home

epm.exe

EaseUS Partition Master

CHENGDU YIWO Tech Development Co., Ltd.

This is a self-extracting archive and installer. The file has been seen being downloaded from www.bulkcurrenttour.com and multiple other hosts.
Publisher:
EaseUS   (signed by CHENGDU YIWO Tech Development Co., Ltd.)

Product:
EaseUS Partition Master

Description:
EaseUS Partition Master Setup

Version:
11.0

MD5:
064d2f4c9600ea04b80a5897e19194c4

SHA-1:
c23a478b3c9932fb9c0c8babe980b4adb3c4fe1b

SHA-256:
7cfb413d3d472c63a61a7619226b2b3c4329da7e7f04175629189f0284e910f6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:07:31 PM UTC  (today)

File size:
47.3 MB (49,609,656 bytes)

Product version:
11.0

Copyright:
Copyright (c) 2004-2016 CHENGDU YIWO Tech Development Co., Ltd (YIWO Tech Ltd, for short).

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\epm.exe

Digital Signature
Signed by:
CHENGDU YIWO Tech Development Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
9/3/2014 8:00:00 AM

Valid to:
10/3/2017 7:59:59 AM

Subject:
CN="CHENGDU YIWO Tech Development Co., Ltd.", OU=IT, O="CHENGDU YIWO Tech Development Co., Ltd.", L=Chengdu, S=Sichuan, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7F86B44C3EFB81FAC8C8B67058054F6A

File PE Metadata
Compilation timestamp:
1/13/2016 5:56:49 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:A3c6YxpddJ9e2pj3vednetqo9IDzYADoU78PhrHYm1m/yEvr8fE6NqScTev:X6+nJ9pL6kUwJEmsj8fEf/Ti

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Entropy:
7.9997

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file epm.exe has been seen being distributed by the following 50 URLs.

http://www.bulkcurrenttour.com/Ld5e Vn98QFhlLhy3CO1Z0_egAVbxf_UniRBnjoP0LespvZOLBA12ELjdNn75JhIfI2E TBQZnOhVlXFrw1kwFfFU2C3sQY6DyhYxHpBd7NxNduu7GirYDaiZ2yuSmt1TXUBayDKfRNeYVLC7MtvITCHdE9Qvg==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/OguneW jmDuUa 032mwcHUwwTUEVSJrtxIEom0EW120kwm6ArCRYTbaUiOb8nF8 YwT1Q6ynKEJdfaz0lBDMZM _3lugXQNOqzQdnXjnjC4vT4s3d3Je_3fmN29EyCkXlMiijwj138R3uRl7FMrXgpvyct2Mvw==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/c?x=iQ5KT62I1plpT 1tcvjEpVqOZsL09/JZM3nsjkEYcT4=&c=auMfyaJBqlmEg5nE5VtNbVNOKzVYrVM1mpNt1y42x1HwfjkTQN8D3tG7CvPUDb2GLNGZywjTw9ShGydROQCr4PFeidGXbnaQbKk9nQqHtMm1NwFZvg6Qk/M3MNG1S9Wg&downloadAs=epm.exe&fallback_url=http://download.easeus.com/.../epm.exe

http://www.bulkcurrenttour.com/J4Wc_qvBiyojw4RPJInHoKjUO Qcrp7XyUdD0GkVaBeFJWy5IpFc SjDhB5to6zDL9_l scOBzGJGOk6fESiMo yz4Ke2_TUkncjAga9HrtQg7hGdGfrWCVd1M6PJnbo5OMzyB_MkFzhidFkbfPAT2hYSAJOKg==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/c?x=7QNzbtL/5uoyDSDv9t065DpFPn0vRYKPXOrKhDAfsjU=&c=ODlIluHp Qq2QGayK6AfiYigA RU3crqk2PZEDk6SPBUJbC4yh5tuD3Kvn jpJOtvxydDrn dZIJXm90vT4dl7BEzZT3ryNQlX6EDv9zzs30TDt9pzwcA5J2tmZzXY6Y&downloadAs=epm.exe&fallback_url=http://download.easeus.com/.../epm.exe

http://www.bulkcurrenttour.com/UsCX5SB_yoYZP0CjWJEn69X03pJO73LueBDyR pzYi60z5uEF_n 8CbQZqI4k_v3KjBaiTNiolTKSOgx6CMMQAK2676y5mKcD1G0G CKb03abZa9IXCtg536EqLk6KsDnre1e7llKLHAHoJOBtY9woKmjrX0gQ==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/5FBuJdSsye5fhGsUibDY3eq0c34TqwRPyE3R25Jo vJtdlNYZX8n_GUG9aXDziWj4Iog86dXsTJZt6Q5Pjho dwSncxRMaNgxRzlRmLs4 iG0XVC5XCQdAF0I7tYvmsKDlfnkDvml88mEyXem8aPdgZW66Zy3Q==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/c?x=xT8Aw ny1Hj8lsPnoxoJT9Xfdy7iP nR84OPoLp/eSE=&c=5OlDhF7vh0f27V9xjou25dzt1VfnB121E5Yrz0IkhYJyU0aWMoK7sPQe6d1/ff8oX P8OG s6kSAtt2y/5R9FM7u0DcwKgijPqJvuWa2OVXH6Z8GGDJdRhdRUvJ5cMy0&downloadAs=epm.exe&fallback_url=http://download.easeus.com/.../epm.exe

