youtube converter setup.exe

YouTube FLV to AVI easy converter

The application youtube converter setup.exe, “YouTube FLV to AVI easy converter Setup ” has been detected as a potentially unwanted program by 3 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The installer uses the InstallMonetizer platform which will donwload and install adware toolbars and other potentially unwanted software offers during setup. The file has been seen being downloaded from f25.softwaretop.net.
Product:
YouTube FLV to AVI easy converter

Description:
YouTube FLV to AVI easy converter Setup

MD5:
33e9b4648b2ab8173fee9f6877174da5

SHA-1:
40998d651c6c60415b8b4a58f18bf26460fda420

SHA-256:
bec3ba1d2f0d518064e5af5bc91caa9ac7c9a156369b7f1ec8ccbf28f3bb278a

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallMonetizer distribution platform to bundle adware.

Analysis date:
11/2/2024 9:23:30 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
PCK/ExeCryptor
7.11.178.210

ESET NOD32
Win32/InstallMonetizer.AF
8.10571

Reason Heuristics
PUP.Bundle
16.3.1.0

File size:
5 MB (5,279,241 bytes)

Copyright:
2010

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\youtube converter setup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:Q0kG+f7tNWZUSQ9zqdKKii+aSuRTKQ3UZlc7SackzvOWMde8WERgJ:HSqKzUKKiHa7RTKZlc74kXMdflgJ

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9990

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file youtube converter setup.exe has been seen being distributed by the following URL.

Remove youtube converter setup.exe - Powered by Reason Core Security