home

FSStarter.exe

FSStarter

Fileserve Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FileServe Manager Task’.
Publisher:
FileServe Limited  (signed by Fileserve Ltd)

Product:
FSStarter

Version:
1, 0, 0, 1893

MD5:
868b9f42439f5f331aee9f644de0629e

SHA-1:
ee8966b35255314f24243fe29e75594cbae0147d

SHA-256:
e81ba184a77b290cbe5b7c44504a26d4b158b58df73ca0d262c397b8fc28f2b1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 9:04:33 PM UTC  (today)

File size:
712.3 KB (729,368 bytes)

Product version:
1, 0, 0, 1893

Copyright:
Copyright (C) 2010 FileServe Limited

Original file name:
FSStarter.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\fileserve manager\fsstarter.exe

Digital Signature
Signed by:
Fileserve Ltd

Authority:
The USERTRUST Network

Valid from:
2/24/2011 3:00:00 AM

Valid to:
2/24/2013 2:59:59 AM

Subject:
CN=Fileserve Ltd, O=Fileserve Ltd, STREET=R M 607yen shing center, STREET=64 Hoi Yuen RD, L=Kwun Tong, S=Kln, PostalCode=N/A, C=HK

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00A36C9E85FB5DEC76C9EAFA67524B4694

File PE Metadata
Compilation timestamp:
1/10/2011 12:31:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:WBH2RJEbSBmPt7F0DqT0fL61KdjYexGIvVmdzjxfHnj1:WBH2jEbSBmPt7F0DL60dIIvVMZ5

Entry address:
0x27876

Entry point:
E8, EB, 4D, 00, 00, E9, 17, FE, FF, FF, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04, 2B, C1, C3, 8D, 41, FE, 8B, 4C, 24, 04, 2B, C1...
 
[+]

Entropy:
6.3384

Code size:
548 KB (561,152 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
FileServe Manager Task

Command:
"C:\Program Files\fileserve manager\fsstarter.exe"


Scan FSStarter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.