» SMBarBroker.exe
Overview
Analysis
File Details
Programs (7)

SMBarBroker.exe

Smart Address Bar

Think Tank Labs LLC

The application SMBarBroker.exe, “Smart Address Bar Broker” by Think Tank Labs has been detected as a potentially unwanted program by 3 anti-malware scanners. Additionally, the file is typically installed by a number of programs including Search Fairy by Think Tank Labs, LLC and RelevantSeek Suggestor by Sono Control Inc., both potentially unwanted software.

File name:

SMBarBroker.exe

Publisher:

Think Tank Labs, LLC (signed by Think Tank Labs LLC)

Product:

Smart Address Bar

Description:

Smart Address Bar Broker

Version:

1.0.3.0

MD5:

e504ae01f3836e58c3cc68a43f76e00f

SHA-1:

bc38dc947bf5a62f0c2d3b300c3c0ca0e4f612d2

SHA-256:

44f21da8df0ca220eb62a77efef239e73081f40b803cc8ddf49dbf1e378b6093

Scanner detections:

3 / 68

Status:

Potentially unwanted

Analysis date:

4/24/2024 5:47:29 AM UTC (today)

Scan engine

Detection

Engine version

Boost by Reason

Optional.ThinkTankLabs.L

188163

Dr.Web

Adware.Searcher.2627

9.0.1.022

Reason Heuristics

PUP.ThinkTankLabs.L

14.2.22.8

File size:

118.8 KB (121,680 bytes)

Product version:

1.0.3.0

Original file name:

SMBarBroker.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\wintoflash suggestor\smbarbroker.exe

Digital Signature

Signed by:

Think Tank Labs LLC

Authority:

GoDaddy.com, Inc.

Valid from:

4/25/2012 6:26:47 AM

Valid to:

4/25/2014 6:26:47 AM

Subject:

CN=Think Tank Labs LLC, OU=Internet, O=Think Tank Labs LLC, L=Newport Beach, S=CA, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

00C784C63AD412

File PE Metadata

Compilation timestamp:

5/24/2012 11:33:17 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

1536:Q8PWa+o2ClhqHF9YbFb3XkgpTmWuLnHPbn20Fyy0uIp32XYwp5IK9+rsbcw:vv+uqQbJ7SvLXFdt6c1p53CsN

Entry address:

0x9291

Entry point:

E8, 7F, 50, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 56, 57, 33, F6, BF, 90, BD, 41, 00, 83, 3C, F5, 94, AD, 41, 00, 01, 75, 1E, 8D, 04, F5, 90, AD, 41, 00, 89, 38, 68, A0, 0F, 00, 00, FF, 30, 83, C7, 18, E8, F2, 50, 00, 00, 59, 59, 85, C0, 74, 0C, 46, 83, FE, 24, 7C, D2, 33, C0, 40, 5F, 5E, C3, 83, 24, F5, 90, AD, 41, 00, 00, 33, C0, EB, F1, 8B, FF, 53, 8B, 1D, A8, 40, 41, 00, 56, BE, 90, AD, 41, 00, 57, 8B, 3E, 85, FF, 74, 13, 83, 7E, 04, 01, 74, 0D, 57, FF, D3, 57, E8, B8, ED, FF, FF, 83, 26, 00, 59, 83, C6... 
[+]

Entropy:

6.2805

Code size:

71 KB (72,704 bytes)

The file SMBarBroker.exe has been discovered within the following programs.

LittleApp Suggestor by Think Tank Labs, LLC

Publisher's description - “LittleApp Suggestor will suggest keywords that are similar to what you are trying to search for.”

little-apps.org/suggestor/about.html

73% remove it

RelevantSeek Suggestor by Sono Control Inc.

Distributed/created by Think Tank Labs, LLC that is an ad-supported web browser extension. From the EULA: " The Software may include third party's software bundle subject to open source or third party license terms.

relevantseek.com/features.html

72% remove it

Search Fairy by Think Tank Labs, LLC

Search Fairy is a Results Media is a web browser extension and browser helper object (BHO) for Internet Explorer and distributed through Results Media. The Search Fairy extension includes a search bar which provides modified search redirection results and a search provider.

searchfairy.com/features.html

85% remove it

Search Suggestor by Think Tank Labs, LLC

Search Suggestor is an ad-supported (users may see additional banner, search, pop-up, pop-under, interstitial and in-text link advertisements) cross web browser plugin for Internet Explorer (BHO) and Firefox/Chrome (plugin) and distributed through various monetization platforms during installation.

searchsuggestor.com/features.html

67% remove it

Smart Keyword Suggest by Think Tank Labs, LLC

Publisher's description - “Smart Keyword Suggest will suggest keywords that are similar to what you are trying to search for. The widget will help you search faster and also get the results you are looking for.”

smartkeywordsuggest.com/about.html

71% remove it

Smart Suggestor by Think Tank Labs, LLC

Smart Suggestor is a web browser extension and browser helper object (BHO) for Internet Explorer and distributed through Results Media. The Smart Suggestor extension includes a search bar which provides modified search redirection results and a search provider.

smartsuggestor.com/features.html

72% remove it

WinToFlash Suggestor by Think Tank Labs, LLC

Publisher's description - “WinToFlash Suggestor will suggest keywords that are similar to what you are trying to search for.”

wintoflashsuggestor.com/features.html

74% remove it

Remove SMBarBroker.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.