Files signed by Rockwell Automation

Rockwell Automation

Rockwell Automation is a digital signature publisher name observed in ThreatInfo records. This page groups 5 signed files and shows whether those files are currently classified as clean, undefined, or detected.

A digital signature can help identify a publisher, but it does not always prove that a file is safe. Certificates may be abused, stolen, expired, or attached to modified installers, so the file hash and detection status should be checked together.

Detection signal

Detected files use this signature name

At least one file signed as Rockwell Automation is detected by GridinSoft. Review the hashes below and scan the device if one of these files is present.

Download GridinSoft scanner
rsiro.exe 091b6e78f54aeb1cd2d03485b880752b Ransom.Wacatac
getPlusPlus_Rockwell.exe 7c2188e5620b252a88b81165b4e1434b General Threat
NmspHost.exe 59c6a3b54c624c176f15ed20edf0ffde General Threat
TagSrv.exe 41e4e338a18a9d838bb664c59cba39b4 General Threat
ViewSharedService.exe b41ddbe32994d6edcdd021c5c05b9c96 General Threat

Certificate review summary

Do not trust this signature name by itself

ThreatInfo found detected files associated with Rockwell Automation. A matching signature name should be checked together with the file hash, detection verdict, and source path.

Recommended checks

  • Open any matching file report and compare the MD5 hash.
  • Confirm the file path and download source before trusting the binary.
  • Run a GridinSoft scan if a detected file from this list is present.