home

ksapi_ev.sys

Kingsoft Antivirus Security System

Beijing Kingsoft Security software Co.,Ltd

Publisher:
Kingsoft Corporation  (signed by Beijing Kingsoft Security software Co.,Ltd)

Product:
Kingsoft Antivirus Security System

Description:
Kingsoft KSAPI Module

Version:
2017,03,14,94

MD5:
34508e916bc178b1302d24ff7930d3d1

SHA-1:
6c1c7db955cde4cf283c193c370c59197f6a7783

SHA-256:
f518d26820b451b9cd4323a7151b2894fb994d4ef166365fe076ecfa66bfceb5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/12/2025 12:46:18 PM UTC  (today)

File size:
118.6 KB (121,488 bytes)

Product version:
1,0,464,94

Copyright:
Copyright (C) 1998-2017 Kingsoft Corporation

Original file name:
ksapi.sys

File type:
Driver (Win32 SYS)

Common path:
C:\Program Files\kingsoft\kingsoft antivirus\ksapi_ev.sys

Digital Signature
Signed by:
Beijing Kingsoft Security software Co.,Ltd

Authority:
VeriSign, Inc.

Valid from:
2/17/2017 3:00:00 AM

Valid to:
3/20/2019 2:59:59 AM

Subject:
CN="Beijing Kingsoft Security software Co.,Ltd", OU=IT, O="Beijing Kingsoft Security software Co.,Ltd", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4C6D7B5EA289C274426434E65B417ABA

File PE Metadata
Compilation timestamp:
3/14/2017 1:03:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
8.0

Entry address:
0x19000

Entry point:
55, 8B, EC, 83, E4, F8, 83, EC, 08, 56, 57, BF, 01, 00, 00, C0, E8, 8B, 37, FF, FF, 8B, 75, 08, 89, 35, C4, 6C, 02, 00, E8, BD, FE, FE, FF, 83, 3D, E8, 6C, 02, 00, 00, 0F, 84, 95, 00, 00, 00, E8, 3B, 87, FE, FF, 56, E8, F5, A8, FE, FF, 8B, F8, 85, FF, 0F, 8C, 80, 00, 00, 00, E8, F6, F4, FE, FF, B8, 40, 3A, 01, 00, 89, 46, 38, 89, 46, 40, 89, 86, 80, 00, 00, 00, 89, 46, 70, 89, 46, 44, 89, 46, 48, C7, 44, 24, 0C, 00, 00, 00, 00, E8, BF, 8F, FE, FF, 85, C0, 7C, 05, E8, 76, 90, FE, FF, E8, 41, A4, FE, FF, B8...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
70.5 KB (72,192 bytes)

Scan ksapi_ev.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.