» iImportLib.dll
Overview
Analysis
File Details
Programs (1)

iImportLib.dll

Picexa Viewer

Taiwan Shui Mu Chih Ching Technology Limited

The module iImportLib.dll by Taiwan Shui Mu Chih Ching Technology Limited has been detected as adware by 5 anti-malware scanners. This file is typically installed with the program Picexa by Taiwan Shui Mu Chih Ching Technology Limited..

File name:

iImportLib.dll

Publisher:

Taiwan Shui Mu Chih Ching Technology Limited (signed and verified)

Product:

Picexa Viewer

Description:

iImportLib

Version:

2.1.4.278

MD5:

448b7f9ee5b733cbba20167d562fdded

SHA-1:

cd300984a5d186a4969cbca5b3f2d451d8a38843

SHA-256:

adadda9edecd2338dcfae4886162b98c58e8871df7d9481c3d9be97be7e4c7fd

Scanner detections:

5 / 68

Status:

Adware

Analysis date:

11/5/2024 2:25:55 AM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

W32.HfsAdware

1.3.0.6379

Dr.Web

Adware.Mutabaha.229

9.0.1.088

herdProtect (fuzzy)

variant of _@5cb2.tmp (Adware)

2015.7.3.16

Panda Antivirus

PUP/Winzipper

15.07.03.04

Reason Heuristics

PUP.Thinknice

15.3.29.9

File size:

1.3 MB (1,327,288 bytes)

Product version:

2.1.4.278

Original file name:

iImportLib.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\picexa\iimportlib.dll

Digital Signature

Signed by:

Taiwan Shui Mu Chih Ching Technology Limited

Authority:

GlobalSign nv-sa

Valid from:

3/6/2015 7:19:12 AM

Valid to:

3/4/2016 10:26:37 AM

Subject:

CN=Taiwan Shui Mu Chih Ching Technology Limited, O=Taiwan Shui Mu Chih Ching Technology Limited, L=Taipei City, S=Taiwan, C=TW

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112127474DE010DA49D31D0EE8193EAC2D0E

File PE Metadata

Compilation timestamp:

3/26/2015 3:24:13 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

24576:MCdMdnQnl/uf+2Gdt2TRITPx5pgEIuytJlO8zGtvY5m9bT+xrjZRCmvkOsiPb:JdEn+FuEdcTRIT55pgnH0HvCm9bTWrjv

Entry address:

0xD0D54

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 7F, 03, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 10, 68, A8, 65, 10, 10, E8, 3D, 01, 00, 00, 33, C0, 40, 8B, F0, 89, 75, E4, 33, DB, 89, 5D, FC, 8B, 7D, 0C, 89, 3D, 20, 20, 13, 10, 89, 45, FC, 85, FF, 75, 0C, 39, 3D, 44, 57, 13, 10, 0F, 84, D4, 00, 00, 00, 3B, F8, 74, 05, 83, FF, 02, 75, 38, A1, D0, 04, 0E, 10, 85, C0, 74, 0E, FF, 75, 10, 57, FF, 75, 08, FF, D0, 8B, F0, 89, 75, E4, 85, F6, 0F, 84, B1, 00, 00, 00... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

886.5 KB (907,776 bytes)

The file iImportLib.dll has been discovered within the following program.

Picexa by Taiwan Shui Mu Chih Ching Technology Limited.

About 2% of users remove it

Remove iImportLib.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.