home

killprocess.exe

CyberSoft Ltd.

This file is installed with the program CyberSafe Top Secret 2.
Publisher:
CyberSoft Ltd.  (signed and verified)

MD5:
bf61afed5a34060c5febbf375b29fb2a

SHA-1:
8b47ba20795a0cb0aab6555ab353ae888f45fea7

SHA-256:
f4174e09912fa5b67d5512b38c5ab670b3b7ab33b6667db02f438293e58f5a99

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/18/2024 11:06:12 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Dr.Web
hacktool program Tool.ProcessKill
9.0.1.05190

File size:
21 KB (21,520 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\cybersafe top secret 2\killprocess.exe

Digital Signature
Signed by:
CyberSoft Ltd.

Authority:
DigiCert Inc

Valid from:
6/14/2013 8:00:00 PM

Valid to:
6/19/2014 8:00:00 AM

Subject:
CN=CyberSoft Ltd., O=CyberSoft Ltd., L=Krasnodar, C=RU

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
068ACAB40FBF9EFADFC955432F3DFF45

File PE Metadata
Compilation timestamp:
4/18/2003 9:57:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

CTPH (ssdeep):
384:enr59D8WQex5MLGqmP/tt8ZSZKiGZZvTK:enr5+6xu+P/t7

Entry address:
0x1604

Entry point:
55, 8B, EC, 6A, FF, 68, 90, 20, 40, 00, 68, 40, 17, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 20, 53, 56, 57, 89, 65, E8, 83, 65, FC, 00, 6A, 01, FF, 15, 70, 20, 40, 00, 59, 83, 0D, 50, 33, 40, 00, FF, 83, 0D, 54, 33, 40, 00, FF, FF, 15, 6C, 20, 40, 00, 8B, 0D, 4C, 33, 40, 00, 89, 08, FF, 15, 68, 20, 40, 00, 8B, 0D, 48, 33, 40, 00, 89, 08, A1, 64, 20, 40, 00, 8B, 00, A3, 58, 33, 40, 00, E8, C3, 00, 00, 00, 83, 3D, 3C, 33, 40, 00, 00, 75, 0C, 68, 32, 17, 40, 00, FF, 15, 48, 20...
 
[+]

Entropy:
3.5987

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
4 KB (4,096 bytes)

The file killprocess.exe has been discovered within the following program.

CyberSafe Top Secret 2  by CyberSoft, Inc.
cybersafesoft.com
About 6% of users remove it
 
Powered by Should I Remove It?

Scan killprocess.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.