» ptb_adshattrdefs.dll
Overview
Analysis
File Details
Programs (1)

ptb_adshattrdefs.dll

adshattrdefs Dynamic Link Library

AccessData Group LLC

This is installed with AccessData FTK Imager.

File name:

Publisher:

AccessData Group, Inc. (signed by AccessData Group LLC)

Product:

adshattrdefs Dynamic Link Library

Version:

1.0.0.48

MD5:

e60c21ab4c28c21a10080361c1f13d22

SHA-1:

1a2573253817409210be1983c6421937474c1c8c

SHA-256:

9e512e28fab4ccd6513e6ab4241f7e02643b7a32ca0c4abb97f236f585c0c4f8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 12:57:43 AM UTC (today)

File size:

201.8 KB (206,632 bytes)

Product version:

1.0.0.48

Original file name:

attrdefs.rc

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\accessdata\ftk imager\langs\ptb_adshattrdefs.dll

Digital Signature

Signed by:

AccessData Group LLC

Authority:

VeriSign, Inc.

Valid from:

10/28/2012 7:00:00 PM

Valid to:

10/29/2015 6:59:59 PM

Subject:

CN=AccessData Group LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=AccessData Group LLC, L=Lindon, S=Utah, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

69805492C51477B6DEB8CCD4DDDA6995

File PE Metadata

Compilation timestamp:

12/3/2013 4:17:31 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3072:d+PJhgCqbn6kcTMb5LeOs08xfPRkQBBhFF7+bb3I/GJuPbML26EvUF3TnzyN:d+7gCqbnZb5LSPRkQBBhFFSbTJK

Entry point:

4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, C0, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

3.7911

The file ptb_adshattrdefs.dll has been discovered within the following program.

AccessData FTK Imager by AccessData

Publisher's description - “FTK is a court-accepted digital investigations platform built for speed, stability and ease of use. It provides comprehensive processing and indexing up front, so filtering and searching is faster than with any other product.”

www.accessdata.com/products/digital-forensics/ftk

About 8% of users remove it

Scan ptb_adshattrdefs.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.