» zkbplugin.1.1.0.16.dll
Overview
Analysis
File Details

zkbplugin.1.1.0.16.dll

折扣宝

ShenZhen TaiHe Capital co. ltd

File name:

Publisher:

微聚科技工作室 (signed by ShenZhen TaiHe Capital co. ltd)

Product:

折扣宝

Description:

折扣宝浏览器帮助对象

Version:

MD5:

64091a0cbd03a7c5dbb82f0851bf9720

SHA-1:

569515609edbf138be77cb5db8793b82ba444b00

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 11:21:29 PM UTC (a few moments ago)

File size:

135.2 KB (138,408 bytes)

Product version:

Original file name:

ZKBPlugin.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\zhekoubao\zkbplugin.1.1.0.16.dll

Digital Signature

Signed by:

ShenZhen TaiHe Capital co. ltd

Authority:

Thawte, Inc.

Valid from:

3/15/2011 8:00:00 AM

Valid to:

3/15/2012 7:59:59 AM

Subject:

CN=ShenZhen TaiHe Capital co. ltd, OU=RD, O=ShenZhen TaiHe Capital co. ltd, L=Shenzhen, S=Guangdong, C=CN

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

40F03463EFFB186AAB2BB60FD3B7166A

File PE Metadata

Compilation timestamp:

2/11/2012 8:04:21 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3072:oNEPQ9T30HDRTYsGI50+rOCETOPvtIjAoqn8YND4ie:kEP+3wRTcjeCOPvtNoFd

Entry address:

0xDEA2

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 10, 40, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 8B, C1, 8B, 4D, 08, C7, 00, CC, 81, 01, 10, 8B, 09, 89, 48, 04, C6, 40, 08, 00, 5D, C2, 08, 00, 8B, 41, 04, 85, C0, 75, 05, B8, D4, 81, 01, 10, C3, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 57, 8B, F9, 74, 2D, 56, FF, 75, 08, E8, BA, 40, 00, 00, 8D, 70, 01, 56, E8, 52, F1, FF, FF, 59, 59, 89, 47, 04, 85, C0, 74, 11, FF, 75, 08, 56, 50, E8, 3B, 40, 00, 00... 
[+]

Entropy:

6.3687

Code size:

85.5 KB (87,552 bytes)

Scan zkbplugin.1.1.0.16.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.