» snapDx.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

snapDx.dll

Snap Toolbar

Visicom Media Inc.

This is part of the Visicom VMN web browser toolbar and extension that will modify the browser's default search provider, DNS, and home page functions. The module snapDx.dll, “Snap Toolbar Link Library” by Visicom Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘Snap Toolbar’. This file is typically installed with the program Snap Toolbar by Visicom Media inc. which is a potentially unwanted software program.

File name:

snapDx.dll

Publisher:

Visicom Media Inc. (signed and verified)

Product:

Snap Toolbar

Description:

Snap Toolbar Link Library

Version:

1, 0, 0, 20

MD5:

7101d6bda342bb0f26e7bfe68fcf8bf9

SHA-1:

20e53cdbef384ef0893e20563727a10f0150a608

SHA-256:

ec064ef2db4dd5c8e43ba6a157c9904b6393c53089f99b9e1115dbec2a5cde30

Scanner detections:

1 / 68

Status:

Potentially unwanted

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

4/19/2024 11:15:28 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Visicom.VisicomMedia.Toolbar (M)

16.2.14.18

File size:

84.7 KB (86,696 bytes)

Product version:

1.0.0.20

Original file name:

snapDx.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\snaptb\snapdx.dll

Digital Signature

Signed by:

Visicom Media Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

6/23/2010 7:00:00 PM

Valid to:

6/21/2012 6:59:59 PM

Subject:

CN=Visicom Media Inc., OU=SECURE APPLICATION DEVELOPMENT, O=Visicom Media Inc., L=Brossard, S=Quebec, C=CA

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

73C74D9445094BFD79759F7B9CAFD730

File PE Metadata

Compilation timestamp:

7/15/2010 10:21:46 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

1536:SNznD/GJR0M0DV0X9Umxe2OG8pixJkGCl6klluPES53i5tz:SdnDVM0I962Ol6klluPEkIz

Entry address:

0x4C36

Entry point:

6A, 0C, 68, C0, D5, 00, 10, E8, 6A, 05, 00, 00, 33, C0, 40, 89, 45, E4, 8B, 75, 0C, 33, FF, 3B, F7, 75, 0C, 39, 3D, 98, 0F, 01, 10, 0F, 84, B3, 00, 00, 00, 89, 7D, FC, 3B, F0, 74, 05, 83, FE, 02, 75, 31, A1, CC, 27, 01, 10, 3B, C7, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D0, 89, 45, E4, 39, 7D, E4, 0F, 84, 85, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 22, FE, FF, FF, 89, 45, E4, 3B, C7, 74, 72, 8B, 5D, 10, 53, 56, FF, 75, 08, E8, F9, DB, FF, FF, 89, 45, E4, 83, FE, 01, 75, 0E, 3B, C7, 75, 0A, 53, 57, FF... 
[+]

Entropy:

5.9763

Developed / compiled with:

Microsoft Visual C++ v7.1

Code size:

48 KB (49,152 bytes)

Internet Explorer BHO

Display name:

Snap Toolbar

CLSID:

{8ad188f1-d50f-4c74-bd6c-941f7cb37f33}

The file snapDx.dll has been discovered within the following program.

Snap Toolbar by Visicom Media inc.

Snap Toolbar is a browser add-on is developed by Visicom Media can be downloaded from its homepage, however, it is often 'bundled' with free software.

87% remove it

Remove snapDx.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.