home

FSStarter.exe

FSStarter

Fileserve Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FileServe Manager Task’.
Publisher:
FileServe Limited  (signed by Fileserve Ltd)

Product:
FSStarter

Version:
1, 0, 0, 3024

MD5:
23122c782d76ad3a3347ba0e8a7cabd2

SHA-1:
92ff4694dcf875ea8979643deaa396cdf0c5aef3

SHA-256:
2c07f42c96546b0e9d346d6623de3bd621c7d0c6e0a9d0b774aaca1680aa5c37

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:33:18 AM UTC  (today)

File size:
932.3 KB (954,648 bytes)

Product version:
1, 0, 0, 3024

Copyright:
Copyright (C) 2010 FileServe Limited

Original file name:
FSStarter.exe

File type:
Executable application (Win32 EXE)

Language:
Chino (traditional, Hong Kong RAE)

Common path:
C:\Program Files\fileserve manager\fsstarter.exe

Digital Signature
Signed by:
Fileserve Ltd

Authority:
The USERTRUST Network

Valid from:
2/24/2011 1:00:00 AM

Valid to:
2/24/2013 12:59:59 AM

Subject:
CN=Fileserve Ltd, O=Fileserve Ltd, STREET=R M 607yen shing center, STREET=64 Hoi Yuen RD, L=Kwun Tong, S=Kln, PostalCode=N/A, C=HK

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00A36C9E85FB5DEC76C9EAFA67524B4694

File PE Metadata
Compilation timestamp:
5/25/2011 2:48:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:0TXfwgqcvmHP7CNDF6UY8yrBvtANix0/mHDHHwou69z:qXfwgqcvmHP7CNDkUY8WBvtX2nouMz

Entry address:
0x48740

Entry point:
E8, F2, 5A, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, A6, 18, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, A4, 07, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 3E, 5B, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, AD, 18, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8, 57, 18, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, AD, 6A, 16...
 
[+]

Code size:
716 KB (733,184 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
FileServe Manager Task

Command:
"C:\Program Files\fileserve manager\fsstarter.exe"


Scan FSStarter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.