home

F8detect.exe

NetUPDATE F8detect

FORUM8 Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Internet Speed Tracker Search Scope Monitor’.
Publisher:
FORUM 8 Co., Ltd.  (signed by FORUM8 Co., Ltd.)

Product:
NetUPDATE F8detect

Version:
5.0.0.0

MD5:
3e890e4b4204ee482f779aeb4b7c6c14

SHA-1:
49cbb27ae1fb28cb5f1ab0b42cafdefd6d57e550

SHA-256:
c6f183d1de034fec6735872ec22657866daf5484c9b6dec76b36925fda70a13c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 8:44:04 AM UTC  (today)

File size:
2.3 MB (2,449,952 bytes)

Product version:
5.0.0

Copyright:
Copyright (C) 2009-2015 FORUM 8 Co., Ltd.

Original file name:
F8detect.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\forum 8\netupdatewan\f8detect.exe

Digital Signature
Signed by:
FORUM8 Co., Ltd.

Authority:
Thawte, Inc.

Valid from:
3/10/2014 9:00:00 AM

Valid to:
5/9/2016 8:59:59 AM

Subject:
CN="FORUM8 Co., Ltd.", O="FORUM8 Co., Ltd.", L=Tokyo, S=Tokyo, C=JP

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
29584CAC094D54A9E27853293927CA18

File PE Metadata
Compilation timestamp:
12/11/2015 10:57:45 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:BaUQtzNSr/YyNxxvrXzOZaFhLURckDRTQEhX+yQFFk:BDND3CazJKKE5QFFk

Entry address:
0x1F1ACC

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 80, 72, 5E, 00, E8, 5B, 96, E1, FF, 68, 64, 1B, 5F, 00, 6A, 00, 6A, 00, E8, 95, A9, E1, FF, 8B, D8, E8, DE, AA, E1, FF, 3D, B7, 00, 00, 00, 75, 12, 6A, 10, 6A, 00, 68, 84, 1B, 5F, 00, 6A, 00, E8, 1B, B5, E1, FF, EB, 4C, A1, 20, 33, 61, 00, 8B, 00, E8, 51, A6, F1, FF, A1, 20, 33, 61, 00, 8B, 00, BA, C0, 1B, 5F, 00, E8, 78, A0, F1, FF, 8B, 0D, 24, 2E, 61, 00, A1, 20, 33, 61, 00, 8B, 00, 8B, 15, A0, CF, 5D, 00, E8, 40, A6, F1, FF, A1, 20, 33, 61, 00, 8B, 00, C6, 40, 5B, 00, A1...
 
[+]

Entropy:
6.5256

Developed / compiled with:
Microsoft Visual C++

Code size:
1.9 MB (2,031,104 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Internet Speed Tracker Search Scope Monitor

Command:
"C:\Program Files2\intern~3\bar\2.bin\9tsrchmn.exe" \m=2 \w \h


Scan F8detect.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.