home

libpng.dll

LibPNG

Taiwan Shui Mu Chih Ching Technology Limited

LIBPNG15.DLL is the library is the PNG reference library that supports almost all PNG features and is recompiled by Taiwan Shui Mu Chih Ching Technology Limited. The module libpng.dll, “PNG image compression library” by Taiwan Shui Mu Chih Ching Technology Limited has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. Although a detection has been made for this resource, it is generally a commonly distributed 3rd-party library and is typically safe by itself.
Publisher:
Taiwan Shui Mu Chih Ching Technology Limited  (signed and verified)

Product:
LibPNG

Description:
PNG image compression library

Version:
1.5.9

MD5:
2684ac5c2c224869cf94a1c26d8e9656

SHA-1:
c48936ecaaf325a7cae45439ec78915dbfa594fa

SHA-256:
4673001a54fb4d2640ca1cc59f6f4d2708fe4a6633c260582194bf045d7fc361

Scanner detections:
1 / 68

Status:
Adware

Explanation:
This is the library is the PNG reference library that supports almost all PNG features. While the file itself is not dangerous, it is part of a program that has been detected.

Analysis date:
11/23/2024 10:16:53 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Thinknice (M)
17.2.26.7

File size:
180.6 KB (184,984 bytes)

Product version:
1

Copyright:
? 1998-2009 Glenn Randers-Pehrson et al.

Original file name:
LIBPNG15.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\libpng.dll

Digital Signature
Signed by:
Taiwan Shui Mu Chih Ching Technology Limited

Authority:
GlobalSign nv-sa

Valid from:
3/6/2015 1:19:12 AM

Valid to:
3/4/2016 4:26:37 AM

Subject:
CN=Taiwan Shui Mu Chih Ching Technology Limited, O=Taiwan Shui Mu Chih Ching Technology Limited, L=Taipei City, S=Taiwan, C=TW

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112127474DE010DA49D31D0EE8193EAC2D0E

File PE Metadata
Compilation timestamp:
6/26/2013 1:59:49 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

Entry address:
0x21B49

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, A0, 03, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 10, 68, 58, 9A, 02, 10, E8, 98, 04, 00, 00, 33, C0, 40, 8B, F0, 89, 75, E4, 33, DB, 89, 5D, FC, 8B, 7D, 0C, 89, 3D, 10, C0, 02, 10, 89, 45, FC, 85, FF, 75, 0C, 39, 3D, 80, C6, 02, 10, 0F, 84, D4, 00, 00, 00, 3B, F8, 74, 05, 83, FF, 02, 75, 38, A1, 10, 31, 02, 10, 85, C0, 74, 0E, FF, 75, 10, 57, FF, 75, 08, FF, D0, 8B, F0, 89, 75, E4, 85, F6, 0F, 84, B1, 00, 00, 00...
 
[+]

Entropy:
6.8329

Developed / compiled with:
Microsoft Visual C++

Code size:
132.5 KB (135,680 bytes)

Remove libpng.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.