home

eppshellreg.exe

ES-Computing

This is installed with EditPlus 3.
Publisher:
ES-Computing  (signed and verified)

MD5:
53ffd13d83b2c4926217cb8ec9bb9fdf

SHA-1:
40ce3e4c51aac568cf4d4562cb080f49532102cc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 11:21:35 PM UTC  (a few moments ago)

File size:
39.4 KB (40,368 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\editplus 3\eppshellreg.exe

Digital Signature
Signed by:
ES-Computing

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
7/20/2009 9:00:00 AM

Valid to:
9/19/2010 8:59:59 AM

Subject:
CN=ES-Computing, O=ES-Computing, L=Jinju, S=GYEONGSANGNAM-DO, C=KR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
655654E2082288864A552C9BE6162565

File PE Metadata
Compilation timestamp:
12/2/2009 12:18:45 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
384:hYZBmKGboL/wrIw0metXVYpyRLXXXLT8PfirpuZYchORK931fwLLAdqTJZKBSYJE:ickEIw3YXVYkVH7A8phK39FELJZcLty

Entry address:
0x12D0

Entry point:
48, 8B, C4, 48, 81, EC, A8, 00, 00, 00, 48, 89, 58, 18, 48, 89, 78, 20, 48, 8D, 48, 88, FF, 15, CC, 4D, 00, 00, 90, FF, 15, BD, 4D, 00, 00, 48, 8B, C8, 33, D2, 41, B8, 94, 00, 00, 00, FF, 15, A4, 4D, 00, 00, 48, 8B, D8, 48, 85, C0, 75, 0A, B8, FF, 00, 00, 00, E9, 62, 02, 00, 00, C7, 00, 94, 00, 00, 00, 48, 8B, C8, FF, 15, 7B, 4D, 00, 00, 85, C0, 75, 1E, FF, 15, 81, 4D, 00, 00, 48, 8B, C8, 4C, 8B, C3, 33, D2, FF, 15, 5B, 4D, 00, 00, B8, FF, 00, 00, 00, E9, 31, 02, 00, 00, 8B, 43, 10, 89, 05, 5C, 8E, 00, 00...
 
[+]

Entropy:
5.8154

Code size:
19 KB (19,456 bytes)

The file eppshellreg.exe has been discovered within the following program.

EditPlus 3  by ES-Computing
Publisher's description - “EditPlus is a text editor, HTML editor, PHP editor and Java editor for Windows. While it can serve as a good Notepad replacement, it also offers many powerful features for Web page authors and programmers.”
www.editplus.com
11% remove it
 
Powered by Should I Remove It?

Scan eppshellreg.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.