home

ytdsetup.exe

YTD Video Downloader

GreenTree Applications srl

The application ytdsetup.exe, “YTD Video Downloader stub installer” by GreenTree Applications srl has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from software-files-a.cnet.com and multiple other hosts. While running, it connects to the Internet address hosted-by.leaseweb.com on port 80 using the HTTP protocol.
Publisher:
GreenTree Applications srl  (signed and verified)

Product:
YTD Video Downloader

Description:
YTD Video Downloader stub installer

Version:
4.8.9.7

MD5:
dad470224e5cc8f273da1f131a7d0598

SHA-1:
a6b7583af2c07fd48b67421535dad02d6e57ad92

SHA-256:
b8d7ebe902ceb0d471f16f6630fd761686f1b4da5f7032baa3ab68825462e014

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
This is part of a Greentree bundled installer, which includes various adware, toolbars and co-bundled potentially unwanted apps pushed to the user upon setup.

Analysis date:
4/23/2024 12:27:25 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Optional.Installer
15.2.18.15

File size:
101.5 KB (103,896 bytes)

Product version:
4.8.9.7

Copyright:
(c) 2014 GreenTree Applications SRL. All rights reserved.

Original file name:
YTDStub.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ytdsetup.exe

Digital Signature
Signed by:
GreenTree Applications srl

Authority:
Starfield Technologies, Inc.

Valid from:
2/17/2015 4:55:38 PM

Valid to:
11/18/2015 5:32:14 PM

Subject:
CN=GreenTree Applications srl, O=GreenTree Applications srl, L=Bucuresti, C=RO

Issuer:
CN=Starfield Secure Certificate Authority - G2, OU=http://certs.starfieldtech.com/repository/, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00C427DA8891A2EF29

File PE Metadata
Compilation timestamp:
12/6/2009 12:50:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:9QpQ5EP0ijnRTXJH68gkW+RoeGd8yNkM/Dk2296C/CGzYCUcxFbD+G+:9QIURTXJH7Ozd8yNkaG6CxzYCUvZ

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.1798

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file ytdsetup.exe has been seen being distributed by the following 50 URLs.

http://software-files-a.cnet.com/s/software/13/79/86/.../YTDSetup.exe

http://d3gmiwcppg3ac8.cloudfront.net/XCQGdNMMLk0S9jaCtzDw5PAI6IY3layBYnqO906Huec

http://www.youtubedownloadersite.com/.../ytdcnet.php

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=1&abcd=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

http://d3evte5vd22n6.cloudfront.net/qHPrWXSU9ppBzQh3uI3g9LSi_sMeBSo7JEvES8p0Si8

http://www.youtubedownloadersite.com/.../YTDSetup.exe

http://d39ezp67ee64qc.cloudfront.net/szkCA22IHii9LtnGOuz597Si_sMeBSo7JEvES8p0Si8

http://d1gn07kup82lqp.cloudfront.net/IhtwnnLze5DJS39NY82TWFkiYEypjJkuUPk1gipfp4w

http://dppj6ddnetrv6.cloudfront.net/lPjkpF94PbWQRrZNwBZ9Wax7p-LeekllGN_XEtyUBnU

http://d21xm9sz3zjmpy.cloudfront.net/c5QkmxIRUCsVW9qZest7HrSi_sMeBSo7JEvES8p0Si8

http://d1pqd2rmxliz88.cloudfront.net/X-Zxl9u9Kgx7QOHgB5ZWTlkiYEypjJkuUPk1gipfp4w

http://d19ui202or7wgx.cloudfront.net/67QByQw-pOB3KrtipHXs6hR1UkQWbd-DIKkxuvxKJsQ

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=4&abcd=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

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=3&abcd=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

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=2&abcd=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

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=1&abcd=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

http://d23qibzw8kr5nf.cloudfront.net/cZD_auf3gFa25YjhuqpFJPAI6IY3layBYnqO906Huec

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=4&abcd=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

