Associated Malware Groups
The filename is associated with the malware groups:
- Cloaked Malware
- Malware Dropper
- Malicious Software
File Behavior
ESSLEDV.EXE has been seen to perform the following behavior:
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Writes to another Process's Virtual Memory (Process Hijacking)
- This Process Deletes Other Processes From Disk
- This process creates other processes on disk
- Executes a Process
- Creates a TCP port which listens and is available for communication initiated by other computers
- Can communicate with other computer systems using HTTP protocols
- Terminates Processes
- Registers a Dynamic Link Library File
- Copies files
- Injects code into other processes
- Found on infected systems and resists interrogation by security products
ESSLEDV.EXE has been the subject of the following behavior:
- Added as a Registry auto start to load Program on Boot up
- Created as a process on disk
- Executed as a Process
- Has code inserted into its Virtual Memory space by other programs
- Deleted as a process from disk
- Registered as a Dynamic Link Library File
- Copied to multiple locations on the system
- Terminated as a Process
Country Of Origin
The filename ESSLEDV.EXE was first seen on Nov 20 2009 in the following geographical regions of the Prevx community:
- The United States on Nov 20 2009
- The United Kingdom on Nov 20 2009
Filesizes
The following file size has been seen:
- 67,584 bytes
- 68,096 bytes
- 66,560 bytes
File Type
The filename ESSLEDV.EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.