Gridinsoft Logo
File Icon

The ytsaver.exe (YT Saver) File Analysis

Updated 2 years ago
Checked by Malware Check
ytsaver.exe

Technical Analysis

File Name ytsaver.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.181.174
Database Version 2024-07-04 14:00:26 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
3,293,688
File Size (bytes)
2024-07-04
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
528cec329dd1a08eb65ac4099d9fa3bf
SHA1
198281dc71e1a33416ac1f2eb0e34fa169129612
SHA256
64100ba1fd90e6a702a144e1c6ed0dc91e7bf0c0bc6629faf082eb42323d4354
SHA512
c33294de4ba8b14fd4a097412b4751b25e4ad0913be1d4f6f6779056eb198366d13e2fccddcdb23c688615e9b697a30e5fb288aa642b3690f5d00edbfb8a60fc
ImpHash
0752f55ba02049cbe38b67832eb031ae

PE Analysis

Basic Information

▼
Icon
Hash: 1fb12984b4d8fa4c43cd6c487a1ae9e3
Fuzzy: b2e38e9f745e275cbc4759cb33072cab
dHash: 8e71cccccce8718e
Image Base 0x00400000
Entry Point 0x005e45b3
Compilation Time 2023-09-25 08:59:31
Checksum 0x0032a7fd (Actual: 0x0032a7fd)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path D:\workspace\Downloader\output\v141\x86\Release\Downloader.pdb
Digital Signature OK
Imports 17 libraries
Exports 78 functions
Resources 11 Resources
Sections 5 Sections

Version Information

▼
FileDescription YT Saver
FileVersion 23.9.25.1
LegalCopyright Copyright (c) 2023 YT Saver Studio. All rights reserved.
ProductName YT Saver
ProductVersion 1.0.0.3
Translation 0x0804 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,261,329 bytes 2,261,504 bytes 6.56 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 2E4EF473ACDD3560D6C024A0C1DD194D
.rdata 0x0022a000 612,496 bytes 612,864 bytes 6.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A3D78A68739ED27732996FD0D2F0BED2
.data 0x002c0000 48,368 bytes 27,648 bytes 4.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0A2EEB8A218B9C89E220315EE968074A
.rsrc 0x002cc000 261,256 bytes 261,632 bytes 7.06 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3943A03EB4DE82D62A675B0216002440
.reloc 0x0030c000 102,232 bytes 102,400 bytes 6.61 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 62FD132CCFF05362E101BE7D1E80231A
Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 11 (260,453 bytes)
Resource Type Count Total Size Percentage
MY_RES_TYPE 1 123,462 bytes
47.4%
RT_ICON 2 135,248 bytes
51.9%
RT_MENU 1 80 bytes
0%
RT_DIALOG 1 296 bytes
0.1%
RT_STRING 1 72 bytes
0%
RT_ACCELERATOR 1 16 bytes
0%
RT_GROUP_ICON 2 40 bytes
0%
RT_VERSION 1 588 bytes
0.2%
RT_MANIFEST 1 651 bytes
0.2%

Certificate Chain Analysis

▼
Certificate Information
Product YT Saver
Description YT Saver
File Version 23.9.25.1
Signing Date 08:59 AM 09/25/2023 (1050 days ago)
Verification Status Signed
Signers Shenzhen HappyDog Technology Co., Ltd.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Copyright Copyright (c) 2023 YT Saver Studio. All rights reserved.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2013-08-01 12:00:00 → 2038-01-15 12:00:00
Signature Algorithm: sha384RSA
Serial Number: 05 9B 1B 57 9E 8E 21 32 E2 39 07 BD A7 77 75 5C
DigiCert Trusted Root G4 #2 Chain
Validity Period: 2022-01-13 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0F D1 BB CA 79 6B D7 F8 DD 4C 82 E1 0A 9A 96 31
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #3 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Shenzhen HappyDog Technology Co., Ltd. #4 Chain
Validity Period: 2023-01-05 00:00:00 → 2026-01-04 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 31 07 74 AE 30 76 21 91 6C 51 2B 01 26 50 AC
DigiCert Timestamp 2023 #5 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #6 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #7 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. 1
    Weekly Quick Scans: Set a reminder to run a scan every Sunday. Most infections are caught within the first week, so regular checks give you peace of mind.
  2. 2
    Update Everything: Those annoying update popups exist for a reason — they patch security holes. Windows, browsers, Adobe, Java — keep them all current.
  3. 3
    Download Smart: Stick to official websites and app stores. If a "free" version of paid software sounds too good to be true, it probably comes with unwanted extras.
  4. 4
    Think Before You Click: Malware loves email attachments and "urgent" links. Even if an email looks like it's from your bank or a friend, verify suspicious requests through a different channel.
Proactive Protection
This file looks clean right now, but that doesn't mean you should let your guard down. New malware appears daily, and even legit files can be compromised after download. When in doubt, verify the source and check for a digital signature.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Portal
Signed in via Gridinsoft Portal · View profile
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware