home

7z.dll

7-Zip

ZUNSHANG INFO TECH CO. LTD.

7za.dll is a stand alone plugin for the 7-Zip file archiver and extraction utility. The plugin is used by 3rd-party software to provide archiving functionality for 7z, ZIP and gzip formats and is recompiled by ZUNSHANG INFO TECH CO. LTD.. Although a detection has been made for this resource, it is generally a commonly distributed 3rd-party library and is typically safe by itself.
Publisher:
Igor Pavlov  (signed by ZUNSHANG INFO TECH CO. LTD.)

Product:
7-Zip

Description:
7z Standalone Plugin

Version:
9.20

MD5:
71cf06a9819421f6ca0b8279465bde45

SHA-1:
20341d5b88c7a502672092f9febb41444e1c4a93

SHA-256:
464e169e4fb12f6e649bac0fe31f45217d940d3550de638ca354c020b3d1b183

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/5/2024 11:44:22 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.TopTools (M)
16.12.12.14

File size:
906.1 KB (927,896 bytes)

Product version:
9.20

Copyright:
Copyright (c) 1999-2010 Igor Pavlov

Original file name:
7za.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\松鼠盒子\7z.dll

Digital Signature
Signed by:
ZUNSHANG INFO TECH CO. LTD.

Authority:
WoSign CA Limited

Valid from:
3/10/2016 3:08:55 PM

Valid to:
3/10/2017 3:08:55 PM

Subject:
CN=ZUNSHANG INFO TECH CO. LTD., O=ZUNSHANG INFO TECH CO. LTD., L=Changzhou, S=Jiangsu, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
4F1846359241387E3EFE5A631480EEFE

File PE Metadata
Compilation timestamp:
6/12/2015 3:38:37 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:r4JEXg0WoCilbrfC5tVzq14TaZ2/RsAtIqLZm1W7pYzkoL9MyGWg5:8JEpW2lbrfk7q14Tak/RRxmw7Qkl2g

Entry address:
0x8A493

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, F4, 3A, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 56, 8D, 45, 08, 50, 8B, F1, E8, 66, 3B, 00, 00, C7, 06, 8C, 03, 0A, 10, 8B, C6, 5E, 5D, C2, 04, 00, C7, 01, 8C, 03, 0A, 10, E9, FE, 3B, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, F1, C7, 06, 8C, 03, 0A, 10, E8, EB, 3B, 00, 00, F6, 45, 08, 01, 74, 07, 56, E8, AB, 88, F7, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 56, 57, 8B, 7D, 08, 8B, 47, 04...
 
[+]

Entropy:
6.5324

Code size:
607 KB (621,568 bytes)

Scan 7z.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.