home

kpbs22A-Service.exe

kpzsEngine

Fuzhou kaopu Network Co.,Ltd

It runs as a separate (within the context of its own process) windows Service named “kpbsEmu22A Plus Android Service”.
Publisher:
kpzsEngine Systems, Inc.  (signed by Fuzhou kaopu Network Co.,Ltd)

Product:
kpzsEngine

Description:
kpzsEngine Service

Version:
2.5.70.6901

MD5:
2545b580c1b0451a5e132f00e1a3d246

SHA-1:
2d8561eb10053abb937ea528109a3f4310732b7e

SHA-256:
539e3d84985a59b8307cf1d0b9b6474e2194b2d029526206130adf31157a4deb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 6:51:07 PM UTC  (today)

File size:
491.4 KB (503,208 bytes)

Product version:
2.5.70.6901

Copyright:
Copyright 2011 kpzsEngine Systems, Inc. All Rights Reserved.

Original file name:
kpbs22A-Service.exe

File type:
Executable application (Win64 EXE)

Digital Signature
Signed by:
Fuzhou kaopu Network Co.,Ltd

Authority:
VeriSign, Inc.

Valid from:
12/15/2015 8:00:00 AM

Valid to:
1/14/2019 7:59:59 AM

Subject:
CN="Fuzhou kaopu Network Co.,Ltd", OU=Operation Center, O="Fuzhou kaopu Network Co.,Ltd", L=FuZhou, S=FuJian, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6913B56C2D12F5D71B8618E0650092B9

File PE Metadata
Compilation timestamp:
1/10/2017 10:49:55 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x1D59E

Entry point:
48, A1, 00, 20, 00, 11, 00, 00, 00, 00, FF, E0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
3.8930

Code size:
112 KB (114,688 bytes)

Service
Display name:
kpbsEmu22A Plus Android Service

Service name:
KpS2APlusAndroidSvc

Type:
Win32OwnProcess

Depends on:
Kp2ADrv


Scan kpbs22A-Service.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.