home

2034.exe

Kodak Printer Installer

Eastman Kodak Company

This is a setup and installation application. This is installed with KODAK AiO Software. The file has been seen being downloaded from download.kodak.com and multiple other hosts.
Publisher:
Eastman Kodak Company  (signed and verified)

Product:
Kodak Printer Installer

Description:
Kodak Printer Installer Web Installer

Version:
7.0.11.0

MD5:
d443b47d6c2a53cc3e22f8a058306f11

SHA-1:
f6aa6d26392379a9cc3a4deec1b326262ab68ba1

SHA-256:
fdd3ba6d4096d05c7f6f341f6fae9e6e9a4346e5a548710c01b64c3dc0567a26

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:11:46 AM UTC  (today)

File size:
12.1 MB (12,713,136 bytes)

Product version:
7.0.11.0

Copyright:
(c) Eastman Kodak Company, 2011. All rights reserved.

Original file name:
WebInstaller.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\2034.exe

Digital Signature
Signed by:
Eastman Kodak Company

Authority:
VeriSign, Inc.

Valid from:
7/26/2010 8:00:00 PM

Valid to:
9/2/2012 7:59:59 PM

Subject:
CN=Eastman Kodak Company, OU=Digital and Applied Imaging, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Eastman Kodak Company, L=Rochester, S=New York, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7902F97C1A39D23B18D8B222FABE2B52

File PE Metadata
Compilation timestamp:
2/3/2009 2:21:10 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:PVGC49p+5UecKiiIjbhvZKRmD3dgRZGke7vW:349U5xcKiighvZW437d7O

Entry address:
0x13254

Entry point:
55, 8B, EC, 6A, FF, 68, 28, A9, 41, 00, 68, 7C, 31, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 88, A1, 41, 00, 33, D2, 8A, D4, 89, 15, E0, 22, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, DC, 22, 42, 00, C1, E1, 08, 03, CA, 89, 0D, D8, 22, 42, 00, C1, E8, 10, A3, D4, 22, 42, 00, 6A, 01, E8, 96, 0E, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 48, 09, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.9988

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
97 KB (99,328 bytes)

The file 2034.exe has been discovered within the following program.

KODAK AiO Software  by Eastman Kodak Company
Publisher's description - “With this version of software, you can easily download PrintProjects software, which helps you design, print, and share photo cards, calendars, books, and more. With PrintProjects software, you can print at home or have your creations shipped to you.”
www.kodak.com
27% remove it
 
Powered by Should I Remove It?

The file 2034.exe has been seen being distributed by the following 3 URLs.

http://download.kodak.com/digital/software/inkjet/v7_1/Bits/.../aio_install.exe

http://www.siliconguide.com/drivers/download/.../

http://s1.siliconguide.com/.../2034.exe

Scan 2034.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.