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=3&abcd=nu4ccSMcQFEWJLa9MXHpsOKw0ckhaCtIj7oAXEmaEuFG4nTWrhb0HSuqQnFGXILRa8LDVEvj2fjo2u85OduazmEn1iVIFQs0R5kS5Yfioghd7F3rVArv5kvOshoKBaFM8Yrsq2LjwUosYq8iZzIlR5r6ytN9VgkB6dR8fSMSQbHASpyNKyYgsWfaYegXq6Elm5kwpOOJwWOlnFS5mJrHNy8Lth5NbS60u4NYZzhJbkxQFAjCHJ7G8sBFby11X42D8vp7gl3ijqU9lCmg6cyykzp2sIc6Y6KcMo8TEv3WG7NlxoySqbTlvaz8JXfhgHyYUOnbS6kwgbZNhEkVAagmDz37N3fn50bz8hRJltXuJdY3Ory9DG8z9nhFvyJsaGyhUTSfI17k4Qx9SGkVo0moVFylGkQqvM5tlT3uGnMsqWb9rDYd1zb7IJE0NnsFwS9wO4xyppEGHy4VUdC7sHDWdvFQGYtc7FFA6M1e4DKrtPXw847hzGUabwbeSBUAaoZxKknhTH1pWh4hDacBF5zzMtLXVwx3hWaHVICWzuWlaj5gW2JsPogjBQiDSwUcKOaw9n0P6NpKKclW2S0AXKJSRrUgF5Y0Z0SxMKQlUoBPLgov30C6plJChP3n2UTZAbmf7elOmB8p6wb2scSvgjeMgf0II64GTxC7YhoQIQ7gWA3Cxnwi1Zl6O5CArOSG5VB3SMErtMqEeijs6k0sgHAfCy5VFt70XH9MKyxodU3mv2HBv00dLZCbMrDIOG4UkZBcXkb96eIKiQhhSrtxijFJ6WZgQwkftxex3o2JWirvc5USKpfoJGOo2QfibdH3oo0jLk9FCiZu7g5EOM5KX2BtRntsfsOSJXacLeLt1GhiLHxMLm38vX8Q4rQsiAmaZxQ4bv1W0Ni07fwFYnVgBNogYIugN3LdFu64r3DkxVAC

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=2&abcd=ZXZAItKPXrFCQItuuFxg4jJ0omOS7JZ4tqD24W4UREYxteeTZy2iRrnppAjdsR6C8VQRpqGCByP2tsccLcHoGbrrluAVCLEMBmaspMJsQY7X6kzw5gRlNtPiz3bqmf9qFluzP3vCvfMGlwXX7NduUPEIZzLChuwD4h4NDXJtXwkbbnp21J91ZmsAVSWsRsMWQMrYEFbf8YQgKNWQ8movPuO8j7QTiJ2tab9PEU3yOqQqtKuVymrpvMymJswSd4tql5t5nWNrH3fnFamECozKjud7VZRaze4nPZ5vrQCdHO9XJ9p4G2uY1vxi8A7GOHyGCUQiplcc3qS8FUzFr65aOZpASGNZDwnkYG0zmvHZYZWL5w3XvSkVEygCHpvorOiEcgXoa5w754P5wjTmrSxVjZU3drRX3bAPCyHhJGyp1Mcdj1XZuJ2e0jmUmdQ7IbzJTp84HQcgUiAKF8y3GKp65QNFpQ6qPl5MpUh5sGJY68ka9fo5CHbkV4t2TvHm7caVGt3Y11MRhtqcIf8BaObb0mYNWCo8Ftemu4laQCuD79ssIPv6OWogN35z1966ZRgJoJA5ga1rqjV4N8fqcmUklPyEq5FNKs1wjil8hXHaEaqNoNV8oJiwsw6YoOHx1g1ckXrvQODkOBPck8tRkSC7txgzjxbHJHDHG31aEMmMgdfaNoxPWnbGZDgmCoE93a2EvihJc4Amk8kILnv3pjzL1emjhwVPJsQ9itKHq3XmPzmUe8UgXoZ3WeGak2CPrdoIoUpnLhStyxoX412ILO5gDLhiXF6wxAWKF4TIUS04pnhQFDQbBBUgjW1Ay7oIqAQtW4f5QqPw5kDY9njTNa2fNoQf8XC12T66e6TEXI0EmHtN00SxMtPqpnonQ0EW6MmELTmsL9ULGtny9dDMTm6m0XlJz0vwpXHGAXZjE6CA

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=1&abcd=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

http://d2qdyz2oembfhy.cloudfront.net/7F-YYMt0bwDPRQHdefKpEKx7p-LeekllGN_XEtyUBnU

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=4&abcd=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

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=3&abcd=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

