STM32CubeIDE has a file containing viruses?

[HNguy.18]

After we installed the STM32 Cube IDE program version 1.8.0 (the installation file is downloaded from STM site), our company Anti Virus software has detected that the program contains virus.

From the report of the Anti Virus program, the file contains virus is "rtosproxy.exe" located in "C:\st\stm32cubeide_1.8.0\stm32cubeide\plugins\com.st.stm32cube.ide.mcu.externaltools.rtosproxy.win32_1.0.100.202109170922\tools\bin\rtosproxy.exe".

It seems that there is no this file when we installed the version 1.7.0 and the Anti Virus software has not reported problem with this version.

So could you tell us what is this file used?

And please confirm that this file is safe and no malicious code.

[Julien D]

Hi @HNguy.18​,

If the authenticity of RtosProxy.exe can be verified then you can use it safely, it's not a malware at all.

The authenticity can be ensured by checking the digital signature:

 

Certificate (base-64 encoded):

-----BEGIN CERTIFICATE-----

MIIFVDCCBDygAwIBAgIQBUOruALyr3Csq8if1UsJmTANBgkqhkiG9w0BAQsFADBy

MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3

d3cuZGlnaWNlcnQuY29tMTEwLwYDVQQDEyhEaWdpQ2VydCBTSEEyIEFzc3VyZWQg

SUQgQ29kZSBTaWduaW5nIENBMB4XDTIxMDEyODAwMDAwMFoXDTIyMDIwMTIzNTk1

OVowgZExCzAJBgNVBAYTAlNFMRowGAYDVQQIDBFKw7Zua8O2cGluZ3MgbMOkbjEU

MBIGA1UEBwwLSsO2bmvDtnBpbmcxJzAlBgNVBAoTHlNUTWljcm9lbGVjdHJvbmlj

cyBTb2Z0d2FyZSBBQjEnMCUGA1UEAxMeU1RNaWNyb2VsZWN0cm9uaWNzIFNvZnR3

YXJlIEFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5K0ezsNvWZ0B

LxiqM8n35m28/G8QXo31QZRhj/i++mxeGoEXKxPC4gIXeYeTZrHQ7UiC1ZI2aUxp

kj+MgfBy1C6aiqnccoBjV0/pGTDYnD6aPLqKEiBwo0S5Of6utPj0Nu2hk3ASr/vP

ATkWIyv+xwzB8lsLaJ/xKm2nXEqQJ4K1k0iYwdLU9kjXN9AbRpjP0rHEVKve8SiB

v7/yqcAeiozTs9WLWDDcFKtBR8cPR93FNs92v7NVos+a/P2D39W6oFbBMUIv1S2n

/coNUwsVGW0pX5HFn5Y1sUf8UqQkvL/Lfk24VHzVO8lgds4Lz/PjvhklJxAWUBEp

AnQts19mtQIDAQABo4IBxDCCAcAwHwYDVR0jBBgwFoAUWsS5eyoKo6XqcQPAYPkt

9mV1DlgwHQYDVR0OBBYEFJtWVF+4WS44RGdM3kEn31b7EKufMA4GA1UdDwEB/wQE

AwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzB3BgNVHR8EcDBuMDWgM6Axhi9odHRw

Oi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1hc3N1cmVkLWNzLWcxLmNybDA1oDOg

MYYvaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItYXNzdXJlZC1jcy1nMS5j

cmwwSwYDVR0gBEQwQjA2BglghkgBhv1sAwEwKTAnBggrBgEFBQcCARYbaHR0cDov

L3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAEEATCBhAYIKwYBBQUHAQEEeDB2

MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTgYIKwYBBQUH

MAKGQmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJBc3N1

cmVkSURDb2RlU2lnbmluZ0NBLmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEB

CwUAA4IBAQB745Px28R2UbFzl1Fwn0rmOcjqsIxmBfWmOD11Hfz4td4uPldBkoh7

pNW7btTxLJwXESX3xSvHY5I6E2SKjNcXOvBiFjGs2jzue4il0w1zTJYhyihLWOqu

CKJfafWy0AXTTK9mSZFZPbfayXoNj53AvV8R1rJGVoGL5qxC1JVxTgWHNvt0Crf0

oIvCRLGyRJi8J4hVBbbxuORTUfP1gUm/ard7S9kw6j/3X0QQHiBY/ZGr1GRc0sac

7W+sJ9UHok+xHqG4WFkhvFo8r4XIcVTCA6cdV/DW4RzsjZ+XZncqO6XYW5tW5H6F

B9sPBGmkrTI04tol/nDDuJT2f2uusSW/

-----END CERTIFICATE-----

This is a utility executed during the Debug flow to enable some RTOS useful features.

Hope this helps