home

WINSETTINGS.EXE

WinSettings

FileStream, Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘WinSettings’. This is installed with WinSettings.
Publisher:
FileStream, Inc.  (signed and verified)

Product:
WinSettings

Description:
WinSettings Version 8.1

Version:
8.1

MD5:
05b0d101facbce5f3f03c1a2cc32b914

SHA-1:
63ce8e2b91944e37ad7c1e7decfd287de1b5716f

SHA-256:
09af6ecacd5fa57758786c2c63596d74f57308cad6e7ac00ead50c3b1ba76a65

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:21:13 PM UTC  (today)

File size:
1.9 MB (1,943,248 bytes)

Product version:
8.1

Copyright:
Copyright (c) 1997-2014 FileStream, Inc.

Trademarks:
WinSettings

Original file name:
WINSETTINGS.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\winsettings\winsettings.exe

Digital Signature
Signed by:
FileStream, Inc.

Authority:
GlobalSign nv-sa

Valid from:
2/8/2013 3:25:41 PM

Valid to:
3/10/2016 3:25:41 PM

Subject:
E=info@filestream.com, CN="FileStream, Inc.", O="FileStream, Inc.", C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121EE10B84D3E9BD91374AB1DB3ED7B0AC5

File PE Metadata
Compilation timestamp:
4/3/2008 1:03:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:fcrwg/gAMIokGdwb1P6K25qIHUlyCSi0LEOkUISwIupGRtUF5GFfhQvBAgbMAjE:eGkI5Ti0LHkUIpRtF+fhQ9MD

Entry address:
0xADD54

Entry point:
55, 8B, EC, 6A, FF, 68, 30, 19, 53, 00, 68, 90, B4, 4A, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, F4, 82, 50, 00, 33, D2, 8A, D4, 89, 15, 78, A6, 5A, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 74, A6, 5A, 00, C1, E1, 08, 03, CA, 89, 0D, 70, A6, 5A, 00, C1, E8, 10, A3, 6C, A6, 5A, 00, 6A, 01, E8, B2, 29, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, F8, 4D, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
1 MB (1,077,248 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WinSettings

Command:
C:\Program Files\winsettings\winsettings.exe \load


The file WINSETTINGS.EXE has been discovered within the following program.

WinSettings  by FileStream, Inc.
Publisher's description - “A lot of time is being spent on the computers and surfing on the Internet everyday. In your daily computing, your computer should cater to your every need from start to finish. More importantly, you should feel absolutely comfortable, safe, and secure on your own Desktop.”
www.filestream.com/winsettings
About 1% of users remove it
 
Powered by Should I Remove It?

Scan WINSETTINGS.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.