home

kdfinj.dll

k-Defense kdfinj Library

Kings Information & Network

Publisher:
Kings Information & Network  (signed and verified)

Product:
k-Defense kdfinj Library

Description:
kdfinj 411021801 R6

Version:
6, 0, 3, 3

MD5:
3f2cd4d7c7dead71c177262f56c99d70

SHA-1:
129226ebfc787b999bf0363b5f4f745dd120e53c

SHA-256:
70a790f39c424bbc2ef36ae9020ed040f07d1f50165f62b4292275148a5d9c2c

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/23/2024 3:34:55 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/Execryptor
7.1.1

Quick Heal
(Suspicious) - DNAScan
11.16.12.00

File size:
557.6 KB (571,016 bytes)

Product version:
2011, 2, 18, 1

Copyright:
Copyright 2007 Kings Information & Network

Original file name:
kdfinj.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\kdfinj.dll

Digital Signature
Signed by:
Kings Information & Network

Authority:
VeriSign, Inc.

Valid from:
6/8/2010 9:00:00 AM

Valid to:
7/9/2011 8:59:59 AM

Subject:
CN=Kings Information & Network, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Kings Information & Network, L=Songpa-gu, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
13EBF0914E840864FD632D71364664EE

File PE Metadata
Compilation timestamp:
2/18/2011 1:57:39 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:XT5/PwJEdssJZZzzQDgrBKMkNBloOSoqBhAsVwh7l60OnNpBc:XTNV2ArIP1QhA5g0cpBc

Entry address:
0x1AF5A2

Entry point:
E8, F7, FE, FF, FF, 05, 14, 24, 00, 00, FF, E0, E8, EB, FE, FF, FF, 05, F0, 16, 00, 00, FF, E0, E8, CB, 00, 00, 00, 65, CB, 1A, 10, 3C, 54, 10, 1B, 01, 39, 33, 0E, 53, FE, 2D, 00, 85, 77, 0A, 2D, 14, 7A, 29, 09, 01, 15, 3B, 24, 5C, 10, 6D, 1A, 0A, 1A, 19, 68, 39, 5B, 0B, 24, 26, 56, 75, 01, 37, 8A, F7, 01, 08, 2F, 0C, 0A, 3D, 1D, D1, 6F, 18, 01, A5, 31, 0C, 0E, 0B, 3B, 25, 12, 91, 0C, 18, 10, 22, 38, 08, D5, 40, 47, 0C, 30, 93, 09, 08, 59, 3B, 14, 07, 5A, 40, 6D, 17, 19, 0E, 07, 30, 3C, 0F, 38, 0F, 17, 50...
 
[+]

Entropy:
7.3552

Packer / compiler:
EXECryptor 2.2.4

Code size:
76 KB (77,824 bytes)

Scan kdfinj.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.