home

ActiveBooksHelper.exe

ActiveBooks

Core Technologies Consulting, LLC

Publisher:
Core Technologies Consulting, LLC  (signed and verified)

Product:
ActiveBooks

Description:
ActiveBooksHelper Module

Version:
15, 3, 1, 27

MD5:
9f43299e577687566bdd44cc59f993db

SHA-1:
0818a930b2532ecb4ff5b971f12f8f492b9252b8

SHA-256:
5f278aff119071921e23f85161bdbb0c7ca1f654776c48676139f487cd913b01

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:47:49 PM UTC  (today)

File size:
95.5 KB (97,808 bytes)

Product version:
15, 3, 1, 27

Copyright:
© 2009-2015, Core Technologies Consulting, LLC. All rights reserved.

Original file name:
ActiveBooksHelper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\activebooks\activebookshelper.exe

Digital Signature
Signed by:
Core Technologies Consulting, LLC

Authority:
COMODO CA Limited

Valid from:
3/8/2012 6:00:00 PM

Valid to:
3/9/2017 5:59:59 PM

Subject:
CN="Core Technologies Consulting, LLC", O="Core Technologies Consulting, LLC", STREET=7028-B Thornhill Drive, L=Oakland, S=CA, PostalCode=94611, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00D00935DF99CBA1C55CAFE1BFAB858701

File PE Metadata
Compilation timestamp:
6/2/2015 6:26:18 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:HAOSRaEXo/EDWQBZW1HxARndYQk3IljvsMsnD6C0zMbLyEyATXBFlHoBLJMw:quiK7ARnyAkzD6CRy7UBDHobp

Entry address:
0x9D31

Entry point:
B8, A8, 41, 43, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 55, D5, 28, 02, B9, B0, 61, DC, B3, 00, 7D, 7B, 62, 36, AB, BE, F5, 1C, 4B, 49, AE, A7, C9, FF, BD, 8A, 62, A0, DF, 9C, 38, E1, 65, BE, A3, 87, CD, 49, A3, 30, EA, 0D, F5, 20, E2, 5E, 19, 57, FB, A9, 0C, 89, 2A, 2E, C4, A4, 2D, CA, BB, C9, 49, 30, 9F, 6D, A1, 27, 87, 1A, 75, E6, ED, 1F, FA, 41, 1A, FC, CB, E2, 38, 2B, 3A, 79, 32, BA, CB, 28, 34, C3, 87, 8F, 17, A0, 5B...
 
[+]

Entropy:
7.1133

Packer / compiler:
PECompact v2

Code size:
84.5 KB (86,528 bytes)

Scan ActiveBooksHelper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.