home

bzip2.dll

Bzip2

深圳市为爱普信息技术有限公司

Publisher:
GnuWin32 <http://gnuwin32.sourceforge.net>  (signed by 深圳市为爱普信息技术有限公司)

Product:
Bzip2

Description:
Bzip: file compressor

Version:
1.0.5.3001

MD5:
6fce1bb159335e34d039ccd6e6875d99

SHA-1:
dcaa7a431b59f06b5cdefab286c9b09cb05f2021

SHA-256:
8889c63761598fa9f4b741a36d9f28d177928b85d30aa4b75f367abe5ae19d86

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 10:28:43 AM UTC  (today)

File size:
74 KB (75,784 bytes)

Product version:
1.0.5.3001

Copyright:
© 2008 Julian Seward <jseward@acm.org>

Trademarks:
GnuWin32®, Bzip2®, bzip2®

Original file name:
bzip2.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\°®ë¼öúêö\files\patchtools\bzip2.dll

Digital Signature
Signed by:
深圳市为爱普信息技术有限公司

Authority:
GlobalSign nv-sa

Valid from:
5/22/2012 6:05:51 AM

Valid to:
5/23/2013 6:05:51 AM

Subject:
CN=深圳市为爱普信息技术有限公司, O=深圳市为爱普信息技术有限公司, L=Shenzhen, S=Guangdong, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11210E8884FF97E07AF62AF27C885CA9980C

File PE Metadata
Compilation timestamp:
3/20/2008 8:12:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.56

CTPH (ssdeep):
1536:Q9FWW0igMY08p/41AdhEfWoh8eGf9NvvvvvvvvvvvvvvvvJQfBquD+s+M:Q9FxMJj3EWne290Ss

Entry address:
0x1060

Entry point:
55, 89, E5, 56, 53, 83, EC, 10, 8B, 75, 0C, 83, FE, 01, 74, 47, 89, 74, 24, 04, 8B, 45, 10, 89, 44, 24, 08, 8B, 45, 08, 89, 04, 24, E8, 6A, BB, 00, 00, 89, C3, 83, EC, 0C, 83, FE, 01, 0F, 94, C2, 31, C0, 85, DB, 0F, 94, C0, 85, C2, 75, 47, 85, F6, 75, 0C, 8B, 0D, 00, 00, 45, 68, 85, C9, 75, 46, 31, DB, 89, D8, 8D, 65, F8, 5B, 5E, 5D, C2, 0C, 00, C7, 04, 24, 80, 00, 00, 00, E8, 8D, BF, 00, 00, A3, 00, 00, 45, 68, 85, C0, 74, 2B, C7, 00, 00, 00, 00, 00, A3, 10, 00, 45, 68, E8, D4, BB, 00, 00, E8, AF, BB, 00...
 
[+]

Entropy:
6.3979

Code size:
48.5 KB (49,664 bytes)

The file bzip2.dll has been seen being distributed by the following URL.

http://d.updater.i4.cn/i4toolupdate6/i4tools/update_files/files/.../6FCE1BB159335E34D039CCD6E6875D99.dll

Scan bzip2.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.