» FUFAXRCV.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

FUFAXRCV.exe

EPSON PC-FAX SOFTWARE

SEIKO EPSON CORPORATION

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FUFAXRCV’. This is installed with Epson FAX Utility.

File name:

FUFAXRCV.exe

Publisher:

SEIKO EPSON CORPORATION (signed and verified)

Product:

EPSON PC-FAX SOFTWARE

Description:

Fax Reception

Version:

2,0,0,31

MD5:

305c1d680482e937d65d2a43448629a1

SHA-1:

7a0f213275c07fdd8fd9781fb01b67403d3e3206

SHA-256:

efca1b8fb5f932276e1ce6679eb155cf643e2b3ccce36af07c68c2a82473c7f6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/25/2024 12:28:50 AM UTC (today)

File size:

635.5 KB (650,784 bytes)

Product version:

1,6,2,1

Original file name:

FUFAXRCV.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\epson software\fax utility\fufaxrcv.exe

Digital Signature

Signed by:

SEIKO EPSON CORPORATION

Authority:

VeriSign, Inc.

Valid from:

8/31/2015 2:00:00 AM

Valid to:

9/8/2016 1:59:59 AM

Subject:

CN=SEIKO EPSON CORPORATION, OU=Information Service & Support Department, O=SEIKO EPSON CORPORATION, L=Suwa-shi, S=Nagano, C=JP

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

7DF14DBB3F0B294012D094E3EA840697

File PE Metadata

Compilation timestamp:

12/22/2015 2:47:34 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

Entry address:

0x42961

Entry point:

E8, A6, 62, 00, 00, E9, 17, FE, FF, FF, 8B, C1, 83, 60, 04, 00, 83, 60, 08, 00, C7, 00, 2C, 6C, 47, 00, C3, 53, 8B, 5C, 24, 08, 56, 57, 8B, F9, C7, 07, 2C, 6C, 47, 00, 8B, 03, 85, C0, 74, 26, 50, E8, 79, 63, 00, 00, 8B, F0, 46, 56, E8, B3, 0F, 00, 00, 85, C0, 59, 59, 89, 47, 04, 74, 12, FF, 33, 56, 50, E8, EE, 62, 00, 00, 83, C4, 0C, EB, 04, 83, 67, 04, 00, C7, 47, 08, 01, 00, 00, 00, 8B, C7, 5F, 5E, 5B, C2, 04, 00, 53, 8B, 5C, 24, 08, 56, 8B, F1, C7, 06, 2C, 6C, 47, 00, 8B, 43, 08, 89, 46, 08, 85, C0, 8B... 
[+]

Code size:

452 KB (462,848 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

FUFAXRCV

Command:

"C:\Program Files\epson software\fax utility\fufaxrcv.exe"

The file FUFAXRCV.exe has been discovered within the following program.

Epson FAX Utility by SEIKO EPSON Corporation

Publisher's description - “The Epson FAX Utility will send faxes from your computer. You can send a fax from a printing program in Windows. You can fax up to 100 pages at a time, including a cover sheet. Select your product with the FAX option as the printer.”

www.epson.com

4% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.