http://www.bulkcurrenttour.com/QAFrlc3gJ6XmVBskBvll2_hU3q6KVRzgNzJYKITG8QUqqJficw kQYu39Lb WF23fCMdhSlzYEzZ_hATOFmJSINb7BxNJur9mFfGk1kSnUkUAYbWok7WvpyPSyUO5AVys0WPI6R2oAfzmEPdILJHGha38dyskw==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/mo8gfGGVMwfQD8NQhu65AdfhP_F8MPHtYzZ3eHeD_e2owvwVRokA0uQLutgUYID_jGignJWbku8kGJvZtvQUq6tY41EZwpRePlxcbvgBpFefm6uUTl3 Bg0r_9s8wguv7PlBNZSC2HsfdLGVTvv6vQYRGrwAYA==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/iBiurPhn2kaf9JIzC1NFxkxU_Pk LAleBRuGMFd1UOgP364qlc0ijEWxdkBIOEwd4p9fBG4o5X8fKSAIyJ0euaZOgmiv52pJ67llsvwHQd_MOiWQZ65maiDGApL9P65fSHhkrTilbH8ohuggQeKabJngJDgn8Q==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/1ChWAreWUDOlEru6Wo_jGUgDtV1OfiAPpHkJZQeJ3xy1hjnnPL8HJVdSgNM_qI_pr_lowCUYlGSwy ICyG4igCAu8nhLbTvaIwXjsKAchEQZB0G0yVDwbtoMel6X3PEpr8A36aClWGz1dL rlDCYsUsKFHURdQ==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/6vLDeVgzqsQn S7ldkiKBWsnrFmLDrY_XFNS6NHMqHkPChkYxL6xH_rJuVe0FTsrWqj gfxc8k40XaHQMmXAqe5WywkIfbGZsO_dhAPHo4SDRACxGMNGJsoGxwAhbMCwF9edIaw4qw4BVxMYwhcR5BuAqbJv6A==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/c?x=zUOuHl8Ac 3E/3Xr1YmqZtUT9akjmC4UKUYWcZNU eE=&c=Aht9k/qsFcGlF8ZxT5uVr1Yw04Ghzv2WQfqksbPLZTIyAtNhcMKT5kscab81BNf99nB92/o0TnCVJ7lRj8k1x1LRFZ2MXUADOG39x5F5EiZ4OWKv0CpHWVr123h8zFQh&downloadAs=epm.exe&fallback_url=http://download.easeus.com/.../epm.exe

http://www.bulkcurrenttour.com/c?x=6j/6qs9UrLHaHk inxcz8OxiJ9uSynsRTzwtKb1YVf8=&c=i0tDrPbTI0cBMo8Z18r8Qtsxbn5twA8PLjaXvQnB/RmUYHmXxPU23UkgDDdFpZddLHlDw4ZZtrpwi0jM0Pc4M8MLklCWzUd4XDojmmmurmB/KTYgS5uMmWmL7xHz0IJf&downloadAs=epm.exe&fallback_url=http://download.easeus.com/.../epm.exe

http://www.bulkcurrenttour.com/Oalm7fG7kMDFi9b45vhbtZESQe8_kfhniVPrwi5GY2D1m0_vdn_RrKGjYW0tmqvGBMi1GYOQVISPZ9JzqtkxeN lG012nq8mL2hn_o1DcJ 5G04NIn_WD4xASIyVrrpQlU4ZuwBHElnO7YPzr7I0qM24ZXvdEw==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/D9G7fp39gtWK5Q7_Zr9AKFJULbFM1x_Vvy_OwsZUUgN53pPTtZ3teW2OR5yOmwdBiIMNDMs vSYuNunwkg_Tu9PWqvIxeFK_vivzrXC9OeR4YXCFoidTDwnG9Upyk7 6CFIcRyDpVEXcAcXCnjDildO0FLAAmQ==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/M_79tRPyFsp3 _YRbI9iGQEE2LeEAjHmSVdIyoXJE0gueeEfo4fMiYA2AGMk44IbcKVP4Gj4da11dKyIN9FxH5AVduycQerIFW0mgBNKKVToaQatL_qE6ZO2h2F9eLbsxTjUy_3yqNgoM tm6K5uB6NTGV4L2Q==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/T3pWIt8oELonpM0HHmu1bGvjDoh1BqLkDJ 6vRIi1va2 7SddbXbSQWaVJgd6e2gYZNtQcCl8rvOi6rSmVgRS8gBro7IErcJD2bZn0ltbk_a9WgsWhfSvQPQtgFp bg Id_Qowc VclTpLshmdkeGLFeoHvZig==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/08utrNLXg7p 4q5cFvV mD4Lod3ahQuMOYx0 7TOJWi9urIIl16eGJ9jscWzn3XAlvwdz5ecXlUBHi3ka6Gd9BfpMzU7PesoKPFAy3p1WutGxIWOW8IZGLljAQWyJoFbXE8T5CnZKriJj b8_LqPG5AzVHa9YQ==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/c?x=21ZRUkmShrVkFQjTNhcxQ1eot9tt/Cjfxsruxh5ftKI=&c=3F7Uepg6w8YSH4PH7QwHQkx8rWxbiOyMcrKw C cbM6ZBdLJdShP/mxvq/ESmt3t0acXb98mO XlFr7C HwEi6g8ZDHF78YbUSI4290RdnOaPyMvw4ei3iFlaSEAFaPo&downloadAs=epm.exe&fallback_url=http://download.easeus.com/.../epm.exe

