home

passport_x64.dll

Passport

APN LLC

This installer is part of the Ask.com (APN) network which will install the Ask.com branded toolbar or browser extension which will take control of the web browser's search functions. The module passport_x64.dll by APN has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the APN Stub installer.
Publisher:
APN LLC.  (signed by APN LLC)

Product:
Passport

Version:
21.25.0.8489

MD5:
9a91dd2ca0c4930432332b11adf41dae

SHA-1:
a3898fe138b6d99aea369b676bab6c7dc383bff5

SHA-256:
e8f731a500ffe5e2a06892b973d49cc85da92f9922ed6dcc0e21223ffe2ea011

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/5/2024 2:31:51 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Ask (M)
17.3.9.2

File size:
12.1 KB (12,360 bytes)

Product version:
21.25.0.8489

Copyright:
© 2017 APN, LLC. All Rights Reserved.

Original file name:
Passport.dll

File type:
Dynamic link library (Win64 DLL)

Installer:
APN Stub

Common path:
C:\ProgramData\apn\apn-stub\orj-spe\Program Files\askpartnernetwork\toolbar\{partnerid}\passport_x64.dll

Digital Signature
Signed by:
APN LLC

Authority:
Symantec Corporation

Valid from:
12/23/2016 6:00:00 AM

Valid to:
5/31/2018 5:59:59 AM

Subject:
CN=APN LLC, O=APN LLC, L=Oakland, S=California, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
643E1CE1B238C7969ABFC62773F3038C

File PE Metadata
Compilation timestamp:
2/22/2017 7:31:54 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x11D0

Entry point:
40, 56, 48, 83, EC, 20, 48, 8B, F1, 85, D2, 0F, 84, 6B, 01, 00, 00, FF, CA, 0F, 85, 75, 01, 00, 00, 48, 89, 5C, 24, 30, FF, 15, 24, 0E, 00, 00, 48, 8B, D8, 48, 85, C0, 74, 53, BA, 08, 00, 00, 00, 41, B8, 00, 10, 00, 00, 48, 8B, C8, 48, 89, 7C, 24, 38, FF, 15, F3, 0D, 00, 00, 48, 8B, F8, 48, 85, C0, 74, 2D, 48, 8B, D0, 48, 8B, CE, E8, D8, FD, FF, FF, 85, C0, 78, 10, 48, 8B, CF, FF, 15, EB, 0D, 00, 00, 48, 89, 05, 44, 23, 00, 00, 4C, 8B, C7, 33, D2, 48, 8B, CB, FF, 15, C6, 0D, 00, 00, 48, 8B, 7C, 24, 38, 4C...
 
[+]

Code size:
1.5 KB (1,536 bytes)

Remove passport_x64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.