» zlib.dll
Overview
Analysis
File Details

zlib.dll

ZLib.DLL

VNG Corp

File name:

zlib.dll

Publisher:

VNG Corp (signed and verified)

Product:

ZLib.DLL

Description:

zlib data compression library

Version:

1.1.3

MD5:

5e9155f65d8eddc1cf931b5ad4c46854

SHA-1:

d089f70febac53db6c5f755c558e1f14f3afb56a

SHA-256:

b29d0ef8cbaedf00b0d58609a5924c6e9fd63c96b2193536c93b1e172a0594d1

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/19/2024 11:02:05 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Bkav FE

HW32.Packed

1.3.0.6979

File size:

960.2 KB (983,224 bytes)

Original file name:

zlib.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\vng\volammienphi\zlib.dll

Digital Signature

Signed by:

VNG Corp

Authority:

VeriSign, Inc.

Valid from:

8/22/2013 7:00:00 AM

Valid to:

9/22/2015 6:59:59 AM

Subject:

CN=VNG Corp, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=VNG Corp, L=Ho Chi Minh, S=Ho Chi Minh, C=VN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

62BA478BF71543D3246E54F7DBDAEA8B

File PE Metadata

Compilation timestamp:

9/23/2014 11:15:25 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:lowCebjH89XbkwxJedyzvsvhHAlhZWLVphFW3lXF:lZCkjH8hkBgzvsvBAzKFW3lV

Entry address:

0x1C22EA

Entry point:

E9, C9, 46, 01, 00, 86, 14, 25, 80, AD, A2, 77, 9B, 10, DC, 6D, BD, 75, 56, EF, 67, BA, 2B, 22, 6D, CC, 21, 10, F5, 68, 07, 42, 0C, 11, FC, 65, 42, 03, 78, AD, 18, 05, F8, 41, 40, 09, 2D, 3A, FB, 1F, 08, 0D, 0D, 4D, D8, 51, 70, 37, 12, 7B, 4F, D9, 91, FA, D8, 3B, 0E, 32, B0, 02, A2, 73, 42, D3, AE, BB, C3, 72, 9F, 72, 0F, 3A, 5E, F5, 54, 78, D1, 88, 85, 34, 21, 3E, 5A, 95, F1, 78, 95, EA, 77, 28, 19, 97, 7D, BE, F5, 6A, DB, 66, 8A, B7, 7E, 7B, 88, 3D, 4F, 04, D4, 75, 99, 16, CB, DD, 92, B0, 8D, 98, E6, CB... 
[+]

Packer / compiler:

Xtreme-Protector v1.05

Code size:

100 KB (102,400 bytes)

Scan zlib.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.