E_YARNHSA.EXE
by Epson
Driver/Hardware
Sources: 300M+ executions observed in the wild.
Summary
Epson printer Status Agent helper
E_YARNHSA.EXE is the 1464th most commonly executed Windows program in EchoTrail's dataset, observed 777 times across enterprise environments. It typically runs from C:\Windows\System32\spool\drivers\x64\3 and it is most often launched by E_YARNHSA.EXE.
Get this in your tools
The same record for e_yarnhsa.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/e_yarnhsa.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
1464th
most commonly executed Windows program
777
observed endpoint executions
Behavior
Top Paths
- C:\Windows\System32\spool\drivers\x64\3100%
Top Hashes (SHA256)
- 552c0a55e6db3a115c14637d6a79e7ceab3170da215c6e03a4ab734d20c6027487%
- 1c5e776a7ea4555f9ee0dc2188ff1d6894f747069a5a1fce2bab2655434b100413%
Process Ancestry
Top Grandparents
- explorer.exe34.34%
- splwow64.exe27.26%
- EXCEL.EXE9.31%
- chrome.exe8.39%
- WINWORD.EXE6.95%
- AcroRd32.exe5.64%
- OUTLOOK.EXE3.54%
- E_YARNHSA.EXE1.44%
- javaw.exe1.31%
- POWERPNT.EXE0.92%
Top Parents
- E_YARNHSA.EXE36.42%
- splwow64.exe28.19%
- E_YATIHSA.EXE27.28%
- chrome.exe7.98%
Top Children
- E_YARNHSA.EXE57.64%
- E_YATIHSA.EXE0.2%
Ask Rocky about E_YARNHSA.EXE
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for E_YARNHSA.EXE. The free tier returns the summary, 500 lookups a month. Or ask Rocky.