home

eeyeevnt.exe

Application Bus

eEye Digital Security

It runs as a separate (within the context of its own process) windows Service named “eEye Application Bus”.
Publisher:
eEye Digital Security  (signed and verified)

Product:
Application Bus

Description:
Application Bus 1.0

Version:
3.0.7.508

MD5:
1cbeabb3f84bc4bc877b8605bfb32b16

SHA-1:
afd44de80e2e64aed867cc1a4ba65cbdd5642faa

SHA-256:
7443c0109aeebebabdf550dc419b325011fe9f8dc993ebd060565b8e4996b944

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 12:35:46 AM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Packed.PECompact-1
0.98/18155

File size:
403.4 KB (413,040 bytes)

Product version:
3.0.7.508

Copyright:
Copyright © 2003-2010 eEye Digital Security

Original file name:
EMSService.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\common files\eeye digital security\application bus\eeyeevnt.exe

Digital Signature
Signed by:
eEye Digital Security

Authority:
VeriSign, Inc.

Valid from:
8/6/2008 8:00:00 PM

Valid to:
8/21/2011 7:59:59 PM

Subject:
CN=eEye Digital Security, OU=Network Operations, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=eEye Digital Security, L=Aliso Viejo, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
492129A3FB013E23AEE4EE861D1F51EF

File PE Metadata
Compilation timestamp:
10/22/2010 9:50:23 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
6144:5p70ChIU5xZHavpwXSHSYXOzaLnxVDrzMZbhp5O230QI0P:5Z0CGcxZ6hwXSHGarxdrzI3j0QIs

Entry address:
0x1000

Entry point:
B8, 8C, CD, 54, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, F3, AD, 15, 75, 3E, 95, D2, A5, 0C, 74, 65, E5, 43, ED, AB, 72, 91, 38, AC, 0A, A1, 02, 77, 3A, 33, 31, 23, D8, 7E, 8B, D2, A4, B7, 3B, B4, F4, 1A, FA, 24, CF, 06, EE, A7, 49, 59, DA, 55, 9F, 73, 76, 76, FE, CE, E4, F1, 0A, 3C, C9, 42, 0B, 65, F2, B4, 4B, D5, C1, 99, 1A, 49, F3, B7, 48, 8F, 6F, F1, 2B, 61, B6, DC, 07, 72, 47, F5, 1A, 8C, 8C, 8A, A3, 7D, A7, 26, D9, 63...
 
[+]

Entropy:
7.9423

Packer / compiler:
PECompact v2

Code size:
931.5 KB (953,856 bytes)

Service
Display name:
eEye Application Bus

Service name:
eeyeevnt

Type:
Win32OwnProcess

Depends on:
RpcSs ProtectedStorage


Scan eeyeevnt.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.