home

InfoAtomsClientIE.dll

InfoAtoms

InfoAtoms Inc.

This is part of the InfoAtoms browser extension which will display variopus forms of advertising in the web browser by injecting new ads such as banner, text-links and search results. The module InfoAtomsClientIE.dll by InfoAtoms has been detected as adware by 2 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘InfoAtoms’.
Publisher:
InfoAtoms Inc.  (signed and verified)

Product:
InfoAtoms

Version:
1.4.0.3

MD5:
99dc525f0fdb8cb44d3f0405854da121

SHA-1:
bf205142fa9fd655bc6b205d26a1d46541675e35

SHA-256:
c54cc33c3f0af3b7d36811b0a664fde99c241229a21de7fa80f99eef1481c7ac

Scanner detections:
2 / 68

Status:
Adware

Analysis date:
12/25/2024 1:17:08 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InfoAtoms (M)
15.8.2.22

VIPRE Antivirus
InfoAtoms
14676

File size:
111.5 KB (114,224 bytes)

Product version:
1.4.0.3

Copyright:
(C) 2012 InfoAtoms Inc., All rights reserved.

Original file name:
InfoAtomsClientIE.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\infoatoms\ie32\infoatomsclientie.dll

Digital Signature
Signed by:
InfoAtoms Inc.

Authority:
GoDaddy.com, Inc.

Valid from:
4/12/2012 5:06:59 PM

Valid to:
4/3/2013 7:35:07 PM

Subject:
CN=InfoAtoms Inc., O=InfoAtoms Inc., L=La Jolla, S=CA, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
04788136C18C1C

File PE Metadata
Compilation timestamp:
12/6/2012 9:27:17 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:LOpVAmb9Ftxd0s7Oe1tw6hPqbklPQLOVGMfUVHCQN3QLeU0:L8VAmp8TevPqGQaVGMfUVHz3v

Entry address:
0xBD47

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, C4, 38, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 8B, 55, 08, 56, 57, 85, D2, 74, 07, 8B, 7D, 0C, 85, FF, 75, 13, E8, 2F, 08, 00, 00, 6A, 16, 5E, 89, 30, E8, F9, 09, 00, 00, 8B, C6, EB, 33, 8B, 45, 10, 85, C0, 75, 04, 88, 02, EB, E2, 8B, F2, 2B, F0, 8A, 08, 88, 0C, 06, 40, 84, C9, 74, 03, 4F, 75, F3, 85, FF, 75, 11, C6, 02, 00, E8, F9, 07, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, C6, 33, C0, 5F, 5E...
 
[+]

Entropy:
6.3352

Code size:
66 KB (67,584 bytes)

Internet Explorer BHO
Display name:
InfoAtoms

CLSID:
{103089DA-0F31-4A8B-843F-7D24A7FE8345}


Remove InfoAtomsClientIE.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.