» 0kavmain.012
Overview
Analysis
File Details

0kavmain.012

KAVMain Application

Kaspersky Lab

File name:

0kavmain.012

Publisher:

Kaspersky Lab (signed and verified)

Product:

KAVMain Application

Version:

9, 0, 4, 82

MD5:

c62931da97a9c5f7fe911fca9bc0ca42

SHA-1:

dec2bc4962f6f255c1e420345e1af8c0fdcc5b34

SHA-256:

6efe6bba0b9443ea9b521fdbd25f9c79083666bfecceb00ecd5f0b2cb4bd7c69

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 1:01:40 AM UTC (today)

File size:

315.8 KB (323,424 bytes)

Product version:

9, 0, 4, 82

Original file name:

KAVMain.exe

Language:

Rosyjski (Rosja)

Digital Signature

Signed by:

Kaspersky Lab

Authority:

Microsoft Corporation

Valid from:

4/27/2011 1:58:06 PM

Valid to:

4/26/2021 8:44:25 PM

Subject:

CN=CodeSigning for Kaspersky Lab, OU=Microsoft Privileged, OU=mobile, O=Kaspersky Lab, L=Moscow, S=Moscow, C=RU

Issuer:

CN=VeriSign Authorized Code Signing (Privileged) CA for Microsoft, O=Microsoft Corporation, C=US

Serial number:

339A

File PE Metadata

Compilation timestamp:

1/17/2011 7:15:15 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Linker version:

8.0

CTPH (ssdeep):

6144:MEvtJsTVatGS73u+bvz30+gdQO9D0kW8JE/QJoJ76c/T5++O+:jzsux3u+bvzTgdQOBlXJoJho

Entry address:

0x2BA48

Entry point:

0D, C0, A0, E1, F0, 58, 2D, E9, 1C, B0, 8D, E2, 04, D0, 4D, E2, 03, 40, A0, E1, 02, 50, A0, E1, 01, 60, A0, E1, 00, 70, A0, E1, 27, 00, 00, EB, 04, 30, A0, E1, 05, 20, A0, E1, 06, 10, A0, E1, 07, 00, A0, E1, C2, D2, FF, EB, 00, 40, A0, E1, 20, 40, 0B, E5, 01, 00, 00, EA, 00, 40, A0, E1, 79, 00, 00, EB, 04, 00, A0, E1, 77, 00, 00, EB, F0, 68, 1B, E9, 1E, FF, 2F, E1, 04, E0, 2D, E5, 00, 30, 90, E5, 00, 10, A0, E1, 00, 00, 93, E5, 67, 2F, 00, EB, 04, F0, 9D, E4, 30, 40, 2D, E9, 40, 50, 9F, E5, 0B, 4A, A0, E3... 
[+]

Code size:

220 KB (225,280 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.