home

fyd_setup.exe

Tonerat

Prompt Connector (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application fyd_setup.exe, “Tonerat Setup ” by Prompt Connector (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Seto   (signed by Prompt Connector (Fried Cookie Ltd))

Product:
Tonerat

Description:
Tonerat Setup

Version:
3.1.1.1

MD5:
4d28676f7b0bda7b18c90316dd67ad10

SHA-1:
304cb34e36647c9963b1b79ca6bc79f799516762

SHA-256:
631e1c704207c8a8a8068b726aa347e6e7f91169a2ad14700032c328e64d3ac2

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/26/2024 2:47:20 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.4.27.19

File size:
949.9 KB (972,696 bytes)

Product version:
4.4.2

Copyright:
Installer fast

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\fyd_setup.exe

Digital Signature
Signed by:
Prompt Connector (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 7:12:26 AM

Valid to:
5/4/2016 5:02:31 AM

Subject:
CN=Prompt Connector (Fried Cookie Ltd), O=Prompt Connector (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121FF1C5FA99B4724EE3F6C65B2CCA9F616

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Mx5bUhiHZAt2d0CH9iathlrgkVARiT+4Xy6O:M715XriadE+TRXy6O

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9323

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file fyd_setup.exe has been seen being distributed by the following 50 URLs.

