home

InstallHelper.exe

Henry Schein

Publisher:
Henry Schein, Inc.  (signed by Henry Schein)

Description:
InstallHelper

Version:
2011.0.150.0

MD5:
ef6367648a5bb808011f3c519e2c4868

SHA-1:
e1394e10386c9e2af363a1078a50dce86ea6b82a

SHA-256:
2d11b2dc39fdc048f293b0871f9ce2c6438abf1577cb6fdfb856c64d05fc8283

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:02:05 PM UTC  (today)

File size:
497.6 KB (509,592 bytes)

Product version:
2011.0.150.0

Copyright:
Copyright Henry Schein, Inc.

Original file name:
InstallHelper.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\{c3e32441-74ee-48b9-b307-42c2c4b41816}\installhelper.exe

Digital Signature
Signed by:
Henry Schein

Authority:
Henry Schein

Valid from:
1/1/2010 2:00:00 AM

Valid to:
1/1/2099 2:00:00 AM

Subject:
CN=Henry Schein

Issuer:
CN=Henry Schein

Serial number:
EF0727EFE72850834A703F157841B34F

File PE Metadata
Compilation timestamp:
4/2/2012 11:31:53 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:iVCwzN54WuQ4RRiYyIsAdxwJXf50eK+IFFd4z9NAuQ4RyvFPlWbvgCPk:qCwzN56Q4+YyIsr50eKZFFdWjQ4Ixek

Entry address:
0x7CFAE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 10, 00, 00, 00, 20, 00, 00, 80, 18, 00, 00, 00, 38, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8426

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
492 KB (503,808 bytes)

Scan InstallHelper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.