» fileopenbroker64.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

fileopenbroker64.exe

FileOpen Broker

FileOpen Systems Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FileOpenBroker’. This is installed with FileOpen Client (x64) B978.

File name:

Publisher:

FileOpen Systems Inc. (signed and verified)

Product:

FileOpen Broker

Description:

FileOpen Client - Broker

Version:

1.9.7.8

MD5:

dd66c3bb83cee947c2705b6f85a9b6be

SHA-1:

77428334e2e06f70efce9db15b5c3fb69e4a947b

SHA-256:

8410d09e8a7b102668f324ee7125bdee252ccc65e7e5cbdbcb76e471761aed6c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 8:20:31 AM UTC (today)

File size:

1.4 MB (1,459,160 bytes)

Product version:

1.9.7.8

Trademarks:

Original file name:

FileOpenBroker.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Program Files\fileopen\services\fileopenbroker64.exe

Digital Signature

Signed by:

FileOpen Systems Inc.

Authority:

Symantec Corporation

Valid from:

8/15/2016 8:00:00 PM

Valid to:

10/15/2018 7:59:59 PM

Subject:

CN=FileOpen Systems Inc., O=FileOpen Systems Inc., L=Santa Cruz, S=California, C=US

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

219F739BF2098E7E76CE431A14ABC1A9

File PE Metadata

Compilation timestamp:

1/31/2017 11:49:37 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

Entry address:

0xCF798

Entry point:

48, 83, EC, 28, E8, F3, EC, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, 48, 8D, 05, 5D, EF, 00, 00, 48, 8D, 0D, 0E, FB, 00, 00, 48, 89, 05, B7, 3F, 06, 00, 48, 8D, 05, 04, EF, 00, 00, 48, 89, 0D, A1, 3F, 06, 00, 48, 89, 05, AA, 3F, 06, 00, 48, 8D, 05, 2B, EF, 00, 00, 48, 89, 0D, B4, 3F, 06, 00, 48, 89, 05, 9D, 3F, 06, 00, 48, 8D, 05, 7E, EE, 00, 00, 48, 89, 05, 97, 3F, 06, 00, 48, 8D, 05, 30, FA, 00, 00, 48, 89, 05, 99, 3F, 06, 00, 48, 8D, 05, 7A, EE, 00, 00, 48, 89, 05, 93, 3F, 06, 00, 48, 8D, 05... 
[+]

Entropy:

6.0112

Code size:

997 KB (1,020,928 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

FileOpenBroker

Command:

C:\Program Files\fileopen\services\fileopenbroker64.exe

The file fileopenbroker64.exe has been discovered within the following program.

FileOpen Client (x64) B978 by FileOpen Systems, Inc.

About 9% of users remove it

Scan fileopenbroker64.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.