home

defendmon.dll

Kingsoft Internet Security

KINGSOFT JAPAN, INC.

Publisher:
Kingsoft Corporation  (signed by KINGSOFT JAPAN, INC.)

Product:
Kingsoft Internet Security

Description:
Kingsoft KIS Main

Version:
2016,09,27,339

MD5:
1630adceadbecaea2d7fdeba6a57b415

SHA-1:
ed945beabc7797a0624d24b87c7dfaeb59a3f392

SHA-256:
89c24146ea926d4175c147000c202bd938c8be1e5b310177b196bbb7e3269010

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 9:38:15 AM UTC  (today)

File size:
3.1 MB (3,296,088 bytes)

Product version:
9,3,291235,339

Copyright:
Copyright (C) 1998-2016 Kingsoft Corporation

Original file name:
defendmon.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\kingsoft\kingsoft internet security 2015\update\kav\kcom\defendmon.dll

Digital Signature
Signed by:
KINGSOFT JAPAN, INC.

Authority:
GlobalSign nv-sa

Valid from:
4/18/2016 6:57:28 PM

Valid to:
12/31/2016 3:25:00 PM

Subject:
E=codesign@kingsoft.jp, CN="KINGSOFT JAPAN, INC.", OU=Administration Division, O="KINGSOFT JAPAN, INC.", L=Minato-ku, S=Tokyo, C=JP

Issuer:
CN=GlobalSign CodeSigning CA - G3, O=GlobalSign nv-sa, C=BE

Serial number:
048800C4C0D9BFD80364C176

File PE Metadata
Compilation timestamp:
9/27/2016 5:23:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:X2IkCsBcayfeCqYN+RkY9oPS532qDZ25ef:X2RefeLYHYhBT

Entry address:
0x1070C8

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 90, 04, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, CD, FE, FF, FF, 59, C2, 0C, 00, 3B, 0D, C8, 30, 15, 10, 75, 02, F3, C3, E9, 00, 05, 00, 00, 68, 51, 71, 10, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, C8, 30, 15, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59...
 
[+]

Entropy:
7.3151

Code size:
1 MB (1,084,416 bytes)

Scan defendmon.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.