Threat Database Potentially Unwanted Programs PUP.Fast Browser

PUP.Fast Browser

By CagedTech in Potentially Unwanted Programs
Published:
Last updated:

Threat Scorecard

Popularity Rank: 377
Threat Level: 10 % (Normal)
Infected Computers: 625,770
First Seen: July 2, 2015
Last Seen: October 5, 2026
OS(es) Affected: Windows

The detection of PUP.Fast Browser indicates that your system may be affected by a potentially unwanted program. This type of software can cause a range of issues, from annoying pop-ups and redirects to more serious problems like data theft and system instability. In this report, we will provide an overview of what PUP.Fast Browser is, how it operates, and the symptoms of infection, as well as guidance on how to remove it from your system.

What Is PUP.Fast Browser?

PUP.Fast Browser is a type of potentially unwanted program (PUP) that can be installed on a system without the user's knowledge or consent. PUPs are often bundled with other software or downloaded from the internet, and they can cause a range of problems, including slowing down system performance, displaying unwanted ads, and collecting user data. While PUPs are not typically considered to be malicious software, they can still pose a significant threat to system security and user privacy.

How PUP.Fast Browser Operates

PUP.Fast Browser operates by installing itself on a system and then modifying various settings and configurations to achieve its goals. This can include changing the default browser homepage, adding unwanted toolbars or extensions, and redirecting user searches to alternative websites. In some cases, PUP.Fast Browser may also collect user data, such as browsing history and search queries, and transmit it to third-party servers for analysis and exploitation.

  • PUP.Fast Browser may use various tactics to evade detection, including disguising itself as a legitimate program or hiding in the system's temporary files.
  • It may also use social engineering techniques, such as fake alerts or warnings, to trick users into installing additional software or providing sensitive information.
  • In some cases, PUP.Fast Browser may even install other PUPs or malware on the system, leading to a range of further problems and complications.

Symptoms of Infection

The symptoms of a PUP.Fast Browser infection can vary, but common signs include:

  • Unwanted ads or pop-ups appearing on the system or in the browser.
  • Changes to the default browser homepage or search engine.
  • Slow system performance or freezes.
  • Unexplained crashes or errors.
  • Unwanted toolbars or extensions installed in the browser.

If you are experiencing any of these symptoms, it is likely that your system is infected with PUP.Fast Browser or another type of malware.

How to Remove PUP.Fast Browser

To remove PUP.Fast Browser from your system, follow these steps:

  1. Boot your system in Safe Mode with Networking to prevent any malware from loading.
  2. Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system and detect any malware or PUPs.
  3. Uninstall any suspicious programs or software that may be related to the infection.
  4. Reset your browser settings to their default values, including Chrome, Firefox, and Edge.
  5. Reboot your system and perform a follow-up scan to ensure that all malware and PUPs have been removed.

By following these steps, you should be able to remove PUP.Fast Browser and any related malware from your system, restoring your browser and system to a clean and secure state.

Conclusion

In conclusion, PUP.Fast Browser is a potentially unwanted program that can cause a range of problems on a system, from annoying ads and redirects to more serious issues like data theft and system instability. By understanding how PUP.Fast Browser operates and the symptoms of infection, you can take steps to remove it from your system and prevent future infections. Remember to always use reputable anti-malware tools and follow best practices for system security to keep your browser and system safe and secure.

SpyHunter Detects & Remove PUP.Fast Browser

File System Details

PUP.Fast Browser may create the following file(s):
Expand All | Collapse All
# File Name MD5 Detections
1. chrmstp.exe 4d5f057a1942fb70816c708c6afb4cbb 13
2. chrome.exe 225f502d696322b6b2904902419141f9 1
More files

Registry Details

PUP.Fast Browser may create the following registry entry or registry entries:
File name without path
Fast Browser.lnk
HKEY..\..\..\..{RegistryKeys}
SOFTWARE\Classes\Fast_Browser
SOFTWARE\Clients\StartMenuInternet\Fast Browser
SOFTWARE\RegisteredApplications\Fast Browser.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Fast Browser
SOFTWARE\Wow6432Node\RegisteredApplications\Fast Browser.NSJA6BHDA3NCFCFMXW3QSCUYUQ

Directories

PUP.Fast Browser may create the following directory or directories:

%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Fast Browser
%ALLUSERSPROFILE%\Start Menu\Programs\Fast Browser
%APPDATA%\Microsoft\Windows\Start Menu\Programs\Fast Browser
%LOCALAPPDATA%\Fast Browser
%PROGRAMFILES%\Fast Browser
%PROGRAMFILES(x86)%\Fast Browser
%UserProfile%\Local Settings\Application Data\Fast Browser

Analysis Report

General information

Family Name: PUP.Fast Browser
Signature status: Self Signed

Known Samples

MD5: 59d17f62fc76ae6bff123840e8abcff9
SHA1: 45386f1e646c9d195c590a3a54ada29c40cfe440
SHA256: ED316F064CFBA1E6F0350BC99DA4401156D43374DB3F3E647143A715CED85188
File Size: 911.17 KB, 911168 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have exports table
  • File doesn't have relocations information
  • File is 32-bit executable
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Icons

Windows PE Version Information

Name Value
Company Name Make The Web Better, LLC
File Version 1.0.0.1
Internal Name FastBrowserURLDownload.exe
Legal Copyright Make The Web Better, LLC. All rights reserved.
Original Filename FastBrowserURLDownload.exe
Product Version 2.0.0.1

Digital Signatures

Signer Root Status
Make The Web Better, LLC VeriSign Class 3 Code Signing 2004 CA Self Signed

Block Information

Total Blocks: 2,167
Potentially Malicious Blocks: 5
Whitelisted Blocks: 2,113
Unknown Blocks: 49

Visual Map

? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? ? ? ? ? ? ? ? ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 ? ? ? 0 0 ? ? ? ? ? ? ? 0 ? ? ? 0 0 0 ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 ? 0 ? ? ? ? ? 0 0 0 0 0 ? 0 ? x x 0 ? 0 0 0 0 x x 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? ? ? 0 0 0 0 0 0 0 0 0 2 2 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 1 2 0 0 1 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 1 0 0 0 1 0 0 0 1 0 0 1 0 0 0 1 0 0 0 1 0 0 0 0 0 0 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 1 1 1 0 3 1 1 0 0 0 0 1 1 0 0 2 3 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 0 0 0 0 0 0 0 0 2 0 0 0 0 0 0 0 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 1 0 0 1 1 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 1 0 0 0 1 0 0 1 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 2 2 0 0 1 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 1 1 1 0 0 1 0 0 0 1 0 0 0 1 1 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 1 1 1 1 0 0 0 2 0 0 0 1 0 0 0 0 0 0 0
... Data truncated
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Files Modified

File Attributes
c:\users\user\appdata\local\temp\~df8b5042550f46e15c.tmp Generic Read,Write Data,Write Attributes,Write extended,Append data

Windows API Usage

Category API
Other Suspicious
  • SetWindowsHookEx
Network Wininet
  • InternetOpen
  • InternetOpenUrl
  • InternetReadFile
Anti Debug
  • NtQuerySystemInformation