home

kdfhok.dll

LocalSSL kdfhok Library x64

BlueGem Security, Inc.

Publisher:
Bluegem Security  (signed by BlueGem Security, Inc.)

Product:
LocalSSL kdfhok Library x64

Description:
kdfhok 090130 x64

Version:
4, 0, 0, 7

MD5:
a251924431a734559ece75d0ce631ef3

SHA-1:
9fc4cd57774b763b8c6a3d8dd8162d8e426ad7a2

SHA-256:
cf892d50fe11cee87d76bee11006800f4e1badf362a0ab8eda52e8b00d8cfdf8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 5:34:50 PM UTC  (today)

File size:
60.3 KB (61,704 bytes)

Product version:
2009, 1, 30, 1

Copyright:
Copyright 2008 Bluegem Security

Original file name:
kdfhok.dll x64

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\windows\syswow64\kdfhok.dll

Digital Signature
Signed by:
BlueGem Security, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/29/2009 1:00:00 AM

Valid to:
1/30/2010 12:59:59 AM

Subject:
CN="BlueGem Security, Inc.", OU=Secure Application Development, O="BlueGem Security, Inc.", L=Sunnyvale, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
35648C88078901AFF8605F4CF8F641A1

File PE Metadata
Compilation timestamp:
1/30/2009 10:34:23 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:Ebxlc3dNInmCEz588wIsvCCHG1ya6dwr3QDS0p:EbxlcNCn5Ez5VwINdyaxr3Qdp

Entry address:
0x1C848

Entry point:
E8, 3B, FF, FF, FF, 05, 29, 23, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, 87, 22, 00, 00, FF, E0, E8, D8, 00, 00, 00, D2, 9D, 01, 10, 4B, 08, 17, 36, 37, 54, 1D, 0B, 0F, 37, 1D, 01, 1C, 0D, 93, 3E, 0A, 14, 0C, 23, 74, 1D, 08, 07, 17, 14, 52, 0E, 27, 48, 61, 0D, 0A, 34, 47, 1C, 11, E8, 22, 1D, 4E, 41, 2C, 26, 10, 9F, 20, 8F, 1A, 31, 15, 28, 01, 19, 14, 0A, 20, 1A, 52, 35, 10, 16, 43, 56, 1C, FE, 18, 00, 29, 15, 15, 01, 1B, 22, 1D, 2B, 09, 6A, 3C, 1A, 1D, 34, 9A, 13, 01, 09, 2D, 07, 01, 0D, 64, 63, 01, 19, 18...
 
[+]

Entropy:
6.5591

Code size:
20 KB (20,480 bytes)

Scan kdfhok.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.