home

superfishcert.dll

SuperfishCert.dll

Superfish Inc.

The module superfishcert.dll by Superfish has been detected as adware by 16 anti-malware scanners.
Publisher:
Superfish, Inc.  (signed by Superfish Inc.)

Product:
SuperfishCert.dll

Version:
2.2.8.23

MD5:
e63c8fbe09eed4aa93f26d88f4ad0db6

SHA-1:
ede269e495845b824738b21e97e34ed8552b838e

SHA-256:
bf05e00ec260a447f6613e1229221074c3ad7fbbe66a20fa8d2f9b5f77666b0d

Scanner detections:
16 / 68

Status:
Adware

Analysis date:
12/25/2024 9:43:36 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Superfish.B
712

avast!
Win32:Adware-gen [Adw]
2014.9-150223

AVG
Superfish.4d6
2016.0.3190

Bitdefender
Adware.Superfish.B
1.0.20.270

Comodo Security
ApplicUnwnt
21152

Dr.Web
Adware.Superfish.1
9.0.1.054

Emsisoft Anti-Malware
Adware.Superfish
8.15.02.23.12

ESET NOD32
Win32/Adware.SuperFish
9.11210

F-Secure
Adware.Superfish.B
11.2015-23-02_2

G Data
Adware.Superfish
15.2.25

Malwarebytes
PUP.Optional.SuperFish
v2015.02.23.12

MicroWorld eScan
Adware.Superfish.B
16.0.0.162

Reason Heuristics
PUP.Superfish
15.3.1.9

Sophos
SuperFish
4.98

Trend Micro House Call
ADW_SUPERFISH
7.2.54

Trend Micro
ADW_SUPERFISH
10.465.23

File size:
182.6 KB (186,976 bytes)

Product version:
2.2.8.23

Copyright:
Copyright © 2013

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\lenovo\visualdiscovery\superfishcert.dll

Digital Signature
Signed by:
Superfish Inc.

Authority:
Thawte, Inc.

Valid from:
7/28/2013 8:00:00 PM

Valid to:
7/27/2014 7:59:59 PM

Subject:
CN=Superfish Inc., O=Superfish Inc., L=Grandville, S=Michigan, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3E32431476CFB3E1F90955B25396A6F4

File PE Metadata
Compilation timestamp:
5/12/2014 12:56:15 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:kR1xP5M3P1HbeBgTWTBfK5+YHmT1SxZp4/q/cTKLGCM8:kRPP4P1HaCWTBB0lWS/wcjL

Entry address:
0x34E8

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, B1, 31, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 5D, E9, 57, 10, 00, 00, 8B, FF, 56, 6A, 01, 68, 58, 90, 01, 10, 8B, F1, E8, 11, 14, 00, 00, C7, 06, 88, 33, 01, 10, 8B, C6, 5E, C3, C7, 01, 88, 33, 01, 10, E9, 76, 14, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, F1, C7, 06, 88, 33, 01, 10, E8, 63, 14, 00, 00, F6, 45, 08, 01, 74, 07, 56, E8, B0, FF, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC...
 
[+]

Entropy:
7.4464

Code size:
65 KB (66,560 bytes)

Remove superfishcert.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.