home

YlwGWUACUtil.exe

YlwGWUACUtil

YOUNGLIMWON SOFT LAB Co., Ltd.

Publisher:
ylw  (signed by YOUNGLIMWON SOFT LAB Co., Ltd.)

Product:
YlwGWUACUtil

Version:
1.00

MD5:
f6ad737fa498cbca04ad5de1667d8320

SHA-1:
7f1f5284744006e4bc420b0e88440cef18426c76

SHA-256:
dc60626a195b82ddeced81fbe99c40a87e2dbfad028f4cf6215eb9d5dcaf963f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 2:01:51 PM UTC  (today)

File size:
33.3 KB (34,128 bytes)

Product version:
1.00

Original file name:
YlwGWUACUtil.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\ylwgwuacutil.exe

Digital Signature
Signed by:
YOUNGLIMWON SOFT LAB Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
12/17/2008 1:00:00 AM

Valid to:
12/18/2009 12:59:59 AM

Subject:
CN="YOUNGLIMWON SOFT LAB Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="YOUNGLIMWON SOFT LAB Co., Ltd.", L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1C7AC0ACBC6A5D8DA7C7AF3521E4D93D

File PE Metadata
Compilation timestamp:
3/3/2009 10:10:30 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:WUCSQ0vfH/POdXVPqbz5k2GD3HsmUCSQ0vx7YJLWkQ8hbXJ:sSQ0klPqbzxs8cSQ0xKLTjhbXJ

Entry address:
0x132C

Entry point:
68, 10, 1F, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 24, 58, 25, CB, 85, 99, 42, 4D, 86, 25, C7, FB, 57, F9, 2F, FD, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 0D, 0A, 20, 20, 20, 20, 59, 6C, 77, 47, 57, 55, 41, 43, 55, 74, 69, 6C, 00, 52, 65, 67, 00, 00, 00, 00, FF, CC, 31, 00, 01, DE, F3, 09, 95, 3A, 66, 47, 49, B2, EC, 98, A5, 26, 25, 29, D9, 10, 28, BB, 42, D8, FF, C2, 40, A9, DE, 69, 4B, 77, C1, C8, 5C, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
4.7961

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
16 KB (16,384 bytes)

Scan YlwGWUACUtil.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.