home

fyd_setup.exe

Tonerat

Prompt Connector (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application fyd_setup.exe, “Tonerat Setup ” by Prompt Connector (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Seto   (signed by Prompt Connector (Fried Cookie Ltd))

Product:
Tonerat

Description:
Tonerat Setup

Version:
3.1.1.1

MD5:
4cafcf6bb00bb02a648f5114acdf908d

SHA-1:
e5bc1cd38b3ef4abe449a156ee410b937bf542dc

SHA-256:
9d94a4b94ba439a4411ef05b47a59b3bbc65486a9cc042541a452427e46d775b

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/25/2024 12:26:34 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.4.27.15

File size:
949.9 KB (972,696 bytes)

Product version:
4.4.2

Copyright:
Installer fast

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\fyd_setup.exe

Digital Signature
Signed by:
Prompt Connector (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 7:12:26 PM

Valid to:
5/4/2016 4:02:31 PM

Subject:
CN=Prompt Connector (Fried Cookie Ltd), O=Prompt Connector (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121FF1C5FA99B4724EE3F6C65B2CCA9F616

File PE Metadata
Compilation timestamp:
6/20/1992 2:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Cx5bUhiHZAt2d0CH9iathlrgkVARiT+4Xy6O:C715XriadE+TRXy6O

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9323

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file fyd_setup.exe has been seen being distributed by the following 50 URLs.

http://www.cycletagcurrent.com/c?x=NMuQD6pNjL3Iki1Bp2Ab4pOY6H/KYN2LZGvj16hovCI=&c=7ssy4NZhPo8cbDAHCoXXUF7D8oBwtgnfgPMOBX4qbmEreioySlpH5R/xipnFLfZ1l/yU28U23VFEVJMUAakoaJwjJkM vxH8FyiYXjKAeBrO0/QJzIE0tauw6xtFtcdpPCa50XIToamykrHEA0rJ g==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.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

