How to remove YTDSetup.exe
- File Details
- Overview
- Analysis
YTDSetup.exe
The module YTDSetup.exe has been detected as PUP.YTDDownloader
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
1f499f7ae0ee3054e53a4d005b9a29d2 |
| Size: |
115 KB |
| First Published: |
2017-05-21 18:08:44 (6 years ago) |
| Latest Published: |
2020-04-17 17:22:45 (4 years ago) |
| Status: |
PUP.YTDDownloader (on last analysis) |
|
| Analysis Date: |
2020-04-17 17:22:45 (4 years ago) |
Overview
| %profile%\downloads |
| %localappdata%\microsoft\windows\temporary internet files\content.ie5\sntee513 |
| %localappdata%\microsoft\windows\temporary internet files\content.ie5\rbey0rsa |
| %localappdata%\microsoft\windows\temporary internet files\content.ie5\4ch290sl |
| %sysdrive%\$recycle.bin\s-1-5-21-1429235258-1347235075-1684404373-1000 |
| %profile%\downloads\programs |
| %profile%\desktop |
| %profile%\downloads\new folder |
| %profile%\olo\my documents\pobrane |
| %profile%\zrodim\moje dokumenty\pobrane |
| YTDSetup(2).exe |
| YTDSetup.exe |
| YTDSetup(1).exe |
| $R05IUIM.exe |
| $RMRDXGH.exe |
| YTDSetup - Copy.exe |
| $RWKKU6Q.exe |
| YTDSetup_2.exe |
| YTDSetup (2017_06_10 09_51_24 UTC).exe |
| ytd-video-downloader_582.exe |
|
31.7% |
|
|
8.9% |
|
|
5.9% |
|
|
5.0% |
|
|
5.0% |
|
|
4.0% |
|
|
4.0% |
|
|
3.0% |
|
|
3.0% |
|
|
2.0% |
|
|
2.0% |
|
|
2.0% |
|
|
2.0% |
|
|
2.0% |
|
|
2.0% |
|
|
2.0% |
|
|
2.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
| Windows 7 |
52.0% |
|
| Windows 10 |
39.2% |
|
| Windows 8 |
2.9% |
|
| Windows 8.1 |
2.0% |
|
| Windows XP |
2.0% |
|
| Windows Vista |
2.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000039e3 |
| Name |
Size of data |
MD5 |
| .text |
28672 |
f569e353af0ed51bf4c216faa9bed4e7 |
| .rdata |
11264 |
91eee43954e068e650f7b73a8b0e6915 |
| .data |
512 |
db9f7acbf1c3ddfe255077b699955dfa |
| .ndata |
0 |
00000000000000000000000000000000 |
| .rsrc |
49152 |
1686ba1cc80cee91be4eaac16d987a54 |
| .reloc |
4096 |
9ce8a674b1527a58ead4cb1f2496dd9f |
