home

zlib.dll

ZLib.DLL

VNG Corp

Publisher:
VNG Corp  (signed and verified)

Product:
ZLib.DLL

Description:
zlib data compression library

Version:
1.1.3

MD5:
703e15c1e7d754a7cc6a12bd572756f3

SHA-1:
016afc8c65866f2afb445f3a08053075b28e59aa

SHA-256:
546ccbc27e0a55f9a07c798e3cb4a345f986e33b7a82b4c5f2053e837eb3d7d3

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 8:37:35 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.6979

File size:
964.7 KB (987,832 bytes)

Copyright:
(C) 1995-1998 Jean-loup Gailly & Mark Adler

Original file name:
zlib.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\vng\volamtruyenky\zlib.dll

Digital Signature
Signed by:
VNG Corp

Authority:
VeriSign, Inc.

Valid from:
8/22/2013 7:00:00 AM

Valid to:
9/22/2015 6:59:59 AM

Subject:
CN=VNG Corp, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=VNG Corp, L=Ho Chi Minh, S=Ho Chi Minh, C=VN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
62BA478BF71543D3246E54F7DBDAEA8B

File PE Metadata
Compilation timestamp:
7/31/2014 1:31:38 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:KSv17pTWSxLCbiZ2vk7ZkV8h45rKluo/Z62K6nuvVNK2E64SmRo1n7Nh:KS1uiZ2vkqV8YrK4Gjnu982EBa7n

Entry address:
0x1DD1DF

Entry point:
E9, BA, CC, FF, FF, CF, 93, 8A, 5B, D2, 2B, 0E, 77, 4A, C3, 5E, 62, 22, 0B, EA, 13, 26, 43, 58, C9, ED, 04, 29, 21, 17, 41, 2E, 3C, D5, F1, 63, 3C, 00, 0E, FF, 85, F7, 09, 42, 44, 7A, A6, 3B, 2D, 19, 06, C3, 46, E4, E9, F6, 3C, 23, 22, 4D, DC, E7, 82, FD, 54, 4A, FB, 12, 2F, 24, ED, C8, 4D, FE, 2F, 68, D5, D8, 39, C4, 75, F6, 27, 3A, FF, 23, 79, A4, C8, 9F, 96, 80, BB, EE, 8B, A3, E4, 55, BE, DB, AF, 41, F4, 71, 52, CF, F3, 74, C1, 34, 01, 6A, E8, 6C, 39, 71, 2D, 11, 51, 5B, 0F, C0, F9, D7, 42, F7, FB, C6...
 
[+]

Entropy:
7.9009

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
100 KB (102,400 bytes)

Scan zlib.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.