Should I block it?

No, this file is 100% safe to run.

Additional versions

3.5.0.1101	75.00%
3.5.0.1101	25.00%

(Note, Trend Media Limited publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegCloseKey, RegEnumKeyExW, RegQueryInfoKeyW, RegOpenKeyExW, RegQueryValueExW

kernel32.dll

GetFileTime, LoadResource, lstrlenW, SizeofResource, GetFullPathNameW, LockResource, CreateFileW, FindClose, FindResourceExW, DisableThreadLibraryCalls, IsBadWritePtr, FindResourceW, FileTimeToSystemTime, FindFirstFileW, FileTimeToLocalFileTime, FindNextFileW, SetLastError, FlushFileBuffers, CloseHandle, CreateFileA, SetEnvironmentVariableA, CompareStringW, CompareStringA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, LoadLibraryA, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, RaiseException, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, GetVersionExA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetLastError, GetCurrentThreadId, GetCommandLineA, RtlUnwind, WideCharToMultiByte, GetTimeZoneInformation, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, GetModuleHandleA, GetProcAddress, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, WriteFile, GetStdHandle, GetModuleFileNameA, HeapCreate, VirtualFree, VirtualAlloc, MultiByteToWideChar, LCMapStringA, LCMapStringW, ExitProcess, Sleep, SetHandleCount, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, GetStringTypeA, GetStringTypeW, GetLocaleInfoA

shell32.dll

SHGetFileInfoW

shlwapi.dll

PathFileExistsW

user32.dll

UnregisterClassA

version.dll

GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW

Export table

DllGetClassObjectEx

DllQueryInterface

DllUnloadAndFree

fnssoftwaresearch.dll

SoftwareSearch.dll by Trend Media Limited

Remove fnssoftwaresearch.dll

Version:	3.5.0.1101
MD5:	2503f631f105fd1391a1a3fa1a74e394
SHA1:	c8d42ef2645d143950e1a5d4ad367036cc99028f
SHA256:	93f3671c1929c1e6be4c29ff9509ab45874e15beb90b77ffc903bb7452931554

Overview

fnssoftwaresearch.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including FlashGet3.7 published by Trend Media Corporation Limited and FlashGet3.7 published by Trend Media Corporation Limited.

Details

File name:	fnssoftwaresearch.dll
Publisher:	Trend Media Corporation Limited
Product name:	SoftwareSearch.dll
Typical file path:	C:\Program Files\flashget network\flashget 3\fnssoftwaresearch.dll
Original name:	SoftwareSearch.dll
File version:	3.5.0.1101
Size:	140 KB (143,360 bytes)
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

FlashGet

Trend Media Corporation Limited

68% remove

FlashGet is a freeware download manager for Microsoft Windows. It was originally available in either paid or ad-supported versions, the latter of which included an Internet Explorer Browser Helper Object (BHO). There is also some concern about FlashGet downloading every file indicated by its FGUpdate3.ini file that is downloaded from the developer every time FlashGet is started. A malicious FGUpdate3.ini modified for exploit and introd...