Agics logo

klwtblfs.exe

MD5 Hash: 78405310a9db8d3cbf27432ed5393f71
SHA256 Hash: 33f71ad290893f3fa6e03e5b8ca1efe9b2d4dde5047eebf3c31c661ab21ff723
File size: 131472 bytes (128 KB.)
Last analysis: 23 Jul, 2018 10:32:25

Analysis MD5: 78405310a9db8d3cbf27432ed5393f71

Analysis of the file classifies it as a class A (Safe). The file is safe to use. The trust index of this analysis is 68 % (moderate).

A
B
C
D+
D
D-
E+
E
E-
F

Description

klwtblfs.exe is a Kaspersky Anti-Virus. It is part of the application Kaspersky Internet Security, developed by Kaspersky Lab. This program protect your system against viruses, Trojan horses and other threats

Filename: klwtblfs.exe (Kaspersky Anti-Virus)
Threat analysis: Safe
Analysis trust:
68%
Recent activity:
First seen: 11 Jul, 2011
Last seen: 11 Jul, 2011
Last analysis: 23 Jul, 2018
Possible infection: Clean

klwtblfs.exe Kaspersky Anti-Virus

Application: Kaspersky Internet Security
Developer: Kaspersky Lab
Stability:
69%
File version: 12.0.0.374
File size: 131472 bytes (128 KB.)
Recent activity:
Historic activity:
MD5 hash: 78405310a9db8d3cbf27432ed5393f71
SHA1 hash: e0cfb5b633ae7dfe226eff3faa85275fbb01cadd
SHA256 hash: 33f71ad290893f3fa6e03e5b8ca1efe9b2d4dde5047eebf3c31c661ab21ff723
A

Signature verification

Signed and verified

This file is signed. The publisher is verified.

C

File entropy

File entropy match: File code

This file contains (executable) code.

File signature

Executable file

An executable file causes a computer "to perform indicated tasks according to encoded instructions," as opposed to a data file that must be parsed by a program to be meaningful.

The determination of a file type is done with a signature or magic-numbers. Files are identified using by comparing the first set of bytes in the file header. Using this method type of files are recognised no matter the extension used. This information is useful to for example recognise executable files cloaked as images or movies.


A

Malicious code scan

No malicious code found

Agics makes een analysis of the source code of the file. We look for comparisons with known malicious source code. This is a good way to detect new malicious files which are in fact variations of existing, and known malicious files.

Scan results:

0 %

A

Online virus scanners

Detection ration:

0 %
A

VirusShare.com

Not available on virusshare.com

VirusShare.com is a repository of malware samples to provide security researchers, incident responders, forensic analysts, and the morbidly curious access to samples of live malicious code. Presence of the sample on this site indicates that the file is (Once considered) being malicious.
Website: virusshare.com
A

National Software Reference Library

Present on the nsrl list and safe

The NSRL contains a collection of digital signatures of known, traceable software applications. There are application hash values in the hash set which may be considered malicious, i.e. steganography tools and hacking scripts.
Website: www.nsrl.nist.gov

NSRL ID-info:

Kaspersky ONE Universal Security
12.0.0.374
Anti Virus
131472 kb.
Kaspersky Lab Ltd


A

Statistic analysis

Statistic analysis of the file

Deviates from other files with the same name (imitation)
The file does have a certificate
This is not a common file
Normal code
B

Neural network analysis

Analysis: Low risk

A neural network is a type of artificial intelligence. It recognized patterns nog clear for a human viewer. Our neural network is surprisingly accurate in recognizing dangerous files. The value below is the predicted chance the file is malicious.

6%6 %

?

User feedback

Read feedback on this file from other users. Help other users by providing feedback yourself.

You can earn reputation points !

You are currently not logged in. Login, or Create an account

Feedback users:

There has been no user feedback provided yet.
You are not logged in. Only registered users can provide feedback. Login and help other users.

Login Create an account