http://www.bulkcurrenttour.com/4OcVHlpuoJSWz24Yrzhj3yDaOC0cPGNG_fcRfNi0zDjvYiE uQ 4OKkFFIZAVWHnxXFZPmw0v3OrfQE4zKbq8CsUayA hRhbZkeV80S333ItJMBNlBulE3nJMMpYlOrrbdXmmNHGXFGHJaZE1iKHQVfD0oMkjg==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/sMoON0G8JJzsLaSkHtFtPwQ9sE7dCK1TNlbwAz80r6KI9eNo2Hs291k0 VMLNFO4BA_3G_Jk0XKWfD8jIEVaZbg5U5VuThGlrVu7P0ZDgUakHf3fGhDZ6y6k5gmiK0IWgaWEIVrM99uhhh5f3pn JhmqvJykog==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/Eq8b8IW2BTg01FU5Lc r6mxS_tJNYt0UlZWM8f iOLZ6_RATJyleIbwcJqicDxet mY6sDo9Cw1SeJLeSokhrlU2tEKtntyTkXF7CuIXeAwlI5VuCa f_n18A4YDERcJdr8sHM2lcDRVgeWJPm_q4bcwFRWYtQ==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/c?x=f6EGaB3D0TyjM1BDOPTvVxMQjgjmSS5xhJylMX4OAII=&c=Xrfwagtalp05c8ueZvjkh1JoPr6HAKf/NenacfG4fgxzsVXjTjaBqnX2WqhEC jO2HM0xuAye01cDummyWSAiIbtKq5HLnIVSiK10AHlxAFCkPPOmk/t/Kikka63yOQP&downloadAs=epm.exe&fallback_url=http://download.easeus.com/.../epm.exe

http://www.bulkcurrenttour.com/KC3WAN7 IKptywe5MREkog2sDv1Kg37b5IZ jX7pgAc2r2V0YOBcEA49lo3fpubbEKvdSygoFQFb0xabJGBwvon8EG01QqoqKzOMOYrtGWpSALipahBwziCMRBpY2PeF6FiiCsXvrKwTBGEkcZ_6u9 1GD23Ug==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/c?x=H0U/5m0C4/lB2swImrhm8pK1miDWLyAXtySZBGTZ CE=&c=H uLGi5s3k0ydTff0d/jwgeHE1t4q0HR9xWpASbNWEOmEmw89Pr/23OvxDtszxddvyQd i2TD9OGlQH1CQdsOWwennGG5/XggtX4JONQX jXQLF4lPoETAl oLd4OJb &downloadAs=epm.exe&fallback_url=http://download.easeus.com/.../epm.exe

http://www.bulkcurrenttour.com/kHUU2BXC3O9AZ9NZ3NjQV0E02PJY0NS3qnwlo0ULhU8VYUJhcErxH_mij0AR7WKhHXyrvs8XOSYEfJrHQ1sNqm5_eeYWd692d8LfKsDxKLzwg0cruKD3Oj2YfB0fVQLRrQt4J7Hm6ssyzF1HUY9lQli_B0 FmQ==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

http://www.bulkcurrenttour.com/c?x=pDhk1nV3QsT/d6v/dRIMSud9LJs700j588PPNs0hUi8=&c=O85X/supMr83jv3zEa5mHijgbwk xyaekaca1482ETL2k7EOWn3O e4pl92oEEQoFuEU4et0s6RNyEUMHe7VIlgSM0IDcXOn2g1rwf6MzJixqW1i1 f6hZNIMcUl99Y6&downloadAs=epm.exe&fallback_url=http://download.easeus.com/.../epm.exe

http://www.bulkcurrenttour.com/gVzhTWhH4cgq0lzjxjX7sXWbN_uIk1ar1nN KZ7G8rFK00Ow4TCxYYa RgClbmHN_isGoUV5jFV5qQDvUqXVnVDzv9Skq1J9GXy3xgtiNTm27c6qa8JGEzTF6zT9WTIkI0Luegw6UmOk8PgkJ_rV8vkCz0jSNQ==-GyYAAAScY7FpTYuCIIeDQw7Yvz1IMwsmh8 XyJhvHFG1225J0Gca8QA=

Latest 30 of 572 download URLs

Scan epm.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.