» yahoosetupdrv64.exe
Overview
Analysis
File Details

yahoosetupdrv64.exe

Yahoo Japan Corporation

File name:

yahoosetupdrv64.exe

Publisher:

Yahoo!スマホマネージャー (signed by Yahoo Japan Corporation)

Product:

Yahoo!スマホマネージャー

Version:

1,0,0,0

MD5:

e0e97b693c280461020e795a7031222c

SHA-1:

329f44c895c3f8ac272b07360a46b8c1082af5be

SHA-256:

a72bf7d8c6c5f9f6ea876359f645889514e27859dc094d2757a4acba4d6358cf

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 11:29:33 PM UTC (a few moments ago)

File size:

141.9 KB (145,336 bytes)

Product version:

1,0,0,0

Original file name:

YahooSetupDrv

File type:

Executable application (Win64 EXE)

Common path:

C:\Program Files\yahoo!?????????\yahoosetupdrv64.exe

Digital Signature

Signed by:

Yahoo Japan Corporation

Authority:

VeriSign, Inc.

Valid from:

3/27/2013 8:00:00 PM

Valid to:

3/28/2014 7:59:59 PM

Subject:

CN=Yahoo Japan Corporation, OU=Yahoo Japan Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Yahoo Japan Corporation, L=Minato-ku, S=Tokyo, C=JP

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0784C192F83E890D5DE983695CBF3423

File PE Metadata

Compilation timestamp:

12/17/2012 9:11:00 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

9.0

CTPH (ssdeep):

3072:oge76a8xdSS92jhzqJsEXBnYokdkJ8umE55z1b7oX/xhlSIK:H71392jpqJsEX2GvLtWnK

Entry address:

0xB518

Entry point:

48, 83, EC, 28, E8, 87, 63, 00, 00, 48, 83, C4, 28, E9, 56, FE, FF, FF, CC, CC, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 68, 18, 48, 89, 70, 20, 48, 89, 50, 10, 57, 41, 54, 41, 55, 41, 56, 41, 57, 48, 83, EC, 40, 4D, 8B, 79, 08, 4D, 8B, 21, 49, 8B, 71, 38, 4D, 2B, E7, F6, 41, 04, 66, 4D, 8B, F1, 48, 8B, EA, 4C, 8B, E9, 0F, 85, DC, 00, 00, 00, 33, FF, 48, 89, 48, C8, 4C, 89, 40, D0, 39, 3E, 0F, 86, 2B, 01, 00, 00, 48, 8D, 5E, 0C, 8B, 43, F8, 4C, 3B, E0, 0F, 82, A7, 00, 00, 00, 8B, 43, FC, 4C, 3B, E0, 0F, 83, 9B... 
[+]

Entropy:

6.2903

Code size:

80.5 KB (82,432 bytes)

Scan yahoosetupdrv64.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.