home

ezshmn32.exe

EASY ENTERPRISE.i

EASY SOFTWARE AG

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘EASYWARE REPORT Server Monitor’.
Publisher:
EASY SOFTWARE AG, Germany, Am Hauptbahnhof 4, 45468 Mülheim/Ruhr, Germany, Phone +49 (0)208-45016-0, Fax +49 (0)208-45016-90, http://www.easy.de  (signed by EASY SOFTWARE AG)

Product:
EASY ENTERPRISE.i

Description:
EASYWARE Print Service Monitor

Version:
3.95.3500.19

MD5:
ff4608b3b8a996b94f11d3a00576fda7

SHA-1:
612cc30668eb651951b9933d613a87f3664916ba

SHA-256:
a0131c4dff959bec17ddd99c9d52758dd2f5d64d0a30ed367b0c0a1f3086a233

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 2:27:22 PM UTC  (today)

File size:
605.6 KB (620,144 bytes)

Product version:
3.95.3500.19

Copyright:
Copyright © 1992-2013 by EASY SOFTWARE AG, Germany

Original file name:
EZSHMN32

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\easyware\bin32\ezshmn32.exe

Digital Signature
Signed by:
EASY SOFTWARE AG

Authority:
Thawte, Inc.

Valid from:
4/12/2013 2:00:00 AM

Valid to:
7/4/2015 1:59:59 AM

Subject:
CN=EASY SOFTWARE AG, OU=SOFTWARE DEVELOPMENT DEP., O=EASY SOFTWARE AG, L=Muelheim a.d. Ruhr, S=Nordrhein-Westfalen, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0600DB3DEC211D66C408FC7CF6A06F05

File PE Metadata
Compilation timestamp:
8/1/2013 2:27:18 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:cr2RiNOC5Zr5A9m0A+immmmYmmmmmmmmmmmmummmmmmmmmmmmmmmummmmmmmmmmo:cr2RsOIZr5zS6TbzSlW6I2QJ1w

Entry address:
0x31B7

Entry point:
E8, 3C, 05, 00, 00, E9, 36, FD, FF, FF, 6A, 14, 68, 98, 49, 40, 00, E8, 7F, 04, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, 81, 05, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, 75, 04, 00, 00, C2, 10, 00, 6A, 0C, 68, B8, 49, 40, 00, E8, 21, 04, 00, 00, 83, 65, E4, 00, 8B, 75, 0C, 8B, C6, 0F, AF, 45...
 
[+]

Code size:
10.5 KB (10,752 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
EASYWARE REPORT Server Monitor

Command:
C:\Program Files\easyware\bin32\ezshmn32.exe


Scan ezshmn32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.