» kd_app.exe
Overview
Analysis
File Details

kd_app.exe

PRAGMA Informatique Sarl

File name:

kd_app.exe

Publisher:

PRAGMA Informatique Sarl (signed and verified)

MD5:

265adf471816790b327f712cd36d050b

SHA-1:

eb9d184d36aef0622f2b551bd5267b3fc8cb7b68

SHA-256:

c6cab09957f5b7cb69b87d41282855061e769c41445097abe50848b9cd4175dc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 11:56:07 AM UTC (today)

File size:

6.2 MB (6,449,992 bytes)

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

PRAGMA Informatique Sarl

Authority:

GlobalSign nv-sa

Valid from:

2/28/2013 6:56:13 PM

Valid to:

3/1/2014 6:56:13 PM

Subject:

CN=PRAGMA Informatique Sarl, O=PRAGMA Informatique Sarl, L=Montigny-le-Bretonneux, S=Yvelines, C=FR

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112109E8C97A395B7933CED7E04E84846359

File PE Metadata

Compilation timestamp:

4/8/2040 12:23:27 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:YWgXroP1lvnBcsAqY8kBrqJUd61EYfTkXjKUow8wprHXnhX6p4:YlbIl2Hr8kBg91EYfY7owLr9T

Entry address:

0x5D83AE

Entry point:

60, E9, D0, A1, FF, FF, E1, BD, FD, EA, 99, 18, B4, 7F, E6, AD, 04, 20, AC, DA, 59, CF, 9D, 84, D1, A1, 0D, 18, 9E, 86, 3C, 12, C8, 19, 56, 2C, EB, 8F, 6E, 6E, B1, 27, A4, C7, DF, F9, B5, 67, 17, D1, 48, 89, 1F, 92, C7, 7D, B0, B1, B5, C8, AF, EA, 82, 6A, 49, 8C, 38, 9E, A5, 45, 9B, AA, 9F, E2, A2, CD, 44, 7E, 21, 7D, 07, C5, 15, FD, E1, 0B, 4E, BD, F7, DC, 64, 01, D5, A7, B4, F7, A2, E9, 8B, CC, 7F, 10, CB, 1A, E0, C8, 06, B5, 00, 5F, 99, 7E, 0F, FD, B7, 05, 12, 50, 14, C0, 3A, CC, 46, C6, 76, 0A, 1E, 1C... 
[+]

Packer / compiler:

ASProtect v1.1, 0xBRS

Code size:

285 KB (291,840 bytes)

Scan kd_app.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.