» pricesparrow.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

pricesparrow.dll

PriceSparrow

Ciuvo GmbH

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘pricesparrowBHO’. This is installed with PriceSparrow.

File name:

pricesparrow.dll

Publisher:

Ciuvo GmbH (signed and verified)

Product:

PriceSparrow

Description:

PriceSparrow 1.4.9 (c) Ciuvo GmbH

Version:

1,4,9

MD5:

f202a82e6e0c542dec47603bf2b6f54a

SHA-1:

c549c9ad30e4984f9e4a12c040c1b28bbde3ad27

SHA-256:

87f9af8844684c045406708c051d6c0b19876a61a6d29112a138d2136451cdd1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 11:59:56 PM UTC (a few moments ago)

File size:

181.8 KB (186,152 bytes)

Product version:

1,4,9

Original file name:

pricesparrow.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\pricesparrow\internet explorer\pricesparrow.dll

Digital Signature

Signed by:

Ciuvo GmbH

Authority:

TC TrustCenter GmbH

Valid from:

8/25/2011 7:49:47 AM

Valid to:

8/25/2013 7:49:47 AM

Subject:

CN=Ciuvo GmbH, OU=TC Publisher ID for Authenticode, OU=Engineering, O=Ciuvo GmbH, L=Wien, C=AT

Issuer:

CN=TC TrustCenter Class 2 L1 CA XII, OU=TC TrustCenter Class 2 L1 CA, O=TC TrustCenter GmbH, C=DE

Serial number:

0083DD000100029777FC68D0F53A4D

File PE Metadata

Compilation timestamp:

11/29/2012 5:53:29 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

3072:S1epS2575oWQc/t9qhyEyXFN/rPIyJZtUsMu0VqHpPvPW:gepS257lVt9qhyEDmQkv+

Entry address:

0xB72C

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, AB, 4D, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, CC, CC, CC, 68, F0, A1, 00, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, D0, 49, 02, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 56, 57, 33... 
[+]

Entropy:

6.3702

Code size:

112 KB (114,688 bytes)

Internet Explorer BHO

Display name:

pricesparrowBHO

CLSID:

{3F2DC1E7-A56F-49D8-B0CF-DB2300594497}

CLSID name:

PriceSparrow

The file pricesparrow.dll has been discovered within the following program.

PriceSparrow by Ciuvo GmbH

This is a web browser extension and Browser helper Object (for Internet Explorer) that delivers contextual based advertising to the web browser. In addition it will modify the user's browser home and search pages as well as 'New Tab' pages to push advertising and search.

66% remove it

Scan pricesparrow.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.