Should I block it?

No, this file is 100% safe to run.

Additional versions

9.8.4.4	23.08%
9.4.9.9	7.69%
9.4.8.8	7.69%
9.4.6.4	7.69%
9.4.3.4	7.69%
9.3.9.9	7.69%
9.3.4.5	7.69%
9.3.3.5	7.69%
9.1.7.7	7.69%
9.1.6.8	7.69%
9.1.5.7	7.69%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW, GetNamedSecurityInfoW, OpenProcessToken, GetTokenInformation, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, QueryServiceStatus, EncryptFileW, DecryptFileW, SetNamedSecurityInfoW, ControlService, QueryServiceStatusEx, StartServiceW, DeleteService, CreateServiceW, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegisterServiceCtrlHandlerW, SetServiceStatus, StartServiceCtrlDispatcherW, RegEnumKeyExW, LogonUserW, DuplicateTokenEx, ImpersonateLoggedOnUser, OpenThreadToken, LookupPrivilegeValueW, RegEnumKeyA, RegDeleteKeyA, RegQueryValueExA, RegOpenKeyA, RegSetValueExA, AdjustTokenPrivileges, RegCreateKeyA, RegisterEventSourceA, ReportEventA, DeregisterEventSource, RegOpenKeyExA, RegQueryValueA, GetSidSubAuthorityCount, GetSidSubAuthority, RegQueryInfoKeyW, SetFileSecurityW, ConvertSecurityDescriptorToStringSecurityDescriptorW, LookupAccountNameW, MakeSelfRelativeSD, GetSecurityDescriptorControl, GetSecurityDescriptorLength, IsValidSid, CryptCreateHash, CryptDecrypt, CryptEncrypt, CryptHashData, CryptAcquireContextW, CryptReleaseContext, CryptDeriveKey, CryptDestroyKey, CryptDestroyHash, CopySid, GetLengthSid, ConvertSidToStringSidW, GetUserNameW, RegDeleteKeyW, RegSetValueExW, RegCreateKeyExW

comctl32.dll

_TrackMouseEvent

crypt32.dll

CryptProtectData, CryptUnprotectData, CertEnumCertificatesInStore, CertOpenSystemStoreW, CertCloseStore, CertFindCertificateInStore, CertNameToStrW

gdi32.dll

DeleteObject, SelectObject, GetObjectW, SetBkMode, SetTextColor, DeleteDC, CreateFontIndirectW, GetStockObject, CreateCompatibleDC, GetTextExtentPoint32W, GetTextMetricsW, GetDeviceCaps

iphlpapi.dll

GetBestInterface, GetAdaptersInfo, GetIpNetTable

kernel32.dll

DllMain

mpr.dll

WNetGetLastErrorW, WNetOpenEnumW, WNetEnumResourceW, WNetGetConnectionW, WNetAddConnection2W, WNetCancelConnection2W, WNetCloseEnum

netapi32.dll

NetShareEnum, NetApiBufferFree, Netbios

ole32.dll

CoTaskMemAlloc, OleInitialize, OleUninitialize, CLSIDFromString, CoTaskMemFree, CoCreateGuid, CoInitializeEx, CoUninitialize, StringFromGUID2, CoGetObject, CoCreateInstance

shell32.dll

SHGetFolderPathW, SHIsFileAvailableOffline, SHGetDesktopFolder, SHGetFolderLocation, ShellExecuteExW, SHGetDiskFreeSpaceExW, ShellExecuteW

shlwapi.dll

StrRetToStrW, StrCmpW, StrStrW, StrCmpIW, StrCmpNW, StrFormatByteSizeW, StrToIntW

