» cks.exe
Overview
Analysis
File Details
Programs (1)

cks.exe

PKSFX Command Line

CrypKey (Canada) Inc.

File name:

cks.exe

Publisher:

PKWARE, Inc (signed by CrypKey (Canada) Inc.)

Product:

PKSFX® Command Line

Description:

PKUNZIPC for Windows Command Line

Version:

4.0.1.1

MD5:

02e510ca980911cf1319247b8930456c

SHA-1:

4953c903b910b49d8d6e7b2b499d9d2d9ebcc797

SHA-256:

533b7e8d55c059ab644a2f3830a7da767ea96ede0369092f91be6ea59bd8ff6f

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/26/2024 1:49:19 PM UTC (today)

Scan engine

Detection

Engine version

Emsisoft Anti-Malware

Trojan.JS.Redirector.BPJ

8.14.07.27.12

File size:

279 KB (285,648 bytes)

Product version:

4, 0, 0, 0

Trademarks:

PKWARE, PKZIP, and PKSFX are registered trademarks of PKWARE, Inc.

Original file name:

PKUnzip.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\cks.exe

Digital Signature

Signed by:

CrypKey (Canada) Inc.

Authority:

VeriSign, Inc.

Valid from:

8/21/2008 6:00:00 PM

Valid to:

8/28/2009 5:59:59 PM

Subject:

CN=CrypKey (Canada) Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=CrypKey (Canada) Inc., S=Alberta, C=CA

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

763E9731785572A94891A42BF20ED2CD

File PE Metadata

Compilation timestamp:

10/24/2000 3:05:27 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

6.0

CTPH (ssdeep):

6144:0L9TJSqiudnPIklBp96zPtVagaBYhTZSfOyp7zse:0VJSu1p96zPNhwf1se

Entry address:

0x1F000

Entry point:

68, 80, F0, 41, 00, 68, 48, E1, 42, 00, 68, 00, 00, 00, 00, E8, 34, F1, 00, 00, E9, 8F, F0, FE, FF, 40, 28, 23, 29, 50, 4B, 4C, 49, 54, 45, 33, 32, 20, 43, 6F, 70, 79, 72, 69, 67, 68, 74, 20, 31, 39, 39, 38, 20, 50, 4B, 57, 41, 52, 45, 20, 49, 6E, 63, 2E, 2C, 20, 41, 6C, 6C, 20, 52, 69, 67, 68, 74, 73, 20, 52, 65, 73, 65, 72, 76, 65, 64, 20, 28, 24, 52, 65, 76, 69, 73, 69, 6F, 6E, 3A, 20, 24, 29, 00, 50, 4B, 4C, 54, 33, 32, 00, 00, 10, 01, 00, 00, 9C, F9, F5, 39, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC... 
[+]

Entropy:

7.8353

Packer / compiler:

PKLITE32, 0x1.1

Code size:

64 KB (65,536 bytes)

The file cks.exe has been discovered within the following program.

AceReader Pro Deluxe by StepWare, Inc.

Publisher's description - “Speed Reading, Reading Fluency, Vision Training, Reading Assessment and Online Reader Software for all ages. AceReader Pro provides you with three tools in one: (1) A training tool that will help you become a more proficient reader both online and offline.”

www.acereader.com

7% remove it

Scan cks.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.