home

eppx-win-4_5_0-en.exe

Canon Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from telecharger.freedownloadmanager.org and multiple other hosts.
Publisher:
Canon Inc.  (signed and verified)

MD5:
a5e01e78761f9e8c156216c803c123f4

SHA-1:
d40068c977d97fc8f8aee0c190d6f1424c92ca28

SHA-256:
4682c17227c4ad31f3db263715ef3fc9fca4088fcdc8f52b2fadcbed5654532c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 10:27:04 PM UTC  (today)

File size:
57.5 MB (60,337,752 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\eppx-win-4_5_0-en.exe

Digital Signature
Signed by:
Canon Inc.

Authority:
VeriSign, Inc.

Valid from:
3/25/2014 12:00:00 AM

Valid to:
4/19/2015 12:59:59 AM

Subject:
CN=Canon Inc., OU=Inkjet System Development Center, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Canon Inc., L=Kawasaki-shi, S=Kanagawa, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
42E42D04DA33DB4275572152C9CFDABE

File PE Metadata
Compilation timestamp:
11/2/2009 8:24:15 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1572864:DzqTlZ3ZXEMtIDH3qXSSrUex6ikUeYaIEH+2jP5Pc+cd4RUE76:36lZRPIDXkxILUeP3ZNc+81Eu

Entry address:
0xAF1E

Entry point:
E8, 6E, 4A, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, D0, 4B, 42, 00, 89, 0D, CC, 4B, 42, 00, 89, 15, C8, 4B, 42, 00, 89, 1D, C4, 4B, 42, 00, 89, 35, C0, 4B, 42, 00, 89, 3D, BC, 4B, 42, 00, 66, 8C, 15, E8, 4B, 42, 00, 66, 8C, 0D, DC, 4B, 42, 00, 66, 8C, 1D, B8, 4B, 42, 00, 66, 8C, 05, B4, 4B, 42, 00, 66, 8C, 25, B0, 4B, 42, 00, 66, 8C, 2D, AC, 4B, 42, 00, 9C, 8F, 05, E0, 4B, 42, 00, 8B, 45, 00, A3, D4, 4B, 42, 00, 8B, 45, 04, A3, D8, 4B, 42, 00, 8D, 45, 08, A3, E4, 4B, 42, 00, 8B...
 
[+]

Entropy:
7.9993  (probably packed)

Code size:
76 KB (77,824 bytes)

The file eppx-win-4_5_0-en.exe has been seen being distributed by the following 20 URLs.

http://telecharger.freedownloadmanager.org/Windows-PC/.../GRATUIT-4.5.0.html?ac49b02

http://www.laboratorycenterconecpt.com/JEBuTM1wolFcmc50C65qKNZMY06avPoO 4jNXx1vH0CJVWyrvpnK3Htin9ilzLtnHqBWNJuqrYFzjWQe2t1mePNZqK4TFTSVQEx1QzniuHEn0LRXUPKqoY44_ TAhQyRVEtpzPNPIliR_AhfRedw tk0 j5q8iSFep4 PZUdHfz9gInIGlks8hhe7zMpjtnO396ccmIEDFcFKBXsc_t mRktiSDD3vXvgvCyDoYJkS6qYZO_1ae5WH3PltTVvA8hmP7NYxm CJERwG6vXegsblEXLiA1349wCgjOYs_zSZtuZUXGojxv FZEmF TCYQh9MMAwSzZoPoHPz5CcTD1UrScgH5_r0JoswASov9VLhq5IRilZuR6rveQbPqAks2l8CihynLhv0H0auVNijDaFzqefl0ugeOCn_NhsUHkRPZp7JNbuNmGOpU3FHMXJv9Gay3jwIGJPXGIZkOfK80IuHeCSgYHovx1gu11jps4mXspgZh1ShoZu3BKsjzFcg3QFwS 86olh9Kt4CT1HtwrsWId_AEP0hhJ_ gPZvTlojak0LWV63qcbEWCPYs7_j3DlyeF9OXgIAzfBg94etR8QHpAMJzuaQ==-G0AAAORt4nm5oKTv80iJIELwKJjIAXtbKAHoxd7R9oG88Vx kgUnvCqfLi9S4sTAoSSDIvPD2xeadWOIi_ED-e

http://www.filepuma.com/file2/1486824801c7482/easy_photoprint_ex_4.5.0/.../

http://descargar.freedownloadmanager.org/Windows-PC/.../GRATIS-4.5.0.html?ac49b02

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDIwMDAwMDAwNjE4

https://filedir.com/.../514366

http://files.letoltes.com/.../Canon Easy-PhotoPrint EX 4.5.0.exe

https://d1ob5g40gc5b6g.cloudfront.net/36/356732/.../eppx-win-4-5-0-en.exe

http://www.laboratorycenterconecpt.com/CSicUfNBqGuvc8lM4 KZD9No7Z3QNmdgVrCtSe24PYvMjVMxONTFoqToevQ3_cWU6CnPxNGWzBEHBqG9XRb5_nNCXFBarrVIrLSHgdZUzE5OGMlNHuU0Es iJuba_8fFDC4SPKYnPR9GXLfldnNHKA_7u2AkWybwlU3qAIaJ6uD01ZtB0zDBKkzYPaZZXg24tunOZdjUarHD5V5 wFewOl7LnnacBtZ6L30ndxfadfgoTDgGXhW kqcmcS3dm4lGmBK3jABYZ26BahHdHoQRANrg_nSS IIVEa4ZxyQXTvzIxqBHcLCbNjzvXWQNNWOlJRYkRtVqQ5A1QhL8WulXDHPUqEYWq_Kw3DJv4q_3lPfhmkwDys847XkHpQ0nFwhPhpLrzIAh mJuM51uKUHWafrLgcR2_aaHpubvHviHrtw8UySTDm1KBcOD n59QXQu6R1 b512uBHeegufYKVunECBWCa7h85DJNa6xJgMbRkUBppLOcyu_NmDk2fJeLb0cWmFjhbTkW_RtlZpkpgDawjm93y6oD4nTCndopV6gk_FchA9Ky 76b6awmaEW9fcLdG1CBxlHatNEGQXM 3DOHYuvRXM7Q==-G0AAAORt4nm5oKTv80iJIELwKJjIAXtbKAHoxd7R9oG88Vx kgUnvCqfLi9S4sTAoSSDIvPD2xeadWOIi_ED-e

http://download.freedownloadmanager.org/Windows-PC/.../FREE-4.5.0.html?ac49b02

http://printerscannersoftware.com/download1.php

http://easy-photoprint-ex.software.informer.com/.../

http://canon-easy-photoprint-ex.soft32.com/get/file/id/.../?no_download_manager=true

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDIwMDAwMDAwNjE4&cmp=ACB&lang=EN

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDIwMDAwMDAwNjE4&cmp=ARH&lang=EN

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDIwMDAwMDAwNjE4&cmp=ABS&lang=EN

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDIwMDAwMDAwNjE4&cmp=ABR&lang=EN

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDIwMDAwMDAwNjE4&cmp=ACY&lang=EN

http://gdlp01.c-wss.com/gds/6/0200000006/.../eppx-win-4_5_0-en.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDIwMDAwMDAwNjE4&cmp=ABX&lang=EN

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.