Should I block it?

No, this file is 100% safe to run.

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
CloseServiceHandle, RegCloseKey, RegSetValueExA, RegCreateKeyExA, CreateServiceA, OpenSCManagerA, QueryServiceStatus, StartServiceA, OpenServiceA, ControlService, SetServiceStatus, RegQueryValueExA, RegOpenKeyExA, RegisterServiceCtrlHandlerExA, StartServiceCtrlDispatcherA, DeleteService
kernel32.dll
HeapAlloc, GetProcessHeap, HeapFree, FormatMessageA, CloseHandle, InterlockedExchange, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, LeaveCriticalSection, InterlockedDecrement, InterlockedIncrement, EnterCriticalSection, TerminateThread, WaitForSingleObject, Sleep, GetThreadPriority, SetThreadPriority, GetCurrentThread, ExitProcess, CreateThread, DuplicateHandle, GetCurrentProcess, SetEvent, ResetEvent, ReleaseSemaphore, SetWaitableTimer, CancelWaitableTimer, InterlockedExchangeAdd, CreateEventA, CreateSemaphoreA, CreateWaitableTimerA, GetCurrentThreadId, GetLastError, WaitForMultipleObjects, WaitForSingleObjectEx, FreeLibrary, GetCurrentProcessId, CreateFileA, GetLocalTime, GetProcAddress, LoadLibraryA, GetModuleFileNameA, QueryPerformanceFrequency, QueryPerformanceCounter, DeviceIoControl, FindVolumeClose, FindNextVolumeA, FindFirstVolumeA, GetSystemInfo, FlushFileBuffers, GetStdHandle, GetModuleHandleA, GetVersionExA, SetUnhandledExceptionFilter, CreateProcessA, CreateMutexA, SetConsoleCtrlHandler, SetCurrentDirectoryA, SleepEx, GetTickCount, SetEndOfFile, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, VirtualQuery, VirtualProtect, GetConsoleMode, GetConsoleCP, SetStdHandle, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, VirtualAlloc, LCMapStringW, LCMapStringA, GetModuleHandleW, InitializeCriticalSection, HeapSize, HeapReAlloc, SetFilePointer, ReadFile, SystemTimeToFileTime, CreateDirectoryA, UnhandledExceptionFilter, TerminateProcess, OutputDebugStringA, GetOEMCP, GetACP, GetCPInfo, GetSystemTimeAsFileTime, VirtualFree, HeapCreate, HeapDestroy, SetLastError, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, MultiByteToWideChar, lstrlenA, WideCharToMultiByte, LocalFree, GetCommandLineA, RaiseException, RtlUnwind, WriteFile, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, GetStartupInfoA
ole32.dll
CoUninitialize, CoCreateInstance, CoInitializeEx
user32.dll
GetSystemMetrics, UnregisterDeviceNotification, RegisterDeviceNotificationA, BroadcastSystemMessageA
ws2_32.dll
WSASend, WSAIoctl, WSARecv

starwindserviceae.exe

StarWind Alcohol Edition by StarWind Software

Remove starwindserviceae.exe
Version:   12.1 Build 20091211
MD5:   e5c796b621f6fba8616511063d7f0ffe
SHA1:   7bbcbfb3eff3271098837485571aa57b22327d2e
SHA256:   447fa64f552d4b04ad029e01485b4438a70d9b9b98eb49a883d5b17ed4c1d52f

Overview

starwindserviceae.exe runs as a service under the name StarWindServiceAE (StarWindServiceAE) with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked.

DetailsDetails

File name:starwindserviceae.exe
Publisher:StarWind Software
Product name:StarWind Alcohol Edition
Description:StarWind iSCSI Target (Alcohol Edition)
Typical file path:C:\Program Files\alcohol soft\alcohol 52\starwind\starwindserviceae.exe
Original name:StarWind
File version:12.1 Build 20091211
Size:362 KB (370,688 bytes)
Digital DNA
PE subsystem:Windows Console
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • StarWindServiceAE
  • 'StarWindServiceAE' (StarWind AE Service)
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00035379%
0.028634%
Kernel CPU:0.00024172%
0.013761%
User CPU:0.00011207%
0.014873%
Kernel CPU time:582,217 ms/min
100,923,805ms/min
CPU cycles:137,834/sec
17,470,203/sec
Context switches:2/sec
284/sec
Memory
Private memory:2.4 MB
21.59 MB
Private (maximum):5.07 MB
Private (minimum):3.53 MB
Non-paged memory:2.4 MB
21.59 MB
Virtual memory:35.98 MB
140.96 MB
Virtual memory (peak):37.19 MB
169.69 MB
Working set:3.58 MB
18.61 MB
Working set (peak):5.42 MB
37.95 MB
Page faults:1,628/min
2,039/min
I/O
I/O read transfer:75 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:2 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:2.65 KB/sec
448.09 KB/min
I/O other operations:168/sec
1,671/min
Resource allocations
Threads:5
12
Handles:122
600
GUI GDI count:4
103
GUI USER count:2
49

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command lines:
  • "C:\Program Files\alcohol soft\alcohol 120\starwind\starwindserviceae.exe"
  • "C:\Program Files\alcohol soft\alcohol 52\starwind\starwindserviceae.exe"
Owner:SYSTEM
Windows Service
Service name:StarWindServiceAE
Display name:StarWindServiceAE
Description:“Enables network access to local burners via iSCSI protocol.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
advapi32.dll (Advanced Windows 32 Base API by Microsoft)
Total CPU:0.00128951%
0.272967%
Kernel CPU:0.00107459%
0.107585%
User CPU:0.00021492%
0.165382%
Context switches:2/sec
79/sec
Memory:620 KB
1.16 MB
sechost.dll
Total CPU:0.00049109%
Kernel CPU:0.00034376%
User CPU:0.00014733%
CPU cycles:130,730/sec
Memory:100 KB
StarWindServiceAE.exe (main module)
Total CPU:0.00013388%
Kernel CPU:0.00010509%
User CPU:0.00002878%
CPU cycles:30,682/sec
Memory:388 KB
wow64.dll
Total CPU:0.00008044%
Kernel CPU:0.00008044%
User CPU:0.00000000%
CPU cycles:154,197/sec
Context switches:2/sec
Memory:252 KB
wow64cpu.dll
Total CPU:0.00001166%
Kernel CPU:0.00001166%
User CPU:0.00000000%
CPU cycles:241,872/sec
Context switches:3/sec
Memory:32 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 34.69%
Windows 7 Home Premium 18.37%
Microsoft Windows XP 14.29%
Windows 7 Home Basic 8.16%
Windows 8 Pro with Media Center 6.12%
Windows Se7en Titan 4.08%
Windows 8 Enterprise 4.08%
Windows Vista Business 4.08%
Windows 8 4.08%
Windows 7 Professional 2.04%

Distribution by countryDistribution by country

United States installs about 18.37% of StarWind Alcohol Edition.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 26.67%
Hewlett-Packard 22.22%
Acer 17.78%
American Megatrends 11.11%
ASUS 8.89%
Toshiba 8.89%
Sahara 4.44%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE