home

utilsdll.dll

Adtrustmedia, LLC

The module utilsdll.dll by Adtrustmedia has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Adtrustmedia, LLC  (signed and verified)

MD5:
eea550579849a6004e02eafaed93e655

SHA-1:
c6302ce8b27875f67b0094e324f7c1b21c78cf79

SHA-256:
1784027325afce711087072730c4aa289024db13d2c0ed713aac04b6f6b2031d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Displays advertising 'Trusted Advertisements' in the user's web browser in pages that normally would not show ads. Ads from AdTrustMedia are indicated by "AT-M Ad" displayed on the bottom right of the advertisement.

Analysis date:
4/26/2024 9:16:45 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Adtrustmedia (M)
15.6.20.23

File size:
1.9 MB (1,969,320 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Program Files\adtrustmedia\privdog\3.0.75.0\utilsdll.dll

Digital Signature
Signed by:
Adtrustmedia, LLC

Authority:
COMODO CA Limited

Valid from:
11/14/2013 1:00:00 AM

Valid to:
11/15/2014 12:59:59 AM

Subject:
CN="Adtrustmedia, LLC", O="Adtrustmedia, LLC", STREET="41 Watchung Plaza #330", L=Montclair, S=New Jersey, PostalCode=07042, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
4969CFD545F605E70D3F1290BB4893DB

File PE Metadata
Compilation timestamp:
11/11/2014 10:34:09 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:nbKkdEPA5WCZC3q0K/iszepUosvHXj8PY6NjgEfOFm2H0Jmwe2SFju0I:bKkaPA5WCZa0iLsv3wPTjdOFDUUwe5uX

Entry address:
0xCC074

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 5B, 87, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, AB, FE, FF, FF, CC, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 39, 51, 0F, 00, FF, 15, F3, 33, 05, 00, 4C, 8B, 1D, 24, 52, 0F, 00, 4C, 89, 5C, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, 7B, 6A, 01, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24...
 
[+]

Code size:
1.1 MB (1,168,384 bytes)

Remove utilsdll.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.