Should I block it?

45%
45% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

1.1.44.0 46.15%
1.1.41.0 10.26%
1.1.41.0 8.97%
1.1.36.0 10.26%
1.1.34.0 17.95%
1.1.31.0 6.41%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegOpenKeyExA, RegCloseKey, RegQueryValueExA, RegEnumKeyExA
iphlpapi.dll
GetAdaptersInfo
kernel32.dll
GetLocalTime, GetModuleHandleA, GetFileAttributesA, FindClose, FreeLibrary, lstrcmpiA, GetSystemInfo, GetProcAddress, GetVersion, FindFirstFileA, LoadLibraryA, GetCommandLineA, GetUserDefaultUILanguage, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, InterlockedCompareExchange, Sleep, InterlockedExchange, SetFileTime, WriteFile, DosDateTimeToFileTime, SystemTimeToFileTime, ReadFile, CloseHandle, SetFilePointer, GetFileType, CreateFileA, GetCurrentProcess, DuplicateHandle, MoveFileA, FindNextFileA, MoveFileExA, GetLastError, CreateDirectoryA, SetFileAttributesA, RemoveDirectoryA, lstrcpyA, lstrlenA, CopyFileA, DeleteFileA, GetVersionExA
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoUninitialize, CoCreateInstance, CoInitialize
shell32.dll
SHFileOperationA, SHGetSpecialFolderPathA
shlwapi.dll
PathFileExistsA, PathAppendA
user32.dll
GetSystemMetrics, RegisterWindowMessageA, ShowWindow, CreateWindowExA, RegisterClassExA, LoadCursorA, DefWindowProcA, KillTimer, SetTimer, DispatchMessageA, GetMessageA, PostMessageA

PmmUpdate.exe

EgisTec In-Product Service by EGIS TECHNOLOGY INC. (Signed)

Remove PmmUpdate.exe
Version:   1.1.31.0
MD5:   27964c4676d0f4b34db7332afa2b1474
SHA1:   206679b116584f5d676bb1927856ab522e1b1327
SHA256:   e3a7ed7642a3902c19e96717e9c14267c9a578637338674a2654a018d3d7f65d

What is PmmUpdate.exe?

EgisTec In-Product Service is the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found.

Overview

pmmupdate.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by EGIS TECHNOLOGY INC. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:pmmupdate.exe
Publisher:Egis Technology Inc.
Product name:EgisTec In-Product Service
Description:PMM Update Application
Typical file path:C:\Program Files\egistec ips\pmmupdate.exe
File version:1.1.31.0
Size:391.79 KB (401,192 bytes)
Certificate
Issued to:EGIS TECHNOLOGY INC.
Authority (CA):VeriSign
Effective date:Thursday, December 31, 2009
Expiration date:Sunday, January 2, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'EgisTecPMMUpdate' → "C:\Program Files\EgisTec IPS\PmmUpdate.exe"
Scheduled tasks
  • The task 'PMMUpdate' runs on logon in the path '\PMMUpdate'
  • Entry path '\PMMUpdate'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
  • Login entry path '\PMMUpdate'
Network connections
  • [TCP] ec2-23-23-172-158.compute-1.amazonaws.com (23.23.172.158:80)

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00108982%
    0.028634%
    Kernel CPU:0.00073882%
    0.013761%
    User CPU:0.00035100%
    0.014873%
    Kernel CPU time:536 ms/min
    100,923,805ms/min
    CPU cycles:2,166/sec
    17,470,203/sec
    Memory
    Private memory:3.9 MB
    21.59 MB
    Private (maximum):10.52 MB
    Private (minimum):6.78 MB
    Non-paged memory:3.9 MB
    21.59 MB
    Virtual memory:97.31 MB
    140.96 MB
    Virtual memory (peak):108.61 MB
    169.69 MB
    Working set:10.49 MB
    18.61 MB
    Working set (peak):10.98 MB
    37.95 MB
    Page faults:18,203/min
    2,039/min
    I/O
    I/O read transfer:32 Bytes/sec
    1.02 MB/min
    I/O read operations:1/sec
    343/min
    I/O other transfer:2 Bytes/sec
    448.09 KB/min
    I/O other operations:1/sec
    1,671/min
    Resource allocations
    Threads:8
    12
    Handles:149
    600
    GUI GDI count:33
    103
    GUI GDI peak:34
    142
    GUI USER count:6
    49
    GUI USER peak:7
    71

    BehaviorsProcess properties

    Integrety level:Medium
    Platform:64-bit
    Command line:"C:\Program Files\egistec ips\pmmupdate.exe"
    Owner:User

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 37.18%
    Windows 8 37.18%
    Windows 7 Starter 7.69%
    Windows 7 Home Basic 6.41%
    Windows 8.1 Single Language 3.85%
    Windows 8 Pro with Media Center 3.85%
    Windows 7 Ultimate 1.28%
    Windows 8 Pro 1.28%
    Windows 8 Single Language 1.28%

    Distribution by countryDistribution by country

    United States installs about 35.90% of EgisTec In-Product Service .

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Acer 96.83%
    Hewlett-Packard 3.17%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE