home

cso.exe

Centro de Servicios ONO

Radialpoint

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CSO.exe’.
Publisher:
Ono  (signed by Radialpoint)

Product:
Centro de Servicios ONO

Version:
1.5.20.24851

MD5:
6926e184b6884a5322cd5dbd593099ed

SHA-1:
05277fe41b2c0a670b539419d6bc1fdf91cd2fa1

SHA-256:
fcca2f80c54c6ca00d596673574d10f810a1c8f14d4d77978229d353258538a4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:53:10 PM UTC  (a few moments ago)

File size:
2 MB (2,065,648 bytes)

Product version:
1.5.20.24851

Copyright:
Copyright (C) 2005

Trademarks:
Radialpoint Inc.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ono\centro de servicios\cso.exe

Digital Signature
Signed by:
Radialpoint

Authority:
VeriSign, Inc.

Valid from:
5/23/2007 2:00:00 AM

Valid to:
6/12/2008 1:59:59 AM

Subject:
CN=Radialpoint, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Radialpoint, L=Montreal, S=Quebec, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
335F0B6F1DA37482A6B2699A1BA05002

File PE Metadata
Compilation timestamp:
11/17/2007 3:17:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:ZwgbS1dxnlPDQNX3I8TnR0Zl0z7aeoMZ/JW:Zwgb2dvD657RiqzGeFC

Entry address:
0x1023C3

Entry point:
6A, 60, 68, A0, 70, 58, 00, E8, B1, 08, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, 45, 1B, 00, 00, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, B4, B1, 55, 00, 8B, 4E, 10, 89, 0D, D4, EA, 5E, 00, 8B, 46, 04, A3, E0, EA, 5E, 00, 8B, 56, 08, 89, 15, E4, EA, 5E, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, D8, EA, 5E, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, D8, EA, 5E, 00, C1, E0, 08, 03, C2, A3, DC, EA, 5E, 00, 33, F6, 56, 8B, 3D, 10, B1, 55, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
1.4 MB (1,417,216 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CSO.exe

Command:
"C:\Program Files\ono\centro de servicios\cso.exe" \autorun


Scan cso.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.