» zlib1.dll
Overview
Analysis
File Details

zlib1.dll

zlib

SHANGRAO WANGJU TIANXIA TECHNOLOGY CO.,LTD.

zlib1.dll is the zLib Compression Library used for lossless data-compression and is recompiled by SHANGRAO WANGJU TIANXIA TECHNOLOGY CO.,LTD.. Although a detection has been made for this resource, it is generally a commonly distributed 3rd-party library and is typically safe by itself.

File name:

zlib1.dll

Publisher:

SHANGRAO WANGJU TIANXIA TECHNOLOGY CO.,LTD. (signed and verified)

Product:

zlib

Description:

zlib data compression library

Version:

1.2.7

MD5:

8a58a65bc22a93902f0d24cd8b7ecdba

SHA-1:

ffcbb2fddb4d24035e28e9a0ae0d02697d045763

SHA-256:

1b49e9e4ef7011001b9094e32e40da4a29018cc9ce481f59166357ae1516f09e

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

12/25/2024 7:21:49 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP (M)

16.12.13.1

File size:

112.4 KB (115,128 bytes)

Product version:

1.2.7

Original file name:

zlib1.dll

File type:

Dynamic link library (Win32 DLL)

Digital Signature

Signed by:

SHANGRAO WANGJU TIANXIA TECHNOLOGY CO.,LTD.

Authority:

WoSign CA Limited

Valid from:

5/19/2014 4:14:17 PM

Valid to:

5/20/2015 4:14:17 PM

Subject:

CN="SHANGRAO WANGJU TIANXIA TECHNOLOGY CO.,LTD.", E=370613157@qq.com, O="SHANGRAO WANGJU TIANXIA TECHNOLOGY CO.,LTD.", L=Shangrao, S=Jiangxi, C=CN

Issuer:

CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:

2B4E7078B9E5389032C973C65DDDCE95

File PE Metadata

Compilation timestamp:

6/14/2012 8:35:14 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

2.22

CTPH (ssdeep):

3072:NhQ5ijcHGO7fSLAOFPgbbTBfrbyY6qRJDQ1ZY1:PHKacTBTbyY6g8Y1

Entry address:

0x1440

Entry point:

55, 89, E5, 83, EC, 18, 8B, 55, 0C, C7, 05, 18, B0, E9, 62, 00, 00, 00, 00, 83, FA, 01, 74, 0F, 8B, 4D, 10, 8B, 45, 08, E8, FD, FD, FF, FF, C9, C2, 0C, 00, 89, 55, F4, E8, 11, D6, 00, 00, 8B, 55, F4, 8B, 4D, 10, 8B, 45, 08, E8, E3, FD, FF, FF, C9, C2, 0C, 00, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 55, 89, E5, 83, EC, 18, A1, 7C, 50, E9, 62, 85, C0, 74, 3C, C7, 04, 24, 00, 60, E9, 62, FF, 15, 78, D1, E9, 62, 89, C2, 83, EC, 04, 85, D2, B8, 00, 00, 00, 00, 74, 14, C7, 44, 24, 04, 0E, 60... 
[+]

Entropy:

6.7230

Code size:

76.5 KB (78,336 bytes)

Scan zlib1.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.