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=2&abcd=UKaT89MwOryUWtrcpNW0J4KrNBRdvDAIQcrdjh5WKRJZfoXFOL1kOLA3fJpAlZRhGavnLJqvZt3wLE7eqcMwxoR6jTQJVgD1A8F3QTBaRIEbl4qNHX6fFAiTWWiXfJzOA9RbM16f9Xjhet8yAVqdmlDfXCulA2DLTmpkknee5Tn2UisALFEqRp8kVaQCiyZpnzns0CUPTbOOjTRAUSCA3f35m0r4YikeYhV7qq0DIOg29Lm18KHK30EmCfzRso8R7f32BSCRcEzznyuCC9VzOQNSKmXgvuduhRNts5Yo3xIwyzkM7D76EZOscCbCeyVXP6xbjAKihStc71K1InEMCVS5IsxOwZ7qW3HIZuW2KSF7okDGNdbUKrEo5y7qSxDfn9MkmGBp65UuwANwaTd4F3xG86h4t4EGhM9wsAVkhqbSBKVIGlPejukeSOMhYdjFmSJNXtQpdnlUu15GrJTGC5VgbRRmEta7cnj5ohcj1szb5n8QkfHU3zOib5dGUwzeLQJPEycp5PQxO5CmxOHyu70XR2Qdnvy73RjzXahkh5XKCE1ucR8p2x3jHCwUswCTDqmoMri3LPQOxP1ffpxyFrvtONFllQFhmi7CB55sFe4YZtosiYUgsjbdUlvoX5GwhGcTdUcN4KoR82bvLiWqEKCqDFzskMfz0N0j29RoTXTyyY9vkMh51QiF5qeM46uXZVOfSvXwGEhHVrUJc3l1hQaZtwXkrzLxOcowL4naY5XumXtUvZwrCoKwZnMfAloeviqOgF1ESOaIaIAUlXzICr1BxqJiH74ydWujr2YZBmahOevIJ2zT585iuQ5FG2laUdrJ4q425fo86HmHomcDOfTekcRf0PGzm4zLW59DmqFv51sSij7fF6l09saiElRgptPixv8mxE40FXa020aQm3OELuQMWIwTlsAOnn2R

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=1&abcd=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

http://de9qc3w40con3.cloudfront.net/cTJGMU-uy4QRE_IjKkeTeax7p-LeekllGN_XEtyUBnU

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=4&abcd=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

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=3&abcd=Bk9TXE8ZOUSvWveREBGBTXpg4yAHoLJz7PAaa242fvbS5bZHfnfk0v1XK6GCicDm6MnfqDSd6C6ufQenJfQAjci4RdwYYXDyYIgs3hsbLunF93AP6U8X795dM99mv07irxMmRJce7lNP2qRqCOHb6daHvuIT0Lt2um4sV77rlKUHOUR1sC479MkfMKu6kmUVdM14kiNRp7eWcb0YYwAyihhAIxT8z4yLgCnsPp6UllCEIjJAMThhJPWeMp0RPsGWbqo4cOWwC0TEMqvMDSHnj8ysw8zuxo2SBIauG1CotjpoCCgUZVTq85mPga8K5zsDEkbPaf9fxhBVvrn3yiZDRqrYb12g04If2TsD8GhVEwVAWhznu8XEyIabnG8pskXDUpduHU8A9qfqJoqsQwR1lMbbFlFQltZUPQgn8xPMzy922flIBN3gPeAc3AXqxOLGul8eda8xJkktY3uiXsK0if8JRnbgDdtZ9Auq8rFxfIDawG7BL7Adcym1MWN8u3MaKEdTd2VFySYl9R4PzjXH30MqYE1xPowybfCSwgaXVUR1RIrxs3WdyCa1qWEk7d1cVX7INaZjxHTfcWgNPDZL7Qs5WPgIl7cSONILwAyk5TnNG0YDFHiGJMZJ7E7P4B2bChqKUHifJawtnMaEnTPgbpYZbMZgFe7kH8KaUO70zC1Shfiupp9uazjTlpXwxV4V8v2DXMXNk7MCoqp7RsoizUVIZpp7eW1sPUIkYIV9QYGeaptu0D7cSaTYUqsuOVCR0TwpaOMwWGC0h0JNA8eC5aHbDt4byiIHHk16WgnLujt8UNeTqaGVFKEEbsWvenCHl6uqkElNNTqkyClAiIC3Ot6uP1g0usbc5R0sCiaRw95rM5Z24EpgWExGZvjmQYSX2STaXO5RdBzW1sFvtCqqcuaEVbCn6WqQGOgsRiO1

http://www.ytddownloader.com/.../r.php?kt=ytd&ref=2&abcd=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

Latest 30 of 66 download URLs

The executing file has been seen to make the following network communication in live environments.

TCP (HTTP):
Connects to hosted-by.leaseweb.com  (5.79.67.111:80)

Remove ytdsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.