home

SafeSearch.dll

SafeSearch

AVSoftware EOOD

The module SafeSearch.dll by AVSoftware EOOD has been detected as adware by 2 anti-malware scanners.
Publisher:
AVSoftware Ltd  (signed by AVSoftware EOOD)

Product:
SafeSearch

Version:
0.9.2.0

MD5:
6443de9b8590c463b6260e1d6a8a239f

SHA-1:
8fc227374bf021d5ec6dc518dcad879ee6bfaa50

SHA-256:
ca1a21f8a4ec100ace398d6d3511a0faf4cde448ab03687e1426f803db536dd8

Scanner detections:
2 / 68

Status:
Adware

Analysis date:
4/25/2024 11:20:07 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

AVG
Generic
2017.0.2860

Reason Heuristics
PUP.SafeSearch.AVSoftware EOOD (M)
16.1.19.1

File size:
54.7 KB (56,048 bytes)

Product version:
0.9.2.0

Copyright:
Copyright 2012 AVSoftware, Ltd. All Rights Reserved

Original file name:
SafeSearch.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\safesearch\ie\safesearch.dll

Digital Signature
Signed by:
AVSoftware EOOD

Authority:
VeriSign, Inc.

Valid from:
3/5/2013 12:00:00 AM

Valid to:
6/4/2016 12:59:59 AM

Subject:
CN=AVSoftware EOOD, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=AVSoftware EOOD, L=Sofia, S=Sofia, C=BG

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0EB840FECC84AE6DCA7A92109E2314ED

File PE Metadata
Compilation timestamp:
10/18/2014 3:47:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:PkRpjQtsP1gsP1N1xx7hgx7hC0ThAsdHQtiATSD:PkRpktsP1gsP1Fx7hgx7hC0TTwtfSD

Entry address:
0xCC5E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0846

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
43.5 KB (44,544 bytes)

Remove SafeSearch.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.