» myahe.exe
Overview
Analysis
File Details

myahe.exe

InstallAware Software Corporation

File name:

myahe.exe

Publisher:

InstallAware Software Corporation (signed by InstallAware Software Corporation)

Description:

InstallAware for Windows Installer

Version:

6.41.3797.2007

MD5:

a52437042eae24c55a9a07111627e800

SHA-1:

ed9c9e9b0bce729155797fb2b53797a078abdbc0

SHA-256:

d3610324ffb348327f2f6ab8ed84627b465887d06d895ec46bf4ca26697028bb

Scanner detections:

1 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

4/19/2024 6:40:08 AM UTC (today)

Scan engine

Detection

Engine version

F-Secure

Suspicious:W32/QDown.v!Gemini

11.2016-12-03_7

File size:

2.4 MB (2,540,384 bytes)

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\myahe.exe

Digital Signature

Signed by:

InstallAware Software Corporation

Authority:

The USERTRUST Network

Valid from:

1/19/2007 1:00:00 AM

Valid to:

1/19/2010 12:59:59 AM

Subject:

CN=InstallAware Software Corporation, O=InstallAware Software Corporation, STREET=2910 Medical Arts Suite 106, L=Austin, S=TX, PostalCode=78705-3306, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00CD4B2D6EF595575ED792F3BB19EA408B

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:vjyFENM0H9yLwhvjlGOfXEJpIo5IDJ2lBXwnqWUwM7U5b:vjyFEtHvhv7f0HPIDYltwnqWP

Entry address:

0x1B5598

Entry point:

55, 8B, EC, B9, 24, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, 56, 57, B8, 30, 4E, 5B, 00, E8, A4, 27, E5, FF, BE, 34, 68, 5C, 00, 33, C0, 55, 68, DB, 6C, 5B, 00, 64, FF, 30, 64, 89, 20, E8, D4, 2C, E5, FF, BA, 01, 00, 00, 00, E8, 82, 25, EF, FF, A1, B4, 10, 5C, 00, E8, A4, FE, E4, FF, 8D, 55, E0, 33, C0, E8, D6, DE, E5, FF, 8B, 45, E0, 8D, 55, E4, E8, 57, 73, E5, FF, 8B, 45, E4, 8D, 55, E8, E8, 40, F1, FF, FF, 8B, 55, E8, B8, 0C, 6A, 5C, 00, E8, CB, FE, E4, FF, 8D, 55, D8, 33, C0, E8, A9, DE, E5, FF, 8B... 
[+]

Entropy:

6.5960

Developed / compiled with:

Microsoft Visual C++

Code size:

1.7 MB (1,795,072 bytes)

Scan myahe.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.