@Gemini as per the request in #91 as FreshDA9 hasn't responded, doesn't look like the readme has any link back to the forum
Removed Malware contains the below:
REMOVED MALICIOUS FILES — SHA-256
================================
The following files were present in the supplied larger collection and are NOT
included in this package. All four used the same suspicious VB6 loader family
and were detected locally as Win.Malware.Swisyn-7610494-0.
Titanium.exe (tree 1)
5f5e29c12b4d0d6e11fd08a907c720d5184bb807eda864bddc68d20938da84f3
Titanium.exe (tree 2)
3fa694bec38eda78d3437b956c5eaaa6045cc3567c5ef0955388aee78240b529
uninstall.exe (tree 1)
afc1c438669ab89a868258b48b4f6f5dc373f21db8492a8ba3934a0da72d4d3b
uninstall.exe (tree 2)
9c0f730ea9e65f554f02f8b8e204a6b2fc7541ea044a5d7d48a9815e6a7899b3
The supplied installer and all uninstall data were also excluded because a
portable runtime does not need them.
Readme contains:
ECM TITANIUM 1.61 COMPLETE PORTABLE
===================================
PACKAGE STATUS / IMPORTANT
--------------------------
This package was rebuilt from two supplied collections. It uses the researched
Alientech ECM Titanium 1.61.0.0 runtime instead of the infected VB6 wrappers
found in the larger collection. The infected launchers, uninstallers, installer,
Internet shortcut, duplicate program tree and duplicate "- Copia" driver files
were excluded. The ZIP has no password.
The working database contains 43,021 driver records and 21 indexed ORI files.
All 21 indexed ORI files were checked against the MD5 values stored in the
database. The 18,454 installed DRT files contain 10,302 unique file contents;
the extra 548 DRT names in the supplied "Full" tree were only duplicate copies
and added no unique driver content.
"ECU Sample Library" is a separate reference collection of 12,958 original,
modified and unidentified ECU files. It is not part of the Titanium runtime.
Never flash a sample merely because its folder name resembles a vehicle: first
verify ECU hardware/software numbers, file size, checksums and every change.
"Optional/Recovered ORI from 43000 set" contains three older ORI files whose
numeric names conflicted with the 21 indexed ORI files. They are deliberately
kept outside DataBase and are not loaded automatically. DRT.rar is the supplied
backup of alternate older driver revisions and is not required for startup.
SECURITY LIMITS
---------------
Titanium.exe is unsigned and protected with Themida/WinLicense. This can cause
heuristic antivirus warnings and prevents complete static inspection. No
absolute safety guarantee is possible. Test in an isolated Windows VM first,
scan the extracted folder with an up-to-date antivirus, and verify the hashes
below. Do not disable security software merely to run it.
Post-rebuild scan: ClamAV 1.5.3 scanned 31,862 files with 3,627,998 known
signatures on 2026-08-08 and reported 0 infected files.
SHA-256 (runtime)
-----------------
Titanium.exe 8439b114d95a910ca7c7108c0e51cb420190136f37165be45f411a2c29ef75aa
EcmAlgoDLL.dll 41753660b31d184b00a4322da40d1afa917f6c0a0b175b0b2d112bd370f53a24
lua5.1.dll 94deef0a6a60213b3020334aede2eb5c7aa39286833a6699f8fd439c7cce63cf
EN
--
1. Extract the complete folder to a writable local directory. Do not start the
program from inside the ZIP and do not place it under Program Files.
2. Keep Titanium.exe, the DLL files, DataBase, Resource, PlugIn and CheckFam in
their existing relative locations.
3. Start Titanium.exe. No installer, password or Internet connection is needed.
4. If Windows marks a downloaded file as blocked, check Properties > Unblock
only after verifying the SHA-256 above. Administrator rights are normally
unnecessary when the folder is writable.
5. Work only on a copy of an ECU file. Verify identification, checksums and all
modifications before writing anything to a vehicle.
DE
--
1. Extract the complete folder to a writable local directory. Do not start the
program directly from the ZIP or from "Program Files".
2. Keep Titanium.exe, the DLLs, DataBase, Resource, PlugIn and CheckFam in
their existing folder structure.
3. Start Titanium.exe. No installer, password or Internet connection is needed.
4. Remove a Windows file block only after checking the SHA-256 value above,
using Properties > Unblock. Administrator rights are normally unnecessary
if the folder is writable.
5. Work only with a copy of the ECU file. Check the identification, checksums
and all changes before writing to the vehicle.
ES
--
1. Extract the complete folder to a writable local directory.
Do not run the program from the ZIP or from "Program Files".
2. Keep Titanium.exe, the DLLs, DataBase, Resource, PlugIn and CheckFam in their
original structure.
3. Run Titanium.exe. No installer, password or Internet connection is required.
4. If Windows blocks the downloaded file, use Properties > Unblock only
after verifying the SHA-256 shown above. Administrator privileges are
normally not required if the folder is writable.
5. Work only with a copy of the ECU file. Verify the identification, checksums
and all changes before writing to the vehicle.
FR
--
1. Extract the complete folder to a local directory with write access.
Do not launch anything from the ZIP or from "Program Files".
2. Keep Titanium.exe, the DLLs, DataBase, Resource, PlugIn and CheckFam in
their current folder structure.
3. Launch Titanium.exe. No installer, password or Internet connection
is required.
4. If Windows blocks the downloaded file, use Properties > Unblock
only after verifying the SHA-256 above. Administrator rights are
normally unnecessary if the folder is writable.
5. Work only on a copy of the ECU file. Verify the identification,
checksums and modifications before writing anything to the vehicle.
PL
--
1. Extract the entire folder to a writable local directory. Do not run the
program from the ZIP or from the "Program Files" directory.
2. Keep Titanium.exe, the DLLs, DataBase, Resource, PlugIn and CheckFam in the
current folder structure.
3. Run Titanium.exe. No installer, password or Internet connection is needed.
4. If Windows blocks the downloaded file, use Properties > Unblock only after
checking the SHA-256 given above. Administrator privileges are usually not
required when the directory is writable.
5. Work only on a copy of the ECU file. Before writing to the vehicle, check the
identification, checksums and all modifications.
RU
--
1. Extract the entire folder to a writable local directory. Do not run the
program from the ZIP or place it in Program Files.
2. Do not separate Titanium.exe, the DLLs, or the DataBase, Resource, PlugIn and CheckFam folders.
3. Start Titanium.exe. No installer, password or Internet connection is required.
4. If Windows has blocked the downloaded file, remove the block in Properties
only after checking the SHA-256 above. Administrator rights are usually not
required if the folder is writable.
5. Work only with a copy of the ECU file. Before writing to the vehicle, check
the identifiers, checksums and every change.
View full details and download — ECM Titanium (over 43,000 drivers) - Complete driver-based remapping software
