Should I block it?
No, this file is 100% safe to run.
Relationships
Parent process
Related files
utillinkswift.exe
By linkswift (Signed)
| Version: | 1.0.5054.2753 |
| MD5: | ee3ea65f21fe953cc76ab1aef925d4aa |
| SHA1: | 903dc99e4bb592899318851f94af8886536ce791 |
Overview
utillinkswift.exe runs as a service under the name Util LinkSwift with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including LinkSwift 1.0.0 published by Yontoo Technology, Inc., LinkSwift 3.0.0 from Yontoo Technology, Inc. and LinkSwift 3.0.0 by Yontoo Technology, Inc.. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by linkswift which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Ultimate (6.1.7601.65536).
Details
| File name: | utillinkswift.exe |
| Typical file path: | C:\Program Files\linkswift\bin\utillinkswift.exe |
| Original name: | LinkSwift.exe |
| File version: | 1.0.5054.2753 |
| Size: | 64.78 KB (66,336 bytes) |
| Build date: | 11/1/2013 10:32 PM |
| Certificate |
| Issued to: | linkswift |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, August 11, 2013 |
| Expiration date: | Wednesday, August 12, 2015 |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Programs
The following programs will install this file
LinkSwift is an malware web browser extension designed to take control of the user's browser in order to redirect web searches and inject advertising. In Internet Explorer the program run as a Browser Helper Object. The add-in performs a number of behaviors that will hijack advertising on non-associated web sites as well as inject its own advertising in the form of contextual link ads, banner ads, popups and pop-overs including the hija...
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00004866% | |
| Kernel CPU: | 0.00001194% | |
| User CPU: | 0.00003672% | |
| Kernel CPU time: | 1,295 ms/min | |
| CPU cycles: | 40,994/sec | |
| Memory |
| Private memory: | 17.9 MB | |
| Private (maximum): | 16.4 MB | |
| Private (minimum): | 464 KB | |
| Non-paged memory: | 17.9 MB | |
| Virtual memory: | 149.79 MB | |
| Virtual memory (peak): | 156.86 MB | |
| Working set: | 9.42 MB | |
| Working set (peak): | 16.4 MB | |
| Page faults: | 35,328/min | |
| I/O |
| I/O read transfer: | 22 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O other transfer: | 52 Bytes/sec | |
| I/O other operations: | 2/sec | |
| Resource allocations |
| Threads: | 12 | |
| Handles: | 504 | |
Process properties
Threads
Averages
| utilLinkSwift.exe (main module) |
| Total CPU: | 0.00003548% | |
| Kernel CPU: | 0.00002534% | |
| User CPU: | 0.00001014% | |
| CPU cycles: | 866/sec | |
| Memory: | 80 KB | |
| ntdll.dll |
| Total CPU: | 0.00000760% | |
| Kernel CPU: | 0.00000507% | |
| User CPU: | 0.00000253% | |
| CPU cycles: | 11,685/sec | |
| Memory: | 1.23 MB | |
| mscorwks.dll |
| Total CPU: | 0.00000254% | |
| Kernel CPU: | 0.00000254% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 39/sec | |
| Memory: | 5.68 MB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
100.00% |
|
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
100.00% |
|
