home

70094epcaab.exe

Internet Explorer

ManySign Inc.

While the file properties state the file is developed by 'Microsoft Corporation', this is not the case and it is designed just to look like a legitimate Microsoft system file. The application 70094epcaab.exe by ManySign has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Microsoft Corporation  (signed by ManySign Inc.)

Product:
Internet Explorer

Version:
11.00.10586

MD5:
e3add4a6dd6e6275106c1b1ded1a3d4d

SHA-1:
a32a364e3f07f57e46e5a957a60878bd064adb97

SHA-256:
a4060fca8260bc00987bcf2fec3374deea5e492a86198af5ec787d70a59eabe5

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/18/2025 6:20:24 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Downloader (M)
16.9.6.0

File size:
421.3 KB (431,424 bytes)

Product version:
11.00.10586

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
epcaab.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\70094epcaab.exe

Digital Signature
Signed by:
ManySign Inc.

Authority:
ManySign Inc.

Valid from:
2/27/2016 9:36:13 AM

Valid to:
2/26/2017 9:36:13 AM

Subject:
E=contact@manysign.com, OU=ManySign Authority, O=ManySign Inc., L=Lansing, S=Michigan, C=US, CN=ManySign

Issuer:
E=contact@manysign.com, OU=ManySign Authority, O=ManySign Inc., L=Lansing, S=Michigan, C=US, CN=ManySign

Serial number:
00A9CE1EFF3DF92E00

File PE Metadata
Compilation timestamp:
3/28/2016 9:08:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:JB+HB15mLKEYpH2ac1x4oIk35mP0XCv4QFIG:n+hXRy4o5mP0XCvaG

Entry address:
0x67C2E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
408 KB (417,792 bytes)

Remove 70094epcaab.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.