home

kwgdcord.dll

Kingsoft Internet Security

Beijing Kingsoft Security software Co.,Ltd

Publisher:
Kingsoft Corporation  (signed by Beijing Kingsoft Security software Co.,Ltd)

Product:
Kingsoft Internet Security

Description:
Kingsoft Wifi Protection

Version:
2014,12,26,1002

MD5:
0a0cd8d480ee771f7573e64a872fa919

SHA-1:
08c8bce054adb85ebc21a55ad7db411bbfd195d0

SHA-256:
d71b1818f5dd1d17e99cc6a4508422d2510c1527128d37ef87a74c8a2531e17d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 5:42:33 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dropper.Gen
7.11.30.172

File size:
545.1 KB (558,216 bytes)

Product version:
5,1,7684,1002

Copyright:
Copyright (C) 1998-2014 Kingsoft Corporation

Original file name:
kwgdcord.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\kingsoft\kwifi\kwgdcord.dll

Digital Signature
Signed by:
Beijing Kingsoft Security software Co.,Ltd

Authority:
Symantec Corporation

Valid from:
12/24/2014 8:00:00 AM

Valid to:
1/23/2018 7:59:59 AM

Subject:
CN="Beijing Kingsoft Security software Co.,Ltd", OU=IT, O="Beijing Kingsoft Security software Co.,Ltd", L=beijing, S=beijing, C=CN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
39A0156D17E10ECA0C1486FE5F0E7DA1

File PE Metadata
Compilation timestamp:
12/26/2014 12:17:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:U2p/Pu1oCQ/XOnTmm+DKC0IOd8+y/+X6/ox1jZni8s:FmKCQ/XOam+OH/Q6Kwi8s

Entry address:
0x1AB2D

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, C3, 6A, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00...
 
[+]

Entropy:
6.0594

Code size:
152 KB (155,648 bytes)

Scan kwgdcord.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.