Gridinsoft Logo

The ksapi64.sys (Kingsoft KSAPI Module) File Analysis

Updated 9 months ago
Checked by Malware Check
ksapi64.sys

Technical Analysis

File Name ksapi64.sys
File Type
PE32+ executable (DLL) (native) x86-64, for MS Windows
Scanner Version 1.0.194.174
Database Version 2024-10-25 05:00:28 UTC
โœ“

Clean File

No threats detected by our scanner

0%
Detection Rate
89,776
File Size (bytes)
2024-10-25
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
6d5fbbb446b119cb151c97b8e16be822
SHA1
38ce6a9e00b059c1710b728af9454a3e9f45e579
SHA256
26ed45461e62d733f33671bfd0724399d866ee7606f3f112c90896ce8355392e
SHA512
3a35264df4c82e601baa66d098e3c6dd64213b3d2bcd2c3b5f7a59fb64489c4377eb6d2591034cf336f15bbc4394869e3f733d41b8f02e8715c071f988839821
ImpHash
6b84b4c98d44b362d90f36c816b7f49b

PE Analysis

Basic Information

โ–ผ
Image Base 0x00010000
Entry Point 0x00021000
Compilation Time 2017-12-06 11:14:31
Checksum 0x0001f8ea (Actual: 0x0001f8ea)
OS Version 4.0
PEiD Signatures PE32+ executable (DLL) (native) x86-64, for MS Windows
PDB Path e:\KINGSOFT_DUBA\Build\Build_Src\kanti\kanti\Product\win32\dbginfo\ksapi64.pdb
Digital Signature OK
Imports 1 libraries
ntoskrnl
Exports 0 functions
Resources 1 Resources
Sections 7 Sections

Version Information

โ–ผ
CompanyName Kingsoft Corporation
FileDescription Kingsoft KSAPI Module
FileVersion 2017,12,06,132
InternalName ksapi.sys
LegalCopyright Copyright (C) 1998-2017 Kingsoft Corporation
OriginalFilename ksapi.sys
ProductName Kingsoft Antivirus Security System
ProductVersion 1,0,594,132
Translation 0x0000 0x04b0

PE Sections

โ–ผ
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 52,932 bytes 53,248 bytes 6.13 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_NOT_PAGED|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 8E1CB846EA014655987B60C530353DF9
.data 0x0000e000 1,712 bytes 512 bytes 0.59 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_NOT_PAGED|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 19D4C00F686033D2061EA274C5886446
.pdata 0x0000f000 2,412 bytes 2,560 bytes 4.34 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_NOT_PAGED|IMAGE_SCN_MEM_READ B8790A0DAEF550F35C5B16EB6B3299AC
PAGE 0x00010000 152 bytes 512 bytes 2.38 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ F9B8E3A1B71F5BCF5D4AC10DE5046B05
INIT 0x00011000 3,720 bytes 4,096 bytes 5.38 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 518671A99BF6CA553B164C97F9A4420F
.rsrc 0x00012000 944 bytes 1,024 bytes 3.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 1718A7D56454D1306D77922DDC68858D
.reloc 0x00013000 84 bytes 512 bytes 0.27 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 05453FB69491C374C60DC621BD3F364D

Resource Analysis

โ–ผ
Total Resources: 1 (848 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 848 bytes
100%

