home

zlib.dll

ZLib.DLL

VNG Corp

Publisher:
VNG Corp  (signed and verified)

Product:
ZLib.DLL

Description:
zlib data compression library

Version:
1.1.3

MD5:
e42574fc4aac037287c50c536f173e4d

SHA-1:
a23f17634ce2eb418e7831bf47165cf41db141c2

SHA-256:
3433b57c3ad423cefa4b72b1a4cd9dbe6fe1ebaec4784596d9f52fa3d8df402d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/10/2024 11:10:36 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.6979

File size:
1.1 MB (1,125,560 bytes)

Copyright:
(C) 1995-1998 Jean-loup Gailly & Mark Adler

Original file name:
zlib.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\vo lam truyen ky\zlib.dll

Digital Signature
Signed by:
VNG Corp

Authority:
VeriSign, Inc.

Valid from:
8/22/2013 7:00:00 AM

Valid to:
9/22/2015 6:59:59 AM

Subject:
CN=VNG Corp, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=VNG Corp, L=Ho Chi Minh, S=Ho Chi Minh, C=VN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
62BA478BF71543D3246E54F7DBDAEA8B

File PE Metadata
Compilation timestamp:
1/16/2015 12:48:08 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:qWgnVBCorZoHuO1NTsOiZEcU+UIbpRaqGrBHRS+DzwdfNV/BiZ57Yph0R+DwFfh:qWCvDRERqEJ+evUbUZ57t2+

Entry address:
0x14FD47

Entry point:
E8, 37, D2, 0D, 00, F5, FF, 37, 8F, 44, 24, 04, 57, E8, 8C, D5, 0D, 00, C0, D7, 02, E8, D1, A3, FF, FF, 3E, F0, 5F, 0C, 46, AC, E5, 2C, E2, 31, 9E, 28, 60, 8B, 07, CD, 62, 39, 17, 57, FA, 0D, 01, 06, CC, 80, 2F, EA, A6, 83, ED, 2C, 64, A3, 8F, 61, 90, C6, 8B, B0, 61, A1, B5, 1C, 41, D1, 0A, F3, 54, 79, 94, 9C, 54, 3F, F1, 3F, 34, 82, 51, 93, AA, 25, 1F, 30, F5, 0A, 5A, C9, ED, 04, 3B, 02, 2D, 87, C6, 57, E7, C0, 76, 1B, FA, DE, 51, 68, 73, D4, 48, 87, 6C, FE, 97, CD, 2A, F4, DF, FF, B3, 1C, 0B, 1E, B3, 99...
 
[+]

Entropy:
7.9067  (probably packed)

Code size:
340 KB (348,160 bytes)

Scan zlib.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.