH (ssdeep):
3:mjmA:mjmA

Entry point:
6C, 65, 6C, 61, 2D, 33, 2E, 31, 31, 2E, 39, 31, 33, 39, 2E, 39, 34, 2E, 65, 78, 65...
 
[+]

Entropy:
3.1416

Packer / compiler:
RLPack FullEdition V1.1X * Sign.By.fly

Scheduled Task
Task name:
{0764EDB7-83F6-4821-A5F5-D413FB1AD75C}

Trigger:
Registration (Runs on registration)


The file lela-3.11.9139.94.exe has been seen being distributed by the following URL.

http://downloads.linksys.com/downloads/utility/.../lela-3.11.9139.94.exe

Scan lela-3.11.9139.94.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.