ytd.exe

YTD

Pepak

The executable ytd.exe has been detected as malware by 1 anti-virus scanner.
Publisher:
Pepak  (signed and verified)

Product:
YTD

Version:
1.20.0.952

MD5:
4367f0bc6ecf4cd6fd8eacf68b304938

SHA-1:
aec3b9612cf320c3facfe8a2253ef48acef9dcc9

SHA-256:
c553f42494a17bcd354c9e360bb2b4501c3030928672fc9a62b73af1745332ec

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
12/26/2024 9:30:45 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.11.13.15

File size:
1.2 MB (1,272,760 bytes)

Product version:
1.20.0.952

Copyright:
(c) 2009-11 Pepak

Original file name:
ytd.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ytd\ytd.exe

Digital Signature
Signed by:

Authority:
Pepak (root CA)

Valid from:
1/20/2013 4:44:48 PM

Valid to:
1/20/2014 4:44:47 PM

Subject:
CN=Pepak, E=http://www.pepak.net

Issuer:
CN=Pepak (root CA), E=http://www.pepak.net

Serial number:
42EE5DD3C86218984A3D355CC0EE3D15

File PE Metadata
Compilation timestamp:
1/26/2013 12:23:18 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.25

CTPH (ssdeep):
24576:bCToLsJZ9yAa5NAWlnBWnjCANA74zDYPxEmmZrtyjD:eR8NAWrA06IQrt2D

Entry address:
0xFE358

Entry point:
55, 8B, EC, 83, C4, F0, A1, E4, F1, 50, 00, C6, 00, 01, B8, F0, AB, 4F, 00, E8, 68, AE, F0, FF, E8, 23, 95, F7, FF, E8, F2, 71, F0, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1011.5 KB (1,035,776 bytes)

Remove ytd.exe - Powered by Reason Core Security