» ReadonwebToolbar.dll
Overview
Analysis
File Details
Behaviors (1)

ReadonwebToolbar.dll

ReadonwebToolbar

Readonweb, LLC

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘MyBHO Class’.

File name:

Publisher:

Readonweb, LLC (signed and verified)

Product:

ReadonwebToolbar

Description:

ReadonwebToolbar Module

Version:

1, 3, 0, 5

MD5:

a06e7104a55f96d2c408a21e970f74ee

SHA-1:

14a8b78491bbc9fb4517c9a5c7c1023b220bff75

SHA-256:

de07ba1f0cb6de16c3afc7564b4785dbb9bb52298c949bfb540a5555d12c547f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/27/2024 3:39:09 PM UTC (today)

File size:

2.6 MB (2,744,104 bytes)

Product version:

1, 3, 0, 5

Trademarks:

Readonweb

Original file name:

ReadonwebToolbar.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\readonweb\cleanpage\readonwebtoolbar.dll

Digital Signature

Signed by:

Readonweb, LLC

Authority:

The USERTRUST Network

Valid from:

2/3/2010 4:00:00 PM

Valid to:

2/3/2013 3:59:59 PM

Subject:

CN="Readonweb, LLC", O="Readonweb, LLC", STREET=3575 Centennial LN, L=Ellicott City, S=MD, PostalCode=21042, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

11489C9A68AA2EE8FD6D22BA0B337600

Registration

CLSIDs:

{3DB0C335-73C5-466c-A622-BD20A1A5B925}, {B6283D8C-01AB-11DB-9D6F-E11AAB065F98}

ProgIDs:

ReadonwebCleanPage.MyBHO.1, ReadonwebToolbar.IEHook.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

6/7/2010 9:10:16 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:7Mhx21sHLelC6M5mPtEnCju5+sJsqpX7avuf+rkg8U5Fv0DfTW+H:7MCWr8vM52tEKu5J9aQg8Ufv0DX

Entry address:

0x26B011

Entry point:

E9, 6B, FF, 01, 00, 0C, B5, 3E, 69, 4D, 86, 04, A8, E8, 1A, 9B, D2, DE, EC, D4, 32, 5C, B0, 87, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 01, FC, 7D, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 77, EF, 75, 09, 8B, 1E, 83, EE, FC, E8, BF, 34, 03, 00, 41, 34, FA, 1C, 55, 02, A1, E7, E9, 1D, 79, 02, 00, 31, DB, 31, C9, E8, BF, 11, FA, FF, E9, 70, 38, 01, 00, E8, 0E, 3E, FD, FF, D1, 0D, 10, 4C, 0A, 02, 71, 91, E9, A0, 79, 01, 00, E8, 8D, 34, 03, 00, 7E... 
[+]

Entropy:

6.9277

Packer / compiler:

Xtreme-Protector v1.05

Code size:

1.4 MB (1,437,696 bytes)

Internet Explorer BHO

Display name:

MyBHO Class

CLSID:

{3DB0C335-73C5-466c-A622-BD20A1A5B925}

Scan ReadonwebToolbar.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.