» sqlite3.dll
Overview
Analysis
File Details
Programs (1)

sqlite3.dll

YAC Security Protection

Taiwan Shui Mu Chih Ching Technology Limited

The file sqlite3.dll by Taiwan Shui Mu Chih Ching Technology Limited has been detected as adware by 7 anti-malware scanners. This file is typically installed with the program Picexa by Taiwan Shui Mu Chih Ching Technology Limited.. It is also typically executed from the user's temporary directory.

File name:

sqlite3.dll

Publisher:

Elex do Brasil Participações Ltda (signed by Taiwan Shui Mu Chih Ching Technology Limited)

Product:

YAC Security Protection

Description:

sqlite3

Version:

0.0.0.1

MD5:

2ffbec1ffaf8845de758efd08abed3b2

SHA-1:

a839da9f0b8a0e9e3e062f9920e7e2be4e30ff0d

SHA-256:

6ad757fe5ed2125206b88819956596c32d25172488cae425223169fac8be5a6f

Scanner detections:

7 / 68

Status:

Adware

Analysis date:

11/30/2024 7:58:08 AM UTC (today)

Scan engine

Detection

Engine version

AVG

Generic

2016.0.3158

Bkav FE

W32.HfsAdware

1.3.0.6379

Dr.Web

Adware.Mutabaha.229

9.0.1.085

herdProtect (fuzzy)

variant of _@5cc8.tmp (Adware)

2015.7.1.8

Malwarebytes

FraudTool.YAC

v2015.03.26.01

Panda Antivirus

PUP/Winzipper

15.07.01.08

Reason Heuristics

PUP.Thinknice

15.3.26.12

File size:

389.2 KB (398,520 bytes)

Product version:

0.0.0.1

Original file name:

sqlite3.dll

Common path:

C:\users\{user}\appdata\local\temp\_@696f.tmp

Digital Signature

Signed by:

Taiwan Shui Mu Chih Ching Technology Limited

Authority:

GlobalSign nv-sa

Valid from:

3/4/2015 11:26:37 AM

Valid to:

3/4/2016 11:26:37 AM

Subject:

CN=Taiwan Shui Mu Chih Ching Technology Limited, O=Taiwan Shui Mu Chih Ching Technology Limited, L=Taipei City, S=Taiwan, C=TW

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121003857AB2AD439A7293EF2F1A8B3DCB6

File PE Metadata

Compilation timestamp:

11/11/2014 5:18:07 AM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:607TzPRTGwRPrE2QMNgIyYgS2x27dwMXpE7:603lN1rE27NgOgavXpe

Entry address:

0x4A646

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 33, 04, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 10, 68, D0, 52, 05, 10, E8, 3B, 01, 00, 00, 33, C0, 40, 8B, F0, 89, 75, E4, 33, DB, 89, 5D, FC, 8B, 7D, 0C, 89, 3D, 20, A0, 05, 10, 89, 45, FC, 85, FF, 75, 0C, 39, 3D, 20, E2, 05, 10, 0F, 84, D4, 00, 00, 00, 3B, F8, 74, 05, 83, FF, 02, 75, 38, A1, 50, C2, 04, 10, 85, C0, 74, 0E, FF, 75, 10, 57, FF, 75, 08, FF, D0, 8B, F0, 89, 75, E4, 85, F6, 0F, 84, B1, 00, 00, 00... 
[+]

Entropy:

6.9058

Developed / compiled with:

Microsoft Visual C++

Code size:

299 KB (306,176 bytes)

The file sqlite3.dll has been discovered within the following program.

Picexa by Taiwan Shui Mu Chih Ching Technology Limited.

About 2% of users remove it

Remove sqlite3.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.