home

LIBPNG15.DLL

LibPNG

Taiwan Shui Mu Chih Ching Technology Limited

The file LIBPNG15.DLL, “PNG image compression library” by Taiwan Shui Mu Chih Ching Technology Limited has been detected as adware by 6 anti-malware scanners. This file is typically installed with the program Picexa by Taiwan Shui Mu Chih Ching Technology Limited.. It is also typically executed from the user's temporary directory.
Publisher:
Taiwan Shui Mu Chih Ching Technology Limited  (signed and verified)

Product:
LibPNG

Description:
PNG image compression library

Version:
1.5.9

MD5:
900808e3c04ded097faabf735bbcf41f

SHA-1:
f58819d8b96de39e790b8f197070aa95d97c0ad6

SHA-256:
132d4840bcc8920fda838c1c4bab3d8fc02c804c41eb2d9e3065e99058659715

Scanner detections:
6 / 68

Status:
Adware

Analysis date:
11/30/2024 8:43:00 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.3027

Bkav FE
W32.HfsAdware
1.3.0.6379

Dr.Web
Adware.Mutabaha.229, Adware.Mutabaha.285
9.0.1.0127

herdProtect (fuzzy)
variant of _@690d.tmp (Adware)
2015.8.5.7

Panda Antivirus
PUP/Winzipper
15.05.07.05

Reason Heuristics
Threat.Thinknice.TaiwanShuiMuChihChingTechnology
15.5.7.0

File size:
180.7 KB (185,016 bytes)

Product version:
1

Copyright:
? 1998-2009 Glenn Randers-Pehrson et al.

Original file name:
LIBPNG15.DLL

Common path:
C:\users\{user}\appdata\local\temp\_@5cb5.tmp

Digital Signature
Signed by:
Taiwan Shui Mu Chih Ching Technology Limited

Authority:
GlobalSign nv-sa

Valid from:
3/6/2015 2:19:12 PM

Valid to:
3/4/2016 5:26:37 PM

Subject:
CN=Taiwan Shui Mu Chih Ching Technology Limited, O=Taiwan Shui Mu Chih Ching Technology Limited, L=Taipei City, S=Taiwan, C=TW

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112127474DE010DA49D31D0EE8193EAC2D0E

File PE Metadata
Compilation timestamp:
6/26/2013 2:59:49 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3072:4/mc8xhuUbmWB0U49WkQV1tEi+cQ9GZvuObykK798TBfCkxTp:S8zdB0U49PQV/Ei+cQ9+uGwCTBqkx

Entry address:
0x21B49

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, A0, 03, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 10, 68, 58, 9A, 02, 10, E8, 98, 04, 00, 00, 33, C0, 40, 8B, F0, 89, 75, E4, 33, DB, 89, 5D, FC, 8B, 7D, 0C, 89, 3D, 10, C0, 02, 10, 89, 45, FC, 85, FF, 75, 0C, 39, 3D, 80, C6, 02, 10, 0F, 84, D4, 00, 00, 00, 3B, F8, 74, 05, 83, FF, 02, 75, 38, A1, 10, 31, 02, 10, 85, C0, 74, 0E, FF, 75, 10, 57, FF, 75, 08, FF, D0, 8B, F0, 89, 75, E4, 85, F6, 0F, 84, B1, 00, 00, 00...
 
[+]

Entropy:
6.8327

Developed / compiled with:
Microsoft Visual C++

Code size:
132.5 KB (135,680 bytes)

The file LIBPNG15.DLL has been discovered within the following program.

Picexa  by Taiwan Shui Mu Chih Ching Technology Limited.
About 2% of users remove it
 
Powered by Should I Remove It?

Remove LIBPNG15.DLL - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.