Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

faccc 3.23%
de70e 3.23%
9b165 3.23%
8b7f5 3.23%
58f9d 16.13%
ebffe 3.23%
b1ec8 3.23%
5e01b 3.23%
ce2c4 3.23%
49792 3.23%
6d7c4 3.23%
ed068 12.90%
1ba41 6.45%
4f887 19.35%
d7539 3.23%
2e615 3.23%
d0c38 6.45%
(Note, Bit Cocktail Ltd. publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
GetSidSubAuthority, GetSidSubAuthorityCount, GetSidIdentifierAuthority, IsValidSid, GetTokenInformation, OpenProcessToken, ControlService, StartServiceW, DeleteService, OpenServiceW, CloseServiceHandle, CreateServiceW, OpenSCManagerW, SetServiceStatus, RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, RegDeleteValueW, RegCreateKeyExW, RegSetValueExW, RegOpenKeyExW, RegEnumKeyExW, RegQueryInfoKeyW, RegCloseKey, RegDeleteKeyW, RegQueryValueExW
kernel32.dll
LocalFree, LocalAlloc, GetVersionExW, GetCurrentProcess, HeapAlloc, GetProcessHeap, CloseHandle, GetTempPathW, HeapFree, GetSystemTime, SystemTimeToFileTime, FindResourceExW, GetFileAttributesW, FindFirstFileW, FindNextFileW, DeleteFileW, FindClose, CreateFileW, RemoveDirectoryW, LCMapStringA, GetStringTypeW, LockResource, GetCurrentDirectoryW, CreateThread, Sleep, InterlockedIncrement, InterlockedDecrement, DeleteCriticalSection, InitializeCriticalSection, GetModuleFileNameW, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, MultiByteToWideChar, GetLastError, EnterCriticalSection, RaiseException, LeaveCriticalSection, lstrcmpiW, GetModuleHandleW, GetProcAddress, lstrlenW, FreeLibrary, LCMapStringW, FileTimeToSystemTime, GetModuleHandleA, WriteConsoleA, lstrlenA, CreateFileA, GetStringTypeA, WriteConsoleW, GetConsoleOutputCP, HeapDestroy, HeapReAlloc, HeapSize, GetSystemTimeAsFileTime, CreateDirectoryW, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetStartupInfoW, RtlUnwind, VirtualFree, VirtualAlloc, HeapCreate, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetCurrentThreadId, SetFilePointer, SetHandleCount, GetFileType, GetStartupInfoA, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineW, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, InitializeCriticalSectionAndSpinCount, LoadLibraryA, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, WideCharToMultiByte, GetConsoleCP, GetConsoleMode, SetStdHandle, FlushFileBuffers, GetLocaleInfoA
ole32.dll
CoTaskMemFree, CoCreateInstance, CoInitialize, CoTaskMemRealloc, CoTaskMemAlloc, CoUninitialize
shell32.dll
ShellExecuteExW
urlmon.dll
URLDownloadToFileW
user32.dll
CharNextW

extensionupdaterservice.exe

By Bit Cocktail Ltd. (Signed)

Remove extensionupdaterservice.exe
MD5:   1ba417f51bf6715f2a98014e4c093eb4
SHA1:   c5443b4e4c85da02834e4be1d18f97c30c660c49
SHA256:   3fd9dbed3439c4df7356d8563b53698290415a5d644f22fb89051d55cb313058

What is extensionupdaterservice.exe?

Plazy Updater is the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found.

Overview

extensionupdaterservice.exe runs as a service under the name Web Assistant (Updater By SweetPacks) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Updater By SweetPacks 2.0.0.566 published by SweetIM Technologies Ltd., Updater By SweetPacks 2.0.0.583 from SweetIM Technologies Ltd. and Updater By SweetPacks 2.0.0.583 by SweetIM Technologies Ltd.. The file is digitally signed by Bit Cocktail Ltd. which was issued by the Thawte certificate authority (CA). Note, some antivirus scanners have flagged this file, however it is not necessarily considered malware (see below for details).

DetailsDetails

File name:extensionupdaterservice.exe
Typical file path:C:\Program Files\plazy\extensionupdaterservice.exe
Size:184.34 KB (188,760 bytes)
Build date:1/24/2013 4:45 AM
Certificate
Issued to:Bit Cocktail Ltd.
Authority (CA):Thawte
Expiration date:Thursday, January 16, 2014
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Updater By SweetPacks
 SweetIM Technologies Ltd.
  67% remove
Updater By SweetPacks (from Perion) is designed to monitor and keep the SweetPacks programs automatically up to date. It checks for software updates and automatically downloads and installs them if found. It does so by adding a startup entry to the registry to automatically load each time a user logs into windows and remotely checks its server for updates by adding a Windows firewall exception. If an update is found it will silently ins...

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • Web Assistant
  • 'Updater By SweetPacks'
  • 'Web Assistant Updater'
Network connections
  • [UDP] listens on port 64523

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00018115%
    0.028634%
    Kernel CPU:0.00001461%
    0.013761%
    User CPU:0.00016654%
    0.014873%
    Kernel CPU time:10,031 ms/min
    100,923,805ms/min
    CPU cycles:20,618,217/sec
    17,470,203/sec
    Memory
    Private memory:13.55 MB
    21.59 MB
    Private (maximum):11 MB
    Private (minimum):1012 KB
    Non-paged memory:13.55 MB
    21.59 MB
    Virtual memory:81.26 MB
    140.96 MB
    Virtual memory (peak):91.26 MB
    169.69 MB
    Working set:3.67 MB
    18.61 MB
    Working set (peak):11 MB
    37.95 MB
    Page faults:11,488/min
    2,039/min
    I/O
    I/O other transfer:2.23 KB/sec
    448.09 KB/min
    I/O other operations:19/sec
    1,671/min
    Resource allocations
    Threads:8
    12
    Handles:260
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:64-bit
    Command line:"C:\Program Files\updater by sweetpacks\extensionupdaterservice.exe"
    Owner:SYSTEM
    Windows Service
    Service name:Updater By SweetPacks
    Display name:Web Assistant
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    ExtensionUpdaterService.exe (main module)
    Total CPU:0.01040567%
    0.272967%
    Kernel CPU:0.00946246%
    0.107585%
    User CPU:0.00094320%
    0.165382%
    CPU cycles:10,148,655/sec
    5,741,424/sec
    Context switches:8/sec
    79/sec
    Memory:204 KB
    1.16 MB
    wow64.dll (Win32 Emulation on NT64 by Microsoft)
    Total CPU:0.00007606%
    Kernel CPU:0.00006085%
    User CPU:0.00001521%
    CPU cycles:84,021/sec
    Memory:252 KB

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 26.67%
    Windows Vista Home Premium 23.33%
    Windows 8 16.67%
    Windows 7 Ultimate N 13.33%
    Microsoft Windows XP 6.67%
    Windows 8 Pro 3.33%
    Windows 7 Ultimate 3.33%
    Windows 7 Starter 3.33%
    Windows 7 Professional 3.33%

    Distribution by countryDistribution by country

    United States installs about 73.33% of extensionupdaterservice.exe.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Toshiba 51.85%
    Hewlett-Packard 25.93%
    Gateway 7.41%
    Sony 7.41%
    ASUS 7.41%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE