home

zlibwapi.dll

ZLib.DLL

Product:
ZLib.DLL

Description:
zlib data compression and ZIP file I/O library

Version:
1.2.5

MD5:
54789344b07bed58e43851eca47e2b12

SHA-1:
93c561365bc7f1cbb5385d0323ed81044a6ec276

SHA-256:
9f8729ac49e0ccea86fe3b1a9b2c3fae9986ecd09db92853e7a588dbda85bf90

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:36:01 AM UTC  (today)

File size:
138 KB (141,312 bytes)

Copyright:
(C) 1995-2010 Jean-loup Gailly & Mark Adler

Original file name:
zlib.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\convivea\bit_che\2\zlibwapi.dll

File PE Metadata
Compilation timestamp:
5/10/2010 12:54:16 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:rjdSKCC+FzNehv8Rqiq9+yVojaylvjTBfxvA:rjdS8czEuqFVojzlvjTBJ

Entry address:
0x6515

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, E7, 46, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 51, 56, 8B, 75, 0C, 56, E8, E5, 25, 00, 00, 89, 45, 0C, 8B, 46, 0C, 59, A8, 82, 75, 17, E8, E7, F0, FF, FF, C7, 00, 09, 00, 00, 00, 83, 4E, 0C, 20, 83, C8, FF, E9, 2F, 01, 00, 00, A8, 40, 74, 0D, E8, CC, F0, FF, FF, C7, 00, 22, 00, 00, 00, EB, E3, 53, 33, DB, A8, 01, 74, 16, 89, 5E, 04, A8, 10, 0F, 84, 87, 00, 00, 00, 8B, 4E, 08, 83, E0, FE, 89, 0E...
 
[+]

Code size:
98 KB (100,352 bytes)

The file zlibwapi.dll has been discovered within the following programs.

Dexpot  by Dexpot GbR
Some versions use the OpenCandy software library to bundle potentially unwanted software offers during installation.
dexpot.de
30% remove it
IObit Malware Fighter  by IObit
Publisher's description - “IObit Malware Fighter is an advanced malware & spyware removal utility that detects, removes the deepest infections, and protects your PC from various potential spyware, adware, trojans, keyloggers, bots, worms, and hijackers.”
www.iobit.com/malware-fighter.html
22% remove it
IPCam Surveillance Software 3.0.5.4  by Edimax Technology Co., Ltd.
www.edimax.com.tw
4% remove it
iVolume 3.6.6  by mani.de
iVolume ensures that all your songs play at the same volume level.
www.mani.de/ivolume/index.html
20% remove it
JogoBox  by JogoBox.com
jogobox.com
About 1% of users remove it
Quick Slide Show  by NarAnd comp.
www.narand.com
About 3% of users remove it
Train Simulator 2012  by RailSimulator.com
www.railsimulator.com
About 2% of users remove it
 
Powered by Should I Remove It?

The file zlibwapi.dll has been seen being distributed by the following 7 URLs.

ftp://minotauro.suprisoft.com.br/\exe\ocx\zlibwapi.dll

http://zaxargames.com/client/.../zlibwapi.dll

http://www.swat-portal.de/CFupdates18/Files/CF19/.../zlib.dll

http://zxrmedia.com/client/.../zlibwapi.dll

http://zxrmedia.com/client/.../zlibwapi.dll

http://zaxargames.com/client/.../zlibwapi.dll

http://zaxargames.com/client/.../zlibwapi.dll

Scan zlibwapi.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.