home

ieoptimizer64.dll

Savingsbull

This browser add-on is developed and distributed by AdPeak, Inc. The module ieoptimizer64.dll by Savingsbull has been detected as adware by 2 anti-malware scanners. This file is typically installed with the program Savings Bull by Adpeak, Inc. which is a potentially unwanted software program.
Publisher:
Savingsbull  (signed and verified)

MD5:
adef28c00c39962d8d10529290b5af43

SHA-1:
356514362fbaedd2b76f8c35b75b9ed77b6b0f1f

SHA-256:
6bbb32033971f4ec9eea7c6bd54cc15544e9804feab3c8c7b8bdf7830de5794d

Scanner detections:
2 / 68

Status:
Adware

Analysis date:
11/23/2024 7:54:31 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:BHO-ALX [Trj]
2014.9-140221

Reason Heuristics
PUP.Savingsbull.N
14.2.21.17

File size:
98.3 KB (100,624 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Program Files\savingsbull\ieoptimizer64.dll

Digital Signature
Signed by:
Savingsbull

Authority:
GoDaddy.com, Inc.

Valid from:
1/16/2014 9:47:15 PM

Valid to:
1/16/2015 9:47:15 PM

Subject:
CN=Savingsbull, O=Savingsbull, L=Sarasota, S=Florida, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
0428C93A073E5E

File PE Metadata
Compilation timestamp:
2/4/2014 7:27:59 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:jQHacoxqMTkzTTW1ZhGNIWTOdlxfpNG784n29EHJzolXSuKc012JeNRE:MHacoEMwzTTW16NHSDYP29ELD12JebE

Entry address:
0x37BC

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, F3, 36, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 51, 51, 01, 00, FF, 15, DB, D8, 00, 00, 48, 8B, 05, 3C, 52, 01, 00, 48, 89, 44, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, E3, 76, 00, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24...
 
[+]

Entropy:
6.1724

Code size:
61 KB (62,464 bytes)

The file ieoptimizer64.dll has been discovered within the following program.

Savings Bull  by Adpeak, Inc.
Savings Bull is an adware extension that plugs into the user's web browser for IE, Chrome and Firefox and will display additional advertisements in search engines such as Bing and Google. It installs itself as a browser extension/toolbar and runs as a background process.
www.savingsbull.com
80% remove it
 
Powered by Should I Remove It?

Remove ieoptimizer64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.