yahoomessenger.exe
Yahoo! Messenger by Yahoo! Inc. (Signed)
| Version: | 9,0,0,2152 |
| MD5: | db06b12e8de572ab8b8c482e3ee574f5 |
| SHA1: | 431988d9d4d85632fe33d2fe4373c57eb8b8696e |
| SHA256: | aab132a61d270bab488e69d0f608f15c1faf5e71c8d4431b93db70b2b178ec7b |
Overview
yahoomessenger.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. It is installed with a couple of know programs including Yahoo! Messenger published by Yahoo! Inc. and Yahoo! Install Manager published by Yahoo! Inc..
Details
| File name: | yahoomessenger.exe |
| Publisher: | Yahoo! Inc. |
| Product name: | Yahoo! Messenger |
| Typical file path: | C:\Program Files\yahoo!\messenger\yahoomessenger.exe |
| File version: | 9,0,0,2152 |
| Size: | 4.16 MB (4,363,504 bytes) |
| Build date: | 3/18/2009 6:46 PM |
| Certificate |
| Issued to: | Yahoo! Inc. |
| Authority (CA): | VeriSign |
| Expiration date: | Thursday, September 3, 2009 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 8.0 |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
Yahoo! Messenger (YIM) is an ad-supported instant messaging client and protocol by Yahoo!. Yahoo! Messenger is provided free of charge and can be downloaded and used with a generic "Yahoo! ID" which also allows access to other Yahoo! services, such as Yahoo! Mail, where users can be automatically notified when they receive new email.
Yahoo Install Manager manages Yahoo program downloads and installations. The install manager keeps track of such programs and assists in the installations to put things in their proper places.
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Yahoo! Pager' → "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
- 'Messenger (Yahoo!)' → "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe'
Network connections
Access through an approved Windows firewall exception
[UDP] listens on port 61942
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00011650% | |
| Kernel CPU: | 0.00009004% | |
| User CPU: | 0.00002646% | |
| Kernel CPU time: | 161,523 ms/min | |
| Memory |
| Private memory: | 79.02 MB | |
| Private (maximum): | 71.42 MB | |
| Private (minimum): | 25.23 MB | |
| Non-paged memory: | 79.02 MB | |
| Virtual memory: | 381.78 MB | |
| Virtual memory (peak): | 479.11 MB | |
| Working set: | 66.58 MB | |
| Working set (peak): | 102.79 MB | |
| Resource allocations |
| Threads: | 38 | |
| Handles: | 1560 | |
| GUI GDI count: | 578 | |
| GUI GDI peak: | 806 | |
| GUI USER count: | 247 | |
| GUI USER peak: | 469 | |
Process properties
Threads
Averages
| YahooMessenger.exe (main module) |
| Total CPU: | 0.05590959% | |
| Kernel CPU: | 0.02967005% | |
| User CPU: | 0.02623954% | |
| CPU cycles: | 2,426,410/sec | |
| Memory: | 4.25 MB | |
| MSVCR80.dll |
| Total CPU: | 0.00312224% | |
| Kernel CPU: | 0.00133937% | |
| User CPU: | 0.00178287% | |
| CPU cycles: | 97,504/sec | |
| Memory: | 620 KB | |
| mshtml.dll (Windows Internet Explorer by Microsoft) |
| Total CPU: | 0.00251315% | |
| Kernel CPU: | 0.00162228% | |
| User CPU: | 0.00089087% | |
| CPU cycles: | 106,107/sec | |
| Memory: | 13.69 MB | |
| flash32_11_8_800_94.ocx (Shockwave Flash by Adobe Systems) |
| Total CPU: | 0.00055908% | |
| Kernel CPU: | 0.00042264% | |
| User CPU: | 0.00013644% | |
| CPU cycles: | 13,888/sec | |
| Memory: | 16.46 MB | |
| ntdll.dll |
| Total CPU: | 0.00027371% | |
| Kernel CPU: | 0.00004680% | |
| User CPU: | 0.00022691% | |
| CPU cycles: | 8,780/sec | |
| Memory: | 1.23 MB | |
| msvcrt.dll (Windows NT CRT DLL by Microsoft) |
| Total CPU: | 0.00013645% | |
| Kernel CPU: | 0.00002330% | |
| User CPU: | 0.00011315% | |
| CPU cycles: | 2,100/sec | |
| Memory: | 688 KB | |
| WINMM.dll |
| Total CPU: | 0.00001997% | |
| Kernel CPU: | 0.00001331% | |
| User CPU: | 0.00000666% | |
| CPU cycles: | 373/sec | |
| Memory: | 200 KB | |
| WININET.dll |
| Total CPU: | 0.00000666% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00000666% | |
| CPU cycles: | 280/sec | |
| Memory: | 1.72 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
41.67% |
|
| Microsoft Windows XP |
25.00% |
|
| Windows Vista Home Basic |
8.33% |
|
| Windows 8 Single Language |
8.33% |
|
| Windows 7 Starter |
8.33% |
|
| Windows Vista Home Premium |
8.33% |
|
Distribution by country
United States installs about 33.33% of Yahoo! Messenger.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
40.00% |
|
| Sony |
13.33% |
|
| Toshiba |
13.33% |
|
| Gateway |
13.33% |
|
| GIGABYTE |
6.67% |
|
| Hewlett-Packard |
6.67% |
|
| American Megatrends |
6.67% |
|
