» kudoschatsearchagent.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

kudoschatsearchagent.exe

Kudos Chat Search for Skype (Kloud Edition)

Kudos Knowledge Pty Ltd

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Kudos Chat Search’. This file is installed with the program Kudos Chat Search Agent.

File name:

Publisher:

Kudos Knowledge (signed by Kudos Knowledge Pty Ltd)

Product:

Kudos Chat Search for Skype (Kloud Edition)

Version:

3.0.39.0

MD5:

79765bce7f7f75de01b7fd904bcc87a9

SHA-1:

aefe30d37bca5be7fee7402b3b793339fe9df32a

SHA-256:

6b9a36df248572c5adb7459e48af7e64d00cf3a419d515fe8e83e0d10ec7a689

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/26/2024 11:42:16 AM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

W32.HfsAutoB

1.3.0.4923

File size:

10.2 MB (10,645,368 bytes)

Product version:

3.0

File type:

Executable application (Win32 EXE)

Language:

English (Australia)

Common path:

C:\Program Files\kudoschatsearchagent\kudoschatsearchagent.exe

Digital Signature

Signed by:

Kudos Knowledge Pty Ltd

Authority:

TC TrustCenter GmbH

Valid from:

12/7/2011 5:15:04 AM

Valid to:

12/7/2012 5:15:04 AM

Subject:

CN=Kudos Knowledge Pty Ltd, OU=TC Publisher ID for Authenticode, OU=R&D, O=Kudos Knowledge Pty Ltd, L=Sydney, S=New South Wales, C=AU

Issuer:

CN=TC TrustCenter Class 2 L1 CA XII, OU=TC TrustCenter Class 2 L1 CA, O=TC TrustCenter GmbH, C=DE

Serial number:

0FB6000100028ED0364FAC8744C4

File PE Metadata

Compilation timestamp:

6/20/1992 3:52:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:ExwzN69eqzTMzfYunW4z4UzZz+R7/WhQ9Ak1mo+74pqGejFWvxjKte2CUYOhPFI:1hNqMfYuhza7/0umT+

Entry address:

0x1D1B2C

Entry point:

55, 8B, EC, 83, C4, F0, 53, B8, 08, F5, 5C, 00, E8, AF, 61, E3, FF, 68, AC, 1B, 5D, 00, 6A, FF, 6A, 00, E8, 39, 64, E3, FF, 8B, D8, 85, DB, 74, 55, E8, 6E, 66, E3, FF, 85, C0, 75, 4C, A1, 0C, 8A, 5E, 00, 8B, 00, E8, 3A, 58, EE, FF, A1, 0C, 8A, 5E, 00, 8B, 00, C6, 40, 5B, 00, A1, 0C, 8A, 5E, 00, 8B, 00, BA, C4, 1B, 5D, 00, E8, 9E, 52, EE, FF, 8B, 0D, D0, 8D, 5E, 00, A1, 0C, 8A, 5E, 00, 8B, 00, 8B, 15, 90, 77, 5C, 00, E8, 1E, 58, EE, FF, A1, 0C, 8A, 5E, 00, 8B, 00, E8, 92, 58, EE, FF, 5B, E8, D4, 37, E3, FF... 
[+]

Entropy:

5.7342

Developed / compiled with:

Microsoft Visual C++

Code size:

1.8 MB (1,903,616 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Kudos Chat Search

Command:

C:\Program Files\kudoschatsearchagent\kudoschatsearchagent.exe

The file kudoschatsearchagent.exe has been discovered within the following program.

Kudos Chat Search Agent by Kudos Knowledge Pty Ltd

www.kudosknowledge.com

About 9% of users remove it

Scan kudoschatsearchagent.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.