home

VAutoPK.exe

VAutoPK

VNG Corp

Publisher:
VNG Coporation  (signed by VNG Corp)

Product:
VAutoPK

Description:
VAutoPK for JX1

Version:
0, 1, 2, 65

MD5:
a820f44ccac418f300409a5d2be05fe0

SHA-1:
682593241127a2bce3eb1f4be6c51ef88c05b3e2

SHA-256:
36031318d7f495f9aa927236b475c38a500ed203d7553b9bcd3a5f846e13b660

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/26/2024 11:12:26 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.6979

Trend Micro House Call
TROJ_GEN.F47V0317
7.2.21

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra
21198

File size:
2.2 MB (2,323,128 bytes)

Product version:
0, 1, 2, 65

Copyright:
VAutoPK Copyright © 2010 by VNG Coporation

Original file name:
VAutoPK.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\vng\volamtruyenky\vautopk.exe

Digital Signature
Signed by:
VNG Corp

Authority:
VeriSign, Inc.

Valid from:
8/22/2013 7:00:00 AM

Valid to:
9/22/2015 6:59:59 AM

Subject:
CN=VNG Corp, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=VNG Corp, L=Ho Chi Minh, S=Ho Chi Minh, C=VN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
62BA478BF71543D3246E54F7DBDAEA8B

File PE Metadata
Compilation timestamp:
8/27/2014 3:46:21 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:w1p6xvPJX3fxRW6fn6k/1M3cRgf2F8TrxkoEnbW3834e3+KYFaUTB:GGJfxRWC6F6qHu1naso0+KYFaUN

Entry address:
0x334148

Entry point:
60, 8D, 64, 24, 20, 0F, 8A, 5A, 48, 22, 00, 60, 66, 89, 34, 24, C7, 44, 24, 1C, 20, 78, DE, 7F, 88, 04, 24, C7, 44, 24, 18, C1, 49, 76, 1E, 88, 24, 24, FF, 34, 24, C7, 04, 24, 40, 3B, 27, 01, 8D, 64, 24, 1C, E9, 97, 72, 22, 00, 4B, 8D, 78, E1, A6, 50, ED, 9B, 89, 1A, DF, C6, ED, 04, 2F, 7A, 21, 74, B7, 3A, C1, 94, 12, 15, 9A, 08, 6D, 97, 34, EF, A4, 55, 4C, D9, 8A, EF, 4A, F1, 37, D8, 6B, 1E, FB, AD, 94, 77, 7B, 17, 1D, C8, 69, 5B, 80, 1C, 1E, 89, 81, D3, A0, 83, 4F, 79, D2, 43, B4, 68, 21, A3, B4, E5, 8D...
 
[+]

Entropy:
7.9432  (probably packed)

Code size:
1.2 MB (1,305,600 bytes)

Scan VAutoPK.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.