YahooMessenger.exe
Yahoo! Messenger by Yahoo! Inc. (Signed)
Version: | 11,5,0,0228 |
MD5: | 127cd00925c1a2b759765c5b9600de30 |
SHA1: | 437329a7a24ef7adbb25dbb5d20755e528923773 |
SHA256: | 22a9710b84873622eb1027552f3e7cc3e054ff367010149822f476a143556335 |
What is YahooMessenger.exe?
Yahoo! Messenger (YIM) is an ad-supported instant messaging client and protocol by Yahoo!. Yahoo! Messenger is provided free of charge and can be downloaded and used with a generic "Yahoo! ID" which also allows access to other Yahoo! services, such as Yahoo! Mail, where users can be automatically notified when they receive new email.
About YahooMessenger.exe (from Yahoo! Inc.)
“Just sign into Yahoo! Mail to enjoy the same Yahoo! Messenger for the Web service you know and love. Yahoo! Messenger within Yahoo! Mail also allows you to chat with your Facebook and Windows Live fri”
Details
File name: | YahooMessenger.exe |
Publisher: | Yahoo! Inc. |
Product name: | Yahoo! Messenger |
Typical file path: | C:\Program Files\Yahoo!\messenger\yahoomessenger.exe |
File version: | 11,5,0,0228 |
Size: | 6.29 MB (6,595,928 bytes) |
Certificate |
Issued to: | Yahoo! Inc. |
Authority (CA): | VeriSign |
Effective date: | Wednesday, August 12, 2009 |
Expiration date: | Sunday, September 2, 2012 |
Digital DNA |
PE subsystem: | Windows GUI |
Entropy: | 6.472139 |
File packed: | No |
Code language: | Microsoft Visual C++ 8.0 |
.NET CLR: | No |
More details
Programs
The following programs will install this file
Office-Addin is part of the AcerCloud platform and is designed to integrate with Microsoft Office products (Word, PowerPoint and Excel) and to backup files to the cloud.
“The Shopping Toolbar by Ask has the single purpose of enhancing a user’s online shopping experience by offering an enhanced shopping search experience, links to popular shopping sites and/or additional content such as coupons, special offers and the latest deals from many merchants. The enhanced shopping search experience includes rich content, a variety of product listings, and visual product search results. These are search ads that ...”
“Badoo Desktop is a free application that shows you how near other users are right now. ”
Google Talk is an instant messaging service that provides both text and voice communication. Google Talk is also the name of the client applications offered by Google to access the service. Google Talk is integrated into Gmail. Users can send instant messages to other Gmail users. As it works within a browser, the Google Talk client does not need to be downloaded to send instant messages to Gmail users. Google also provides a Voice and ...
Yahoo! Messenger (YIM) is an ad-supported instant messaging client and protocol by Yahoo!. Yahoo! Messenger is provided free of charge and can be downloaded and used with a generic "Yahoo! ID" which also allows access to other Yahoo! services, such as Yahoo! Mail, where users can be automatically notified when they receive new email.
“Just sign into Yahoo! Mail to enjoy the same Yahoo! Messenger for the Web service you know and love. Yahoo! Messenger within Yahoo! Mail also allows you to chat with your Facebook and Windows Live friends without requiring any installation. Send text messages in real-time to your friends on Yahoo! 7 or Windows Live™ Messenger. Share photos from your desktop or Flickr, then discuss them over IM while you and a friend view them together....”
AT&T Yahoo! Messenger is an AT&T branded version of Y! Messenger.
Yahoo Install Manager manages Yahoo program downloads and installations. The install manager keeps track of such programs and assists in the installations to put things in their proper places.
Verizon Yahoo! Messenger is an AVerizon branded version of Y! Messenger.
Is a downloadable casual PC game distributed by Yahoo! Games.
