» smoi32.dll
Overview
Analysis
File Details

smoi32.dll

SBWatchman

Goobzo LTD

The module smoi32.dll, “Search Module Update Service” by Goobzo has been detected as adware by 9 anti-malware scanners.

File name:

smoi32.dll

Publisher:

Search Module Ltd. (signed by Goobzo LTD)

Product:

SBWatchman

Description:

Search Module Update Service

Version:

2, 1, 0, 99

MD5:

5522563a0fe0935441377830243b1d81

SHA-1:

26d1f361134eab4132ad8d9b66f1155a65e6a852

SHA-256:

fce0e24080409069628f06cc4da66690f598b03502d18ee6154b1773785f0073

Scanner detections:

9 / 68

Status:

Adware

Analysis date:

4/24/2024 7:22:34 PM UTC (today)

Scan engine

Detection

Engine version

avast!

Win32:Adware-BSO [Adw]

140929-0

AVG

Skodna

2015.0.3336

Baidu Antivirus

Adware.Win32.CrossAd

4.0.3.14929

IKARUS anti.virus

AdWare.Win32.SBWatchman

t3scan.1.7.8.0

Kaspersky

not-a-virus:AdWare.Win32.Shopper

15.0.0.494

Panda Antivirus

Adware/Goobzo

14.09.29.08

Reason Heuristics

PUP.Goobzo.G

14.9.29.20

Sophos

Goobzo

4.98

VIPRE Antivirus

Goobzo

33182

File size:

399.9 KB (409,448 bytes)

Product version:

2, 1, 0, 99

Original file name:

smu.exe

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\common files\goobzo\gbupdate\smoi32.dll

Digital Signature

Signed by:

Goobzo LTD

Authority:

Thawte, Inc.

Valid from:

5/1/2013 5:00:00 PM

Valid to:

5/2/2015 4:59:59 PM

Subject:

CN=Goobzo LTD, O=Goobzo LTD, L=Haifa, S=Israel, C=IL

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

120B25DDE57B88636AD4D97D23B99C88

File PE Metadata

Compilation timestamp:

9/5/2014 12:44:40 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:tD/eiAFGmaUGOH9Ah+ha1uZ8PPxVLqO31l:tzJN+a1uqrqO31l

Entry address:

0x34FFB

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 4B, 05, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 6A, 14, 68, 60, F4, 04, 10, E8, AE, 04, 00, 00, FF, 35, 10, CC, 05, 10, 8B, 35, A4, D3, 03, 10, FF, D6, 59, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, 80, D3, 03, 10, 59, EB, 67, 6A, 08, E8, A4, 05, 00, 00, 59, 83, 65, FC, 00, FF, 35, 10, CC, 05, 10, FF, D6, 89, 45, E4, FF, 35, 0C, CC, 05, 10, FF, D6, 59, 59, 89, 45, E0, 8D, 45, E0, 50, 8D, 45, E4, 50, FF, 75... 
[+]

Entropy:

6.3305

Code size:

236.5 KB (242,176 bytes)

Remove smoi32.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.