» mysearchdialeng.dll.mal
Overview
Analysis
File Details
Programs (1)

mysearchdialeng.dll.mal

MySearchDial Toolbar

Montera Technologeis LTD

The file is a bundle distribution and utilizes the installCore download manager to distribute this potentially unwanted software. The file mysearchdialeng.dll.mal by Montera Technologeis has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Mysearchdial by installCore which is a potentially unwanted software program.

File name:

Publisher:

Ironsource Israel (2011) LTD (signed by Montera Technologeis LTD)

Product:

MySearchDial Toolbar

Version:

1.8.19.0

MD5:

7054be89bc5bb8da276883ae2f102ddc

SHA-1:

7b8ebf81afca48cf7c5041447ca009755c5df8cb

Scanner detections:

1 / 68

Status:

Adware

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

4/26/2024 10:34:34 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Montiera.Montera.Toolbar (M)

16.1.31.11

File size:

549.4 KB (562,584 bytes)

Product version:

1.8.19.0

Language:

English (United States)

Common path:

C:\Program Files\mysearchdial\mysearchdialeng.dll.mal

Digital Signature

Signed by:

Montera Technologeis LTD

Authority:

COMODO CA Limited

Valid from:

5/28/2012 5:30:00 AM

Valid to:

5/29/2013 5:29:59 AM

Subject:

CN=Montera Technologeis LTD, O=Montera Technologeis LTD, STREET="18, Amammi st", L=Even Yehuda, S=Hasharon, PostalCode=40500, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

361B49E5431DD304CA32589D28E4DD3C

File PE Metadata

Compilation timestamp:

5/12/2013 1:27:37 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

12288:b8krZlOuR065/rNTeTFLMYOYW9POgZ2o+yF4Y1WHqW6gavIkbp//ZdxPuH4F:bxdawY6mpqW6g9EBdxsu

Entry address:

0x42BFA

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, A1, 9B, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, E8, DA, 57, 00, 00, FF, 75, 10, 83, C0, 20, 50, FF, 75, 0C, FF, 75, 08, E8, 0D, 9C, 00, 00, 83, C4, 10, 5D, C3, 8B, FF, 55, 8B, EC, 6A, 00, FF, 75, 0C, FF, 75, 08, E8, CD, FF, FF, FF, 83, C4, 0C, 5D, C3, 8B, FF, 55, 8B, EC, 83, EC, 10, 83, 65, FC, 00, 56, 8B, 75, 08, 85, F6, 75, 16, E8, A6, 3A, 00, 00, 6A, 16, 5E, 89, 30, E8, 4A, 3A, 00, 00, 8B, C6... 
[+]

Entropy:

6.4228

Code size:

369 KB (377,856 bytes)

The file mysearchdialeng.dll.mal has been discovered within the following program.

Mysearchdial by installCore

Mysearchdial is an ad-supported (users may see additional banner, search, pop-up, pop-under, interstitial and in-text link advertisements) cross web browser plugin for Internet Explorer (BHO) and Firefox/Chrome (plugin) and distributed through various monetization platforms during installation.

www.mysearchdial.com

84% remove it

Remove mysearchdialeng.dll.mal - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.