How to remove hlpr64.exe
hlpr64.exe
The module hlpr64.exe has been detected as Adware.Toolbar
File Details
MD5: | 3fea20a7a9b91e0193474d67af9d34c3 |
Size: | 89 KB |
First Published: | 2017-06-26 14:04:07 (6 years ago) |
Latest Published: | 2022-05-06 23:04:10 (2 years ago) |
Status: | Adware.Toolbar (on last analysis) | |
Analysis Date: | 2022-05-06 23:04:10 (2 years ago) |
Common Places:
%localappdata%\pay-by-ads\yahoo! search\1.3.19.2 |
%profile%\ористувач\application data\pay-by-ads\yahoo! search\1.3.19.2 |
%profile%\дминистратор\application data\pay-by-ads\yahoo! search\1.3.19.2 |
%sysdrive%\back up\users\wow\appdata\local\pay-by-ads\yahoo! search |
%localappdata%\pay-by-ads\yahoo! search |
%profile%\dministrator\application data\pay-by-ads\yahoo! search |
%localappdata%\pay-by-ads\yahoo! search |
%localappdata%\pay-by-ads\yahoo! search |
%localappdata%\pay-by-ads\yahoo! search |
%localappdata%\pay-by-ads\yahoo! search |
Geography:
10.3% | ||
7.7% | ||
7.7% | ||
5.1% | ||
5.1% | ||
5.1% | ||
5.1% | ||
5.1% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% | ||
2.6% |
OS Version:
Windows 7 | 46.2% | |
Windows 8.1 | 23.1% | |
Windows 10 | 17.9% | |
Windows XP | 7.7% | |
Windows Vista | 5.1% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 64 |
Image Base: | 0x0000000140000000 |
Entry Address: | 0x000040fc |
PE Sections:
Name | Size of data | MD5 |
.text | 53760 | 7534714131c014d0d2b3c8938871b5ab |
.rdata | 18432 | 3f3bba2548a4ff7fc8e4cb7adbb34981 |
.data | 5632 | d5c318f16a21c62856798dc7b3e978b1 |
.pdata | 3584 | f4671b93df42b3689fb8ed977a4b2a1f |
.rsrc | 7680 | 4d9900269aba4f3951ef2eb5668dd7d2 |
.reloc | 1536 | b1b5a7e17b46df3013286c50a6098534 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for hlpr64.exe