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Yahoo! Pager' → "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
- 'Messenger (Yahoo!)' → "C:\Program Files1\Yahoo!\Messenger\YahooMessenger.exe" -quiet
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe'
- Firewall exception for 'C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe'
- Firewall exception for 'C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe'
Scheduled tasks
- The task '{FF8FDDAA-FA1C-4738-BB7B-E5395E714A5C}' runs on registration in the path '\{FF8FDDAA-FA1C-4738-BB7B-E5395E714A5C}'
- The job '{FEE0E7C4-2471-421A-B7F2-B7FCDE86041F}' runs on registration in the path '\{FEE0E7C4-2471-421A-B7F2-B7FCDE86041F}'
- The task '{FE9DD168-2242-4692-9518-F849B006B42E}' runs on registration in the path '\{FE9DD168-2242-4692-9518-F849B006B42E}'
- The job '{FE1C49CC-7C9E-41AB-8701-EB745F8F8B56}' runs on registration in the path '\{FE1C49CC-7C9E-41AB-8701-EB745F8F8B56}'
- The task '{FB9D3C00-9DBC-4D9A-81CF-524478AD3C0E}' runs on registration in the path '\{FB9D3C00-9DBC-4D9A-81CF-524478AD3C0E}'
- The task '{FA79B2F5-7E02-4809-8B35-37242B09F0D8}' runs on registration in the path '\{FA79B2F5-7E02-4809-8B35-37242B09F0D8}'
- The job '{F83786B3-255D-426C-8E5F-168388CB160D}' runs on registration in the path '\{F83786B3-255D-426C-8E5F-168388CB160D}'
- The task '{F029C03D-44A7-4F3C-816A-B58D7D9F118B}' runs on registration in the path '\{F029C03D-44A7-4F3C-816A-B58D7D9F118B}'
- The job '{E8178761-9854-4275-9D41-EDE6CF69B80D}' runs on registration in the path '\{E8178761-9854-4275-9D41-EDE6CF69B80D}'
- The job '{DD6C57E2-0A17-411F-A257-F27B425B1E2F}' runs on registration in the path '\{DD6C57E2-0A17-411F-A257-F27B425B1E2F}'
- The task '{DCD0C27A-7B98-4496-8BB0-54774348BE49}' runs on registration in the path '\{DCD0C27A-7B98-4496-8BB0-54774348BE49}'
- The job '{D4A77F9F-4019-4429-9E31-6B4663884D3E}' runs on registration in the path '\{D4A77F9F-4019-4429-9E31-6B4663884D3E}'
- The job '{D14D6992-E2DB-4701-8A81-95FA01C505D3}' runs on registration in the path '\{D14D6992-E2DB-4701-8A81-95FA01C505D3}'
- The task '{CE655DCC-E3B1-4DEA-BC23-E1FA4814A5F3}' runs on registration in the path '\{CE655DCC-E3B1-4DEA-BC23-E1FA4814A5F3}'
- The task '{CA6ABFEE-82B1-48B9-8C64-2AB8BF2FF498}' runs on registration in the path '\{CA6ABFEE-82B1-48B9-8C64-2AB8BF2FF498}'
- The job '{C6969615-5B0C-4F8D-84F3-AD11330140E6}' runs on registration in the path '\{C6969615-5B0C-4F8D-84F3-AD11330140E6}'
- The task '{BE61EF52-4612-49A3-9671-C4AF05E53DC7}' runs on registration in the path '\{BE61EF52-4612-49A3-9671-C4AF05E53DC7}'
- The job '{AD0A62EE-2740-442F-9BC9-FFBA94D282D0}' runs on registration in the path '\{AD0A62EE-2740-442F-9BC9-FFBA94D282D0}'
- The task '{A8F88BC7-0E3B-4FA2-84E9-E9989331C21B}' runs on registration in the path '\{A8F88BC7-0E3B-4FA2-84E9-E9989331C21B}'
- The job '{A471C0C4-3177-417F-8A98-F9F376A9B149}' runs on registration in the path '\{A471C0C4-3177-417F-8A98-F9F376A9B149}'
