7b4fb697-22b2-4e21-8b84-8a8215f10572-6.exe

Internet Speed Checker

Selecao Technologies (Bright Circle Investments Ltd)

This adware is a web browser extension that will inject advertising in the browser in the form of unwanted banners and text-links which may link to malware sites and install unwanted software. The application 7b4fb697-22b2-4e21-8b84-8a8215f10572-6.exe, “Internet Speed Checker exe” by Selecao Technologies (Bright Circle Investments) has been detected as adware by 21 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This file is typically installed with the program Internet Speed Checker by Sailor Project which is a potentially unwanted software program. It is built using the Crossrider cross-browser extension platform. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider. It is distributed as part of the Brightcircle group of browser-extensions.
Publisher:
Speedchecker  (signed by Selecao Technologies (Bright Circle Investments Ltd))

Product:
Internet Speed Checker

Description:
Internet Speed Checker exe

Version:
1000.1000.1000.1000

MD5:
5b3bde0465a9bb788fe7d955ecbdfcc9

SHA-1:
909e3f6bf6e5c0f27ad97b2a5906f1d9d0f8ba86

SHA-256:
9e65c8bde04a82d7978aa849568c15fa6ee87b2a0020d3ab052e9dfeb1028c59

Scanner detections:
21 / 68

Status:
Adware

Explanation:
The software may change the browser's home page and search provider settings as well as display advertisements. Distributed through the Brightcircle investments brand.

Analysis date:
5/8/2024 6:11:04 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Application.Heur.mz1@munzGLni
742

AhnLab V3 Security
PUP/Win32.CrossRider
2015.01.25

Avira AntiVirus
ADWARE/CrossRider.Gen4
7.11.204.224

AVG
Generic
2016.0.3220

Baidu Antivirus
PUA.Win32.CrossRider
4.0.3.15124

Bitdefender
Gen:Application.Heur.mz1@munzGLni
1.0.20.120

ESET NOD32
Win32/Toolbar.CrossRider.BM (variant)
9.11066

Fortinet FortiGate
Riskware/CrossRider
1/30/2015

F-Secure
Gen:Application.Heur.mz1@munzGLni
11.2015-24-01_7

G Data
Gen:Application.Heur.mz1@munzGLni
15.1.24

K7 AntiVirus
Trojan
13.193.14783

Kaspersky
not-a-virus:WebToolbar.Win32.CrossRider
14.0.0.2593

Malwarebytes
PUP.Optional.InternetSpeedChecker.A
v2015.01.24.09

McAfee
Artemis!EBE771CABB59
5600.6869

MicroWorld eScan
Gen:Application.Heur.mz1@munzGLni
16.0.0.72

NANO AntiVirus
Riskware.Win32.CrossRider.dmxcon
0.30.0.65070

Panda Antivirus
Trj/Genetic.gen
15.01.24.09

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen
1.0.0.1015

Reason Heuristics
Adware.Crossrider.Task.Brightcircle
15.1.26.11

Sophos
Generic PUA DK
4.98

VIPRE Antivirus
Crossrider
36934

File size:
1.2 MB (1,248,232 bytes)

Product version:
1000.1000.1000.1000

Copyright:
Copyright 2016

Original file name:
Internet Speed Checker.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\internet speed checker\7b4fb697-22b2-4e21-8b84-8a8215f10572-6.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
12/16/2014 2:00:00 AM

Valid to:
12/17/2015 1:59:59 AM

Subject:
CN=Selecao Technologies (Bright Circle Investments Ltd), O=Selecao Technologies (Bright Circle Investments Ltd), STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Nicosia, PostalCode=2025, C=CY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
3F2791037D410A199539AA4A99F7DEB3

File PE Metadata
Compilation timestamp:
1/24/2015 1:06:47 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:vIJVFnTx1+Eerlxny6pW4sUQT/pSVYYQ0bRuL1e:vIJtveh1yaQT/pSVYV0bRuL1e

Entry address:
0x951E8

Entry point:
E8, 99, 01, 01, 00, E9, 00, 00, 00, 00, 6A, 14, 68, E0, A3, 4F, 00, E8, F2, 76, 00, 00, E8, C6, 53, 00, 00, 0F, B7, F0, 6A, 02, E8, 2C, 01, 01, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 3E, 8E, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.4177

Code size:
770 KB (788,480 bytes)

Scheduled Task
Task name:
7b4fb697-22b2-4e21-8b84-8a8215f10572-6

Trigger:
Logon (Runs on logon)


The file 7b4fb697-22b2-4e21-8b84-8a8215f10572-6.exe has been discovered within the following program.

Internet Speed Checker  by Sailor Project
Internet Speed Checker is an adware web browser application that displays banner ads as well as contextual link ads that are injected in the web page.
62% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to tlb.hwcdn.net  (69.16.175.42:80)

TCP (HTTP):
Connects to s3-website-us-east-1.amazonaws.com  (54.231.1.164:80)

Remove 7b4fb697-22b2-4e21-8b84-8a8215f10572-6.exe - Powered by Reason Core Security