» setup.exe
Overview
Analysis
File Details
Programs (1)

setup.exe

FastRestore

Chongqing XIA Software Technology, Inc.

This is a setup and installation application.

File name:

setup.exe

Publisher:

XIASOFT TECH CO.,LTD. (signed by Chongqing XIA Software Technology, Inc.)

Product:

FastRestore

Description:

FastRestore Installation

Version:

3,1,0,30

MD5:

006e3f8167c4a1f63553917e52a4144d

SHA-1:

4b823205951d498af1d97fef587c851c37c3366d

SHA-256:

2d31a633a4744254b8073d87728afd8bf12337e92183f71983beb861e964687c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 6:32:09 PM UTC (today)

File size:

288.9 KB (295,880 bytes)

Product version:

3,1,0,30

Original file name:

Install.EXE

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\setup.exe

Digital Signature

Signed by:

Chongqing XIA Software Technology, Inc.

Authority:

VeriSign, Inc.

Valid from:

9/10/2013 2:00:00 AM

Valid to:

9/7/2014 1:59:59 AM

Subject:

CN="Chongqing XIA Software Technology, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Chongqing XIA Software Technology, Inc.", L=ChongQing, S="Yubei District, ChongQing", C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

15460F15A5EB1B967F68E0513800E16C

File PE Metadata

Compilation timestamp:

12/18/2013 1:37:51 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

3072:eGG3SLuG51Yic5fbzKrXHNe6JXJM/kyugn1Tq:bG33bzKZe6JXJM/kyugn1u

Entry address:

0xA14C

Entry point:

55, 8B, EC, 6A, FF, 68, 90, C8, 40, 00, 68, 26, A4, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, 5F, 57, FF, 15, DC, B3, 40, 00, 59, 83, 0D, B0, 18, 41, 00, FF, 83, 0D, B4, 18, 41, 00, FF, FF, 15, E0, B3, 40, 00, 8B, 0D, A4, 18, 41, 00, 89, 08, FF, 15, E4, B3, 40, 00, 8B, 0D, A0, 18, 41, 00, 89, 08, A1, E8, B3, 40, 00, 8B, 00, A3, AC, 18, 41, 00, E8, 68, 02, 00, 00, 39, 1D, 60, 0B, 41, 00, 75, 0C, 68, 22, A4, 40, 00, FF, 15... 
[+]

Developed / compiled with:

Microsoft Visual C++ v6.0

Code size:

40 KB (40,960 bytes)

The file setup.exe has been discovered within the following program.

FastRestore by XIA Software Technology, Inc.

Publisher's description - “FastRestore is a Windows based application that is able to restore protected area like OS or partition to its original configurations each time it restarts. You may roll back your configuration at each rebooting or manual rebooting.”

sysnew.com/fastrestore/support.html

56% remove it

Scan setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.