user32.dll

GetSystemMetrics, GetWindowRect, OffsetRect, MessageBoxW, GetUserObjectInformationW, GetProcessWindowStation, SetDlgItemTextW, SetWindowLongW, GetWindowLongW, SetTimer, KillTimer, GetForegroundWindow, UnregisterClassA, MessageBoxA, GetDesktopWindow, GetParent, GetDlgItem, SendMessageW, IsWindow, GetCapture, ReleaseCapture, SetWindowPos, MapWindowPoints, GetClientRect, SystemParametersInfoW, GetWindow, InflateRect, EndDialog, DestroyIcon, LoadIconW, SetFocus, LoadImageW, DialogBoxIndirectParamW, SetWindowTextW, DestroyWindow, DefWindowProcW, SetRectEmpty, GetWindowTextW, GetWindowTextLengthW, ScreenToClient, UpdateWindow, InvalidateRect, IsWindowEnabled, SetCapture, GetDlgCtrlID, CallWindowProcW, PtInRect, DrawTextW, FillRect, DrawFocusRect, CreateWindowExW, SetCursor, GetCursorPos, CharNextW, BeginPaint, EndPaint, GetDC, ReleaseDC, GetFocus, GetSysColor, LoadCursorW, GetClassNameW, CreateDialogIndirectParamW, CheckDlgButton, IsDlgButtonChecked, GetQueueStatus, GetClipboardOwner, FindWindowA, DispatchMessageA, PeekMessageA, IsWindowUnicode, MsgWaitForMultipleObjects, TranslateMessage, DispatchMessageW, PeekMessageW

userenv.dll

UnloadUserProfile

version.dll

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

wininet.dll

InternetCloseHandle, InternetGetLastResponseInfoW, HttpQueryInfoW, InternetReadFile, InternetWriteFile, InternetSetOptionW, InternetSetOptionExW, InternetConnectW, InternetOpenW, InternetGetCookieExW, HttpSendRequestW, HttpAddRequestHeadersW, HttpEndRequestW, HttpSendRequestExW, HttpOpenRequestW, InternetQueryOptionW, InternetGetCookieW

ws2_32.dll

getaddrinfo, freeaddrinfo

gs-server.exe

GoodSync Server by Siber Systems Inc (Signed)

Remove gs-server.exe

Version:	9.1.6.8
MD5:	54d1b51e8fb3012808f3152ef829f0f3
SHA1:	800b57a0c7f4d53cba715450006f1b0bbf2706b4
SHA256:	4cf1fca5e04e887f5755d335c8eefcaeb33ca479c995f996592a9307f60ffc22

Overview

gs-server.exe runs as a service under the name GsServer (GsServer) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program GoodSync published by Siber Systems. The file is digitally signed by Siber Systems Inc which was issued by the COMODO CA Limited certificate authority (CA).

Details

File name:	gs-server.exe
Product name:	GoodSync Server
Typical file path:	C:\Program Files\siber systems\goodsync\gs-server.exe
File version:	9.1.6.8
Size:	3.17 MB (3,324,592 bytes)
Certificate
Issued to:	Siber Systems Inc
Authority (CA):	COMODO CA Limited
Effective date:	Sunday, February 12, 2012
Expiration date:	Sunday, February 12, 2017
Digital DNA
PE subsystem:	Windows Console
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

GoodSync

Siber Systems

3% remove

GoodSync is a backup and file synchronization program. It is used for synchronizing files between two directories, either on one computer, or between a computer and another storage device (e.g. another computer, a removable disc, a flash drive or a smartphone) or between a computer and a remote computer or server. Goodsync allows the same version of files to be maintained on multiple computing devices. In other words, when two devices a...

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

GsServer
'GsServer' (GoodSync Server)

Network connections

[UDP] listens on port 33338

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00022103%	0.028634%
Kernel CPU:	0.00018268%	0.013761%
User CPU:	0.00003835%	0.014873%
Kernel CPU time:	2,948 ms/min	100,923,805ms/min
CPU cycles:	556,585/sec	17,470,203/sec
Memory
Private memory:	4.29 MB	21.59 MB
Private (maximum):	7.48 MB
Private (minimum):	6.92 MB
Non-paged memory:	4.29 MB	21.59 MB
Virtual memory:	60.49 MB	140.96 MB
Virtual memory (peak):	64.49 MB	169.69 MB
Working set:	6.94 MB	18.61 MB
Working set (peak):	7.49 MB	37.95 MB
Page faults:	111,131/min	2,039/min
I/O
I/O read transfer:	0 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	4.05 KB/sec	274.99 KB/min
I/O write operations:	46/sec	227/min
I/O other transfer:	1.71 KB/sec	448.09 KB/min
I/O other operations:	96/sec	1,671/min
Resource allocations
Threads:	11	12
Handles:	147	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	"C:\Program Files\siber systems\goodsync\gs-server.exe" /service
Owner:	SYSTEM
Windows Service
Service name:	GsServer
Display name:	GsServer
Description:	“Allow network discovery and access to this computer via GSTP protocol”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads