home

buttonutil.dll

Safari Developer: (ZMLURJCR77) duvalaugustin@gmail.com

The library buttonutil.dll has been detected as malware by 1 anti-virus scanner. This file is typically installed with the program Color My Facebook by Duval which is a potentially unwanted software program.
Publisher:
Safari Developer: (ZMLURJCR77) duvalaugustin@gmail.com  (signed and verified)

MD5:
46dd4bec43094814c51ace84d1cfe1cc

SHA-1:
0954e2c2643dbb0fc7f8191abd2823ec24186984

SHA-256:
cfdc22f8da515c4a0890ae3773609b706e6cbe9244291355388de620f743a67f

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/19/2024 2:18:46 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
16.5.30.21

File size:
238.1 KB (243,800 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\color my facebook\buttonutil.dll

Digital Signature
Signed by:
Safari Developer: (ZMLURJCR77) duvalaugustin@gmail.com

Authority:
Apple Inc.

Valid from:
7/15/2012 4:25:00 PM

Valid to:
7/15/2013 4:25:00 PM

Subject:
C=FR, CN=Safari Developer: (ZMLURJCR77) duvalaugustin@gmail.com, OID.0.9.2342.19200300.100.1.1=3MV9W8EA58

Issuer:
CN=Apple Worldwide Developer Relations Certification Authority, OU=Apple Worldwide Developer Relations, O=Apple Inc., C=US

Serial number:
24A43EE61F285A43

File PE Metadata
Compilation timestamp:
2/11/2013 9:08:18 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:JJVrno90DDvPuUFp7VfeNl3QQFA/Dp4vDOmkW3ftw:bZno9uDvP1doQQFA/Dp4vixWftw

Entry address:
0x1B5A2

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, AC, 64, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 83, EC, 18, 53, 8B, 5D, 0C, 56, 8B, 73, 08, 33, 35, 70, 64, 03, 10, 57, 8B, 06, C6, 45, FF, 00, C7, 45, F4, 01, 00, 00, 00, 8D, 7B, 10, 83, F8, FE, 74, 0D, 8B, 4E, 04, 03, CF, 33, 0C, 38, E8, BE, E0, FF, FF, 8B, 4E, 0C, 8B, 46, 08, 03, CF, 33, 0C, 38, E8, AE, E0, FF, FF, 8B, 45, 08, F6, 40, 04, 66, 0F, 85...
 
[+]

Code size:
172.5 KB (176,640 bytes)

The file buttonutil.dll has been discovered within the following program.

Color My Facebook  by Duval
Publisher's description - “No more blue on Facebook! Choose your favorite color and see result instantly on your Facebook pages. Over 2,500,000 people downloaded Color My Facebook, the most popular and beautiful Facebook color changer! Are you?”
colormyfacebook.com
64% remove it
 
Powered by Should I Remove It?

Remove buttonutil.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.