home

FRTask.EXE

FastRestore

Chongqing XIA Software Technology, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FRTask’.
Publisher:
XIASOFT TECH CO.,LTD.  (signed by Chongqing XIA Software Technology, Inc.)

Product:
FastRestore

Description:
FastRestore Task Moudle

Version:
3, 2, 0, 0

MD5:
cda6e49bc2a707cc7481dc2d9aa1d2de

SHA-1:
a1666a1da7e2d93ee056c1038cd997e29a75df5a

SHA-256:
5e9cf2691b42b4e049903ff65bc5c801f86d80f5edcff6639671854756b1284e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 2:36:39 AM UTC  (today)

File size:
108.9 KB (111,552 bytes)

Product version:
3, 2, 0, 30

Copyright:
Copyright XIASOFT TECH CO.,LTD. All Rights Reserved.

Original file name:
FRTask.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\xia soft\fastrestore\frtask.exe

Digital Signature
Signed by:
Chongqing XIA Software Technology, Inc.

Authority:
VeriSign, Inc.

Valid from:
9/10/2013 2:00:00 AM

Valid to:
9/7/2014 1:59:59 AM

Subject:
CN="Chongqing XIA Software Technology, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Chongqing XIA Software Technology, Inc.", L=ChongQing, S="Yubei District, ChongQing", C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
15460F15A5EB1B967F68E0513800E16C

File PE Metadata
Compilation timestamp:
1/2/2014 5:21:18 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:/Cix0g8u5OFQBiBeygBIx4x7IUa19+319+OSeQaAR8apxt+:/CNgP5O4iBeyg6qx7IU29+F9+OwR8aA

Entry address:
0xAE12

Entry point:
55, 8B, EC, 6A, FF, 68, 80, CC, 40, 00, 68, 38, B1, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, 5F, 57, FF, 15, 40, C3, 40, 00, 59, 83, 0D, D8, 0B, 41, 00, FF, 83, 0D, DC, 0B, 41, 00, FF, FF, 15, 44, C3, 40, 00, 8B, 0D, CC, 0B, 41, 00, 89, 08, FF, 15, A4, C3, 40, 00, 8B, 0D, C8, 0B, 41, 00, 89, 08, A1, A0, C3, 40, 00, 8B, 00, A3, D4, 0B, 41, 00, E8, B4, 02, 00, 00, 39, 1D, 18, 03, 41, 00, 75, 0C, 68, 34, B1, 40, 00, FF, 15...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
44 KB (45,056 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
FRTask

Command:
C:\Program Files\xia soft\fastrestore\frtask.exe


The file FRTask.EXE has been discovered within the following program.

FastRestore  by XIA Software Technology, Inc.
Publisher's description - “FastRestore is a Windows based application that is able to restore protected area like OS or partition to its original configurations each time it restarts. You may roll back your configuration at each rebooting or manual rebooting.”
sysnew.com/fastrestore/support.html
56% remove it
 
Powered by Should I Remove It?

Scan FRTask.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.