home

apd_407e.exe

EPSON Advanced Printer Driver 4

SEIKO EPSON Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from docs.google.com and multiple other hosts.
Publisher:
SEIKO EPSON Corporation  (signed and verified)

Product:
EPSON Advanced Printer Driver 4

Version:
4, 4, 0, 0

MD5:
662c5745f7d2d9dbfd25eb6e46de5582

SHA-1:
63e96f5b3c32dcfd5ba460e8171c93974fb22a2a

SHA-256:
a39fb7ad65d64d8c70afcb2ca282d3ff018338bbb33d0c91e37967f11d952725

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 7:48:37 PM UTC  (today)

File size:
16.1 MB (16,905,600 bytes)

Product version:
4, 4, 0, 0

Copyright:
Copyright (C) SEIKO EPSON CORPORATION 2008. All rights reserved.

Original file name:
APD4.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\apd_407e.exe

Digital Signature
Signed by:
SEIKO EPSON Corporation

Authority:
VeriSign, Inc.

Valid from:
8/3/2008 7:00:00 PM

Valid to:
8/4/2009 6:59:59 PM

Subject:
CN=SEIKO EPSON Corporation, OU=Information Service & Support Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SEIKO EPSON Corporation, L=Suwa-shi, S=Nagano, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0D8970466E635B3D2993BE8BF78D437E

File PE Metadata
Compilation timestamp:
4/19/2009 9:49:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:X6tNpKqupKugsI/5xh5jlIl2cb2LM7N2XpjW4wcSIf:XxFgsiXnjul2cSLM7N2JxR

Entry address:
0x6A35

Entry point:
E8, E6, 51, 00, 00, E9, 16, FE, FF, FF, 6A, 0C, 68, 78, 69, 42, 00, E8, B5, F1, FF, FF, 6A, 0E, E8, 34, 2F, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08, 8B, 4E, 04, 85, C9, 74, 2F, A1, 5C, B6, 42, 00, BA, 58, B6, 42, 00, 89, 45, E4, 85, C0, 74, 11, 39, 08, 75, 2C, 8B, 48, 04, 89, 4A, 04, 50, E8, 39, F4, FF, FF, 59, FF, 76, 04, E8, 30, F4, FF, FF, 59, 83, 66, 04, 00, C7, 45, FC, FE, FF, FF, FF, E8, 0A, 00, 00, 00, E8, A4, F1, FF, FF, C3, 8B, D0, EB, C5, 6A, 0E, E8, 01, 2E, 00, 00, 59, C3, 55, 8B, EC, 51, 56, 8B...
 
[+]

Entropy:
7.9862  (probably packed)

Code size:
140 KB (143,360 bytes)

The file apd_407e.exe has been seen being distributed by the following 6 URLs.

https://docs.google.com/uc?id=0BwA-Ybx8AcIxOUhzbVQ0ZjQ4ZUE&export=download

https://downloader.disk.yandex.com.tr/disk/5ce80a40d151c4e8ecfcfed07720e635ff6c9a457840bf6a89dd7ffd7281541d/565c7bb8/Z6vNqS4s2i5c4rSYZkxFLZeEFHtBB42DLQMxWfeZdER-f4ozg06j3KcxFrpTT4AYr0Q3TuutYNy2rdtkVuknuQ==?uid=0&filename=APD_407E.exe&disposition=attachment&hash=9cJkD xXQKLAz7Oz3OdhY6xBkh7Fh4q0pZ8KJjur87E=:/.../x-msdownload&fsize=16905600&hid=a5f3b7dfb3ba03ef88545209ec48518e&media_type=executable&tknv=v2

http://www.theuniformsolution.com/files/.../APD_407E.exe

https://docs.google.com/uc?authuser=0&id=0BwA-Ybx8AcIxOUhzbVQ0ZjQ4ZUE&export=download

http://www.novopos.ch/client/EPSON/EPSON Advanced Printer Driver/EPSON Advanced Printer Driver Ver.4.07E/.../APD_407E.exe

http://dc363.4shared.com/download/.../APD_407E.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.