» epimoutl64.exe
Overview
Analysis
File Details
Programs (1)

epimoutl64.exe

Astonsoft

This is installed with EPIM-Outlook Sync.

File name:

epimoutl64.exe

Publisher:

Astonsoft (signed and verified)

Version:

5.5.6.0

MD5:

20f6b8660f317edb04f849b8641186b8

SHA-1:

62e948346ebf76425a5c90f60bca7c1947aec205

SHA-256:

92b79bdf2bd31e21d7474a0d0d124113acb4a6230a88ffbe6648f9f1aa37c325

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 2:47:07 AM UTC (today)

File size:

6.3 MB (6,633,328 bytes)

Product version:

5.5.6.0

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Program Files\epim-outlook sync\epimoutl64.exe

Digital Signature

Signed by:

Astonsoft

Authority:

COMODO CA Limited

Valid from:

4/17/2013 2:00:00 AM

Valid to:

4/17/2016 1:59:59 AM

Subject:

CN=Astonsoft, O=Astonsoft, STREET=Laki 9A, L=Tallinn, S=Harjumaa, PostalCode=10621, C=EE

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00CE3453ED4D6CDC80F2F1BD9A2D33228E

File PE Metadata

Compilation timestamp:

9/28/2014 9:32:20 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:SRN6PeRq8xf9+VcXHd2wISGawnKqSyEHr3qqoH6ZYmkybR18soFpcoeoCVBC64jz:StecSkR1mioeo865f

Entry address:

0x514110

Entry point:

55, 48, 83, EC, 20, 48, 8B, EC, 90, 48, 8D, 0D, C8, CC, FE, FF, E8, 1B, 20, B0, FF, 48, 8B, 05, 2C, 84, 08, 00, 48, 8B, 08, E8, CC, 28, DE, FF, 48, 8B, 05, 1D, 84, 08, 00, 48, 8B, 08, B2, 01, E8, 5B, 55, DE, FF, 48, 8B, 05, 0C, 84, 08, 00, 48, 8B, 08, 48, 8B, 15, AA, A0, FE, FF, 4C, 8B, 05, B3, 77, 08, 00, E8, CE, 28, DE, FF, 48, 8B, 05, EF, 83, 08, 00, 48, 8B, 08, 48, 8B, 15, 6D, 20, FC, FF, 4C, 8B, 05, 7E, 85, 08, 00, E8, B1, 28, DE, FF, 48, 8B, 05, D2, 83, 08, 00, 48, 8B, 08, 48, 8B, 15, D0, 0F, FD, FF... 
[+]

Entropy:

5.9694

Code size:

5.1 MB (5,321,216 bytes)

The file epimoutl64.exe has been discovered within the following program.

EPIM-Outlook Sync by Astonsoft Ltd

www.essentialpim.com

About 7% of users remove it

Scan epimoutl64.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.