home

zentimoservice.exe

ZentimoService

Crystal Rich Ltd

It runs as a separate (within the context of its own process) windows Service named “Zentimo Assistant”.
Publisher:
Crystal Rich Ltd  (signed and verified)

Product:
ZentimoService

Description:
Zentimo assistant service

Version:
1.10.1.1259

MD5:
82617fd8dd6be5d1ecdf753fdf1566dc

SHA-1:
0ea5acb63c04c9aa889d106bfec1f22cb14109f0

SHA-256:
d183604f986288adb71fce07fb3e236c8afd795c1b95334b93a9b9ecaa32274d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 7:15:23 PM UTC  (today)

File size:
1.1 MB (1,194,080 bytes)

Product version:
1.10.1.1259

Copyright:
Copyright © 2017 by Crystal Rich Ltd

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\zentimo\zentimoservice.exe

Digital Signature
Signed by:
Crystal Rich Ltd

Authority:
DigiCert Inc

Valid from:
2/16/2017 3:00:00 AM

Valid to:
2/21/2020 3:00:00 PM

Subject:
CN=Crystal Rich Ltd, O=Crystal Rich Ltd, L=Saint Petersburg, C=RU

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0188DF238CCAED19328F6D1A4B1BBA3D

File PE Metadata
Compilation timestamp:
2/16/2017 2:16:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0xFBFD8

Entry point:
55, 8B, EC, 83, C4, F0, B8, 04, 30, 4F, 00, E8, 00, EA, F0, FF, E8, 2B, 62, FF, FF, E8, A2, A9, F0, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 32, 13, 00, 00, 00, 19, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, DE, 24, DF, CE, A4, 80, 7D, 44, 8C, 75, EB, 87, 1D, C1, 21, FD, D8, 29, 40, 00...
 
[+]

Entropy:
6.3871

Developed / compiled with:
Microsoft Visual C++

Code size:
1001.5 KB (1,025,536 bytes)

Service
Display name:
Zentimo Assistant

Service name:
ZentimoService

Description:
Zentimo uses this service for auxiliary operations. It is not recommended to stop the service while the program is working

Type:
Win32OwnProcess

Group:
Base


Scan zentimoservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.