» pricesparrow.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

pricesparrow.dll

PriceSparrow

Ciuvo GmbH

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘pricesparrowBHO’. This is installed with PriceSparrow.

File name:

pricesparrow.dll

Publisher:

Ciuvo GmbH (signed and verified)

Product:

PriceSparrow

Description:

PriceSparrow 1.4.9 (c) Ciuvo GmbH

Version:

1,4,9

MD5:

453bd602ec53de9b616948929f37dfdb

SHA-1:

41533d5ef2e2da7eba166f4ae2b4e7bb754446c9

SHA-256:

1ca0f08c4f90245f218c93e110bc024ed59b8ec92183fea0b6220b86e1af07a2

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 2:00:53 PM UTC (today)

File size:

182.4 KB (186,752 bytes)

Product version:

1,4,9

Original file name:

pricesparrow.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\pricesparrow\internet explorer\pricesparrow.dll

Digital Signature

Signed by:

Ciuvo GmbH

Authority:

TC TrustCenter GmbH

Valid from:

8/25/2011 4:49:47 PM

Valid to:

8/25/2013 4:49:47 PM

Subject:

CN=Ciuvo GmbH, OU=TC Publisher ID for Authenticode, OU=Engineering, O=Ciuvo GmbH, L=Wien, C=AT

Issuer:

CN=TC TrustCenter Class 2 L1 CA XII, OU=TC TrustCenter Class 2 L1 CA, O=TC TrustCenter GmbH, C=DE

Serial number:

0083DD000100029777FC68D0F53A4D

File PE Metadata

Compilation timestamp:

12/14/2012 2:55:08 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

3072:/d1epS2575oWQc/t9qhyEyXFNhowrwInJZtfEBMu0VqHpPvY:TepS257lVt9qhyEgJwxv

Entry address:

0xB72C

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, AB, 4D, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, CC, CC, CC, 68, F0, A1, 00, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, D0, 49, 02, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 56, 57, 33... 
[+]

Code size:

112 KB (114,688 bytes)

Internet Explorer BHO

Display name:

pricesparrowBHO

CLSID:

{3F2DC1E7-A56F-49D8-B0CF-DB2300594497}

CLSID name:

PriceSparrow

The file pricesparrow.dll has been discovered within the following program.

PriceSparrow by Ciuvo GmbH

This is a web browser extension and Browser helper Object (for Internet Explorer) that delivers contextual based advertising to the web browser. In addition it will modify the user's browser home and search pages as well as 'New Tab' pages to push advertising and search.

66% remove it

Scan pricesparrow.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.