» epson379137eu.exe
Overview
Analysis
File Details
Downloads (8)

epson379137eu.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from esupport.epson-europe.com and multiple other hosts.

File name:

epson379137eu.exe

MD5:

68163214a339f94e0315823ef67fcce4

SHA-1:

3d8387f932949bde4a8b4cc3381626fe4037bc73

SHA-256:

cbb26c9b4d79ccf364ba6007e0d69455304b119f0a15a1edfdc7bc80c48ab1d8

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

5/9/2024 10:27:48 AM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

HW32.Packed

1.3.0.6379

File size:

24 MB (25,194,496 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\epson379137eu.exe

File PE Metadata

Compilation timestamp:

11/2/2009 10:24:29 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

393216:KNGQwOHkQKbRaiEBKE0xPj2+f5WCOwDoJmAte33vjbo/YRTVDVGZmxWxI:KNhHbKIBePj2rE+mt3rMgLVGFI

Entry address:

0x1479F

Entry point:

E8, 02, 67, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, D8, C9, 42, 00, 75, 02, F3, C3, E9, 82, 67, 00, 00, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58, 59, 87, 04, 24, FF, E0, 55, 8B, EC, 51, 51, 53, 56, 57, 64, 8B, 35, 00, 00, 00, 00, 89, 75, FC, C7, 45, F8, 18, 48, 41, 00, 6A, 00, FF, 75, 0C, FF, 75, F8, FF, 75, 08, E8, 54, E6, 00, 00, 8B, 45, 0C, 8B, 40, 04, 83... 
[+]

Entropy:

7.9972 (probably packed)

Code size:

144 KB (147,456 bytes)

The file epson379137eu.exe has been seen being distributed by the following 8 URLs.

http://esupport.epson-europe.com/Redirect.aspx?lng=en-GB&url=ftp://download.epson-europe.com/pub/download/.../epson379137eu.exe&id=379137&ct=1&data=FGQ8MBMpKluUN3UU002FA4fA9q YbpJ13s2yPvf9JjzoiU002FwU003D

http://esupport.epson-europe.com/Redirect.aspx?lng=he-IL&url=ftp://download.epson-europe.com/pub/download/.../epson379137eu.exe&id=379137&ct=1&data=FGQ8MBMpKlsihs1P12EVGWrU5rdJjRoUZ4EldGbNtugU003D

ftp://download.epson-europe.com/pub/download/.../epson379137eu.exe

http://esupport.epson-europe.com/Redirect.aspx?lng=pl-PL&url=ftp://download.epson-europe.com/pub/download/.../epson379137eu.exe&id=379137&ct=1&data=FGQ8MBMpKlsihs1P12EVGb89FTbNp0wBNy3 1qMwIl0U003D

http://esupport.epson-europe.com/Redirect.aspx?lng=en-GB&url=ftp://download.epson-europe.com/pub/download/.../epson379137eu.exe&id=379137&ct=1&data=0ccCGROWIYOk2C27rw9Y33JPaLA3bOhvPVe46S4yvkwU003D

http://esupport.epson-europe.com/Redirect.aspx?lng=en-GB&url=ftp://download.epson-europe.com/pub/download/.../epson379137eu.exe&id=379137&ct=1&data=FGQ8MBMpKlsihs1P12EVGXSIGhlhZqG3tbRI3EwJA5EU003D

http://www.driversepson.com/.../ZnRwOi8vZG93bmxvYWQuZXBzb24tZXVyb3BlLmNvbS9wdWIvZG93bmxvYWQvMzc5MS9lcHNvbjM3OTEzN2V1LmV4ZQ==

Scan epson379137eu.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.