home

yac.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dl2.yac.mx.
MD5:
1d096225649dc02d814467a9daf228fa

SHA-1:
95ec796ebd332e547ba738e55ba56e0424ace54a

SHA-256:
ddb7d551d61c91261c7f058d4bed30907e1a83599d87a13668a2ea6d061b74c6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:12:08 PM UTC  (today)

File size:
18.2 MB (19,068,864 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\packages\windows_ie_ac_001\ac\avg web tuneup\cache\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\yac.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
393216:bzQiKo2hVR9D8MOJj3/vTfqqlI8YiFy+4fupHScxyHKNK:n+hVR+j3Tfq0k+4fuZdAh

Entry point:
52, 59, 9F, CF, 4A, EB, 2E, 79, 27, 7A, AD, 1D, 7D, C5, CC, DC, 5D, C9, 53, 75, 48, 8D, 01, EB, 46, 83, 36, BA, 57, 9F, 5E, 9B, 43, 1A, E0, A3, D3, 97, 84, E3, E2, 50, DC, B6, BA, E3, F8, 3E, B4, 29, 49, BE, 5C, AF, 60, DF, 79, 86, 67, 71, 89, 69, 14, C9, 59, 31, AB, 25, C5, 58, 34, 2F, 53, 24, E6, 62, 0C, C5, 5D, 8F, BF, FB, B7, 72, B8, F4, D6, E8, 6B, 43, 78, 61, 97, CF, 40, 62, 01, 46, 19, 82, F1, 8F, 17, 73, CC, BC, 94, AA, 76, 90, B5, AD, 50, 1A, 2F, 03, 83, E6, 20, 05, 55, 62, 4F, 81, 28, 26, 12, FF...
 
[+]

The file yac.exe has been seen being distributed by the following URL.

http://dl2.yac.mx/download/.../yac.exe

Scan yac.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.