» browserextension.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

browserextension.dll

AntMarks for Windows Internet Explorer

Ant.com Limited

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘AntMarks browser extension button’. This is installed with AntMarks extension for Windows Internet Explorer.

File name:

Publisher:

Helios Technologies Ltd. (signed by Ant.com Limited)

Product:

AntMarks for Windows Internet Explorer

Description:

Browser extension binary of AntMarks for Windows Internet Explorer

Version:

1.0.0.1

MD5:

a048d675bb5ce4bbfe03bbd4e522a595

SHA-1:

2c2152d25ce8380b7cff99c6d690622a03b7999a

SHA-256:

ba7f232e6676698d25ce973cdc72ac6cb0ec7156f7971abd77dfa8354fe1c910

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 8:24:10 PM UTC (today)

File size:

214 KB (219,120 bytes)

Product version:

1.0.0.1

Original file name:

Browser Extension.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\ant.com\antmarks for internet explorer\browserextension.dll

Digital Signature

Signed by:

Ant.com Limited

Authority:

Thawte, Inc.

Valid from:

7/6/2012 8:00:00 PM

Valid to:

7/4/2014 7:59:59 PM

Subject:

CN=Ant.com Limited, O=Ant.com Limited, L=Hong kong, S=Hong kong, C=HK

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

418CB07C084150EC746ABDF526BC8DD4

File PE Metadata

Compilation timestamp:

5/28/2014 7:37:59 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

3072:OA4WwuzznZy3NgebPmIapX6f8KBTJc+8IrtiYXdcjD:OxWwOSOQPhVOsiYXdcjD

Entry address:

0x8F3D

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 5E, 69, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 58, D4, 01, 10, E8, A4, 08, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 9C, 0C, 02, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, C8, 7D, 01, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Entropy:

5.5591

Developed / compiled with:

Microsoft Visual C++

Code size:

84 KB (86,016 bytes)

Internet Explorer BHO

CLSID:

{8877E91A-1223-4A9E-BC70-958539CEB319}

CLSID name:

AntMarks browser extension button

The file browserextension.dll has been discovered within the following program.

AntMarks extension for Windows Internet Explorer by Ant.com

About 8% of users remove it

Scan browserextension.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.