- The task '{A34D260B-18EE-403F-B589-12DA6124FAB7}' runs on registration in the path '\{A34D260B-18EE-403F-B589-12DA6124FAB7}'
- The task '{9CB61C15-ACD2-4FF6-9262-DDE56B2EF936}' runs on registration in the path '\{9CB61C15-ACD2-4FF6-9262-DDE56B2EF936}'
Network connections
Access through an approved Windows firewall exception
[TCP] sip116-p2.voice.ne1.yahoo.com (98.138.26.122:443)
[TCP] sip117.voice.ne1.yahoo.com (98.138.26.57:5050)
[TCP] mpr6.ngd.vip.ch1.yahoo.com (217.163.21.39:80)
[TCP] pinhole101p2.us1.voice.gq1.yahoo.com (98.137.1.177:443)
[TCP] sip102.voice.ne1.yahoo.com (98.138.26.42:443)
[TCP] sip116-p2.voice.ne1.yahoo.com (98.138.26.122:5050)
[TCP] sip105-p1.voice.ne1.yahoo.com (98.138.26.77:443)
[TCP] sip112.voice.ne1.yahoo.com (98.138.26.52:443)
[TCP] sip115.voice.ne1.yahoo.com (98.138.26.55:443)
[TCP] sip105.voice.ne1.yahoo.com (98.138.26.45:5050)
[TCP] sip114-p1.voice.ne1.yahoo.com (98.138.26.113:443)
[TCP] sip102-p2.voice.ne1.yahoo.com (98.138.26.66:443)
[TCP] sip120p1.us1.voice.gq1.yahoo.com (66.196.122.68:443)
[TCP] sip109-p1.voice.ne1.yahoo.com (98.138.26.93:443)
[TCP] sip109-p3.voice.ne1.yahoo.com (98.138.26.95:443)
[TCP] sip113.voice.ne1.yahoo.com (98.138.26.53:443)
[TCP] sip106-p1.voice.ne1.yahoo.com (98.138.26.81:443)
[TCP] sip108-p2.voice.ne1.yahoo.com (98.138.26.90:443)
[TCP] sip120-p1.voice.ne1.yahoo.com (98.138.26.137:443)
[TCP] relay111p6.eu1.voice.ir2.yahoo.com (46.228.42.173:443)
[TCP] sip119-p2.voice.ne1.yahoo.com (98.138.26.134:443)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.01670807% | |
Kernel CPU: | 0.00880538% | |
User CPU: | 0.00790269% | |
Kernel CPU time: | 3,917,581 ms/min | |
CPU cycles: | 498,433/sec | |
Context switches: | 328/sec | |
Memory |
Private memory: | 66.95 MB | |
Private (maximum): | 59.75 MB | |
Private (minimum): | 21.13 MB | |
Non-paged memory: | 66.95 MB | |
Virtual memory: | 252.65 MB | |
Virtual memory (peak): | 273.87 MB | |
Working set: | 39.6 MB | |
Working set (peak): | 65.46 MB | |
Page faults: | 510,962/min | |
I/O |
I/O read transfer: | 31.94 KB/sec | |
I/O read operations: | 260/sec | |
I/O write transfer: | 4.45 KB/sec | |
I/O write operations: | 10/sec | |
I/O other transfer: | 28.08 KB/sec | |
I/O other operations: | 493/sec | |
Resource allocations |
Threads: | 25 | |
Handles: | 865 | |
GUI GDI count: | 770 | |
GUI GDI peak: | 615 | |
GUI USER count: | 235 | |
GUI USER peak: | 260 | |
Process properties
Integrety level: | Medium |
Platform: | 32-bit |
Command lines: |
- "C:\Program Files\yahoo!\messenger\yahoomessenger.exe" /cookieproxy
- "C:\Program Files\yahoo!\messenger\yahoomessenger.exe"
- "C:\Program Files\yahoo!\messenger\yahoomessenger.exe" -quiet
- C:\progra~1\yahoo!\messenger\yahoomessenger.exe /cookieproxy
- "C:\progra~1\yahoo!\messenger\yahoomessenger.exe" -quiet
- C:\progra~1\yahoo!\messen~1\yahoom~1.exe /cookieproxy
- (11 more)
|
Owner: | User |
Parent processes: |
|
Threads
Averages
YahooMessenger.exe (main module) |
Total CPU: | 0.09786077% | |
Kernel CPU: | 0.03429037% | |
