home

femx86svc.exe

NoVirusThanks File Extension Monitor Service

NoVirusThanks Company Srl

It runs as a separate (within the context of its own process) windows Service named “FEMx86Svc”.
Publisher:
NoVirusThanks Company Srl  (signed and verified)

Product:
NoVirusThanks File Extension Monitor Service

Version:
1.5.0.0

MD5:
787a813b2c950c8dafd197211f9d59d9

SHA-1:
510ed909d93ce089e5d7e3d7da0b2f72986d0683

SHA-256:
4b9d544f921a322014d89d3dd6b9b1d19042e6bc43eaf271b1c4b13bb6477423

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:45:15 PM UTC  (today)

File size:
1.4 MB (1,450,656 bytes)

Product version:
1.5.0.0

Copyright:
NoVirusThanks Company Srl

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\novirusthanks\file extension monitor\femx86svc.exe

Digital Signature
Signed by:
NoVirusThanks Company Srl

Authority:
GlobalSign nv-sa

Valid from:
12/11/2012 12:38:01 PM

Valid to:
3/24/2014 10:31:15 AM

Subject:
E=support@novirusthanks.org, CN=NoVirusThanks Company Srl, O=NoVirusThanks Company Srl, L=Castiglione del Lago, S=Perugia, C=IT

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11214F7DE314C1A18C514A11F52BCC29270F

File PE Metadata
Compilation timestamp:
7/27/2013 10:58:39 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:SC55ShYmlBvYco1+VTheEAEcXRyjBaSTvgmUiHETCSdUjJhDlta:CacowrsyjcSTv3HE1UjJ1i

Entry address:
0x11F174

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, F4, 76, 51, 00, E8, 5F, C1, EE, FF, A1, B8, 72, 52, 00, 8B, 00, 80, 78, 38, 00, 74, 10, A1, B8, 72, 52, 00, 8B, 00, E8, 1E, 53, FF, FF, 84, C0, 74, 0C, A1, B8, 72, 52, 00, 8B, 00, 8B, 10, FF, 52, 44, 8B, 0D, CC, 70, 52, 00, A1, B8, 72, 52, 00, 8B, 00, 8B, 15, 70, 6D, 51, 00, 8B, 18, FF, 53, 40, A1, B8, 72, 52, 00, 8B, 00, 8B, 10, FF, 52, 48, 5B, E8, D0, 7F, EE, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.1 MB (1,169,920 bytes)

Service
Display name:
FEMx86Svc

Description:
FEM x86 Service

Type:
Win32OwnProcess


Scan femx86svc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.