home

Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll

ChromeRemotePlugin

This is part of the Linkury/SnapDo monetization software, a web browser toolbar used to hijack a user's search in order to collect revenues. The SmartBar is a a potentially unwanted toolbar and Windows Gadget that is advertising supported (adware). The module Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll has been detected as adware by 5 anti-malware scanners.
Publisher:
Microsoft*  (Invalid match)

Product:
ChromeRemotePlugin

Version:
1.2.0.0

MD5:
19c9fa9a87714f94ceef394a39d68fda

SHA-1:
9dadcce9952f91799d1636cdafbb1ff04e0c8f19

SHA-256:
0fe590e354171e802315d87c675c09cdf041f2e080a3db198d93549f27dee486

Scanner detections:
5 / 68

Status:
Adware

Analysis date:
4/24/2024 2:49:39 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
APPL/Linkury.Gen2
7.11.179.162

ESET NOD32
MSIL/Toolbar.Linkury (variant)
8.10586

G Data
Win32.Application.Linkury
14.10.24

Reason Heuristics
PUP.Smartbar.Microsoft.o
14.10.19.22

VIPRE Antivirus
Adware.Linkury
34070

File size:
50.5 KB (51,712 bytes)

Product version:
1.2.0.0

Copyright:
Copyright © Linkury Inc. 2009

Original file name:
Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\smartbar\application\smartbar.infrastructure.plugins.chromelocalplugin.dll

File PE Metadata
Compilation timestamp:
2/10/2013 1:49:20 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:KHutLmvy/O96/O9FC/O9O/O9cRD/O9KNvHq9cXvgh4hg6nccoILWyTwIhJ:KHs6afkCjLDLdgChg6cLILWyUkJ

Entry address:
0xDE6E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6262

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
48 KB (49,152 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.