home

Smartbar.Infrastructure.Core.dll

SmartbarProxy

This is part of the Linkury/SnapDo monetization software, a web browser toolbar used to hijack a user's search in order to collect revenues. The SmartBar is a a potentially unwanted toolbar and Windows Gadget that is advertising supported (adware). The module Smartbar.Infrastructure.Core.dll has been detected as adware by 5 anti-malware scanners.
Product:
SmartbarProxy

Version:
1.2.0.0

MD5:
ba2d6385752d73f45f9b803c7c3dc9d5

SHA-1:
bc28ba5b91c42915bd2fecfc8b2fb9f79137eb50

SHA-256:
2dbb2e1e383bb64324e18ccb328402df2a86a2b7227e520709ee15b15bd404d4

Scanner detections:
5 / 68

Status:
Adware

Analysis date:
4/25/2024 3:38:26 PM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
AdWare.MSIL.Agent
2.1.4+

Avira AntiVirus
APPL/Linkury.Gen2
7.11.179.162

G Data
Win32.Application.Linkury
14.10.24

Reason Heuristics
PUP.Smartbar.AA
14.10.19.22

VIPRE Antivirus
Threat.4783962
33706

File size:
22.5 KB (23,040 bytes)

Product version:
1.2.0.0

Original file name:
Smartbar.Infrastructure.Core.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\smartbar\application\smartbar.infrastructure.core.dll

File PE Metadata
Compilation timestamp:
2/10/2013 1:51:45 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:WBtDcWqcGh8qVKmb7BdoncxAgYSyD0eLX8/PzaQbxNntLphoUhcfnB7bI9+t:PZTKm700eNpFIS

Entry address:
0x71DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 30, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 48, 00, 00, 00, 58, 80, 00, 00, F0, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, F0, 02, 34, 00, 00, 00...
 
[+]

Entropy:
5.5766

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
20.5 KB (20,992 bytes)

Remove Smartbar.Infrastructure.Core.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.