home

csrss.exe

RKSOFT- Web-Filter RK

Rksoft Softwares

Publisher:
Rksoft  (signed by Rksoft Softwares)

Product:
RKSOFT- Web-Filter RK

Description:
Filtro de conteúdo da web

Version:
4.03.0006

MD5:
6524d5c38ac636590276132b3cce859f

SHA-1:
dfd5b4768d7ad26e1c5e183c75dead2da3648ae7

SHA-256:
6b70f44c2afc7a8af79e4fca3937c096b8f00d3b2677370e2595e56f2128f5ce

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/25/2024 1:14:53 AM UTC  (today)

Scan engine
Detection
Engine version

F-Prot
W32/VB-Wird-based
4.6.5.141

K7 AntiVirus
Trojan
13.166.8564

File size:
4.3 MB (4,491,880 bytes)

Product version:
4.03.0006

Copyright:
RKSOFT

Original file name:
csrss.exe

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

Common path:
C:\Program Files\rksoft\wf\csrss.exe

Digital Signature
Signed by:
Rksoft Softwares

Authority:
COMODO CA Limited

Valid from:
8/24/2011 9:00:00 PM

Valid to:
8/24/2012 8:59:59 PM

Subject:
CN=Rksoft Softwares, O=Rksoft Softwares, STREET="Rua Nova Jerusalém, 339", L=São Paulo, S=São Paulo, PostalCode=03410-000, C=BR

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
45CA92B7CC326A946A6F147A0DFABA77

File PE Metadata
Compilation timestamp:
8/26/2011 12:55:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:KBr1CGVyEba6kbbbiTDc7J7PtVBszDq0Og2WAseG:KzCGVbba3bbbKc7J7VVBszDq0T2WAseG

Entry address:
0x4EF4

Entry point:
68, E8, 83, 6D, 00, E8, EE, FF, FF, FF, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 50, B3, 69, 23, F3, 3C, 12, 44, 85, 43, 91, E9, CB, 3A, 55, BA, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 20, 22, 0D, 0A, 43, 6F, 57, 65, 62, 46, 69, 6C, 74, 65, 72, 52, 6B, 00, 65, 3D, 30, 0D, 00, 4F, 70, 74, 69, 6D, 69, 7A, B8, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 19, 00, 00, 00, 27, 83, 7D, 7E, B2, 76, F5, 4F, AB, CA, 1A, 53, 94, B3, E0, A2, 01, 00, 00, 00, 98, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
4.3 MB (4,460,544 bytes)

Scan csrss.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.