home

myITassistant.Main.exe

myITassistant.Main

Hewlett Packard Enterprise Company

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘myITactions’.
Publisher:
Hewlett Packard Enterprise Company  (signed and verified)

Product:
myITassistant.Main

Version:
2.1.8

MD5:
ba9cfd232c313f59049494fc355d768d

SHA-1:
85b2cc24373217f0913ea09bb6bb308ce1ad31fb

SHA-256:
1aa9cb7806e684bdff45b93156dde54cc5daebe97472ef5b42708f3a6e4620ca

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 8:03:15 PM UTC  (today)

File size:
5.5 MB (5,722,976 bytes)

Product version:
2.1.8

Copyright:
Copyright © 2015

Original file name:
myITassistant.Main.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\hewlett-packard\myit actions\myitassistant.main.exe

Digital Signature
Signed by:
Hewlett Packard Enterprise Company

Authority:
COMODO CA Limited

Valid from:
8/19/2016 5:30:00 AM

Valid to:
8/20/2017 5:29:59 AM

Subject:
CN=Hewlett Packard Enterprise Company, OU=HP Cyber Security, O=Hewlett Packard Enterprise Company, STREET=3000 Hanover Street, L=Palo Alto, S=CA, PostalCode=94304, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00F9AB631C826291AFD122BBA2EA151D44

File PE Metadata
Compilation timestamp:
12/8/2016 8:58:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

Entry address:
0x5739DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 10, 00, 00, 00, 20, 00, 00, 80, 18, 00, 00, 00, 38, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 50, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 68, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
4.3529

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
5.4 MB (5,708,288 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
myITactions

Command:
C:\Program Files\hewlett-packard\myit actions\myitassistant.main.exe


Scan myITassistant.Main.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.