home

flashplayer_updater

Fixsoft USA

The file flashplayer_updater, “This installer database contains the logic and data required to install Speed Up Kit.” by Fixsoft USA has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from track.speedupkit.com and multiple other hosts.
Publisher:
Speed Up Kit  (signed by Fixsoft USA)

Product:
Speed Up Kit

Description:
This installer database contains the logic and data required to install Speed Up Kit.

Version:
2.9.6

MD5:
3a17cb408fcc1f70fe7d024dda2fb438

SHA-1:
73b1733478953fe3291aa8bb7ef5582f4245d194

SHA-256:
13fac9cc62f0a34a849a42c703a73c2f0f8fc5ab95219c94e1db93e094702a3a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/24/2024 4:44:40 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.FixSoft.RegClean.Optional.Installer.Meta (L)
16.1.6.17

File size:
6.1 MB (6,399,728 bytes)

Product version:
2.9.6

Copyright:
Copyright (C) 2015 Speed Up Kit

Original file name:
SpeedUpKitSetup.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\flashplayer_updater

Digital Signature
Signed by:
Fixsoft USA

Authority:
DigiCert Inc

Valid from:
6/11/2015 8:00:00 PM

Valid to:
8/15/2016 8:00:00 AM

Subject:
CN=Fixsoft USA, O=Fixsoft USA, L=Boynton Beach, S=Florida, C=US

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0BF00338790DB8882CFDEB4F2F25ABA1

File PE Metadata
Compilation timestamp:
9/15/2015 4:37:26 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:D4Af6Gebrvm2dU28qbfQ4T5UrAFGAlok97/8V21MzEni50GjATg7xHbZZJqssyHF:n/2qDqbf51UTAld7/8AQlhqsDegwttk

Entry address:
0xC684C

Entry point:
E8, 59, C8, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, F0, 33, DB, 3B, F3, 75, 1E, E8, 7D, 48, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, C5, D5, FF, FF, 83, C4, 14, 8B, C6, E9, C2, 00, 00, 00, 57, 39, 5D, 0C, 77, 1E, E8, 59, 48, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, A1, D5, FF, FF, 83, C4, 14, 8B, C6, E9, 9D, 00, 00, 00, 33, C0, 39, 5D, 14, 66, 89, 06, 0F, 95, C0, 40, 39, 45, 0C, 77, 09, E8, 2A, 48, 00, 00, 6A, 22, EB, CF, 8B, 45, 10, 83, C0, FE, 83, F8, 22, 77...
 
[+]

Entropy:
7.7829  (probably packed)

Code size:
1010 KB (1,034,240 bytes)

The file flashplayer_updater has been seen being distributed by the following 2 URLs.

http://track.speedupkit.com/click

http://cdn.speedupkit.com/FlashPlayer_Updater.exe

Remove flashplayer_updater - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.