Should I block it?
No, this file is 100% safe to run.
Relationships
Parent process
Related files
 PE file structure
|
Show functions |
Import table
mscoree.dll
DllMain
updatelinkswift.exe
By linkswift (Signed)
| Version: | 1.0.5024.26564 |
| MD5: | 10df38f1a1fe6b0865d2885ac09024fe |
| SHA1: | e39694d9dc9d8b6a6b00b0ad07fea9c8817ccc63 |
Overview
updatelinkswift.exe runs as a service under the name Update LinkSwift with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including LinkSwift 3.0.0 published by Yontoo Technology, Inc., LinkSwift 1.0.0 from Yontoo Technology, Inc. and LinkSwift 1.0.0 by Yontoo Technology, Inc.. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by linkswift which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Ultimate (6.1.7601.65536).
Details
| File name: | updatelinkswift.exe |
| Publisher: | LinkSwift |
| Description: | LinkSwift |
| Typical file path: | C:\Program Files\linkswift\updatelinkswift.exe |
| Original name: | LinkSwift.exe |
| File version: | 1.0.5024.26564 |
| Size: | 63.78 KB (65,312 bytes) |
| Build date: | 10/3/2013 11:45 AM |
| Certificate |
| Issued to: | linkswift |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, August 11, 2013 |
| Expiration date: | Wednesday, August 12, 2015 |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Programs
The following programs will install this file
LinkSwift is adware that runs in the web browser as a toolbar and web extension. The web extension is primarily designed to take control of the user's browser in order to modify the search provider and redirect web searches to whatever search engine partner the publisher has a revenue relationship with. In doing so, the toolbar performs a number of behaviors in order to maximize the potential of a user to click on sponsored advertising...
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00005257% | |
| Kernel CPU: | 0.00002742% | |
| User CPU: | 0.00002515% | |
| Kernel CPU time: | 749 ms/min | |
| CPU cycles: | 34,549/sec | |
| Memory |
| Private memory: | 16.43 MB | |
| Private (maximum): | 11.78 MB | |
| Private (minimum): | 440 KB | |
| Non-paged memory: | 16.43 MB | |
| Virtual memory: | 144.71 MB | |
| Virtual memory (peak): | 149.71 MB | |
| Working set: | 7.48 MB | |
| Working set (peak): | 13.61 MB | |
| Page faults: | 30,676/min | |
| I/O |
| I/O read transfer: | 33 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O write transfer: | 6 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 27 Bytes/sec | |
| I/O other operations: | 1/sec | |
| Resource allocations |
| Threads: | 12 | |
| Handles: | 475 | |
Process properties
Threads
Averages
| updateLinkSwift.exe (main module) |
| Total CPU: | 0.00003888% | |
| Kernel CPU: | 0.00001830% | |
| User CPU: | 0.00002059% | |
| CPU cycles: | 993/sec | |
| Memory: | 80 KB | |
| mscorwks.dll |
| Total CPU: | 0.00000229% | |
| Kernel CPU: | 0.00000229% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 12/sec | |
| Memory: | 5.68 MB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
100.00% |
|
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
100.00% |
|
