Should I block it?
60% of PCs block this file from running.
Possible reason:
Performance resource utilization
Additional versions
(Note, Search Safer Inc. publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
service.exe
By Search Safer Inc. (Signed)
| MD5: | d128703a1f2fc9f702c18b97eb9fcfac |
| SHA1: | f2e136f7188c9013124297b81c929d335e70c130 |
Overview
service.exe runs as a service under the name Kinoni Remote Desktop (KinoniRemoteDesktop) within the local user context. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by Search Safer Inc. which was issued by the DigiCert Inc certificate authority (CA).
Details
| File name: | service.exe |
| Typical file path: | C:\Program Files\pcmax\service.exe |
| Size: | 77.99 KB (79,864 bytes) |
| Build date: | 12/5/2009 5:52 PM |
| Certificate |
| Issued to: | Search Safer Inc. |
| Authority (CA): | DigiCert Inc |
| Effective date: | Wednesday, May 28, 2014 |
| Expiration date: | Wednesday, February 10, 2016 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'pcreg' → C:\Program Files\pcmax\service.exe
Scheduled tasks
- The job 'pcreg' runs on logon in the path '\pcreg'
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'KinoniRemoteDesktop' (Kinoni Remote Desktop)
Distribution by Windows OS
| OS version | distribution |
| Windows 8.1 Pro |
25.00% |
|
| Windows 7 Home Premium |
25.00% |
|
| Windows 7 Professional |
25.00% |
|
| Windows 8.1 |
25.00% |
|
Distribution by country
United States installs about 75.00% of service.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
50.00% |
|
| Toshiba |
50.00% |
|
