Information about tbnhlpr_x64.exe.vir

tbnhlpr_x64.exe.vir

File Details

Product Name:

APN Toolbar Notifier Helper
Company Name:

APN
MD5: 69939bc6a35d9aaa1316350055eec1fa
Size: 189 KB
First Published: 2017-05-31 21:03:09 (7 years ago)
Latest Published: 2020-03-30 14:29:53 (4 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2020-03-30 14:29:53 (4 years ago)

Overview

Signed By: APN LLC
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5\asktoolbarinstaller-avira-v71stwmjkj.7z\program files\askpartnernetwork\toolbar\updater
%programfiles%\askpartnernetwork\toolbar\sgt-c3\source\program files\askpartnernetwork\toolbar\updater
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5\asktoolbarinstaller-rltm2-sp[3].7z\program files\askpartnernetwork\toolbar\updater
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5\asktoolbarinstaller-wbv7-sp[8].7z\program files\askpartnernetwork\toolbar\updater
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5\asktoolbarinstaller-rltm2-sp[2].7z\program files\askpartnernetwork\toolbar
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5\asktoolbarinstaller-avira-v7fon2g1v9.7z\program files\askpartnernetwork\toolbar
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5\asktoolbarinstaller-avira-v7c[2].7z\program files\askpartnernetwork\toolbar
%system%\config\systemprofile\appdata\local\microsoft\windows\inetcache\ie\asktoolbarinstaller-sgt7-sp[4].7z\program files\askpartnernetwork\toolbar
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5\asktoolbarinstaller-rltm2-sp[4].7z\program files\askpartnernetwork\toolbar
%sysdrive%\adwcleaner\quarantine\c\program files (x86)\askpartnernetwork\toolbar

File Names:

tbnhlpr_x64.exe
tbnhlpr_x64.exe.vir

Geography:

18.8%
12.5%
6.3%
6.3%
6.3%
6.3%
6.3%
6.3%
6.3%
6.3%
6.3%
6.3%
6.3%

OS Version:

Windows 7 62.5%
Windows 10 18.8%
Windows 8.1 18.8%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x000079f8

PE Sections:

Name Size of data MD5
.text 114176 3e09476526c9c6fd632ddfcbec394283
.rdata 53248 b7f661e08bb432b21fdc87fd73845fe8
.data 9216 7bc46c96c28da265ff60d9f3ec4c9db1
.pdata 6656 4e2ddb4e63a2183993c900b01b02d40a
.rsrc 1536 df8f031fda2bee9705281f34d4a31084
.reloc 2560 f7d2b9ed02fe15286ee224b47b68642b

More information:

Search on Virustotal
copyright for information about tbnhlpr_x64.exe.vir