» KLiveUpdate.exe
Overview
Analysis
File Details
Programs (1)

KLiveUpdate.exe

KLiveUpdate Application

KINGSOFT JAPAN INC.

This is installed with KDrive.

File name:

KLiveUpdate.exe

Publisher:

Kingsoft Corp. Ltd. (signed by KINGSOFT JAPAN INC.)

Product:

KLiveUpdate Application

Description:

XLiveUpd Application

Version:

1, 0, 0, 1

MD5:

e22e253dddaedff27e38e0fae7e92da0

SHA-1:

7d711c14970658bf96000638a5024cee9bce875d

SHA-256:

89997b780cf3a5e61d07ccf742003ec211c8fde6cfb588a0da2e845e3176aae4

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 7:15:40 AM UTC (today)

File size:

57.4 KB (58,776 bytes)

Product version:

1, 0, 0, 1

Original file name:

KLiveUpdate.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\appdata\roaming\kingsoft\klive\bin\kliveupdate.exe

Digital Signature

Signed by:

KINGSOFT JAPAN INC.

Authority:

GlobalSign nv-sa

Valid from:

8/9/2010 5:54:52 PM

Valid to:

9/29/2011 10:54:12 AM

Subject:

CN=KINGSOFT JAPAN INC., O=KINGSOFT JAPAN INC., C=JP

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000012A56275F04

File PE Metadata

Compilation timestamp:

5/26/2010 8:34:25 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

9.0

CTPH (ssdeep):

768:cMv1VDLaebk7BLB0rUtI0+GZPa6x6rkbdk5W4L4s3T:nJk7f0rUO0nPYke5W4H

Entry address:

0x12B9

Entry point:

E8, D2, 26, 00, 00, E9, A4, FE, FF, FF, B8, 08, C0, 40, 00, C3, A1, C0, EA, 40, 00, 56, 6A, 14, 5E, 85, C0, 75, 07, B8, 00, 02, 00, 00, EB, 06, 3B, C6, 7D, 07, 8B, C6, A3, C0, EA, 40, 00, 6A, 04, 50, E8, 7B, 27, 00, 00, 59, 59, A3, BC, DA, 40, 00, 85, C0, 75, 1E, 6A, 04, 56, 89, 35, C0, EA, 40, 00, E8, 62, 27, 00, 00, 59, 59, A3, BC, DA, 40, 00, 85, C0, 75, 05, 6A, 1A, 58, 5E, C3, 33, D2, B9, 08, C0, 40, 00, EB, 05, A1, BC, DA, 40, 00, 89, 0C, 02, 83, C1, 20, 83, C2, 04, 81, F9, 88, C2, 40, 00, 7C, EA, 6A... 
[+]

Entropy:

6.5344

Code size:

34.5 KB (35,328 bytes)

The file KLiveUpdate.exe has been discovered within the following program.

KDrive by Kingsoft Corp.

www.kingsoft.jp

About 3% of users remove it

Scan KLiveUpdate.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.