Should I block it?

No, this file is 100% safe to run.

Additional versions

4.5.12.1011	36.36%
4.3.12.0626	36.36%
4.1.12.0203	9.09%
4.0.11.0922	9.09%
2.1.10.0729	9.09%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

GetSecurityDescriptorSacl, LookupPrivilegeValueW, AdjustTokenPrivileges, DuplicateTokenEx, CreateProcessAsUserW, GetSidLengthRequired, InitializeSid, GetSidSubAuthority, CopySid, GetLengthSid, IsValidSid, InitializeAcl, AddAce, GetAclInformation, GetSecurityDescriptorOwner, RegNotifyChangeKeyValue, RegDeleteValueW, RegDeleteKeyW, RegSetValueExW, RegCreateKeyExW, RegCloseKey, RegQueryValueExW, RegEnumKeyExW, RegOpenKeyExW, InitializeSecurityDescriptor, MakeAbsoluteSD, GetSecurityDescriptorControl, GetSecurityDescriptorLength, MakeSelfRelativeSD, GetSecurityDescriptorGroup, SetSecurityDescriptorDacl, GetSecurityDescriptorDacl, OpenProcessToken

cfgmgr32.dll

CM_Get_DevNode_Status, CM_Get_Device_Interface_ListW, CM_Get_Parent, CM_Get_DevNode_Registry_PropertyW, CM_Get_Device_ID_ListW, CM_Get_Device_IDW, CM_Locate_DevNodeW

kernel32.dll

TerminateProcess, GetStartupInfoW, LocalFree, VirtualAlloc, VirtualFree, IsProcessorFeaturePresent, UnhandledExceptionFilter, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, SetUnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, GetSystemTimeAsFileTime, IsBadCodePtr, InterlockedCompareExchange, InterlockedExchange, GlobalFree, RaiseException, CreateMutexW, GetFileAttributesW, FlushInstructionCache, WaitForSingleObject, CreateThread, LeaveCriticalSection, EnterCriticalSection, SetEvent, GetCommandLineW, GetModuleHandleW, ExpandEnvironmentStringsW, FreeLibrary, GetProcAddress, LoadLibraryW, SetErrorMode, CreateEventW, FindClose, FindFirstFileW, GetLogicalDriveStringsW, Sleep, OutputDebugStringW, WriteFile, GetFileSize, GetCurrentThreadId, GetTickCount, DeviceIoControl, CreateFileW, GetCurrentProcess, GetVersionExW, SetLastError, GetEnvironmentVariableW, MultiByteToWideChar, lstrlenW, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, InitializeCriticalSection, CreateProcessW, WTSGetActiveConsoleSessionId, GetCurrentProcessId, ProcessIdToSessionId, GetModuleFileNameW, CloseHandle, InterlockedDecrement, InterlockedIncrement, GetLastError, LoadLibraryA, ReleaseMutex

msvcp90.dll

DllMain

msvcr90.dll

DllMain

ole32.dll

CreateClassMoniker, CoCreateFreeThreadedMarshaler, CoInitialize, GetRunningObjectTable, CoCreateInstance, CoInitializeSecurity, CoUninitialize, StringFromCLSID, CoInitializeEx

setupapi.dll

SetupDiEnumDeviceInfo, SetupDiOpenDeviceInfoW, SetupDiCreateDeviceInfoList, SetupDiOpenDevRegKey, SetupDiGetDeviceInstanceIdW, SetupDiGetDeviceInterfaceDetailW, SetupDiEnumDeviceInterfaces, SetupDiDestroyDeviceInfoList, SetupDiGetDeviceRegistryPropertyW, SetupDiGetClassDevsW

shell32.dll

SHFileOperationW

shlwapi.dll

PathAppendW, PathFindFileNameW, PathCombineW, PathRemoveFileSpecW

user32.dll

MessageBoxW, GetDesktopWindow, UnregisterClassA, CreateWindowExW, TranslateMessage, CallMsgFilterW, PostQuitMessage, PeekMessageW, CharUpperW, SendMessageW, PostThreadMessageW, RegisterClassExW, GetClassInfoExW, MsgWaitForMultipleObjects, DispatchMessageW, KillTimer, SetTimer, DestroyWindow, RegisterClassW, CallWindowProcW, GetWindowLongW, SetWindowLongW, CharNextW, DefWindowProcW, LoadCursorW, RegisterWindowMessageW, PostMessageW

userenv.dll

CreateEnvironmentBlock, DestroyEnvironmentBlock

wtsapi32.dll

WTSEnumerateSessionsW, WTSFreeMemory, WTSQueryUserToken, WTSRegisterSessionNotification

Listener.exe

KODAK Share Button App by Eastman Kodak Company

Remove Listener.exe

Version:	2.1.10.0729
MD5:	20a673b43ccd610889246010188478c1
SHA1:	28100876ad10c3b5e94bd62f175cb2ac51c30923
SHA256:	d624f8d04844cab0ff5c991a55ced2b28c12a6c5bb89913eb69407a09394772d

Overview

listener.exe executes as a process with the local user's privileges. It is an auto-starting process that used the Windows Task Scheduler service to load when the user logs into Windows (sometimes this is required to bypass the UAC protection). This is typically installed with the program KODAK Share Button App published by Eastman Kodak Company.

Details

File name:	listener.exe
Publisher:	Eastman Kodak Company
Product name:	KODAK Share Button App
Description:	Camera detection stub
Typical file path:	C:\Program Files\kodak\kodak share button app\listener.exe
File version:	2.1.10.0729
Size:	104 KB (106,496 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No

More details

Programs

The following program will install this file

KODAK Share Button App

Eastman Kodak Company

18% remove

“To use the social networking features, you must install the Share Button App on your computer. The camera works with your Internet-connected computer to install the Share Button App and to share pictures. When the Share Button App is installed, follow the prompts to set up your email and social networking accounts (FACEBOOK Social Network, YouTube, FLICKR Services) on your computer. (You can add email addresses using your camera, but it...”

Behaviors

Scheduled tasks

The job '{10EF5062-FADE-4238-95E4-4EA61663B88F}-Kodak Share Button App Camera detect' runs on logon in the path '\{10EF5062-FADE-4238-95E4-4EA61663B88F}-Kodak Share Button App Camera detect'
Entry path '\{10EF5062-FADE-4238-95E4-4EA61663B88F}-Kodak Share Button App Camera detect'

Scheduled tasks startups

Set to load on user login (bypasses Windows UAC if enabled)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00105287%	0.028634%
Kernel CPU:	0.00105287%	0.013761%
Kernel CPU time:	62 ms/min	100,923,805ms/min
CPU cycles:	62,991/sec	17,470,203/sec
Memory
Private memory:	1.84 MB	21.59 MB
Private (maximum):	5.58 MB
Private (minimum):	112 KB
Non-paged memory:	1.84 MB	21.59 MB
Virtual memory:	60.09 MB	140.96 MB
Virtual memory (peak):	62.09 MB	169.69 MB
Working set:	224 KB	18.61 MB
Working set (peak):	5.58 MB	37.95 MB
Page faults:	1,882/min	2,039/min
I/O
I/O read transfer:	11 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	14 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	59 Bytes/sec	448.09 KB/min
I/O other operations:	6/sec	1,671/min
Resource allocations
Threads:	3	12
Handles:	90	600
GUI GDI count:	9	103
GUI USER count:	4	49

Process properties

Integrety level:	High
Platform:	32-bit
Command line:	"C:\Program Files\kodak\kodak share button app\listener.exe"
Owner:	User
Parent process:	taskeng.exe (Task Scheduler Engine by Microsoft)

Threads