home

ksafevul.dll

金山卫士

Hangzhou Chuangju Technology Co.,LTD

Publisher:
Kingsoft Corporation.  (signed by Hangzhou Chuangju Technology Co.,LTD)

Product:
金山卫士

Description:
KSafe Vulnerability Fix

Version:
2.0.1.1202

MD5:
2c1076574fb418223e3c4433dbb23b36

SHA-1:
6717b871b2babf0ec2acb970d23d8bdfbfb8bb33

SHA-256:
5b6ff660922c7f10dffcb37f4757efdb9e70c62cd55a704f2a20ba5765c8f900

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 4:41:33 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.CDB
1.3.0.4959

File size:
511.6 KB (523,912 bytes)

Product version:
2.0.1.1202

Copyright:
Copyright (C) 2010 Kingsoft Corporation

Original file name:
ksafevul.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\safedogserver\ksafevul.dll

Digital Signature
Signed by:
Hangzhou Chuangju Technology Co.,LTD

Authority:
WoSign eCommerce Services Limited

Valid from:
7/18/2011 4:27:34 AM

Valid to:
7/19/2014 9:43:00 AM

Subject:
E=web@safedog.cn, CN="Hangzhou Chuangju Technology Co.,LTD", O="Hangzhou Chuangju Technology Co.,LTD", L=Hangzhou, S=Zhejiang, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
7D81565064D7

File PE Metadata
Compilation timestamp:
7/10/2014 10:24:08 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:ObAugBRJu6fK6hei6+GNTBGmW8kXTaiihlvYrBl7vH:OkhosaBVEjesl7vH

Entry address:
0x1558C5

Entry point:
60, E9, 11, 18, 00, 00, 12, 7C, 4E, 19, C5, E4, 01, 67, 95, 03, E7, 7D, F1, 57, E1, 41, D9, 35, 99, 03, FD, B7, 93, 4A, EF, 36, 2B, BA, 60, EE, C5, EF, A6, 76, C7, 05, 08, 0A, EB, 2E, 68, 87, 83, 65, 6C, E0, 66, 49, 23, F5, 30, DE, F9, 24, C7, 0A, EC, 83, 03, 45, 38, 48, 45, 64, 63, E8, 04, 2A, CC, E5, 0F, 92, 49, A9, 9C, 15, 49, CC, 6C, EE, D7, 88, FC, 92, 79, A8, A3, 8C, 7D, EC, 2F, 70, DB, D3, D1, 35, 2E, E0, D9, C2, 85, FA, 08, 64, 6F, 08, 55, AE, D9, 55, DC, 21, 64, 2F, 7C, 7B, EA, 0C, 22, B8, E6, 49...
 
[+]

Entropy:
7.9536

Packer / compiler:
ASProtect v1.1, 0xBRS

Code size:
485 KB (496,640 bytes)

Scan ksafevul.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.