» pricesparrow.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

pricesparrow.dll

PriceSparrow

Ciuvo GmbH

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘pricesparrowBHO’. This is installed with PriceSparrow.

File name:

pricesparrow.dll

Publisher:

Ciuvo GmbH (signed and verified)

Product:

PriceSparrow

Description:

PriceSparrow 1.4.9 (c) Ciuvo GmbH

Version:

1,4,9

MD5:

ad1e1998c1d98efc21286d10acea6d40

SHA-1:

b13ac3fb0ce5279f21df294b4691c20dfa8b11b4

SHA-256:

a5fcb8c9b6d6db755dcbaab58f5cacc7cd53a76b17963e4dc5781fe5822fd975

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 11:18:24 AM UTC (today)

File size:

182.2 KB (186,600 bytes)

Product version:

1,4,9

Original file name:

pricesparrow.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\pricesparrow\internet explorer\pricesparrow.dll

Digital Signature

Signed by:

Ciuvo GmbH

Authority:

TC TrustCenter GmbH

Valid from:

8/25/2011 4:49:47 PM

Valid to:

8/25/2013 4:49:47 PM

Subject:

CN=Ciuvo GmbH, OU=TC Publisher ID for Authenticode, OU=Engineering, O=Ciuvo GmbH, L=Wien, C=AT

Issuer:

CN=TC TrustCenter Class 2 L1 CA XII, OU=TC TrustCenter Class 2 L1 CA, O=TC TrustCenter GmbH, C=DE

Serial number:

0083DD000100029777FC68D0F53A4D

Registration

CLSID:

{3F2DC1E7-A56F-49D8-B0CF-DB2300594497}

ProgID:

pricesparrow.pricesparrowBHO.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

3/11/2013 12:01:22 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

3072:StS/jZ42QSWEbhBUIfWSeriwZtEzMu0VqHpG4g:IS/jFmEbhBUbYeN

Entry address:

0xB72C

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, AB, 4D, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, CC, CC, CC, 68, F0, A1, 00, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, D0, 49, 02, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 56, 57, 33... 
[+]

Code size:

112 KB (114,688 bytes)

Internet Explorer BHO

Display name:

pricesparrowBHO

CLSID:

{3F2DC1E7-A56F-49D8-B0CF-DB2300594497}

CLSID name:

PriceSparrow

The file pricesparrow.dll has been discovered within the following program.

PriceSparrow by Ciuvo GmbH

This is a web browser extension and Browser helper Object (for Internet Explorer) that delivers contextual based advertising to the web browser. In addition it will modify the user's browser home and search pages as well as 'New Tab' pages to push advertising and search.

66% remove it

Scan pricesparrow.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.