» yupdater.exe
Overview
Analysis
File Details

yupdater.exe

Yahoo! Messenger

Yahoo! Inc.

File name:

yupdater.exe

Publisher:

Yahoo! Inc. (signed and verified)

Product:

Yahoo! Messenger

Description:

Yahoo Auto Updater

Version:

3, 2, 0, 138

MD5:

65543bf14fd39a94706fab168047a638

SHA-1:

43a698abac0611a034d89abbc7528dec8d952c01

SHA-256:

1e7de479ca03b2185fb2a05e7c2d0c43998054976b40c25a2522ade7a5893cae

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/2/2024 1:23:20 PM UTC (today)

File size:

597.3 KB (611,672 bytes)

Product version:

3, 2, 0, 138

File type:

Executable application (Win32 EXE)

Common path:

C:\ProgramData\yahoo!\yupdater\yupdater.exe

Digital Signature

Signed by:

Yahoo! Inc.

Authority:

VeriSign, Inc.

Valid from:

8/13/2009 3:00:00 AM

Valid to:

9/3/2012 2:59:59 AM

Subject:

CN=Yahoo! Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Yahoo! Inc., L=Santa Clara, S=CA, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3D7A9A7D12556AB8688CA048C60F6018

File PE Metadata

Compilation timestamp:

5/25/2012 11:11:01 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

Entry address:

0x435A2

Entry point:

E8, 64, E7, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 0C, 75, 1D, E8, DA, 29, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 52, 29, 00, 00, 83, C4, 14, 83, C8, FF, EB, 4D, 8B, 45, 08, 3B, C3, 74, DC, 56, 89, 45, E8, 89, 45, E0, 8D, 45, 10, 50, 53, FF, 75, 0C, 8D, 45, E0, 50, C7, 45, E4, FF, FF, FF, 7F, C7, 45, EC, 42, 00, 00, 00, E8, 99, BF, 00, 00, 83, C4, 10, FF, 4D, E4, 8B, F0, 78, 07, 8B, 45, E0, 88, 18, EB, 0C, 8D, 45, E0, 50, 53, E8, 64, 26, 00, 00, 59, 59, 8B... 
[+]

Entropy:

6.5688

Code size:

428 KB (438,272 bytes)

Scan yupdater.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.