» SmdmFService.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

SmdmFService.exe

SmdmF Service

AZTEC MEDIA INC.

The application SmdmFService.exe by AZTEC MEDIA INC has been detected as adware by 32 anti-malware scanners. It runs as a windows Service named “SmdmF Service”. This file is typically installed with the program Settings Manager by Aztec Media Inc. which is a potentially unwanted software program.

File name:

SmdmFService.exe

Publisher:

Aztec Media Inc (signed by AZTEC MEDIA INC.)

Product:

SmdmF Service

Version:

5.0.0.14682

MD5:

9b5de84f4dfecdb23389fbd4cfb52aab

SHA-1:

54ad0d4529a213eac238399342c2d9e68636d522

SHA-256:

d14efc53dec3531ab3ec8904e212548777184d1dbc6d1ed9acbcf269a03a4dac

Scanner detections:

32 / 68

Status:

Adware

Analysis date:

4/25/2024 3:41:20 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Adware.AztecMedia.G

801

Agnitum Outpost

PUA.Toolbar.SearchSuite

7.1.1

AhnLab V3 Security

PUP/Win32.SearchSuite

2014.11.26

Avira AntiVirus

ADWARE/Adware.Gen

7.11.188.220

AVG

Potentially harmful program Toolbar.SearchSuite

2015.0.3279

Baidu Antivirus

Adware.Win32.SearchSuite

4.0.3.141126

Bitdefender

Adware.AztecMedia.G

1.0.20.1650

Clam AntiVirus

Win.Adware.Searchsuite-5

0.98/21511

Comodo Security

ApplicUnwnt

20020

Emsisoft Anti-Malware

Adware.AztecMedia

8.14.11.26.02

ESET NOD32

Win32/Toolbar.SearchSuite (variant)

8.10781

Fortinet FortiGate

Riskware/SearchSuite

11/26/2014

F-Prot

W32/SearchSuite.A.gen

v6.4.7.1.166

F-Secure

Adware.AztecMedia.G

11.2014-26-11_4

G Data

Adware.AztecMedia

14.11.24

IKARUS anti.virus

PUA.Toolbar.SearchSuite

t3scan.1.7.5.0

K7 AntiVirus

Adware

13.185.14134

Kaspersky

not-a-virus:WebToolbar.Win64.SearchSuite

14.0.0.2890

Malwarebytes

PUP.Optional.SettingsManager.A

v2014.11.26.02

McAfee

SearchSuite

5600.6935

MicroWorld eScan

Adware.AztecMedia.G

15.0.0.990

NANO AntiVirus

Riskware.Win32.SearchSuite.dhgvft

0.28.6.63726

nProtect

Adware.AztecMedia.G

14.11.25.01

Panda Antivirus

Trj/Chgt.E

14.11.26.02

Qihoo 360 Security

Win32/Virus.WebToolbar.d3d

1.0.0.1015

Reason Heuristics

PUP.Service.AZTECMEDIAINC.M

14.11.26.2

Sophos

SearchSuite

4.98

SUPERAntiSpyware

Trojan.Agent/Gen-Nullo[Short]

10215

Trend Micro House Call

ADW_SRCHSUITE.SM

7.2.330

Trend Micro

ADW_SRCHSUITE.SM

10.465.26

VIPRE Antivirus

Trojan.Win32.Generic

31534

Zillya! Antivirus

Adware.SearchSuite.Win64.427

2.0.0.1992

File size:

3.4 MB (3,572,240 bytes)

Product version:

5.0.0.14682

Original file name:

SmdmFService.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\settings manager\smdmf\smdmfservice.exe

Digital Signature

Signed by:

AZTEC MEDIA INC.

Authority:

Thawte, Inc.

Valid from:

1/29/2014 1:00:00 AM

Valid to:

5/20/2015 1:59:59 AM

Subject:

CN=AZTEC MEDIA INC., OU=Development, O=AZTEC MEDIA INC., L=Panama City, S=Panama, C=PA

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

7DE0D719BBAF922D3A980DBD523B959A

File PE Metadata

Compilation timestamp:

11/22/2014 1:12:57 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

49152:NYa3wiSmUcNefPEY8U8hTDIW7Qs54QDntRRSHx+LwZZIvirS2U0sa35k+Bvni2em:KmUcePCdIWMs5DntR4Hx+LwZsuK+v

Entry address:

0x14D284

Entry point:

E8, A4, AF, 00, 00, E9, 89, FE, FF, FF, 6A, 10, 68, 60, F7, 6E, 00, E8, A6, 84, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7, 45, E0, 01, 00, 00, 00, C7, 45, FC, FE, FF, FF, FF, E8, 08, 00, 00, 00, E8, AD, 84, 00, 00, C2, 14, 00, 83, 7D, E0, 00, 75, 11, FF, 75, 18, FF, 75, E4, FF, 75, 0C, FF, 75, 08, E8, 4D, F8, FF, FF, C3, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 57, 33, DB, 6A, 07, 33, C0, 59... 
[+]

Code size:

2.7 MB (2,831,872 bytes)

Service

Display name:

SmdmF Service

Service name:

SmdmFService

Description:

Serving SmdmF modules functionality

Type:

Win32OwnProcess, InteractiveProcess

The file SmdmFService.exe has been discovered within the following program.

Settings Manager by Aztec Media Inc.

This is an adware web browser add-on that injects advertising in the user's browser as well as hijacks various browser settings such as the home page, search provider and new tab page.

86% remove it

Remove SmdmFService.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.