wifi protector addon-updater.exe

Wifi Protector Addon

Speedchecker

This is part of a Performersoft product, a 'PC optimzation' application that provides minimal benifits and may have been bundled by a third party installer. The application wifi protector addon-updater.exe, “Wifi Protector Addon exe” has been detected as adware by 4 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This file is typically installed with the program Wifi Protector Addon by Speedchecker Limited which is a potentially unwanted software program. It is built using the Crossrider browser extension toolkit; the Updater component is used to dynamically connects to the Crossrider API (update.srvstatsdata.com/.../{CAMP_ID}/update.json) and download additional code in order to automatically update Speedchecker extension/toolbar.
Publisher:
Speedchecker

Product:
Wifi Protector Addon

Description:
Wifi Protector Addon exe

Version:
1000.1000.1000.1000

MD5:
a2488f44c75816ad04260288f248adb2

SHA-1:
e50b7b0e51d3ba862b01bf147145087b174e9703

SHA-256:
be4f403be0891fdc632af62e0a3ce4eede8a7dd5a660b3c7f248284254024c52

Scanner detections:
4 / 68

Status:
Adware

Explanation:
Part of the Crossrider toolbar platform. This is the updater mechanism that runs in the background as a scheduled task.

Note:
Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application.

Analysis date:
5/2/2024 1:59:58 AM UTC  (today)

Scan engine
Detection
Engine version

Malwarebytes
PUP.Optional.1ClickMovieDownloader.A
v2014.01.26.08

Reason Heuristics
PUP.Crossrider.Task.Speedchecker.CC
14.2.21.15

VIPRE Antivirus
Crossrider
25462

File size:
346 KB (354,304 bytes)

Product version:
1000.1000.1000.1000

Copyright:
Copyright 2011

Original file name:
Wifi Protector Addon.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\wifi protector addon\wifi protector addon-updater.exe

File PE Metadata
Compilation timestamp:
12/25/2013 12:43:21 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:kVB9zTm6fUTvxQ1C18Nbv0Ls3Ko4r3r56pTBnmuoHU:UBhm6M9Q1C18NbMWKo4cpTh

Entry address:
0x2D458

Entry point:
E8, 68, 9B, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 40, 2B, 45, 00, E8, 52, 25, 00, 00, E8, D2, 16, 00, 00, 0F, B7, F0, 6A, 02, E8, FB, 9A, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, E2, 55, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.4331

Code size:
260 KB (266,240 bytes)

Scheduled Task
Task name:
Wifi Protector Addon-updater

Trigger:
Logon (Runs on logon)


The file wifi protector addon-updater.exe has been discovered within the following program.

Wifi Protector Addon  by Speedchecker Limited
The Wifi Protector Addon is a potentially unwanted web browser extension that is ad-supported and will display various popup and banner ads as well as modify the user's web browser search and home page settings.
82% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to update.srvstatsdata.com  (69.16.175.42:80)

TCP (HTTP):
Connects to ssl.hwcdn.net  (205.185.208.11:80)

TCP (HTTP):
Connects to errors.srvstatsdata.com  (208.85.150.249:80)

TCP (HTTP):
Connects to app-static.crossrider.com  (69.16.175.10:80)

Remove wifi protector addon-updater.exe - Powered by Reason Core Security