Should I block it?
90% of PCs block this file from running.
Possible reason:
Multiple malware detections
Additional versions
(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
Parent process
Child process
kmservice.exe
| MD5: | 9e97011c50db3f6bc6a4b21be5197a1e |
| SHA1: | d2743bd91b10ac81dfe5476d805983ae9b767257 |
| SHA256: | 66b4d9d8e8634bacd6e2bb8013828fd9908883b3c52691abfcd889c91b17af0b |
Warning 4 antivirus scanners has detected malware.
Overview
kmservice.exe is malware that executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent
srvany.exe.
Details
| File name: | kmservice.exe |
| Typical file path: | C:\windows\kmservice.exe |
| Size: | 160 KB (163,840 bytes) |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Malware detections
Based on 40+ industry antivirus scanners, 4 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| Agnitum |
5.5.1.3 |
Trojan.Agent!5DeTzshpaOA |
| eSafe |
7.0.17.0 |
Win32.TRAgent |
| Rising Antivirus |
24.56.01.04 |
Trojan.Win32.Generic.12836830 |
| VIPRE Antivirus |
16534 |
Trojan.Win32.Generic!BT |
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00026008% | |
| Kernel CPU: | 0.00022952% | |
| User CPU: | 0.00003057% | |
| Kernel CPU time: | 823,086 ms/min | |
| CPU cycles: | 6,485/sec | |
| Memory |
| Private memory: | 862.4 KB | |
| Private (maximum): | 2.9 MB | |
| Private (minimum): | 2.7 MB | |
| Non-paged memory: | 862.4 KB | |
| Virtual memory: | 23.37 MB | |
| Virtual memory (peak): | 25.08 MB | |
| Working set: | 2.86 MB | |
| Working set (peak): | 3.3 MB | |
| Page faults: | 993/min | |
| I/O |
| I/O write transfer: | 3 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 8 Bytes/sec | |
| I/O other operations: | 1/sec | |
| Resource allocations |
| Threads: | 2 | |
| Handles: | 59 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command lines: |
|
| Owner: | SYSTEM |
| Parent process: | srvany.exe |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
43.75% |
|
| Windows 8 Pro |
31.25% |
|
| Windows 7 Enterprise |
12.50% |
|
| Windows 8 Pro with Media Center |
6.25% |
|
| Microsoft Windows XP |
6.25% |
|
Distribution by country
Brazil installs about 12.50% of kmservice.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
22.22% |
|
| Dell |
22.22% |
|
| ASUS |
22.22% |
|
| Hewlett-Packard |
11.11% |
|
| Alienware |
11.11% |
|
| GIGABYTE |
11.11% |
|
