home

Smartbar.Installer.CustomActions.dll

.Installer.CustomActions

This is part of the Linkury/SnapDo monetization software, a web browser toolbar used to hijack a user's search in order to collect revenues. The SmartBar is a a potentially unwanted toolbar and Windows Gadget that is advertising supported (adware). The module Smartbar.Installer.CustomActions.dll, “Smartbar.Installer.CustomActions” has been detected as a potentially unwanted program by 4 anti-malware scanners.
Product:
.Installer.CustomActions

Description:
Smartbar.Installer.CustomActions

Version:
1.2.0.0

MD5:
0c00aded577e7c73c848bb44b19e5f8f

SHA-1:
09afbb6097958b033e96633b03d6a3ab6bf1a09c

SHA-256:
ef7e91f2be1096a938aed952cb75585cc39971a81c587ad1be92a9b9325ee14d

Scanner detections:
4 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2024 9:19:16 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
APPL/Linkury.Gen2
7.11.169.248

G Data
Win32.Application.Linkury
14.8.24

Malwarebytes
PUP.Optional.SmartBar
v2014.08.29.02

VIPRE Antivirus
Threat.4783962
32210

File size:
233 KB (238,592 bytes)

Product version:
1.2.0.0

Original file name:
Smartbar.Installer.CustomActions.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\windows\installer\msi5f15.tmp-\smartbar.installer.customactions.dll

File PE Metadata
Compilation timestamp:
8/27/2014 2:15:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:6qX9NTyYXJBmLyUxYWrYXHdcfZqEg1AkI9/C8Gyi57ALdzu7GYbzjWr6BolDqY8d:dTf5vUxYf9V1AF9IzFy

Entry address:
0x3BB4E

Entry point:
FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.3394

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
231 KB (236,544 bytes)

Remove Smartbar.Installer.CustomActions.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.