home

fshs.sys

F-Secure DeepGuard

F-Secure Corporation

It runs as a Windows 64-bit kernel mode device driver named “F-Secure HIPS Driver”.
Publisher:
F-Secure Corporation  (signed and verified)

Product:
F-Secure DeepGuard™

Description:
HIPS 64-bit kernel module

Version:
4.1.282

MD5:
91f579053e58132173122b4146f7ede0

SHA-1:
6a270cf83730443bca5c941f39a556cb144adf93

SHA-256:
d3876a3e6567809aff819647a8f2519abe4aa7084fdaedfd080eebd6f1849f59

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 5:54:42 AM UTC  (today)

File size:
60.3 KB (61,760 bytes)

Product version:
4.1.282

Copyright:
© 2005-2012, F-Secure Corporation

Original file name:
fshs.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Program Files\telesec-sds-netbased\hips\drivers\fshs.sys

Digital Signature
Signed by:
F-Secure Corporation

Authority:
GlobalSign nv-sa

Valid from:
2/26/2013 10:43:19 AM

Valid to:
2/27/2016 10:43:19 AM

Subject:
CN=F-Secure Corporation, O=F-Secure Corporation, L=HELSINKI, S=Uusimaa, C=FI

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112116EC43FE9E35A1ED36CC601C8E232F26

File PE Metadata
Compilation timestamp:
4/17/2013 2:40:45 PM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

Entry address:
0x164C

Entry point:
48, 8B, C4, 48, 89, 58, 08, 48, 89, 68, 10, 56, 57, 41, 55, 48, 81, EC, 80, 00, 00, 00, 48, 8B, DA, 48, 8B, F1, 4C, 8D, 40, 18, 48, 8D, 50, 20, 48, 8D, 48, B8, 45, 33, C9, FF, 15, 03, ED, FF, FF, 48, 8D, 0D, FC, 6F, 00, 00, 4C, 8D, 05, ED, 6F, 00, 00, 84, C0, 8B, 84, 24, B0, 00, 00, 00, 41, BD, 01, 00, 00, 00, 89, 44, 24, 48, 8B, 84, 24, B8, 00, 00, 00, 4C, 0F, 45, C1, 4C, 89, 44, 24, 40, 89, 44, 24, 38, 8B, 44, 24, 50, 89, 44, 24, 30, 48, 8D, 05, AB, 6F, 00, 00, BD, 00, 01, 00, 00, 48, 89, 44, 24, 28, 48...
 
[+]

Code size:
49.1 KB (50,304 bytes)

Driver
Display name:
F-Secure HIPS Driver

Service name:
F-Secure HIPS

Type:
Kernel device driver (KernelDriver)


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.