home

zentimoservice.exe

Crystal Rich, Ltd

It runs as a separate (within the context of its own process) windows Service named “Zentimo Assistant”.
Publisher:
Crystal Rich, Ltd  (signed and verified)

MD5:
0a0520fd8100450d8ca033c4ff39d54b

SHA-1:
3da2b1af92b11abd907610e51f1e88752186a241

SHA-256:
a90c3947e764117b45ce4e7c87ccee3417b23e121cf9646e1c5743117ed24ee0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 4:24:51 PM UTC  (today)

File size:
512 KB (524,248 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\zentimo\zentimoservice.exe

Digital Signature
Signed by:
Crystal Rich, Ltd

Authority:
VeriSign, Inc.

Valid from:
11/23/2009 12:00:00 AM

Valid to:
11/24/2010 11:59:59 PM

Subject:
CN="Crystal Rich, Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Crystal Rich, Ltd", L=Saint Petersburg, S=Saint Petersburg, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
54B3167B86CDCBCEA4DF714F2DB82384

File PE Metadata
OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
2.22

CTPH (ssdeep):
6144:b7Q5V+XsGTyZDO2GGOyup59TcPqlNWQ57JFdt7Ox4C:gq8GTyZDO2GGOyunzj357JFd+4C

Entry address:
0x12790

Entry point:
48, 81, EC, 88, 00, 00, 00, C6, 04, 25, 08, E0, 47, 00, 01, E8, 2C, FF, FF, FF, 48, 81, C4, 88, 00, 00, 00, C3, 00, 00, 00, 00, 55, 48, 89, E5, 48, 81, EC, B0, 00, 00, 00, 48, 89, 5D, A0, 48, 89, 75, A8, 48, 89, 4D, F8, C6, 45, F0, 00, 48, BE, 00, 00, 00, 00, 00, 00, 00, 00, 48, 8D, 5D, E0, E8, 72, EB, FE, FF, 89, C1, 48, 8B, 55, F8, 41, B9, 10, 00, 00, 00, 48, 89, 74, 24, 20, 49, 89, D8, E8, 69, EB, FE, FF, 85, C0, 0F, 84, DF, 00, 00, 00, C7, 45, B8, 00, 00, 00, 00, C6, 45, D8, 01, E9, BD, 00, 00, 00, 90...
 
[+]

Entropy:
5.5921

Code size:
398.5 KB (408,080 bytes)

Service
Display name:
Zentimo Assistant

Service name:
ZentimoService

Description:
Zentimo uses this service for auxiliary operations. It is not recommended to stop the service while the program is working

Type:
Win32OwnProcess


The file zentimoservice.exe has been discovered within the following program.

Zentimo 1.0  by Zentimo.com
Publisher's description - “Zentimo offers a new way to manage your USB & eSATA devices. While it solves many external drive related problems in Windows, it also gives more control and makes working with external drives fun & pleasure.”
zentimo.com
About 2% of users remove it
 
Powered by Should I Remove It?

Scan zentimoservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.