» amazonbrowserbar.3.0.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

amazonbrowserbar.3.0.dll

Amazon Services LLC

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘AlxHelper’. This is installed with Amazon Browser Bar.

File name:

Publisher:

Amazon.com (signed by Amazon Services LLC)

Version:

3.0.0.0

MD5:

00b855d38b92bb26df47a6dfb6028798

SHA-1:

0473e1e6599ec6c86fa63c6f1fae75bfaf3ecb63

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 5:48:21 PM UTC (today)

File size:

1.4 MB (1,490,024 bytes)

Product version:

3.0.0.0

? Amazon.com

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\amazon browser bar\amazonbrowserbar.3.0.dll

Digital Signature

Signed by:

Amazon Services LLC

Authority:

VeriSign, Inc.

Valid from:

7/20/2009 8:00:00 PM

Valid to:

7/21/2012 7:59:59 PM

Subject:

CN=Amazon Services LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Amazon Services LLC, S=Nevada, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6ACB09679345BDB443C64D309E843BD9

Registration

CLSIDs:

{69A72A8A-84ED-4a75-8CE7-263DBEF3E5D3}, {B3EAD50C-ECB0-459A-9EDA-F505AB99675B}, {EA582743-9076-4178-9AA6-7393FDF4D5CE}, {F443A627-5009-4323-9C1D-7FD598D0D712}

ProgIDs:

AlxTB2.ToolBarProxy.1, AlxTB2.AlxHelper.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

11/8/2011 5:58:08 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:FcM3zGCCEf53jpJUWxVZFMqE4IYULoatlASc2D8TLtzLp8+ozjc6LmASbe:f1TPFl0YUoatlASc2D8HtzLp8+ozJLm4

Entry address:

0x9A45E

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, A2, B6, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 00, 01, 00, 00, 72, 0E, 83, 3D, C4, 46, 10, 10, 00, 74, 05, E9, 41, B7, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1... 
[+]

Entropy:

6.7983

Code size:

877.5 KB (898,560 bytes)

Internet Explorer BHO

Display name:

AlxHelper

CLSID:

{F443A627-5009-4323-9C1D-7FD598D0D712}

CLSID name:

AlxHelper Class

The file amazonbrowserbar.3.0.dll has been discovered within the following program.

Amazon Browser Bar by Amazon Services LLC

The software is typically bundled with third party installers such as Open Candy. "Offer your users the free Amazon Browser bar for fast access to web search, Amazon deals, and more. Note: Set homepage and search default to Amazon Web Search."

www.amazon.com/gp/help/customer/display.html?ie=UTF8&nodeId=200725530

57% remove it

Scan amazonbrowserbar.3.0.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.