» SmartKeywordSuggest.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

SmartKeywordSuggest.dll

Smart Keyword Suggest

Think Tank Labs LLC

The module SmartKeywordSuggest.dll, “Smart Keyword Suggest for Microsoft Internet Explorer” by Think Tank Labs has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘Smart Keyword Suggest’. This file is typically installed with the program Smart Keyword Suggest by Think Tank Labs, LLC which is a potentially unwanted software program.

File name:

Publisher:

Excite Digital Media (signed by Think Tank Labs LLC)

Product:

Smart Keyword Suggest

Description:

Smart Keyword Suggest for Microsoft Internet Explorer

Version:

1.2.6.1

MD5:

0913554f649b2368e77e7bf9cf48082e

SHA-1:

12f2a66cbfd5ba1a8620515a23966b6c106165da

SHA-256:

1c74b13436d3ecdb7b5c6de2fde1b496e46c167503e52cc283908b8c8eddd9e6

Scanner detections:

1 / 68

Status:

Potentially unwanted

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

4/24/2024 11:06:43 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.ThinkTankLabs.ExciteDigitalMedia (M)

16.1.6.8

File size:

248.8 KB (254,800 bytes)

Product version:

1.2.6.1

Original file name:

SmartKeywordSuggest.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\smart keyword suggest\smartkeywordsuggest.dll

Digital Signature

Signed by:

Think Tank Labs LLC

Authority:

GoDaddy.com, Inc.

Valid from:

4/24/2012 6:26:47 PM

Valid to:

4/24/2014 6:26:47 PM

Subject:

CN=Think Tank Labs LLC, OU=Internet, O=Think Tank Labs LLC, L=Newport Beach, S=CA, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

00C784C63AD412

File PE Metadata

Compilation timestamp:

8/1/2012 11:08:20 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

6144:xXItuJ2MSQguBql7LDbdy/rfLYpYKZbX7:xvJ2MSQguBql8/rfLVmbX7

Entry address:

0x145CE

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 8C, 63, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, C8, 54, 02, 10, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, 4C, 51, 02, 10, C9, C2, 08, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 33, C9, 3B, 04, CD, 20, F2, 02, 10... 
[+]

Entropy:

6.1761

Code size:

140.5 KB (143,872 bytes)

Internet Explorer BHO

CLSID:

{26470A0E-27B2-4ff0-8D6B-C7D44B0D550A}

CLSID name:

Smart Keyword Suggest

The file SmartKeywordSuggest.dll has been discovered within the following program.

Smart Keyword Suggest by Think Tank Labs, LLC

Publisher's description - “Smart Keyword Suggest will suggest keywords that are similar to what you are trying to search for. The widget will help you search faster and also get the results you are looking for.”

smartkeywordsuggest.com/about.html

71% remove it

Remove SmartKeywordSuggest.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.