» tbhlpr.exe
Overview
Analysis
File Details

tbhlpr.exe

Araxis Merge

Araxis Ltd

File name:

tbhlpr.exe

Publisher:

Araxis Ltd (signed and verified)

Product:

Araxis Merge

Description:

Araxis Merge TaskBar Integration Utility

Version:

7, 0, 0, 4531

MD5:

2dbd34ec43cc067568dc228de208bd08

SHA-1:

9e19a9aac0d36de178ae2ca06b8075862ae6de2f

SHA-256:

a4f77ebfd23b85cc53dadd31055191eb99556cf034e273b4c0f69b877a7a282d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/8/2024 2:41:04 PM UTC (today)

File size:

508.6 KB (520,768 bytes)

Product version:

7, 0, 0, 4531

Trademarks:

Araxis, Merge

Original file name:

tbhlpr.exe

File type:

Executable application (Win32 EXE)

Language:

English (United Kingdom)

Common path:

C:\Program Files\araxis\merge\tbhlpr.exe

Digital Signature

Signed by:

Araxis Ltd

Authority:

Thawte, Inc.

Valid from:

2/12/2014 5:30:00 AM

Valid to:

3/23/2016 5:29:59 AM

Subject:

CN=Araxis Ltd, OU=SECURE APPLICATION DEVELOPMENT, O=Araxis Ltd, L=Douglas, S=Isle of Man, C=IM

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

62AEEE8784CF2BEC5225463E35B6294E

File PE Metadata

Compilation timestamp:

8/28/2014 2:40:09 AM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

12288:9ucmYnIis7QVENMBb06yUETR0+ORzl5re0j93:QKnIiISR06y50+ORz/re0j93

Entry address:

0x9FB8

Entry point:

E8, 21, A3, 00, 00, E9, 7F, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 7F, 0F, B6, 44, 24, 08, 0F, BA, 25, FC, B1, 42, 00, 01, 73, 0D, 8B, 4C, 24, 0C, 57, 8B, 7C, 24, 08, F3, AA, EB, 5D, 8B, 54, 24, 0C, 81, FA, 80, 00, 00, 00, 7C, 0E, 0F, BA, 25, 80, 97, 42, 00, 01, 0F, 82, 52, A4, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0... 
[+]

Entropy:

5.7874

Code size:

118 KB (120,832 bytes)

Scan tbhlpr.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.