home

WinSecure.exe

Dr.Salman's Window Security Toolkit

Dr Salman Zafar

The application WinSecure.exe, “Window Security Toolkit” by Dr Salman Zafar has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Window Security Toolkit 2012 by Digital Millenium Inc.
Publisher:
Digital Millenium Inc.  (signed by Dr Salman Zafar)

Product:
Dr.Salman's Window Security Toolkit

Description:
Window Security Toolkit

Version:
8.04.2012

MD5:
690433de7872a745a2fd6ed5a9cd94b6

SHA-1:
644f224f98bd6e7a64ad96864a9d3a34c6c58e55

SHA-256:
78d75c59b640d52580ee06bddafb8456d0d7f42feef95c49b7bb783d117fbf93

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 7:41:57 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DrSalman (M)
16.5.23.11

File size:
768.7 KB (787,168 bytes)

Product version:
8.04.2012

Copyright:
Dr.Salman Zafar and Digital Millenium Inc

Trademarks:
Dr.Salman's Window Security Toolkit

Original file name:
WinSecure.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\window security toolkit 2012\winsecure.exe

Digital Signature
Signed by:
Dr Salman Zafar

Authority:
COMODO CA Limited

Valid from:
5/3/2012 12:00:00 AM

Valid to:
5/3/2013 11:59:59 PM

Subject:
CN=Dr Salman Zafar, O=Dr Salman Zafar, STREET=8 Achilles Road, L=Coventry, S=West Midlands, PostalCode=CV6 7NH, C=GB

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7BDC15504020A97470E73278B5718D59

File PE Metadata
Compilation timestamp:
6/13/2012 8:10:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:DzUh3qdy667Vdu9oGbb4mttCd1TlhT+53BaVYpE40Xy1PJYZPci:DIK67vu9omMk4d1MRaVYpE4zRYZ0i

Entry address:
0x1000

Entry point:
68, 01, F0, 6B, 00, E8, 01, 00, 00, 00, C3, C3, 44, 95, 74, A1, C0, 66, 6E, D2, 65, 7A, D1, B0, CB, C0, AC, B4, 38, CB, 48, 4F, D8, 11, AF, BB, 78, CE, 9F, DB, 12, 8A, 5D, 6A, 0A, 26, 57, F9, 83, AF, 4A, D3, 62, E2, 39, 3A, 5B, DB, E2, 5E, 94, 6B, 15, 05, 92, E5, 96, A5, 49, D9, A9, ED, F2, 20, 84, 21, 3E, 63, 78, 0F, B3, 66, 55, 29, 81, 87, 38, EF, F3, C6, FC, 5E, 7A, 87, A8, FF, 52, 6D, 2B, 40, 6D, 8E, C0, 5F, 5C, F5, DC, 5B, A5, F2, FD, 30, CE, 05, BA, DC, DA, 42, 7E, 5E, AC, EB, 9F, B7, 51, 91, 96, BC...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
2.6 MB (2,715,648 bytes)

The file WinSecure.exe has been discovered within the following program.

Window Security Toolkit 2012  by Digital Millenium Inc
dmisoftware.com
About 8% of users remove it
 
Powered by Should I Remove It?

Remove WinSecure.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.