Certificate Chain Analysis

โ–ผ
Certificate Information
Product Kingsoft Antivirus Security System
Description Kingsoft KSAPI Module
File Version 2017,12,06,132
Original Name ksapi.sys
Signing Date 11:15 AM 12/06/2017 (2803 days ago)
Verification Status Signed
Signers Beijing Kingsoft Security software Co.,Ltd; VeriSign Class 3 Code Signing 2010 CA; VeriSign
Counter Signers Symantec Time Stamping Services Signer - G4; Symantec Time Stamping Services CA - G2; Thawte Timestamping CA
Internal Name ksapi.sys
Copyright Copyright (C) 1998-2017 Kingsoft Corporation
Certificate Chain Summary
Symantec Time Stamping Services CA - G2 #1 Primary
Validity Period: 2012-12-21 00:00:00 โ†’ 2020-12-30 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B
Symantec Time Stamping Services Signer - G4 #2 Chain
Validity Period: 2012-10-18 00:00:00 โ†’ 2020-12-29 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 0E CF F4 38 C8 FE BF 35 6E 04 D8 6A 98 1B 1A 50
Beijing Kingsoft Security software Co.,Ltd #3 Chain
Validity Period: 2017-02-17 00:00:00 โ†’ 2019-03-19 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 4C 6D 7B 5E A2 89 C2 74 42 64 34 E6 5B 41 7A BA
VeriSign Class 3 Public Primary Certification Authority - G5 #4 Chain
Validity Period: 2011-02-22 19:25:17 โ†’ 2021-02-22 19:35:17
Signature Algorithm: sha1RSA
Serial Number: 61 19 93 E4 00 00 00 00 00 1C
GlobalSign #5 Chain
Validity Period: 2009-11-18 10:00:00 โ†’ 2019-03-18 10:00:00
Signature Algorithm: sha256RSA
Serial Number: 04 00 00 00 00 01 25 07 1D F9 AF
GlobalSign Extended Validation CodeSigning CA - SHA256 - G3 #6 Chain
Validity Period: 2016-06-15 00:00:00 โ†’ 2024-06-15 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 48 1B 6A 07 A9 42 4C 1E AA FE F3 CD F1 0F
GlobalSign Root CA #7 Chain
Validity Period: 2011-04-15 19:55:08 โ†’ 2021-04-15 20:05:08
Signature Algorithm: sha1RSA
Serial Number: 61 29 15 27 00 00 00 00 00 2A
ๅŒ—ไบฌ้‡‘ๅฑฑๅฎ‰ๅ…จ่ฝฏไปถๆœ‰้™ๅ…ฌๅธ #8 Chain
Validity Period: 2016-10-21 06:36:03 โ†’ 2019-10-14 01:36:31
Signature Algorithm: sha256RSA
Serial Number: 34 B7 D3 FF 3A C4 12 A3 1F D6 35 BE
GlobalSign TSA for Advanced - G2 #9 Chain
Validity Period: 2016-05-24 00:00:00 โ†’ 2027-06-24 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 11 21 06 F1 0F CE 68 F0 9B FA E5 5B 18 CD 8F 20 01 77
GlobalSign Timestamping CA - SHA256 - G2 #10 Chain
Validity Period: 2011-08-02 10:00:00 โ†’ 2029-03-29 10:00:00
Signature Algorithm: sha256RSA
Serial Number: 04 00 00 00 00 01 31 89 C6 50 04
Microsoft Windows Hardware Compatibility Publisher #11 Chain
Validity Period: 2017-10-05 17:44:16 โ†’ 2018-10-05 17:44:16
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 1E E1 1D 60 9E 7D 97 60 71 00 00 00 00 00 1E
Microsoft Windows Third Party Component CA 2014 #12 Chain
Validity Period: 2014-10-15 20:31:27 โ†’ 2029-10-15 20:41:27
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 0D 69 0D 5D 78 93 D0 76 DF 00 00 00 00 00 0D
Microsoft Time-Stamp PCA 2010 #13 Chain
Validity Period: 2010-07-01 21:36:55 โ†’ 2025-07-01 21:46:55
Signature Algorithm: sha256RSA
Serial Number: 61 09 81 2A 00 00 00 00 00 02
Microsoft Time-Stamp Service #14 Chain
Validity Period: 2016-09-07 17:56:54 โ†’ 2018-09-07 17:56:54
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 AC 8A 21 BC 7A D2 9B 72 F4 00 00 00 00 00 AC

โœ“ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware