home

youtubedownloadersetup34.exe

The executable youtubedownloadersetup34.exe has been detected as malware by 6 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from youtubedownload.altervista.org.
MD5:
6cc3085b4c788b3409714a42237ebe5f

SHA-1:
9c8bfe0f0da94616bf1e0ef4e21424c331f5278d

SHA-256:
b20a9a06b0d353fecb46c4b2fa2569d4bfc8fbcc6e94b57c96844ea6f07fa584

Scanner detections:
6 / 68

Status:
Malware

Analysis date:
12/25/2024 7:32:34 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:SaliCode
160518-2

ESET NOD32
Win32/Sality.NBA virus
8.0.319.0

F-Prot
W32/Sality.gen2
4.6.5.141

Kaspersky
Virus.Win32.Sality
15.0.0.562

Microsoft Security Essentials
Threat.Undefined
1.223.2875.0

VIPRE Antivirus
Threat.4721115
50350

File size:
5.2 MB (5,411,696 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\youtubedownloadersetup34.exe

File PE Metadata
Compilation timestamp:
4/10/2010 7:19:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:nRofQPQgJgRm6E8zGVIsoPzIh1vs1SbrqAAE/CbMVzEpPA8YO6:nRof2QoEmEzGCpUQSbWAAE/Coli6

Entry address:
0x354B

Entry point:
B7, 46, BA, 71, F5, 34, 65, C7, C3, C8, 78, 44, F0, 02, E8, F7, C6, 0D, 83, 15, 57, 68, FE, E8, 78, 00, 69, D5, E3, 1B, 0E, 5D, 2B, C7, FF, CF, 0F, AF, F1, F3, 85, F7, E8, 1F, 00, 00, 00, 8D, 1D, 71, 3D, 14, 60, 8B, FA, 00, CD, 0F, AF, C2, 88, FD, 4A, 0F, BE, EE, 89, F5, 33, F0, 69, C2, 75, 50, 8D, B1, F3, F3, B8, 8F, 0A, F2, 6D, 0F, AF, F1, 85, CD, 75, 02, 8B, EF, C6, C1, 5B, 31, F7, 85, C6, 81, C2, D1, 06, 01, 00, C6, C5, 6A, 81, EA, 71, 09, 00, 00, 5E, EB, 06, F7, C2, B6, F7, F9, C6, EB, 02, FE, C4, C7...
 
[+]

Code size:
25 KB (25,600 bytes)

The file youtubedownloadersetup34.exe has been seen being distributed by the following URL.

http://youtubedownload.altervista.org/.../YouTubeDownloaderSetup34.exe

Remove youtubedownloadersetup34.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.