» preispilot.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

preispilot.dll

Ciuvo GmbH

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘preispilotBHO’. This is installed with Preispilot.

File name:

preispilot.dll

Publisher:

Ciuvo GmbH (signed and verified)

MD5:

c072e99aae5c604cf02543ba0c5db471

SHA-1:

f62c1dac08b24db2027490b8790802681db1f9c8

SHA-256:

91bb18486a77f819b7ab09b0ea9aed5f02a3b7d16063e23e6c76852e76e58b86

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 10:53:46 AM UTC (today)

File size:

177.8 KB (182,056 bytes)

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\preispilot\internet explorer\preispilot.dll

Digital Signature

Signed by:

Ciuvo GmbH

Authority:

TC TrustCenter GmbH

Valid from:

8/25/2011 4:49:47 PM

Valid to:

8/25/2013 4:49:47 PM

Subject:

CN=Ciuvo GmbH, OU=TC Publisher ID for Authenticode, OU=Engineering, O=Ciuvo GmbH, L=Wien, C=AT

Issuer:

CN=TC TrustCenter Class 2 L1 CA XII, OU=TC TrustCenter Class 2 L1 CA, O=TC TrustCenter GmbH, C=DE

Serial number:

0083DD000100029777FC68D0F53A4D

File PE Metadata

Compilation timestamp:

8/10/2012 4:47:06 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

3072:AZouHRR3Q8jVfyGSR+p23JbZt+Y7Ro5NQGRLbC:AZphTqGS7CY7

Entry address:

0xB64C

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, AB, 4D, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, CC, CC, CC, 68, 10, A1, 00, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, B8, 49, 02, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 56, 57, 33... 
[+]

Code size:

112 KB (114,688 bytes)

Internet Explorer BHO

Display name:

preispilotBHO

CLSID:

{C4415769-1588-4AD6-9624-B2E69DB78D1A}

CLSID name:

Preispilot

The file preispilot.dll has been discovered within the following program.

Preispilot by Ciuvo GmbH

Publisher's description - “PreisPilot is an app which finds the best deal. If you shop online, the app helps you to find the best offers for your wanted product. The app is only active on shopping sites and is visible only when alternativ offers were found for you.”

www.preispilot.com

70% remove it

Scan preispilot.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.