» ctipsdef.dll
Overview
Analysis
File Details
Programs (1)

ctipsdef.dll

Crawler Toolbar

Crawler, LLC

The module ctipsdef.dll, “Crawler Tips for CT5” by Crawler has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Crawler 3D Earth Screensaver by Crawler, LLC which is a potentially unwanted software program.

File name:

ctipsdef.dll

Publisher:

Crawler.com (signed by Crawler, LLC)

Product:

Crawler Toolbar

Description:

Crawler Tips for CT5

Version:

5, 0, 0, 10

MD5:

ae23e0b9c53edd2791db5d5c03e831b2

SHA-1:

b24ca10a8cbedadcf45c25e0fe74238ee2e0a445

SHA-256:

b1de83baa3d5ed41f4441d6e136e52e8d988c7fdfd56ad70c134c375c4746c21

Scanner detections:

1 / 68

Status:

Potentially unwanted

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

12/24/2024 12:17:45 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Crawler (M)

17.3.13.18

File size:

435.2 KB (445,608 bytes)

Product version:

5, 0, 0, 10

Original file name:

ctipsdef.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\crawler\toolbar\ctipsdef.dll

Digital Signature

Signed by:

Crawler, LLC

Authority:

VeriSign, Inc.

Valid from:

12/10/2010 1:00:00 AM

Valid to:

12/12/2013 12:59:59 AM

Subject:

CN="Crawler, LLC", OU=IT, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Crawler, LLC", L=Boca Raton, S=Florida, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

1535EDA3C8F2FED30D4497572760F240

File PE Metadata

Compilation timestamp:

5/6/2010 12:01:31 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

Entry address:

0x3050

Entry point:

6A, 0C, 68, D8, 92, 00, 10, E8, 74, 01, 00, 00, 33, C0, 40, 89, 45, E4, 8B, 75, 0C, 33, FF, 3B, F7, 75, 0C, 39, 3D, 30, BA, 00, 10, 0F, 84, B3, 00, 00, 00, 89, 7D, FC, 3B, F0, 74, 05, 83, FE, 02, 75, 31, A1, 7C, C2, 00, 10, 3B, C7, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D0, 89, 45, E4, 39, 7D, E4, 0F, 84, 85, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 22, FE, FF, FF, 89, 45, E4, 3B, C7, 74, 72, 8B, 5D, 10, 53, 56, FF, 75, 08, E8, DF, DF, FF, FF, 89, 45, E4, 83, FE, 01, 75, 0E, 3B, C7, 75, 0A, 53, 57, FF... 
[+]

Developed / compiled with:

Microsoft Visual C++ v7.1

Code size:

32 KB (32,768 bytes)

The file ctipsdef.dll has been discovered within the following program.

Crawler 3D Earth Screensaver by Crawler, LLC

During setup of this program the installer offers the user's the ability by default to install the potentially unwanted Crawler Toolbar.

www.crawler.com/products/3D-Earth-Screensaver.aspx

86% remove it

Remove ctipsdef.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.