User CPU: | 0.06357040% | |
CPU cycles: | 6,413,875/sec | |
Context switches: | 23/sec | |
Memory: | 6.4 MB | |
mshtml.dll (Windows Internet Explorer by Microsoft) |
Total CPU: | 0.09188090% | |
Kernel CPU: | 0.05534246% | |
User CPU: | 0.03653844% | |
CPU cycles: | 3,433,500/sec | |
Context switches: | 34/sec | |
Memory: | 13.69 MB | |
msvcrt.dll (Windows NT CRT DLL by Microsoft) |
Total CPU: | 0.07802766% | |
Kernel CPU: | 0.00082264% | |
User CPU: | 0.07720502% | |
CPU cycles: | 1,377,841/sec | |
Memory: | 680 KB | |
MSVCR80.dll |
Total CPU: | 0.07584505% | |
Kernel CPU: | 0.02326563% | |
User CPU: | 0.05257942% | |
CPU cycles: | 2,864,067/sec | |
Context switches: | 12/sec | |
Memory: | 620 KB | |
ntdll.dll |
Total CPU: | 0.03702275% | |
Kernel CPU: | 0.02336992% | |
User CPU: | 0.01365283% | |
CPU cycles: | 1,243,098/sec | |
Context switches: | 1/sec | |
Memory: | 1.4 MB | |
flash32_11_6_602_171.ocx (Shockwave Flash by Adobe Systems) |
Total CPU: | 0.01358962% | |
Kernel CPU: | 0.00601103% | |
User CPU: | 0.00757859% | |
Context switches: | 149/sec | |
Memory: | 15.88 MB | |
wow64cpu.dll |
Total CPU: | 0.00868785% | |
Kernel CPU: | 0.00528735% | |
User CPU: | 0.00340050% | |
CPU cycles: | 315,989/sec | |
Memory: | 32 KB | |
WINMM.dll |
Total CPU: | 0.00833038% | |
Kernel CPU: | 0.00715670% | |
User CPU: | 0.00117369% | |
CPU cycles: | 1,976,446/sec | |
Memory: | 200 KB | |
ymsdk.dll (by Yahoo!) |
Total CPU: | 0.00327697% | |
Kernel CPU: | 0.00239203% | |
User CPU: | 0.00088493% | |
CPU cycles: | 68,421/sec | |
Context switches: | 1/sec | |
Memory: | 3.89 MB | |
WININET.dll |
Total CPU: | 0.00316266% | |
Kernel CPU: | 0.00290436% | |
User CPU: | 0.00025830% | |
CPU cycles: | 142,529/sec | |
Context switches: | 1/sec | |
Memory: | 1.1 MB | |
flash32_11_5_502_135.ocx (Shockwave Flash by Adobe Systems) |
Total CPU: | 0.00284171% | |
Kernel CPU: | 0.00184934% | |
User CPU: | 0.00099236% | |
CPU cycles: | 187,927/sec | |
Memory: | 14.77 MB | |
flash32_11_9_900_117.ocx (Shockwave Flash by Adobe Systems) |
Total CPU: | 0.00254674% | |
Kernel CPU: | 0.00185620% | |
User CPU: | 0.00069054% | |
CPU cycles: | 403,032/sec | |
Memory: | 16.52 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
54.00% |
|
Microsoft Windows XP |
17.50% |
|
Windows 7 Ultimate |
13.00% |
|
Windows 8 Pro |
4.00% |
|
Windows 8 |
2.00% |
|
Windows 8 Pro with Media Center |
1.50% |
|
Windows 7 Professional |
1.50% |
|
Windows Seven Black Edition |
1.50% |
|
Windows 8 Single Language |
1.50% |
|
Windows 7 Home Basic |
1.50% |
|
Windows Vista Home Premium |
1.50% |
|
Windows 8.1 Single Language Preview |
0.50% |
|
Distribution by country
United States installs about 59.49% of Yahoo! Messenger.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Toshiba |
59.81% |
|
Dell |
15.58% |
|
ASUS |
6.23% |
|
Hewlett-Packard |
4.67% |
|
Acer |
4.67% |
|
American Megatrends |
4.05% |
|
GIGABYTE |
2.18% |
|
Compaq |
0.62% |
|
Lenovo |
0.62% |
|
Intel |
0.62% |
|
Sony |
0.62% |
|
Sahara |
0.31% |
|