Should I block it?
90% of PCs block this file from running.
Possible reason:
Multiple malware detections
Additional versions
(Note, Bandoo Media publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
 PE file structure
|
Show functions |
Import table
kernel32.dll
LoadLibraryW, GetCommandLineW, FreeLibrary, GetProcAddress
ntdll.dll
RtlRandom, NtQuerySystemTime, NtQueryInformationProcess, NtProtectVirtualMemory, NtAllocateVirtualMemory, NtFreeVirtualMemory, LdrEnumerateLoadedModules, LdrGetProcedureAddress, RtlInitAnsiString, LdrLoadDll, RtlInitUnicodeString, NtCreateEvent, NtFlushInstructionCache, NtWriteVirtualMemory, RtlExitUserThread, NtClose, RtlCreateUserThread, LdrUnloadDll
mgrldr.dll
By Bandoo Media (Signed)
| MD5: | 39a8d7a697f67ac2a6082d570bd28091 |
| SHA1: | 77fb578708f3cd4eb400b07970f62b7003e86572 |
| SHA256: | e87a3fad812d55622560fb1bba70847988d7555407fd3b3e2fc9015681c924e6 |
Warning 5 antivirus scanners has detected malware.
Overview
mgrldr.dll is malware that is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Bandoo Media which was issued by the Thawte certificate authority (CA).
Details
| File name: | mgrldr.dll |
| Typical file path: | C:\Program Files\Search Results Toolbar\Datamngr\x64\mgrldr.dll |
| Size: | 18 KB (18,432 bytes) |
| Build date: | 9/24/2013 7:09 PM |
| Certificate |
| Issued to: | Bandoo Media |
| Authority (CA): | Thawte |
| Effective date: | Tuesday, September 18, 2012 |
| Expiration date: | Sunday, November 2, 2014 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Malware detections
Based on 40+ industry antivirus scanners, 5 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| ESET NOD32 |
7.9005 |
a variant of Win32/Toolbar.SearchSuite.C |
| Kingsoft |
2013.4.9.267 |
Win32.Troj.Generic.a.(kcloud) |
| McAfee |
5.600.1067 |
Artemis!39A8D7A697F6 |
| McAfee Gateway Anti-Malware |
v2013-dat |
Artemis!39A8D7A697F6 |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.F47V0925 |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
42.86% |
|
| Windows 8 Pro |
23.81% |
|
| Windows 7 Home Premium |
14.29% |
|
| Microsoft Windows XP |
9.52% |
|
| Windows 8 Enterprise |
4.76% |
|
| Windows 8 Single Language |
4.76% |
|
Distribution by country
United Kingdom installs about 14.29% of mgrldr.dll.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
38.46% |
|
| ASUS |
15.38% |
|
| Acer |
15.38% |
|
| Hewlett-Packard |
11.54% |
|
| Toshiba |
7.69% |
|
| Sahara |
3.85% |
|
| GIGABYTE |
3.85% |
|
| American Megatrends |
3.85% |
|
