home

kdfmgr.exe

LocalSSL Manager

BlueGem Security

Publisher:
BlueGem Security  (signed and verified)

Product:
LocalSSL Manager

Description:
LocalSSL R5 Manager

Version:
5, 1, 8, 7

MD5:
43246282dd50b2b36efde7380dca1d6c

SHA-1:
4ce427171ac6ffeae4428c54833a83df76572568

SHA-256:
e3bcabc67e73a0aa56824f3e41d1376f63ebf39a09d22e0f86e63f8f2b737b7b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:36:41 PM UTC  (today)

File size:
702 KB (718,888 bytes)

Product version:
2007, 8, 27, 5

Copyright:
Copyright 2007 Bluegem Security

Original file name:
kdfmgr.exe

File type:
Executable application (Win32 EXE)

Language:
Korean (Korea)

Common path:
C:\users\{user}\appdata\locallow\kdefense\kdfmgr.exe

Digital Signature
Signed by:
BlueGem Security

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/28/2007 7:00:00 PM

Valid to:
1/29/2008 6:59:59 PM

Subject:
CN=BlueGem Security, OU=SALES, O=BlueGem Security, L=Denver, S=Colorado, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
7E3630C6093982060F5F9BDC1533B828

File PE Metadata
Compilation timestamp:
9/16/2007 12:53:37 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:Re1DPW8G5EH47W3SY8rb/2IwzVEkMsqZdoHXtx80zdsvGRJyt0Twc2/3YU:ReVPW35aAW3S52zWjsve0GGRJyt00eU

Entry address:
0xA3E15

Entry point:
E9, 17, 76, FF, FF, F0, 53, 9A, 5A, 3B, 9B, B3, E9, 9A, F9, 67, 30, A3, 00, 63, 71, 0C, B2, 5C, 83, EC, 10, 53, 56, 57, E8, C4, 01, 00, 87, 3C, 24, 5F, 81, C3, D1, 3E, 57, 5E, E8, 8D, CD, FE, FF, 10, EB, 4B, C8, E9, E4, 4B, 00, 00, 81, C8, 81, 84, D1, 67, 81, C0, 85, F0, D8, 81, 81, C8, 0D, 1D, 99, F3, 81, C0, B4, 77, 6B, 0C, E9, AF, D7, FE, FF, 87, 34, 24, BD, 01, 00, 00, 00, F0, 0F, C1, 2D, F4, 99, 4A, 00, E9, 1C, 9D, 00, 00, 0F, 83, 18, 6A, 00, 00, 0F, 84, 55, F0, FE, FF, E9, E6, C0, FF, FF, C3, E9, AA...
 
[+]

Entropy:
6.2228

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
100 KB (102,400 bytes)

Scan kdfmgr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.