» LIBPNG15.DLL
Overview
Analysis
File Details
Programs (1)

LIBPNG15.DLL

LibPNG

Taiwan Shui Mu Chih Ching Technology Limited

The file LIBPNG15.DLL, “PNG image compression library” by Taiwan Shui Mu Chih Ching Technology Limited has been detected as adware by 6 anti-malware scanners. This file is typically installed with the program Picexa by Taiwan Shui Mu Chih Ching Technology Limited.. It is also typically executed from the user's temporary directory.

File name:

LIBPNG15.DLL

Publisher:

Taiwan Shui Mu Chih Ching Technology Limited (signed and verified)

Product:

LibPNG

Description:

PNG image compression library

Version:

1.5.9

MD5:

40abae24593ba54e44e9f26a88dbad08

SHA-1:

1c4e563ece6f18da3c9b548e7c9d939845cf6aa3

SHA-256:

7c0db6bc6afa224441ff67a5a660a3c2631b7858e39e0e599aa1e7cb83021c20

Scanner detections:

6 / 68

Status:

Adware

Analysis date:

11/27/2024 1:38:58 AM UTC (today)

Scan engine

Detection

Engine version

AVG

Generic

2016.0.3158

Bkav FE

W32.HfsAdware

1.3.0.6379

Dr.Web

Adware.Mutabaha.229, Adware.Mutabaha.285

9.0.1.085

herdProtect (fuzzy)

variant of _@5cb5.tmp (Adware)

2015.7.1.8

Panda Antivirus

PUP/Winzipper

15.07.01.08

Reason Heuristics

PUP.Thinknice

15.3.26.12

File size:

180.7 KB (185,016 bytes)

Product version:

? 1998-2009 Glenn Randers-Pehrson et al.

Original file name:

LIBPNG15.DLL

Common path:

C:\users\{user}\appdata\local\temp\_@690d.tmp

Digital Signature

Signed by:

Taiwan Shui Mu Chih Ching Technology Limited

Authority:

GlobalSign nv-sa

Valid from:

3/4/2015 11:26:37 AM

Valid to:

3/4/2016 11:26:37 AM

Subject:

CN=Taiwan Shui Mu Chih Ching Technology Limited, O=Taiwan Shui Mu Chih Ching Technology Limited, L=Taipei City, S=Taiwan, C=TW

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121003857AB2AD439A7293EF2F1A8B3DCB6

File PE Metadata

Compilation timestamp:

6/26/2013 9:59:49 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

3072:c/mc8xhuUbmWB0U49WkQV1tEi+cQ9GZvuObykK798TBfCkxTp:W8zdB0U49PQV/Ei+cQ9+uGwCTBqkx

Entry address:

0x21B49

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, A0, 03, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 10, 68, 58, 9A, 02, 10, E8, 98, 04, 00, 00, 33, C0, 40, 8B, F0, 89, 75, E4, 33, DB, 89, 5D, FC, 8B, 7D, 0C, 89, 3D, 10, C0, 02, 10, 89, 45, FC, 85, FF, 75, 0C, 39, 3D, 80, C6, 02, 10, 0F, 84, D4, 00, 00, 00, 3B, F8, 74, 05, 83, FF, 02, 75, 38, A1, 10, 31, 02, 10, 85, C0, 74, 0E, FF, 75, 10, 57, FF, 75, 08, FF, D0, 8B, F0, 89, 75, E4, 85, F6, 0F, 84, B1, 00, 00, 00... 
[+]

Entropy:

6.8329

Developed / compiled with:

Microsoft Visual C++

Code size:

132.5 KB (135,680 bytes)

The file LIBPNG15.DLL has been discovered within the following program.

Picexa by Taiwan Shui Mu Chih Ching Technology Limited.

About 2% of users remove it

Remove LIBPNG15.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.