wxdfast.exe

MD5:	ec74cf567f829a401c3b8644f361c26d
SHA1:	657d3386a7235af8cdbf5359afe190f12714909d
SHA256:	4eaf177ee831e9b99e3e8704264d2f25cbc33f24d59fbbe5f98e288f2a35d606

Overview

wxdfast.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges). It is an auto-starting process that used the Windows Task Scheduler service to load when the user logs into Windows (sometimes this is required to bypass the UAC protection). It is installed with a couple of know programs including WxDFast published by WebPick Internet Holdings Ltd., GBox from WebPick Internet Holdings Ltd. and GBox by WebPick Internet Holdings Ltd..

Details

File name:	wxdfast.exe
Typical file path:	C:\ProgramData\premium\wxdfast\wxdfast.exe
Size:	205 KB (209,920 bytes)
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

WxDFast

WebPick Internet Holdings Ltd.

67% remove

The Premium WxDFast program runs as a scheduled task utilizing the Windows Scheduled Tasks interface. WxDFast launches each time the computers boots and can bybass the standard UAC (user access control) prompts in order to run.

GBox

WebPick Internet Holdings Ltd.

72% remove

GBox by Premuim, an umwanted and potentially harmful application is installed as a web browser plugin within Internet Explorer and Firefox.

OptimizerPro1

WebPick Internet Holdings Ltd.

88% remove

OptimizerPro1 by Premuim, an umwanted and potentially harmful application is installed as a web browser plugin within Internet Explorer and Firefox. OptimizedPro1 uses the open source wxDownload Fast (also known as wxDFast) program to download and install additional bundled applications.

Codec

WebPick Internet Holdings Ltd.

69% remove

Codec by Premuim, an umwanted and potentially harmful application is installed as a web browser plugin within Internet Explorer and Firefox.

Behaviors

Scheduled tasks

The task 'OptimizerPro1UpdaterTask{408771AB-FC33-4754-9AA2-E9AEACA8FCB5}' runs on logon in the path '\OptimizerPro1UpdaterTask{408771AB-FC33-4754-9AA2-E9AEACA8FCB5}'
The task 'AddictThingUpdaterTask{C01C54E4-6022-450A-AB6C-EA171857DE4F}' runs on logon in the path '\AddictThingUpdaterTask{C01C54E4-6022-450A-AB6C-EA171857DE4F}'
Entry path '\GBoxUpdaterTask{C66B26EC-71EF-4403-B5B6-45B8AB0F600D}'
Entry path '\CodecUpdaterTask{3BC1B8C1-4B1C-4E2B-AB64-D3384A15C4DF}'
Entry path '\CodecUpdaterTask{E43CA78A-293E-4463-BBD0-2486EF2511E0}'
Entry path 'C:\WINDOWS\Tasks\CodecUpdaterTask{2779F032-FBA6-4DB1-A3CA-E5A95C0C0710}.job'
Entry path '\WxDFastUpdaterTask{9455118C-8DF0-4A92-BBFD-15381F01B6CD}'
Entry path '\OptimizerPro1UpdaterTask{E858E3D8-4A86-41B4-84FB-54F51185276B}'
Entry path '\GBoxUpdaterTask{30F59D4A-F62C-45E2-BDAB-F1B0A1473268}'
Entry path '\WxDFastUpdaterTask{290D1217-436A-4000-B799-7EA7CDD3513F}'

Scheduled tasks startups

Set to load on user login (bypasses Windows UAC if enabled)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00219823%	0.028634%
Kernel CPU:	0.00007653%	0.013761%
User CPU:	0.00212170%	0.014873%
Kernel CPU time:	25 ms/min	100,923,805ms/min
CPU cycles:	131,421/sec	17,470,203/sec
Memory
Private memory:	1.52 MB	21.59 MB
Private (maximum):	3.9 MB
Private (minimum):	2.47 MB
Non-paged memory:	1.52 MB	21.59 MB
Virtual memory:	37.72 MB	140.96 MB
Virtual memory (peak):	42.25 MB	169.69 MB
Working set:	2.65 MB	18.61 MB
Working set (peak):	4.07 MB	37.95 MB
Page faults:	2,387/min	2,039/min
I/O
I/O read transfer:	211 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	524 Bytes/sec	448.09 KB/min
I/O other operations:	9/sec	1,671/min
Resource allocations
Threads:	2	12
Handles:	74	600
GUI GDI count:	5	103
GUI USER count:	2	49

Process properties

Integrety level:	System
Platform:	64-bit
Command lines:	C:\ProgramData\premium\gbox\gbox.exe /schedule /profilepath "C:\ProgramData\premium\gbox\profile.ini" C:\ProgramData\premium\wxdfast\wxdfast.exe /schedule /profilepath "C:\ProgramData\premium\wxdfast\profile.ini" C:\ProgramData\premium\addictthing\addictthing.exe /schedule /profilepath "C:\ProgramData\premium\addictthing\profile.ini" C:\ProgramData\premium\codec\codec.exe /schedule /profilepath "C:\ProgramData\premium\codec\profile.ini" "C:\Documents and Settings\user\Application data\premium\codec\profile.ini"
Owner:	SYSTEM
Parent processes:	taskeng.exe (Task Scheduler Engine by Microsoft) svchost.exe (Generic Host Process for Win32 Services by Microsoft)