youtube downloaderinstaller.exe

Kopig

The application youtube downloaderinstaller.exe, “Kopig Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Product:
Kopig

Description:
Kopig Setup

MD5:
ab2872788c81ac02a165481a7af41216

SHA-1:
32029425c71a8391540c1260393242ec09f3503a

SHA-256:
1cd810769992193719dd1c116876e999020ec7340cb0ebc1fbedf6149bae9c96

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
12/26/2024 7:56:25 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.3.9.12

File size:
1 MB (1,091,211 bytes)

Product version:
3.8.3

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\youtube downloaderinstaller.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ONXQHOUE8Vy1GTGYDlui0BGtdjNQRLMYjk2co+bQNiCs3qJfTKGY:ONAuUF7lu5+jNQRokFx+bQThep

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9096

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file youtube downloaderinstaller.exe has been seen being distributed by the following 50 URLs.

http://www.bitsguardtoday.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

http://www.bestcleanshare.com/WVl6OTRQVUkxYWpoMFVtTktRVXhoWmpSS1kxSjBZMlpMVUVKQlREaGFWVzEwU0dFbE1rSnRielppZUhwSGJVdEJNQ1V6UkNaalBXcFJielJJWTFZNFFraHVhbmN5WVRGU0pUSkdWRUY2T0docU4zRkliM1JCTmpKRWEyYzNaVVZNWjA4eE4weFNiVWxuT1ZWcEpUSkdTRzFHUzJzNGJYZGxlbmxRZVZRM1RFcFFSMmxDVlVaUFJXZzJUMlJ4T1U1Tk9VZFlOMDVIWTIxbGIzTnJTbGRKVG1KSlJtSnVVa2xOYW5vd1lYTlpibk0zYWpjMWVGTnROSFl5VjFsRGVsVWxNa1pVU1VsV1NGWlpRa3BVVlhCbGJVdElaeVV6UkNVelJDWmxQVEFtWkc5M2JteHZZV1JCY3oxWmIzVlVkV0psSzBSdmQyNXNiMkZrWlhKSmJuTjBZV3hzWlhJdVpYaGxKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5CSlRKR0pUSkdiMlptTG1SMlpIWnBaR1Z2YzI5bWRDNXVaWFFsTWtaa2JESWxNa1pHY21WbFdXOTFWSFZpWlVSdmQyNXNiMkZrTG1WNFpRPT0=

http://www.bitsguardtoday.com/WVl6OTRQV0Y1V2xoaE5teEtaV3MxVEhSWFNqUmpORkppV0ZKRkpUSkNZV2xsUVU1bmFYWjNXVkphYmt3MVQwMXBZeVV6UkNaalBXaHRWM1ZUY0d4R2FuYzBRMkpwV0NVeVJucEZhMWRUUWxJNVlqZDVibG95ZEc1MFRYZHFTVTBsTWtKbFVXZHlOelZYU1VWakpUSkNTSFpLVUdvek4yTmlUVklsTWtaNWEwSlhURUUwWTFsb1dXMTZRVzUyVWpJMWVrRmtUbEl4YkhWd1JqTlFZVTk0UjNGMk4xYzNKVEpHWVVZeGFtTlJjV3NsTWtKeVVTVXlSakJ4WlNVeVFqUjFhRGhIY1d0YVIxcFhNbkE1TTJGQ2FqUmtkRU1sTWtaaVVXRldSVFF4WnlVelJDVXpSQ1psUFRBbVpHOTNibXh2WVdSQmN6MVpiM1ZVZFdKbEswUnZkMjVzYjJGa1pYSkpibk4wWVd4c1pYSXVaWGhsSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHYjJabUxtUjJaSFpwWkdWdmMyOW1kQzV1WlhRbE1rWmtiRElsTWtaR2NtVmxXVzkxVkhWaVpVUnZkMjVzYjJGa0xtVjRaUT09

http://www.bestcleanshare.com/WVl6OTRQVUp6ZEcxNE5HbFlOamg2WVU1Rk4zWlFXREZDWkVsUkpUSkNVa0ZpYWt4NGRVMDRRMFY2YzFvM2MzaEJVU1V6UkNaalBUVXdWSFpHVVRONFpVSTFTVEZ5VkNVeVFubzJORTlsU2xaS05HMUlNME5UUmxFbE1rSk1KVEpHVG5KSVdrMDNPVE0zVG1ZMGNERm9PWHBMTTBkaWVrNXdlR2RMWm14NVJsSm1KVEpHVURReWJVTnhNMEZaYmxKek9YaG5UbkIyTjFkS1dWZzFjSEpIWkRjelIwMXdOSGw2WW5ad1pTVXlRbmRRU1hsSFNHdFRKVEpHUmlVeVJqUTBkVWR0TTNwSldVb3lNVzltYzNFeFZ6TjJSalJFYTJGUFpWQm5KVE5FSlRORUptVTlNQ1prYjNkdWJHOWhaRUZ6UFZsdmRWUjFZbVVyUkc5M2JteHZZV1JsY2tsdWMzUmhiR3hsY2k1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWnZabVl1Wkhaa2RtbGtaVzl6YjJaMExtNWxkQ1V5Um1Sc01pVXlSa1p5WldWWmIzVlVkV0psUkc5M2JteHZZV1F1WlhobA==

