» zlib1.dll
Overview
Analysis
File Details
Programs (1)

zlib1.dll

zlib

Taiwan Shui Mu Chih Ching Technology Limited

The file zlib1.dll, “zlib data compression library” by Taiwan Shui Mu Chih Ching Technology Limited has been detected as adware by 4 anti-malware scanners. This file is typically installed with the program Picexa by Taiwan Shui Mu Chih Ching Technology Limited.. It is also typically executed from the user's temporary directory.

File name:

zlib1.dll

Publisher:

Taiwan Shui Mu Chih Ching Technology Limited (signed and verified)

Product:

zlib

Description:

zlib data compression library

Version:

1.2.3

MD5:

d2f1f99b6437373d2f262f707a1e3a0d

SHA-1:

c27b1a1985c62f305045bd03988bff8bf033d472

SHA-256:

3aa5010757c2f74ef3d541755884b62637be7b1ab800c13853bf50cddb4f4c6e

Scanner detections:

4 / 68

Status:

Adware

Analysis date:

11/30/2024 7:58:08 AM UTC (today)

Scan engine

Detection

Engine version

AVG

Generic

2016.0.3158

Bkav FE

W32.HfsAdware

1.3.0.6379

Dr.Web

Adware.Mutabaha.229

9.0.1.05190

Reason Heuristics

PUP.Thinknice

15.3.26.12

File size:

64.2 KB (65,720 bytes)

Product version:

1.2.3

Original file name:

zlib1.dll

Common path:

C:\users\{user}\appdata\local\temp\_@6990.tmp

Digital Signature

Signed by:

Taiwan Shui Mu Chih Ching Technology Limited

Authority:

GlobalSign nv-sa

Valid from:

3/4/2015 11:26:37 AM

Valid to:

3/4/2016 11:26:37 AM

Subject:

CN=Taiwan Shui Mu Chih Ching Technology Limited, O=Taiwan Shui Mu Chih Ching Technology Limited, L=Taipei City, S=Taiwan, C=TW

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121003857AB2AD439A7293EF2F1A8B3DCB6

File PE Metadata

Compilation timestamp:

7/20/2005 12:48:10 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

1536:1/jUwfZ7BURaHUry7nToIfYIOlIO+CM6:Lx7BURaHUrgTBfev+CM6

Entry address:

0xA146

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, 60, 00, 01, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, 70, 00, 01, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, 15, FF, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, 54, 00, 00, 00, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, F1, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, E0, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00... 
[+]

Entropy:

6.8069

Developed / compiled with:

Microsoft Visual C++ 6.0

Code size:

37 KB (37,888 bytes)

The file zlib1.dll has been discovered within the following program.

Picexa by Taiwan Shui Mu Chih Ching Technology Limited.

About 2% of users remove it

Remove zlib1.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.