home

WINSETTINGS.EXE

WinSettings

FileStream, Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘WinSettings’. This is installed with WinSettings.
Publisher:
FileStream, Inc  (signed by FileStream, Inc.)

Product:
WinSettings

Description:
WinSettings Version 8.1

Version:
8.1

MD5:
33b831012873a06a46fb19f38e29b9a2

SHA-1:
a39ad207d0376b8f0bc7c642c67ae8846625dbd1

SHA-256:
f98806532cb96c59bc4995e9b85adc38611ccf876db30cbc8717e7039b3c607a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:24:18 PM UTC  (today)

File size:
2.2 MB (2,295,424 bytes)

Product version:
8.1

Copyright:
Copyright (c) 1997-2012 FileStream, Inc.

Trademarks:
WinSettings

Original file name:
WINSETTINGS.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\winsettings\winsettings.exe

Digital Signature
Signed by:
FileStream, Inc.

Authority:
GlobalSign nv-sa

Valid from:
2/8/2012 10:34:54 AM

Valid to:
2/8/2013 10:34:54 AM

Subject:
E=info@filestream.com, CN="FileStream, Inc.", O="FileStream, Inc.", L=Locust Valley, S=NY, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11215C8BACB8883BA37D8711ED9F327892F7

File PE Metadata
Compilation timestamp:
12/13/2006 11:26:26 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:Xx3W0XHoFAsOMr3E/Qls/BDukzrN/Wra7gE54qLF:XlW0uAsF3E/Ql6vNwKB

Entry address:
0xF8DBA

Entry point:
55, 8B, EC, 6A, FF, 68, 10, DC, 57, 00, 68, F0, 5D, 4F, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, F8, 42, 55, 00, 33, D2, 8A, D4, 89, 15, 68, 16, 60, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 64, 16, 60, 00, C1, E1, 08, 03, CA, 89, 0D, 60, 16, 60, 00, C1, E8, 10, A3, 5C, 16, 60, 00, 6A, 01, E8, FC, 21, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 52, 46, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
1.3 MB (1,388,544 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WinSettings

Command:
C:\Program Files\winsettings\winsettings.exe \load


The file WINSETTINGS.EXE has been discovered within the following program.

WinSettings  by FileStream, Inc.
Publisher's description - “A lot of time is being spent on the computers and surfing on the Internet everyday. In your daily computing, your computer should cater to your every need from start to finish. More importantly, you should feel absolutely comfortable, safe, and secure on your own Desktop.”
www.filestream.com/winsettings
About 1% of users remove it
 
Powered by Should I Remove It?

Scan WINSETTINGS.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.