» winthruster.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

winthruster.exe

WinThruster

Solvusoft Corporation

The application winthruster.exe by Solvusoft has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a scheduled task under the Windows Task Scheduler named WinThruster triggered to execute each time a user logs in. This file is typically installed with the program WinThruster by Solvusoft Corporation.

File name:

winthruster.exe

Publisher:

Solvusoft Corporation (signed and verified)

Product:

WinThruster

Version:

1.79.69.2469

MD5:

c3c53197ef659432af8123c460e890f7

SHA-1:

45906237bbffeeff6de31f197b29b31b4478d9d2

SHA-256:

22d08edcc02b0aa24fcfeec639d99f7a4ea4e7e291debeab949b157f93abfb8b

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

12/25/2024 1:50:44 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.WinThruster (L)

17.3.7.17

File size:

6.8 MB (7,123,376 bytes)

Product version:

1.79.69.2469

Trademarks:

WinThruster

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\winthruster\winthruster.exe

Digital Signature

Signed by:

Solvusoft Corporation

Authority:

VeriSign, Inc.

Valid from:

7/15/2011 2:00:00 AM

Valid to:

7/14/2013 1:59:59 AM

Subject:

CN=Solvusoft Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Solvusoft Corporation, L=Las Vegas, S=Nevada, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4D1E69142E0E559ACB79A2C3EC3AA479

File PE Metadata

Compilation timestamp:

10/15/2012 1:31:35 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0xB9AC3

Entry point:

E8, DC, 89, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, 50, 87, 58, 00, 75, 02, F3, C3, E9, 5E, 8A, 00, 00, 8B, FF, 51, C7, 01, 94, D0, 52, 00, E8, 56, 8B, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, 68, EE, FD, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 8E, 8B, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 14, 75, 20, E8, EF, 45, 00, 00, 53... 
[+]

Code size:

1.1 MB (1,201,664 bytes)

Scheduled Task

Task name:

WinThruster

Trigger:

Logon (Runs on logon)

The file winthruster.exe has been discovered within the following program.

WinThruster by Solvusoft Corporation

Publisher's description - “WinThruster detects and repairs hundreds of PC errors, optimizes performance settings, and speeds up your PC. It repairs PC problems, decrease program load time, removes PC clutter, extends your computer's life, and restores system performance.”

solvusoft.com

40% remove it

Remove winthruster.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.