home

tbxhelper2.exe

Startup TOOLS

INNEO Solutions GmbH

Publisher:
INNEO Solutions GmbH  (signed and verified)

Product:
Startup TOOLS

Description:
Toolbox Helper File

Version:
7.0.24.579

MD5:
4ae024cef0547b8191f538804be0507e

SHA-1:
46cfd6f5aff62ca1fab12e0480a33d255498533b

SHA-256:
7f44c1125f6df1ab23458996a08454663fe8ec81181466be5d2a93d9191926c0

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/10/2024 5:34:37 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

File size:
1.2 MB (1,234,024 bytes)

Product version:
200x

Copyright:
©2007 - INNEO Solutions GmbH - Germany

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Digital Signature
Signed by:
INNEO Solutions GmbH

Authority:
Thawte, Inc.

Valid from:
12/29/2011 1:00:00 AM

Valid to:
2/17/2014 12:59:59 AM

Subject:
CN=INNEO Solutions GmbH, OU=Projektmanagementloesungen, O=INNEO Solutions GmbH, L=Ellwangen, S=Baden-Wuerttemberg, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
736A805BE5F3A5042349F5B281AF4259

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:MycIfX1WePr2x/tHYvZT+DbWIdZ9Eg8GcVm4Uk44F4JUA0+eF7ha:MycIfFdPr2Vh41+DSq9MG244qj0+a7ha

Entry address:
0xA3028

Entry point:
B8, 60, C7, 5D, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, BB, 92, D2, E4, C3, C4, D9, 6E, 42, B1, F5, D5, 67, 20, C1, F0, 03, B7, 24, 25, 94, 09, FC, 26, E3, 4A, 19, 5D, C5, 75, 33, 58, 3D, 6A, 8B, 2A, 32, 74, D5, D8, C8, C8, F4, 01, AB, B0, 52, 53, D5, B5, B2, CA, B6, 2D, C7, CD, CB, 69, A6, A0, 58, 29, D3, D5, EA, 8D, D3, 55, 82, 7A, C1, 5F, 1F, 61, 73, 2F, 0C, 5D, 85, 01, 72, 24, 11, 31, 64, 0A, 71, 2E, B7, 73, 2D, 11, A3...
 
[+]

Packer / compiler:
PECompact v2

Code size:
646 KB (661,504 bytes)

Scan tbxhelper2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.