home

rlogind.exe

NuTCRACKER 4

MKS Software

It runs as a separate (within the context of its own process) windows Service named “MKS Rlogind”.
Publisher:
MKS Software Inc.  (signed by MKS Software)

Product:
NuTCRACKER 4

Description:
rlogind service

Version:
4.66.4000

MD5:
ba43e5b30bfa13f9a91561739a338769

SHA-1:
44cd0800fdb7e599837a1f1487bf16a068624f40

SHA-256:
bc4e1ee8a1ee256186d832588053f17573459efc35d9e398a69bbad71a78e897

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 5:23:24 PM UTC  (today)

File size:
68.2 KB (69,848 bytes)

Product version:
4.66.4000

Copyright:
Copyright (c) 2003-2007 MKS Software Inc. In Canada copyright owned by MKS Inc. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\mks\bin\rlogind.exe

Digital Signature
Signed by:
MKS Software

Authority:
The USERTRUST Network

Valid from:
8/25/2005 2:00:00 PM

Valid to:
8/26/2007 1:59:59 PM

Subject:
CN=MKS Software, OU=Interoperability Division, O=MKS Software, STREET=12450 Fair Lakes Circle, STREET=Suite 400, L=Fairfax, S=va, PostalCode=22033, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00F152E6009294B6D3EC6257F1AA74C025

File PE Metadata
Compilation timestamp:
1/30/2007 2:59:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:IEowRytjwXO2JlUDqaTPZvVdPHgoNDCQyQfjhOz90R02yw2dG:IEPRytjwXO2JlUDqo/5CQyajhO6MG

Entry address:
0x7880

Entry point:
57, E8, 90, 05, 00, 00, 6A, 00, 6A, 01, 6A, 00, E8, 7F, 05, 00, 00, 83, C4, 04, 50, E8, 86, 04, 00, 00, 8B, 15, B0, C2, 40, 00, 33, C0, B9, 1D, 00, 00, 00, BF, D0, D6, 40, 00, F3, AB, 8B, 0D, 88, C2, 40, 00, A1, B4, C2, 40, 00, 89, 0D, DC, D6, 40, 00, 33, C9, 89, 15, F0, D6, 40, 00, 8B, 15, AC, C2, 40, 00, 85, D2, 0F, 95, C1, A3, D8, D6, 40, 00, A1, 48, D7, 40, 00, 68, D0, D6, 40, 00, 68, 8C, C2, 40, 00, C7, 05, D0, D6, 40, 00, 74, 00, 00, 00, C7, 05, D4, D6, 40, 00, 01, 00, 00, 00, 49, 81, E1, 00, 7E, 40...
 
[+]

Entropy:
5.4274

Code size:
32 KB (32,768 bytes)

Service
Display name:
MKS Rlogind

Service name:
MKSRlogind

Type:
Win32OwnProcess

Depends on:
NuTCRACKERService tcpip


Scan rlogind.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.