home

FSRTU.EXE

Fortres Security Runtime

Fortres Grand Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FSRT’.
Publisher:
Fortres Grand Corporation  (signed and verified)

Product:
Fortres Security Runtime

Description:
Fortres Security Runtime User Component

Version:
7.0.1410.4

MD5:
022af5f2989e4e8e718a00a406df5fc8

SHA-1:
eeea8fdc1fea4177e57a6b2f06de03d2e1e9e7ee

SHA-256:
36a91295c1585fc9f00f896fae7c5078eb165fbf52e4aee937218a0f74239b32

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:24:44 PM UTC  (today)

File size:
208.3 KB (213,280 bytes)

Product version:
7.0.1410.4

Copyright:
Copyright © 2000-2015 Fortres Grand Corporation

Original file name:
FSRTU.EXE

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\fortres grand\fortres security runtime 6.0\fsrtu.exe

Digital Signature
Signed by:
Fortres Grand Corporation

Authority:
GlobalSign nv-sa

Valid from:
3/19/2013 6:04:30 PM

Valid to:
3/19/2016 6:04:30 PM

Subject:
E=trust@fortresgrand.com, CN=Fortres Grand Corporation, O=Fortres Grand Corporation, L=Plymouth, S=IN, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B11AB04C88D9CA4ABCC9E92D1D4FFEF1

File PE Metadata
Compilation timestamp:
10/8/2015 4:15:40 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
3072:aJKFppuy/6sI4KggneX6X1hKdToEGp8PVZMpm+wy5VLCoxwEiFI9n:2MujsImD6X1hoTCp8PVKUa5Z0I

Entry address:
0x106D8

Entry point:
48, 83, EC, 28, E8, 47, 78, 00, 00, 48, 83, C4, 28, E9, 02, 00, 00, 00, CC, CC, 48, 89, 5C, 24, 10, 48, 89, 74, 24, 18, 57, 48, 83, EC, 30, E8, 28, 63, 00, 00, 0F, B7, F0, B9, 02, 00, 00, 00, E8, D3, 77, 00, 00, B8, 4D, 5A, 00, 00, 48, 8D, 3D, E7, F8, FE, FF, 66, 39, 05, E0, F8, FE, FF, 74, 04, 33, DB, EB, 31, 48, 63, 05, 0F, F9, FE, FF, 48, 03, C7, 81, 38, 50, 45, 00, 00, 75, EA, B9, 0B, 02, 00, 00, 66, 39, 48, 18, 75, DF, 33, DB, 83, B8, 84, 00, 00, 00, 0E, 76, 09, 39, 98, F8, 00, 00, 00, 0F, 95, C3, 89...
 
[+]

Code size:
120.5 KB (123,392 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
FSRT

Command:
C:\Program Files\fortres grand\fortres security runtime 6.0\fsrtu.exe


Scan FSRTU.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.