http://www.bitsguardtoday.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

http://www.bestcleanshare.com/WVl6OTRQVW9sTWtKTFdXMTJlblIyVXlVeVJtRnJTSFJHVW1wYU1XbFFNbmQxWnpGcmRGY3lNRlp1UWsxcFV6QkRjbEozSlRORUptTTlKVEpHWjNBNFVucDRabEo1WTNFemFtMXNkMlJyU2tvNWNWazFWbTFzVm13eWFsY3hTazk0WXpWQ1JFNXZVaVV5UW5kUVpUQm9WREpzT0VVMFlpVXlSbVJxYzJwbU4wNTBKVEpHV1V3NGRVazNTRXBRY2pWR0pUSkNNMjlLV0NVeVFqZzBUbTF6Y0dGVmJuRlVRVmxNYjJKb1dtdG5NVWg0YjJkalpHbGlKVEpDWlhWS1puUWxNa0pUVG1GdE0zWnpXalppY21SamNteFFNVGMxZERCeFZ6WkhVazFIUVNVelJDVXpSQ1psUFRBbVpHOTNibXh2WVdSQmN6MVpiM1ZVZFdKbEswUnZkMjVzYjJGa1pYSkpibk4wWVd4c1pYSXVaWGhsSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHYjJabUxtUjJaSFpwWkdWdmMyOW1kQzV1WlhRbE1rWmtiRElsTWtaR2NtVmxXVzkxVkhWaVpVUnZkMjVzYjJGa0xtVjRaUT09

http://www.bestcleanshare.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

http://www.bitsguardtoday.com/WVl6OTRQVFpVYlhGNlNtZE5hQ1V5UWtnMWNFaHpVRzVLWWpFMmNEUkxiMnBHTmxCR1JEQWxNa1owWVhBM2VVSTRaa1J6SlRORUptTTlUSFpYTWtOQlkwZDVRbXhYTmtFd2RYcG1ORGhPZVNVeVJsVkNNbFJJWld4b1UySTFWa1ZZSlRKQ1UydzFTMlV3ZUdaeGVHWjZVMkpXTXpoR1ExRWxNa0pYTVVJMlZUaGhiWEpVY2pOSVZsUkJiekJzVlhGVVltcDVURk5oYnpFMU4zSk5ZU1V5Um10ekpUSkdkMGR6ZVdSU1NtaDJNWEJZV0VWaUpUSkdaMDAyUTFwbU5TVXlSamx2WVVsR2RuQm5Wa2x0WkZKdE5rMHlTME41Y1c1UWNVeEdKVEpHWnlVelJDVXpSQ1psUFRBbVpHOTNibXh2WVdSQmN6MVpiM1ZVZFdKbEswUnZkMjVzYjJGa1pYSkpibk4wWVd4c1pYSXVaWGhsSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHYjJabUxtUjJaSFpwWkdWdmMyOW1kQzV1WlhRbE1rWmtiRElsTWtaR2NtVmxXVzkxVkhWaVpVUnZkMjVzYjJGa0xtVjRaUT09

http://www.bitsguardtoday.com/WVl6OTRQVlJXUkRWdFNUaFJKVEpHUkUxYU1ERlhNbVl5UWtoaVpsVTRTbU5CVlZSYVNVTWxNa0l5YUdkVU9VTnRlbXc0SlRORUptTTlVVGRvYW5Ock9DVXlSbXhXUjJFelJHSXdabEppT0ZWdGNVTWxNa1kyY0hSeWFWRmFhMjFhUlROSGEyMGxNa1kxUVdWNFNWcDFPVzFhTmt0Q1pHaEpPREpCV1VFM2N6Vm9UWEJMVGtSTk9IaFRZWFJyVm1oQmFYZzFRams0SlRKR1QwdHZVVFpXVTFSRWR6RXlRMjh4SlRKQ09FaDZZWG8zY1hsUFRFaHdOVFpDVTNkeWJteFNia1UzTjJSa1VWbERaMnR1VVVKa0pUSkdjSFIxZURReE9HNVJKVE5FSlRORUptVTlNQ1prYjNkdWJHOWhaRUZ6UFZsdmRWUjFZbVVyUkc5M2JteHZZV1JsY2tsdWMzUmhiR3hsY2k1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWnZabVl1Wkhaa2RtbGtaVzl6YjJaMExtNWxkQ1V5Um1Sc01pVXlSa1p5WldWWmIzVlVkV0psUkc5M2JteHZZV1F1WlhobA==

Latest 30 of 166 download URLs

Remove youtube downloaderinstaller.exe - Powered by Reason Core Security