» rkill.exe
Overview
Analysis
File Details
Programs (1)

rkill.exe

Rkill

Bleeping Computer, LLC.

File name:

rkill.exe

Publisher:

Bleeping Computer, LLC (signed by Bleeping Computer, LLC.)

Product:

Rkill

Description:

Terminates malware processes so that you can run your normal security programs.

Version:

2.3.5

MD5:

50044291628e0d1763c6ee05cbdd1621

SHA-1:

48659c672ab6ea5c8b830812d80dc682c4a64ee7

SHA-256:

68d3d93fdbae8c0c3c7fa279975ab690bb61942ad712b123183f92e45acdfa45

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 3:16:08 AM UTC (today)

File size:

1.5 MB (1,619,360 bytes)

Product version:

2.3.5

Original file name:

rkill.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Bleeping Computer, LLC.

Authority:

GlobalSign nv-sa

Valid from:

2/8/2012 12:39:26 PM

Valid to:

2/8/2015 12:39:26 PM

Subject:

E=cert@bleepingcomputer.com, CN="Bleeping Computer, LLC.", O="Bleeping Computer, LLC.", S=New York, C=US

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121C68B39D8C6B1E4CDF9A8CBEB590276E1

File PE Metadata

Compilation timestamp:

9/4/2012 6:14:45 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

10.0

CTPH (ssdeep):

49152:4Ye7QtGpna5IA++m8YT7yfZvdxFYiLYiySTP:4Ye7HaVYMYW

Entry address:

0x4550A

Entry point:

E8, 68, E0, 00, 00, E9, 95, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 24, 1E, 46, 00, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, A0, 11, 46, 00, C9, C2, 08, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, 64, 11, 46, 00, 57, FF, 35, B4, 4A, 49, 00, FF, D6, FF, 35, B0, 4A, 49, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82... 
[+]

Entropy:

6.6081

Code size:

381.5 KB (390,656 bytes)

The file rkill.exe has been discovered within the following program.

BitTorrent by BitTorrent Inc.

BitTorrent is a desktop application that allows you to work with torrent files.BitTorrent allows you to download files available as torrents, search torrent sites for music, videos, books, software and other free or public domain material.

www.bittorrent.com

7% remove it

Scan rkill.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.