home

moovida_air_ie.dll

Interest Recognizer for Moovida

Aedge Performance BCN SLU

The module moovida_air_ie.dll by Aedge Performance BCN SLU has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘Interest recogniser for Moovida (powered by Spointer)’.
Publisher:
Moovida  (signed by Aedge Performance BCN SLU)

Product:
Interest Recognizer for Moovida

Version:
2.4.1379.97

MD5:
4811ba0b268cfb1ba7eb8ba4fb24bc5f

SHA-1:
a4871a618035916a8b7731c2ddd2d014ad5d0d6d

SHA-256:
8298ba2e052b93257bad38b4ae977e760e938523b47a82db9da91c79841233b0

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/5/2024 7:33:32 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Adedge.AedgePer (M)
16.4.15.14

File size:
129.2 KB (132,256 bytes)

Product version:
2.4.1379.97

Copyright:
(c) Aedge Performance BCN SL. All rights reserved.

Original file name:
spointerbho.exe

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\fluendo\moovida\spointer\extensions\moovida_air_ie.dll

Digital Signature
Signed by:
Aedge Performance BCN SLU

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
2/22/2010 1:00:00 AM

Valid to:
2/14/2011 12:59:59 AM

Subject:
CN=Aedge Performance BCN SLU, OU=Research and Development, O=Aedge Performance BCN SLU, L=Barcelona, S=Barcelona, C=ES

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
314DD95956BBDAD07517658695C80C84

File PE Metadata
Compilation timestamp:
6/14/2010 6:55:24 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:A3WU2qdEmqQT6MzEDweQBR1+V2R/AqbJ43JHHxaGjk3r7bHrexqmXbaMZ685poLw:9GhNwcNX/AGJiJNO+bav85pbWu

Entry address:
0x6940

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, DB, 48, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 53, 8B, 5D, 0C, 66, 83, 3B, 00, 57, 8B, F8, 74, 44, 0F, B7, 08, 66, 85, C9, 74, 3A, 0F, B7, D1, 2B, C3, 8B, 4D, 0C, 66, 85, D2, 74, 1B, 0F, B7, 11, 66, 85, D2, 74, 2B, 0F, B7, 1C, 08, 0F, B7, D2, 2B, DA, 75, 08, 41, 41, 66, 39, 1C, 08, 75, E5, 66, 83, 39, 00, 74, 12, 47, 47, 0F, B7, 17, 40, 40, 66, 85, D2, 75, CB, 33, C0, 5F, 5B, 5D, C3...
 
[+]

Code size:
85.5 KB (87,552 bytes)

Internet Explorer BHO
Display name:
Interest recogniser for Moovida (powered by Spointer)

CLSID:
{E2A7BD67-0EAF-497f-B05B-748D7BF3C421}


Remove moovida_air_ie.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.