home

tbedrs.dll

The module tbedrs.dll has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from ieupdate.tbccint.com a known adware distribution point operated by Conduit Ltd..
MD5:
175546277fc39bb58671165c4d91b23d

SHA-1:
8c2139b6c67b866e763fd42a6dce41b926bc5cd2

SHA-256:
c5fb8bd08ce16c79bb78aa6fde3f797e1edc24aacff1230efb6d9dc7e93b2e26

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Part of the Conduit/ClientConnect toolbar/extension distribution.

Analysis date:
11/27/2024 12:53:27 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Conduit.Toolbar (M)
16.3.21.11

File size:
18.7 KB (19,169 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\tbedrs.dll

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
384:lnDMzFWClwGZRlMsV3LR/D+jCi0ZuDHcBrTqEnyJFCEzqlCZ4qEAx1x4A2WB8:+zFq4vBQ0wIrZn6z+tAx1x4YO

Entry point:
3C, 68, 74, 6D, 6C, 20, 73, 74, 79, 6C, 65, 3D, 22, 68, 65, 69, 67, 68, 74, 3A, 20, 39, 38, 25, 22, 3E, 3C, 68, 65, 61, 64, 3E, 3C, 6D, 65, 74, 61, 20, 68, 74, 74, 70, 2D, 65, 71, 75, 69, 76, 3D, 22, 43, 6F, 6E, 74, 65, 6E, 74, 2D, 54, 79, 70, 65, 22, 20, 63, 6F, 6E, 74, 65, 6E, 74, 3D, 22, 74, 65, 78, 74, 2F, 68, 74, 6D, 6C, 3B, 20, 63, 68, 61, 72, 73, 65, 74, 3D, 55, 54, 46, 2D, 38, 22, 2F, 3E, 3C, 2F, 68, 65, 61, 64, 3E, 3C, 62, 6F, 64, 79, 3E, 3C, 69, 66, 72, 61, 6D, 65, 20, 66, 72, 61, 6D, 65, 62, 6F...
 
[+]

The file tbedrs.dll has been seen being distributed by the following URL.

http://ieupdate.tbccint.com/.../tbedrs.dll

Remove tbedrs.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.