» pricesparrow.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

pricesparrow.dll

PriceSparrow

Ciuvo GmbH

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘pricesparrowBHO’. This is installed with PriceSparrow.

File name:

pricesparrow.dll

Publisher:

Ciuvo GmbH (signed and verified)

Product:

PriceSparrow

Description:

PriceSparrow 1.4.9 (c) Ciuvo GmbH

Version:

1,4,9

MD5:

880d0d73930be9b4bcfe57b749262081

SHA-1:

7f919d8fcb7ae5845a2a053041724797bde9d699

SHA-256:

37737b5d4d48a239cc7d43db15a3f09ba9f82ce3e0671b39e9a9cc0d5c8439ae

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 2:42:01 PM UTC (today)

File size:

182.2 KB (186,600 bytes)

Product version:

1,4,9

Original file name:

pricesparrow.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\pricesparrow\internet explorer\pricesparrow.dll

Digital Signature

Signed by:

Ciuvo GmbH

Authority:

TC TrustCenter GmbH

Valid from:

8/25/2011 11:49:47 AM

Valid to:

8/25/2013 11:49:47 AM

Subject:

CN=Ciuvo GmbH, OU=TC Publisher ID for Authenticode, OU=Engineering, O=Ciuvo GmbH, L=Wien, C=AT

Issuer:

CN=TC TrustCenter Class 2 L1 CA XII, OU=TC TrustCenter Class 2 L1 CA, O=TC TrustCenter GmbH, C=DE

Serial number:

0083DD000100029777FC68D0F53A4D

Registration

CLSID:

{3F2DC1E7-A56F-49D8-B0CF-DB2300594497}

ProgID:

pricesparrow.pricesparrowBHO.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

6/4/2013 11:00:45 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

3072:6yor9R1r1UQcqwBhz9GDYgbHrQOkZtf7Mu0VqHpAta:vorv12NBhz9GyjQQ

Entry address:

0xB73C

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, AB, 4D, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, CC, CC, CC, 68, 00, A2, 00, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, D0, 49, 02, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 56, 57, 33... 
[+]

Code size:

112 KB (114,688 bytes)

Internet Explorer BHO

Display name:

pricesparrowBHO

CLSID:

{3F2DC1E7-A56F-49D8-B0CF-DB2300594497}

CLSID name:

PriceSparrow

The file pricesparrow.dll has been discovered within the following program.

PriceSparrow by Ciuvo GmbH

This is a web browser extension and Browser helper Object (for Internet Explorer) that delivers contextual based advertising to the web browser. In addition it will modify the user's browser home and search pages as well as 'New Tab' pages to push advertising and search.

66% remove it

Scan pricesparrow.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.