» ActiveMailBHO.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

ActiveMailBHO.dll

ActiveMail Addon

ActivePath Ltd.

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘ActiveMail’. This is installed with ActiveMail.

File name:

ActiveMailBHO.dll

Publisher:

ActivePath Ltd. (signed and verified)

Product:

ActiveMail Addon

Description:

ActiveMail BHO

Version:

5.5.59.0

MD5:

29c222feeacf39e513702061b0057c0c

SHA-1:

cd68f31e89ee8d49384e322e777fa9f5d776d05c

SHA-256:

9db40a9806957b2c6121fb26b351608f54a50e63804e9af5ed73c18a45d0c564

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 11:16:36 AM UTC (today)

File size:

372.6 KB (381,560 bytes)

Product version:

5.5.59.0

Original file name:

ActiveMailBHO.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\ProgramData\activepath\activemail\activemailbho.dll

Digital Signature

Signed by:

ActivePath Ltd.

Authority:

VeriSign, Inc.

Valid from:

9/18/2010 8:00:00 PM

Valid to:

9/18/2012 7:59:59 PM

Subject:

CN=ActivePath Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ActivePath Ltd., L=Petah-Tiqwa, S=Center, C=IL

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6D4AFCF8111B9A9254DE4A86A5D0A2FD

File PE Metadata

Compilation timestamp:

7/23/2012 8:11:40 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

6144:7vDeHpFWM59UNq8F7DnTH3r1/34gMUvwZPwkTmFq8NSz:OHpFWM59U/7DnTH3r1AJPrTmFquSz

Entry address:

0x1A7D1

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 8C, 56, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, B8, B2, 09, 02, 10, A3, 30, 4E, 03, 10, C7, 05, 34, 4E, 03, 10, A8, 00, 02, 10, C7, 05, 38, 4E, 03, 10, 5C, 00, 02, 10, C7, 05, 3C, 4E, 03, 10, 95, 00, 02, 10, C7, 05, 40, 4E, 03, 10, FE, FF, 01, 10, A3, 44, 4E, 03, 10, C7, 05, 48, 4E, 03, 10, 2A, 09, 02, 10, C7, 05, 4C, 4E, 03, 10, 1A, 00, 02, 10, C7, 05, 50, 4E, 03, 10, 7C, FF, 01, 10, C7, 05, 54, 4E, 03, 10, 08, FF... 
[+]

Entropy:

6.7118

Code size:

155 KB (158,720 bytes)

Internet Explorer BHO

Display name:

ActiveMail

CLSID:

{EF7AED5F-0C26-4820-A570-7DA8B6D93F4A}

The file ActiveMailBHO.dll has been discovered within the following programs.

ActiveMail by ActivePath Ltd.

Publisher's description - “ActiveMail brings life to your email, so you can finally enter the world of rich and interactive content without leaving your inbox.”

www.ActivePath.com

39% remove it

Scan ActiveMailBHO.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.