» advancedsearchbar.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

advancedsearchbar.dll

Advanced Searchbar

Advanced Search Technologies, Inc.

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘PosHelp’.

File name:

Publisher:

Advanced Search Technologies, Inc (signed by Advanced Search Technologies, Inc.)

Product:

Advanced Searchbar

Version:

3.0

MD5:

5d553331b99942c1f7c77fcbc147bd9e

SHA-1:

50cd028b74c57932fab96959130d80d0936c0102

SHA-256:

5da9a7ce28ae950aa4e5cfb2be0752b7b93f59dd0e0c8b7c988d48d6df61d9b0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 6:12:34 PM UTC (today)

File size:

895.8 KB (917,280 bytes)

Product version:

3, 0, 0, 0

Original file name:

advancedsearchbar.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\advancedsearchbar\advancedsearchbar.dll

Digital Signature

Signed by:

Advanced Search Technologies, Inc.

Authority:

VeriSign, Inc.

Valid from:

1/24/2006 7:00:00 PM

Valid to:

1/24/2009 6:59:59 PM

Subject:

CN="Advanced Search Technologies, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Advanced Search Technologies, Inc.", S=Nevada, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

64C4072BD6D627B3797418491EB73D31

File PE Metadata

Compilation timestamp:

10/5/2007 10:55:16 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

12288:6umLNSmpP3tyPMDyDMkliPpQ5420eWKnWNxjCKHy38mbC65pHgDJMuM3xRR/bKf:67pP3tyPMDyw1BJDBCWJExRR/bKf

Entry address:

0x9F1AF

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, 30, D7, 0C, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, 98, D7, 0C, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, 15, FF, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, C1, 0F, FF, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, F1, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, E0, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00... 
[+]

Entropy:

6.2091

Developed / compiled with:

Microsoft Visual C++ 6.0

Code size:

680 KB (696,320 bytes)

Internet Explorer BHO

Display name:

PosHelp

CLSID:

{CDEEC43D-3572-4E95-A2A5-F519D29F00C0}

CLSID name:

Advanced Searchbar

The file advancedsearchbar.dll has been discovered within the following programs.

Advanced Searchbar by AST, Inc

Publisher's description - “All the Internet makes searching the Internet extremely easy, because All the Internet has all the best search engines rolled into one easy to use website. Our goal is to keep Internet search simple and safe. Advanced Searchbar is a customizable toolbar for Internet Explorer.”

www.advancedsearchbar.com/contactus.html

64% remove it

Scan advancedsearchbar.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.