home

esearch.dll

MD5:
04d08102c10da8274feb3d62cc58d9d7

SHA-1:
5090442d98e9d8663ba0afc270af32443047543e

SHA-256:
c635d15bf50d501510b1350ccc4b5912da25385c6e8d606db63e6efd26beb11c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/31/2024 5:44:49 PM UTC  (today)

File size:
9.9 KB (10,179 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\esearch.dll

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
192:zKYBG4RtudKhj2sBAp4MPZjhKv5b19A8ZxkpA6VM7YGjL4F:z7G4dj2oMRjhI5LA8DKeb4F

Entry point:
78, 9C, A5, 7D, D9, 73, DB, 3A, D2, EF, F3, DC, AA, FB, 3F, E8, 61, EA, CC, 93, 33, 96, B7, 93, 7C, 6F, 14, 09, 91, B0, B8, 99, 8B, 96, A4, 52, B7, 6C, 6D, 94, 6D, C9, 8A, 25, 2F, CA, 5F, FF, 35, 16, 92, 0D, 49, 6C, E5, D4, 9D, AA, 93, 49, 9C, FC, 1A, 40, A3, D1, 3B, C0, 9B, 8B, F3, FF, FB, 7F, FE, FD, 70, 7D, 3E, 5E, 4D, FE, DF, DB, E6, 5F, CE, 6D, CB, F6, 78, 68, B5, AF, FF, DD, 6A, FD, 68, FD, BB, 73, 7D, 6E, 87, 4E, EB, E7, BF, F2, B4, C5, 43, 87, 0D, 59, FA, AF, 8B, FF, 39, D7, FF, 2B, A1, 53, 13, 5A...
 
[+]

Entropy:
7.9795  (probably packed)

The file esearch.dll has been seen being distributed by the following URL.

http://app.incrediblecharts.com/userscripts/esearch/esearch.dll?searchstr=CHIN US&searchonlycodes=0&searchtextoption=0&random=1820242583&userid=576128&clientid_info=3232&csession=6AEDF56C723988CF1AC4E54820443DFC&build=7.0.0.14&datamodulebuild=1.0.0.30&screenerisapi=/userscripts/.../fm_screening7.dll

Scan esearch.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.