» 0kavmain.012
Overview
Analysis
File Details

0kavmain.012

KAVMain Application

Kaspersky Lab

File name:

0kavmain.012

Publisher:

Kaspersky Lab (signed and verified)

Product:

KAVMain Application

Version:

9, 0, 4, 82

MD5:

6ebd91d6021a1d59fa0246282eb7da3d

SHA-1:

e44e33371f38d78e6ec1285ce8316f2a001f4a5b

SHA-256:

602b245ccf6923548782533ae9a87cb56f128b4bc9d5c5d168e805379eb5f768

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/5/2024 1:09:52 PM UTC (today)

File size:

315.8 KB (323,400 bytes)

Product version:

9, 0, 4, 82

Original file name:

KAVMain.exe

Language:

Russian (Russia)

Digital Signature

Signed by:

Kaspersky Lab

Authority:

Microsoft Corporation

Valid from:

1/26/2011 10:52:39 AM

Valid to:

1/24/2021 10:15:42 PM

Subject:

CN=CodeSigning for Kaspersky Lab, OU=Microsoft Privileged, O=Kaspersky Lab, L=Moscow, S=Moscow, C=RU

Issuer:

CN=VeriSign Authorized Code Signing (Privileged) CA for Microsoft, O=Microsoft Corporation, C=US

Serial number:

31B6

File PE Metadata

Compilation timestamp:

1/17/2011 11:45:15 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Linker version:

8.0

CTPH (ssdeep):

6144:2EvtJsTVatGS73u+bvz30+gdQO9D0kW8JE/QJoJ76c/T5++O+G:5zsux3u+bvzTgdQOBlXJoJhod

Entry address:

0x2BA48

Entry point:

0D, C0, A0, E1, F0, 58, 2D, E9, 1C, B0, 8D, E2, 04, D0, 4D, E2, 03, 40, A0, E1, 02, 50, A0, E1, 01, 60, A0, E1, 00, 70, A0, E1, 27, 00, 00, EB, 04, 30, A0, E1, 05, 20, A0, E1, 06, 10, A0, E1, 07, 00, A0, E1, C2, D2, FF, EB, 00, 40, A0, E1, 20, 40, 0B, E5, 01, 00, 00, EA, 00, 40, A0, E1, 79, 00, 00, EB, 04, 00, A0, E1, 77, 00, 00, EB, F0, 68, 1B, E9, 1E, FF, 2F, E1, 04, E0, 2D, E5, 00, 30, 90, E5, 00, 10, A0, E1, 00, 00, 93, E5, 67, 2F, 00, EB, 04, F0, 9D, E4, 30, 40, 2D, E9, 40, 50, 9F, E5, 0B, 4A, A0, E3... 
[+]

Entropy:

5.7682

Code size:

220 KB (225,280 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.