http://www.cycletagcurrent.com/c?x=77Nd6n4Uj2NqGb8kqtpN 0 uVJlR6BJUp/vKFmo34sw=&c=zjvCFrdPsQdImc zMw /fsZaQTFrsjl3FVtUw452VglKsOUxW SiBm89LSsN9iRKseRWEi4hnGeg3ueIWd/laptonVW PFTFf4QSqr0qkq/ftq4O5ZpGt7pPUsGdO3LQ&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=HYMEUYR1roxQP7/jiwZMNzvWAMX7dsp01RcQKLDvg7k=&c= mAfGI4gJ4d17aL8WUgi70kOyPSwxks uuNbDjGvXjiHyKkVH84zWvsoiTXEqSqN06Tl/eMyTAAFLiDpDUoJjuOOZvm1xBAObPZ41GOcFkg2OmvR4U1yYcfir4azrfWA&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=5sXuskmPLMP6HRvLKkqj/ePYcRQYVecamQvlpemvA2M=&c=g744odb9zclU qJl09lBsm2MsOXUbp2/5de84BCIWOUSJgt2q1Pl4AL6u6gbAhtAxYGjhGVJS 0swXSgBlFNM9 d5iIV31tEJj6rG7VOSh9MHTOedOcS/vQ6SyQ8fnvi&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=NsVy/QV0J MAx5QRT4wa3kye8QAOzPhaIUDfILygRbY=&c=DpcigOGuMpU7VMhQXebDssEWWfq2pbHYo0xJcVNl5IWHn2Ke570IQF782C33uhnAJWrusSau8JL7lt0KRXCBtqjwmiOrXCKAvIQ314EJTNhbLpFRw1v0DdW/pNiC1vqB&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=/VfkZyetlecDIbk9bu 41UEEq4fWvUXxw/Btv77r0pE=&c=8qMVZI1LNs7Afl53f724IJghnz3PJWYf2h6D2O8GV/WhZX05w1S90cYk4Zi0Mq/BYqFBTwSzcjJLj70 41cs6/GLcepmMED21PvAu4Jh4Jgg LSgVjeY5HuxghfoYv//&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=U718M0pTLrhU5XbeQj/DzhxmUhuvcBYKk2EB6bPdFpw=&c= nIrPiXsASZvT/nq7Ljc5rSGFx31X8uLZK04u4xjaaUON Qn1AsBgMv zIUNxt19hQKcC0D7BQShZdS507f89j71dR41VOv/cKDd9AIn/Yn DJjvIGsAxRq TmYCmNSK&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=RTszIEOz9dszsCI27NoL5jB2c0UHT/l5bbLYGST2xFI=&c=CoH0yZilJ4prY8cao7nzbSLSZ00XJLCueY9MlN934BuwU7Er3zfqDelGK4SbT6sk0GFRO8XylWn5S4vQsNHHPvA9VJ7QZEFyHt1c cLtDVS3z4PKePPIS1 63Z0Xidnx&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=d NFeTCiJIpZ tM7kA4fXJuWTxByK3x3wFAzyEieQ30=&c=AlOyZ1eOw6fpYUkMDrCrwGQlGKeLbBKNHz4wnycLQib7iGQA0LTWinmlsIOzjG/hBuOKOmu4Da7o539HLGQX/rTUDQ01nE50GsJ8W7kBiDwXzMddbiiQ3Hmnwlv8T6KY&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=3tngVIJcHDGOdK4SuqTh0/AVfUm2mt Q0kAk5rLH44Q=&c=omTt3/417HrmcOGK6V1PwMIj4aNOetbix9hx0q3QNdoCYiVjrw 14bjPilkKOIIIH7xPlOtaC0B/IBDm13UiUnc6V2izjQl1ZBmz3I4zB7f/ 2ajujp9wE1Ika9b4jqE&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=Nf2HlfhWdccWEUPOPYip3ejsq2uMxpYP1ir3WZu3QOs=&c=bHzM1F4BABsn0Bp2Hs4UGyv2IChed3Og3vZzLYmAr 7ylOxG 4SaH9728Skl2RQ3rh6U qqSlCbDCK3DSw2M3K1v/hEHDtwq26oEAK9yRuIjIxNvmq8kiCeP0ponsJUZ&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=bnqemars750/PUsoTZX7p9/ScOT5eD6JEg1yld7HMMQ=&c=R9U3J6JsqqTG8WKN4cUe3kfA4vQFpwuNsS4 VqhhDZSG3B6jRdP//KcdpRTXn7N DFwiBRpzm5JwJFo n vH3zOHrqkL D2VguPyY1w1LHw1IPrsB1WUDXNqBhpo2Bfp&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=9Izdun5LZt6blnKOQVycQbVL0ejSWyq4r9Wl1fo2zps=&c=yhoAnAPebmsfBbDPgJMGETVvDVQKT863Oxd25uVmN6u460D27pmsBP8SUokOIA7S1GeDjvu7nN7b7EAFW9ASV/Ba4R5Up/nk27aOzgzSRHcJRtX8aFS8M0RjRGDlhLxr&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=yDbYIcEg G9gkpjstmQkny6KIakm jn08kiONeDAvn4=&c=AXr9q2w6MVLL6 q1WVZvR9uhKRiGqs7jsa1J0/ImDtVYhutabYegmII Tiv/sCcUsAPg8EQ6FaZRS czYCW/ubd5SbiGPQu7LRdBsg8BLD cStj1GTw6G TcX2diE9WD&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=rvDL/K4Cl1fL vTNYkcqslWf7QSYhSAJ3vNoHC0FWnI=&c=1N/WntbdlbzC7fvSqpXzkUoPTUWKz8rNy1daeLIISU/AOAX6H6hEUKvEOlUGCUfEugDKmv dRmK YBrJCuii7URmCqiTIIePy sAbahVJscxhI70MPWJZCN3pKNR7U/w&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=rHVeSt6J/cFq3xob4jXMa6PORqvZqleBcnFjatirjjY=&c= 0 gr hTtyI74gzKGR6FzJmsqBf0LvI3CfL9YB tixa6Tse5p7AruG4Q5JzJx4GUPFPHRJN4cjem0lwQpeo5Y7CZ23 ZO3Okgwdogjo2quYESW7 Ut35D60fukeil0QN&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=PrLc/s2WDMaaL/hxeWWYJV/ SwMUpSGvu6meEez3WdI=&c=6Nlc7j8W5nkOa2/vYqhpeQ8zYHU3cyfd/QFR8MXy3YU3pfR9Z09LXYmMxDDqn0 OeUuMqextkzhj83t0n/X27RHcNUYRzoxoO3mUCIUmW136TdSLjLNtRmxIqKVHaWDs&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=K15JaHUf/wI4bWjiI/ LV9B4CZbCwKVQGyQJyzLayRc=&c=bhYuhujTruPWn/ih/DWKn36oT4EqAO2mlZaU6Stcmq0vffIFx8/Xduf/S2wqbn 2HTGvOzbDPqC3KJf53n2MEgUGn/88vVLeDhk kilEWOQbqO6ww6NugxHzTGdcQp20&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=4mLFRJfEerH4ikW/7Ov7h3RiY0/7bBo8p5xF8Dc1kqE=&c=iiy8PwX093jZuCFT Vq1MskhDlbuK97REdwevQI0OMCsza6oJePiCOM8GYurzYl1JGKZXUE3rr dGbta9MRqyRNWgROS5LehTCXy 9W2M FR6ZL2wWWhAvnOR4nryqky&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=VM cblFeIvF1RH88ZH2CmRRl11aHNM0HhgI 5B0Vrz8=&c=Wn/qnz53xGbNJMGGfD36IMLtITTglO9H0LcRAS0MLs7nJTeyiVsp41yaSjhOiUrG4rHlIniKi15KPLrJHQDRHNKuEqrIUhrcEbsH6RAvcfZeZEzkGEyuBrOirLR5 THP&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=a54ZakUCpTOl 6Gmp49f5z4HcQglOSNUswxBTf7di0w=&c=vmCJhSxkmNJwJv3 o0gjc46mI0aEYveucS/i1YLcb82DV7nYBJ9wu7U04PzCy9yleCzO0Oap7ph52SsZqVdoOyXCJFX ri96amJ asVjnFegDn szW9vyXWBQJRSSq5t&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=oPHJwH6diV5FZrpLDAzPWEsMZocqPy5 qojX2p3FL/s=&c=M wcbn/5sE/MpYkQOV1cxcJXVVU5XrWTSamLQzOmkWZJ94VfykzgE37v96 0bCH1lx242Io3Hav9L5zDwy11G8VfZ6bPq5fXBj Q/uvZ9Uq8Z2aUKDl2IGCgcqno sWR&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=dbtIcJzdOxJj/GwwYM SZ1efVv/T3CVSaFTveZlOEXY=&c=YOtWBPuu17CF0Edy62TlIL4ZFEKKBxK27/HaNzW8KUisbfl7s5hGexnhgiiiESA3GXZGJY atxyR4tqHr9hh/cpU42/cDYxUActs8qzg2Znz1CTI1SLY0U1EX129XCGh&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=ImmHcaay2Mpfn5wuD2xOd Ka3Jn1IQrBi4Ba2RZ/EIo=&c=sUxH/SLxUWKs4NFFGf4SfvxXRWf31GV/itzwoiO0mBwnXuPTMJa5Us9Q/654dSgRlVhRZQLQu68/Su4bQoELMjz9y4dNBkmpK9wHE U15cokMYn3z6IPESddexXjyzCk&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=5GuAR9w250j3Ura2DyB i9AC91ZAR8VIh1nn84MUbuY=&c=GtMJDcIkWxUxQrvK3JeBv1PgCaH2XtbF4jwJ hIi2Q5xzZd3ZpiNWwHgLrmSHYmc0DYvhPyQyasgaY5sN0uav92FYWRDqouv4Zbs7h9FgS7PojUCuQpbvgQqZrqq/C4h&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=0Oi4ndfQ22xtRjoqbOGtn1topp3jDV5zhi97fxHOpUo=&c=ezr3gwuW2T2RrT1RIT7fYdF9TfAZcQRBO0Cubw7LZADmEytKfDi5pjFBfYDk9NhdIWbP1OSMJNkK94xJExinU1OlntYQcqohpy 6ZaTZ/U0FhnRBPBtSIJ0ABdkXon69&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=3Rux6X/zLQ/ kO7lqS5wccy7XssALSTMIw0W2y0ZMHc=&c=jRqcFPUcNIIP4YCnR2CL 9O94t5Uqfxx/1TiTKjezTjkNcVCZXGcdhwebPyVXad/95sYlZ5VEusKUcnjsNOz0ng2H2i/g7XnITxsmddguTAgyYHrsz7wOgVtrdk7ttH/&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=eYgtbH4pcXPdwnsrBwJLAgmOdVu6jYpqxJOCoF LfWc=&c=qMXnLdMrwdYGVua0sbZTnNuqDbBk5CRReRivpLYr74ydpaNNxWwphrvbLSzxAA5cOfT2PxuJ8Xtq4cS5sws1qsbyeKU4hc5StccyTuY2GNIVbeYf2ETrVda8IpPu9Xoy&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=sWswe7u1Ht4LpZ4uF4RoeTShIYdOvmSEHPwWIBNV9Dw=&c=m2Eat5lTmGWa0L 2w gXlgqVW4MHe6S9TQPoHv6q82nddRjmMlcpVcn72gP3gNoUUp6OvXpr7G5t/Rlr09drJfmAqTE uMH4d/rW VsBGblnW3Al 9bQMAnP6hSp/VMP&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=tMh8x924Tqm95YVB95XzlfmrxX55H9Z PNFWFW7OYAA=&c=B31/ksRh6DsY58l8GU52OB6KUPlnyTjR7RndBbMkeQIqdgX3DY2Y2X9C2fhkMRRL1vQQDKFtF635jU/Opb0 26RM/8j9jp49jlNBQZAn39p0W/WW0MdkqauxhcIUokYO&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=bz0rmN7m7H9nD20cJkqCFFi11lHpl0qYIoAzUUZgy9U=&c= JhR3GUdBaap8Jbcarer/UAXNtqLrgIgJjGUEffGhcfMIqP/PbDhopfXfxqGXDeWoswH Fsl51ygHyIySzsUeww8rrsDZvyG/2 4NlOZaBabyVUKGA/b98qqFZq6hlh3&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

Latest 30 of 67 download URLs

Remove fyd_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.