home

off.exe

MyHeritage Ltd.

This is installed with MyHeritage Family Tree Builder.
Publisher:
MyHeritage Ltd.  (signed and verified)

MD5:
88c5b9f9ae800bef2408436d96957210

SHA-1:
8c1a54e8d344782cd6876290010ee69481690e89

SHA-256:
8eed57a318bd97ba3113412c3f1ddf500a12ec09e27abe658260488c1381a802

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:11:03 PM UTC  (today)

File size:
253.5 KB (259,600 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\myheritage\bin\off.exe

Digital Signature
Signed by:
MyHeritage Ltd.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
12/31/2009 1:00:00 AM

Valid to:
3/25/2012 12:59:59 AM

Subject:
CN=MyHeritage Ltd., OU=GENEALOGY RESEARCH, O=MyHeritage Ltd., L=Bnei Atarot, S=Bnei Atarot, C=IL

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
207972D020D72811F5DE51CCF58B7044

File PE Metadata
Compilation timestamp:
6/1/2011 6:50:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
6144:FdmPn5r8X2l0ccQijB+gJXBzb+sjc9JW/Tzc6wTk:LSn5rNl0bQioIt+sQ9Jozc6N

Entry address:
0x862A0

Entry point:
60, BE, 00, 90, 44, 00, 8D, BE, 00, 80, FB, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Entropy:
7.9036

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
248 KB (253,952 bytes)

The file off.exe has been discovered within the following program.

MyHeritage Family Tree Builder  by MyHeritage.com
Family Tree Builder (FTB) is genealogy software to create family trees. The free download version is distributed as freeware, with no restrictions, although registration is required to run the software.
www.myheritage.com/family-tree-builder
About 2% of users remove it
 
Powered by Should I Remove It?

Scan off.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.