» kxescore.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

kxescore.exe

Kingsoft Internet Security

Beijing Kingsoft Security software Co.,Ltd

It runs as a windows Service named “Kingsoft Core Service”. This is installed with Kingsoft Antivirus 2012.

File name:

kxescore.exe

Publisher:

Kingsoft Corporation (signed by Beijing Kingsoft Security software Co.,Ltd)

Product:

Kingsoft Internet Security

Description:

Kingsoft Antivirus Host

Version:

2012,05,28,34

MD5:

d475d06de67a3a1d9ad9e632b4c1501c

SHA-1:

f84a7a92cb33f45796a8ee34b9e9085ddbf7d8ab

SHA-256:

2072ea283ba04c46e0a59d4dd641bc383bd3d6ce2c03812f2058df8c0f649d84

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 3:10:56 AM UTC (today)

File size:

121.1 KB (123,992 bytes)

Product version:

9,0,63104,34

Original file name:

kxehost.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\kingsoft\kingsoft antivirus\kxescore.exe

Digital Signature

Signed by:

Beijing Kingsoft Security software Co.,Ltd

Authority:

VeriSign, Inc.

Valid from:

12/26/2011 1:00:00 AM

Valid to:

12/26/2014 12:59:59 AM

Subject:

CN="Beijing Kingsoft Security software Co.,Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Beijing Kingsoft Security software Co.,Ltd", L=beijing, S=beijing, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

07BC3A51B589E5AF43291DF84EA4C571

File PE Metadata

Compilation timestamp:

5/28/2012 12:00:16 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

8.0

CTPH (ssdeep):

1536:VAos3iGVoIHFoemjFNB/zsJeA7rek3q9xrM1Ywfozwg8OOGZ+2onj9fo:Vn3GtWfjFNRzKlKq1FAzwg8OxZ+2+B

Entry address:

0xC117

Entry point:

E8, 78, 04, 00, 00, E9, 9E, FD, FF, FF, CC, CC, CC, 68, 7D, C1, 40, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 1C, 70, 41, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, FF, 74, 24, 10, FF, 74, 24, 10, FF, 74, 24, 10, FF, 74, 24, 10, 68, 2C, BD, 40, 00, 68, 1C, 70, 41, 00... 
[+]

Code size:

60 KB (61,440 bytes)

Service

Display name:

Kingsoft Core Service

Service name:

kxescore

Description:

Kingsoft Antivirus Core Service

Type:

Win32OwnProcess, InteractiveProcess

Group:

ShellSvcGroup

The file kxescore.exe has been discovered within the following programs.

Kingsoft Antivirus 2012 by Kingsoft Security

Publisher's description - “Kingsoft Antivirus 2012 is a completely free antivirus solution for detecting, cleaning trojan virus, and protect your computer. It can be a standalone product, and can also work along with other AV.”

www.ijinshan.com

10% remove it

Scan kxescore.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.