home

speedfixtool2setup.exe

Speed Fix Tool

Interads, UAB

The application speedfixtool2setup.exe, “This installer database contains the logic and data required to install Speed Fix Tool.” by Interads, UAB has been detected as a potentially unwanted program by 3 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from s3.amazonaws.com and multiple other hosts.
Publisher:
FixBliss  (signed by Interads, UAB)

Product:
Speed Fix Tool

Description:
This installer database contains the logic and data required to install Speed Fix Tool.

Version:
2.7.0

MD5:
5cd8f98a733c805dbae147e9dbee93f9

SHA-1:
b93d87cfde86e2789adcb77c4ac306ae421626db

SHA-256:
75b7f39c2b5691c9345fb49c7401fef932af72ff9697f42bd40e7f0e21fce335

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
5/6/2024 8:26:15 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
MSIL/Rebrand.LittleRegClean.A potentially unwanted application
7.0.302.0

Reason Heuristics
PUP.FixBliss.RegClean.Optional.Installer.Meta (L)
15.8.26.16

Trend Micro House Call
Suspicious_GEN.F47V0429
7.2.155

File size:
6.8 MB (7,141,344 bytes)

Product version:
2.7.0

Copyright:
Copyright (C) 2015 FixBliss

Original file name:
SpeedFixToolSetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\speedfixtool2setup.exe

Digital Signature
Signed by:
Interads, UAB

Authority:
Symantec Corporation

Valid from:
4/27/2015 7:00:00 PM

Valid to:
4/9/2017 6:59:59 PM

Subject:
CN="Interads, UAB", O="Interads, UAB", L=Kaunas, S=Kaunas, C=LT

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
6D385FBF6207159A583E3B1E8142BEB7

File PE Metadata
Compilation timestamp:
10/7/2014 10:05:58 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:TG7cl1155MF19bs5BDstqOd7StkI592Y09IIs6dFxXjlfxrxds6i+2ejSq+uG1zV:WuQE52xS+IjarXddc6ibw8u+2Q

Entry address:
0xC87EC

Entry point:
E8, 4A, CC, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, F0, 33, DB, 3B, F3, 75, 1E, E8, 5D, 4D, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, C5, D5, FF, FF, 83, C4, 14, 8B, C6, E9, C2, 00, 00, 00, 57, 39, 5D, 0C, 77, 1E, E8, 39, 4D, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, A1, D5, FF, FF, 83, C4, 14, 8B, C6, E9, 9D, 00, 00, 00, 33, C0, 39, 5D, 14, 66, 89, 06, 0F, 95, C0, 40, 39, 45, 0C, 77, 09, E8, 0A, 4D, 00, 00, 6A, 22, EB, CF, 8B, 45, 10, 83, C0, FE, 83, F8, 22, 77...
 
[+]

Entropy:
7.8109  (probably packed)

Code size:
1021.5 KB (1,046,016 bytes)

The file speedfixtool2setup.exe has been seen being distributed by the following 2 URLs.

https://s3.amazonaws.com/.../SpeedFixTool2Setup.exe

http://securejump.net/base2.php?id=2

Remove speedfixtool2setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.