home

machineidgatewayx64.dll

MachineIdGateway

Installer Wizard

The module machineidgatewayx64.dll, “Interface to the Machine ID Generation Tool” by Installer Wizard has been detected as a potentially unwanted program by 3 anti-malware scanners. This file is typically installed with the program WinThruster by Solvusoft Corporation.
Publisher:
Solvusoft Corporation  (signed by Installer Wizard)

Product:
MachineIdGateway

Description:
Interface to the Machine ID Generation Tool

Version:
1.0.13.0

MD5:
b259fb21f7aa490aeaa58482614cf67f

SHA-1:
b913ac13909f369865f87d0a2d5ece2baeb8e0f2

SHA-256:
9f30546548c070dbaf8b370ab5f1f04bac2a50ff458bfccc02605ea3fe767129

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
4/18/2024 3:47:30 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W64.HfsAdware
1.3.0.7383

Dr.Web
Program.Unwanted.952
9.0.1.0333

Reason Heuristics
PUP.Solvusoft.Installer.Meta (L)
15.11.29.11

File size:
352.4 KB (360,896 bytes)

Product version:
1.0.13.0

Copyright:
(c) Solvusoft Corporation. All rights reserved.

Original file name:
MachineIdGateway.dll

File type:
Dynamic link library (Win64 DLL)

Language:
Language Neutral

Common path:
C:\ProgramData\{4b36989f-be86-4a21-94b1-ac154a69ea65}\offline\37d75937\252eeb5f\machineidgatewayx64.dll

Digital Signature
Signed by:
Installer Wizard

Authority:
COMODO CA Limited

Valid from:
8/26/2013 8:00:00 PM

Valid to:
8/26/2016 7:59:59 PM

Subject:
CN=Installer Wizard, O=Installer Wizard, STREET=848 N. Rainbow Blvd., STREET="#3321", L=Las Vegas, S=NV, PostalCode=89107, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00936840633163DBE99483CEE1F9B95E45

File PE Metadata
Compilation timestamp:
4/24/2012 5:06:59 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:WaIHvyyr/WEbatn0bl0yQf2wGv2OsMozVnnoF8+d3IT6Y:WxKO1mV01LeMInN+d3BY

Entry address:
0x1F314

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 47, 42, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, AB, FE, FF, FF, CC, CC, CC, 48, 89, 0D, E5, 37, 03, 00, C3, 40, 53, 48, 81, EC, E0, 05, 00, 00, 83, 64, 24, 70, 00, 48, 8D, 4C, 24, 74, 33, D2, 41, B8, 94, 00, 00, 00, E8, 14, 2E, 00, 00, 4C, 8D, 5C, 24, 70, 48, 8D, 84, 24, 10, 01, 00, 00, 48, 8D, 8C, 24, 10, 01, 00, 00, 4C, 89, 5C...
 
[+]

Entropy:
6.2452

Code size:
249.5 KB (255,488 bytes)

The file machineidgatewayx64.dll has been discovered within the following program.

WinThruster  by Solvusoft Corporation
Publisher's description - “WinThruster detects and repairs hundreds of PC errors, optimizes performance settings, and speeds up your PC. It repairs PC problems, decrease program load time, removes PC clutter, extends your computer's life, and restores system performance.”
solvusoft.com
40% remove it
 
Powered by Should I Remove It?

Remove machineidgatewayx64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.