home

audition.dll

Cong Ty Dau Tu Va Phat Trien Cong Nghe Thong Tin

Publisher:
Cong Ty Dau Tu Va Phat Trien Cong Nghe Thong Tin  (signed and verified)

MD5:
36efaa2a52a036ef4ebc91ee23873076

SHA-1:
e4db113b3b1957edf408cc32917033c8b7d2b979

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/11/2024 1:09:09 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

File size:
65.3 KB (66,912 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\vtcgame\audition\game\audition.dll

Digital Signature
Signed by:
Cong Ty Dau Tu Va Phat Trien Cong Nghe Thong Tin

Authority:
VeriSign, Inc.

Valid from:
7/25/2011 7:00:00 AM

Valid to:
7/26/2013 6:59:59 AM

Subject:
CN=Cong Ty Dau Tu Va Phat Trien Cong Nghe Thong Tin, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Cong Ty Dau Tu Va Phat Trien Cong Nghe Thong Tin, L=Hanoi, S=Hanoi, C=VN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1163AFD815645B4622FAC27B357AE85B

File PE Metadata
Compilation timestamp:
4/12/2013 3:58:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:uGtPiqg0MXdgPAqftzL+/qHwLMHZ7BZ+HEU/u6o:aRXmPLtzTQLwp0/do

Entry address:
0x5DBC

Entry point:
B8, DC, 4F, 02, 10, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 17, 47, 94, 08, DC, 3C, 12, A8, 14, E4, 39, 5E, 05, 50, 7C, 04, C2, B2, 88, 91, D0, 4B, 2F, CC, DD, E7, 72, 41, 65, 40, 2B, 25, 3B, 5B, 4F, 9F, B4, 47, 97, 79, 95, 41, AA, C5, 65, BC, 6C, 6D, 01, C7, 1A, F7, 49, EA, 03, 75, 57, 65, 78, BF, C4, FD, 55, B4, 11, F4, F2, D3, 1B, 35, F9, 64, 0E, 9E, 71, 69, 89, 6F, 0F, E5, EC, 39, D2, 8E, 78, AB, A5, 08, 95, 9D, 9A, E5, 23...
 
[+]

Entropy:
7.9071

Packer / compiler:
PECompact v2

Code size:
88 KB (90,112 bytes)

Scan audition.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.