» arh.exe
Overview
Analysis
File Details
Programs (1)

arh.exe

Adobe AIR

Adobe Systems Incorporated

File name:

arh.exe

Publisher:

Adobe Systems Inc. (signed by Adobe Systems Incorporated)

Product:

Adobe AIR

Description:

Adobe AIR Redistribution Helper

Version:

15.0.0.249

MD5:

b7eaa711f63e69ed87d32f17f5859722

SHA-1:

2933b7a8db8477d5ecfe2dc52d44bdc57f39b146

SHA-256:

b8800ee2ff4d65f3a97203a63f2a89b1902a2765c48abf43ba701a368fc7d19e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 12:35:24 AM UTC (today)

File size:

84.7 KB (86,688 bytes)

Product version:

15.0

Original file name:

arh.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\national geographic\helpers\arh.exe

Digital Signature

Signed by:

Adobe Systems Incorporated

Authority:

Symantec Corporation

Valid from:

1/13/2014 7:00:00 PM

Valid to:

1/7/2016 6:59:59 PM

Subject:

CN=Adobe Systems Incorporated, OU=Flash Player, O=Adobe Systems Incorporated, L=San Jose, S=California, C=US, SERIALNUMBER=2748129, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US

Issuer:

CN=Symantec Class 3 Extended Validation Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

50ED674255614BF4ED3ED423CC93CA7D

File PE Metadata

Compilation timestamp:

8/27/2014 6:36:27 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

9.0

CTPH (ssdeep):

1536:QijrXDyO4zkm8dbHVLokF8iJTwRH0IM2D57KykfXdbelyr5J5zd7MGP:QGrMzkm8PL3E7Qzb2yr5Jpd7MGP

Entry address:

0x333C

Entry point:

E8, 15, 40, 00, 00, E9, A5, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 56, 33, C0, 50, 50, 50, 50, 50, 50, 50, 50, 8B, 55, 0C, 8D, 49, 00, 8A, 02, 0A, C0, 74, 09, 83, C2, 01, 0F, AB, 04, 24, EB, F1, 8B, 75, 08, 83, C9, FF, 8D, 49, 00, 83, C1, 01, 8A, 06, 0A, C0, 74, 09, 83, C6, 01, 0F, A3, 04, 24, 72, EE, 8B, C1, 83, C4, 20, 5E, C9, C3, 8B, FF, 55, 8B, EC, 53, 56, 8B, 75, 08, 8B, 46, 0C, 8B, C8, 80, E1, 03, 33, DB, 80, F9, 02, 75, 40, A9, 08, 01, 00, 00, 74, 39, 8B, 46, 08, 57, 8B, 3E... 
[+]

Entropy:

6.4023

Code size:

52 KB (53,248 bytes)

The file arh.exe has been discovered within the following program.

Winamax Installer by Winamax

About 4% of users remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.