home

yac.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dl0105.puphelp.com.
MD5:
dc592d505ff12207c0a38cda0af169ff

SHA-1:
1811ca49cb0a2606c037730e02e7fbd1cd3ea76a

SHA-256:
5894eb59d4210809213f0f27591c90d3dc8cd255f0d772744906753157f8c10e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/14/2024 10:23:03 PM UTC  (today)

File size:
317.1 KB (324,739 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\yac.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6144:ZjjKy13Ftqf+FLtXRogXjlHrT1jKXMyexCadE2Cnr+zSLCJ:sut7LLjlHrT1jKcvE28+zLJ

Entry point:
6D, 20, E6, F5, 7D, 46, 00, 59, 1E, 4C, 83, 60, 97, 80, 80, 00, 00, 00, 00, 00, 7D, 00, 00, 00, 00, 00, 00, 00, A4, 6E, 8D, 75, 00, 40, 57, D8, EA, C7, F9, 46, 17, 95, C1, 8F, 4A, 85, B6, 30, 47, F0, 3B, 4A, 3B, CD, 21, 13, 80, BB, 12, D1, 73, C2, 9C, C3, E8, 28, 77, 3A, 5D, BA, 7C, A5, 3B, 96, 46, D1, EA, 99, 05, 55, 3E, 50, F2, DC, D1, D5, D0, A7, 15, A1, CA, E3, 93, 9E, 2F, B6, 7E, E5, A6, 57, E2, 13, EE, 4E, DB, C5, 88, 76, DE, D7, AE, AB, 93, 5F, E0, E5, 44, F6, 8D, 05, 90, 78, BC, 64, 37, EE, 84, 1F...
 
[+]

The file yac.exe has been seen being distributed by the following URL.

http://dl0105.puphelp.com/download/.../yac.exe

Scan yac.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.