http://www.cycletagcurrent.com/c?x=eYCA4p8t6e1eEVlncNW4U4QQxiy4l7foSByRpNn2S5c=&c=I0zNPL4xFeo2f6IX3FNGmwk1dNX86EBkDue73 vWzytbFUI8sD0 OdCN/zOK zbjxD7YFtlf A NJJrUCpt5 qPQEo5Xg7KFtMmnnf1yZLfKnucPfwVTlJg0jIdBTyHSOaqqb mji21L94x4RB0QBoSr1YTPfD2DD i5mnRvw0BjvzgF4gM lkn7jOWBtJb&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=4jY14mvCmXAvMkMoIFYqyc2QorzVNWVM0gK6UqzY15M=&c=Lcn//if6lAmeL8cWS147obrdrDuprJnO1yKWHSU6/6BaN2y1aRoYwt7uizsbQmcA1UYttVALhyENgEceSQOmWGInC2CbTW9Y11glbMkoH1sEnbo kziuRocYDmJm6lCd2XhUQ0CcA7flHzxTZP6vjw==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=3jHmNYjEtbG2Y43ntZTv0KGC5/PWao2rjB1uEac/uP4=&c=XCbJiQFA5hTQE/sKW/CQe5LrZ86flYGx 6mFECJa/4 gUwpcHE0H tShgLgKECCLg3mgzNG40tbTaL6q6cBUVn6tmdDZA5cXZQcGe2Jro2MKkuFDeaommsIEDM6gq0HY0mMULrF4NpuZiv7EeEspa ewY1nkLI0kYMIVPIF5AZ0=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=T0wTrIg8X27 UoksY99c4RRLM8eU2e1GSiTxH02/I w=&c=wnATNDQCYNdvdLOpwikGZId9B2FJ0IPP LMUL3NqFsw9JxsvvFT/jPueM7oryM j/M/tMg 8lkiXbNSUFXIQGE9ure WjVRifuhNbG3Et7/C170MFBjtkDbcBxZ/RhhcJScch8FaCGRZnEGHBWvir5IRBv/FtFA lwLi9EMoQ74=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=ifq/pQ004BSkfXvlyI6Di/t/jLDo2TwzjqDPv2TgR9U=&c=OW3TZjZkdZcRcdn1/JtnceQVOQZuJZrht1 7p84Q5qd7y3uoxEWrARmgB8f3bdx6S8n/u 3 GY/zzsJsuRJEYXueCtsxtwKavyvLs26PCIxNiXBaSsyRdovH YHUdO8ltGieJy3jhdZu3kgELy BzQ==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=BWQWoIViF3zN0iXwUi9I2j2by5Q7Pp1xK709wyndMF4=&c=Tue5oY 0E1iW1eM3/FK/hrGEfIfuS4HhF2rvpl7C7 75Pcx9xlU7psplXcxPG37kRhK0H3ai6FnbBs3VT8lJ3JQroQSE3c/XZuFp uAgChj5c1dn29Z3TXbEv09fzy8fCQscgREJWVrqb94p2HjaMw==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=4ZGbzp6dol32Ox ApAU8A2H6kJGFvDhipNFGdkLdCJg=&c=YFP3XDtrMObXAsBkE8ukW9dTmh7TpK2901DX5e4j/ODzupm0AiwVFl6QQnYgXw7afxZFpcpXun/5KTQO7qZGjIhaD eET4QadOWz7HRzIE tcjriftSIGQlwjvjhg4Ix7soIzRm6g6hWykxWnHs4XlzrcCXkN52W5u/JRLp9GjU=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=uXB3bW5sUkDMSvbghYkFZrJBPuGELDrB9R1ebGOBXsY=&c=xt4dwigwC766MtA8Qd uIJE43z44P6AdBY6iFznIfikJ5v dIdd16lqP3kQ71rVxUbop0iE4jn7d1/goGNxycFf3ouj9kI0WtON6ikh7bWnRHG1/CmEYA7OqNOpSI6AFCbvVAuvyI8U1kbm34FQPpLXT1cKy/iDBLkuYzkPprGo=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=6TnBsckhWdoj6qp0ipvYI9dg3ubHF2DOwbqCNRcq/d4=&c=5kouomVBKAQwkZZJrUxDEz p47ivPzXW4EBZP4ZUy2HP/T8iG/n8MZzh9pWMvEV0iqW/ukDY84Tu6BzjnJ1KZRe/wq yNxjr21IMouEo21RdnaEnV6juxE6OXb8ew 2v7LC1sTcoujQOuaWCLw5nW93s0ouq2tDrHgkWGSm5oGg=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=G wfKhOU2V6PHx6 jT7Cl38pD0Wa7CLShH8tpU5dDGk=&c=DGp5vdWTzs916v/8iJQcH4rLsFBieU8ItmUCQCbxqcwnHiR7dafEB ktd0jSG KHpUrna8ZLKlg3jhADbS/NVE3vF9eaDTSjFDs5oAYZxS1Wj/raZ5L7jkRw2PUakYr5ufpa9hYE4i62e0rwgC1FUwbLx9OvoF23Ce H1//1zao=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=MjwBgk3v4yFonLWj3LA8l3b3YHXoKNqRr9MGp8eIHcg=&c=6zI657aKcYgx4Gxi4XvVP/eTQK1 r3ETC9hjjVlFBltHeamb4UZpHnZM4PRA64aFNpbLmCh Xc4e/ znrv89rYM6uEtHYT5 k4q5Hk9BoqZXUIs/gOe8gws8st63CMmklBBZBoyYzU3haYvWhr BnknAQEEsw8SX34xvdjKH/uk=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=nxGoNrJBcc3khVxbGqYrq5wzdGPmUFnnb3LHcGKo7vc=&c=VjCnUv /dhPilVz9wBYANPkh454x0NTuYb7Yi8dxeIc VfFwjOUW2Z7yz0VViZH/k3Ci9Q0mIlfsUU8i5Fv1m/vh7G6DZ57iWG5PmZ8Mmf1y5tegCZP4lLjDjaph6dtyQ7lv15QVXiQlw6f7jw7JVg==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=WniwJC6UIQie9VfBgY4SvF2cEsX9nEVLE4ZWfLNmZCg=&c=DAfVnouZVbG3QUIqJapB8uelaTLS6KUB2lOjAR32HndKE0jd7zr1AsfsYb8dgnj8sj73CUfLhc9HyTNMmdOHw6 tdw47w7m9XvE35SYiyMHKkDEErYddIJ9H8rXqlDFHLah9MG4yAQeqD7ZAftEkyTHdPdOX1bMc6WR6bSD547w=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=rmO1V1jGYHr6TEZ QRx6f//5t5x3L53z5oLEmVCQBlo=&c=madnj9eAOgWqAe9IUk5C7gGZeFbvLEEGpOW g0Gfyn83 MV bM3rjNA6FQT1k4UgCJXxYd3fgsf/hid3ZtfSxgCMjuAHOx6hlYj1YeQ1Cy6sqqyAkdfP1JIh WEGkqxIcUxf5wqMRQ8yCRwzA5PqGQ==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=WditEL32xaAxny6a06Co2SAxC7qe/KC4k94pQqCJos0=&c=sPstAozCXywgrbRIWY8dh OawuaPU4e2CJvsAUjSyzvtjJ5vmEtBvup3vp09QJqiUTwzKuU C0ZdcjjtL0UHkBx9u2E9ItXhSSzy/Ddw4HfpOMINWYMIrUItqpQN rDCwI blYU8SHgLqIOH680OlOdvI/DE1AxAECxzlXr2tz8Vd0pPTKCfzDG0fUxYQQ/B&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=XK84C moeHMlRJME4CEj63f3GSGgmXLQGtXrr4kOXH8=&c=BAH32aMeq1C2ctsm6jBITfuMt3HMy Q2ce1 4k4lTG55q2vjYttfBtyf/0PyoRBhDLsNBrhj/4BmR5WvXhQ26M6jM6B2nDCIKxL4n9FeigXzrci01bVgKhosyc1uyXrN5EI6IXjFL E6FsgK/TTaOlGXVSk8I5mGBn3Le3GgX6g=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=yXqS0nETepopCxJ4RyrMrkyOQf4mmo1i2V/a2qeK5TI=&c=L6MLligW4Gh7PnyKTVJE8HFHvL3hpqeMfRi01h1Q3JWKv8izPF0qt t5dj7MviWaIx6XEzCz1UN2o8m0W ybhSTvkB68cs0iJIlCNgqLmLHuIMVyH5jISjXpG5USoWbJyGft/gSx6ydFlzoTrtynNuNXNEBEis82VrsgijpXHL0=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=3vKPG3alpCaT0nbjZW9mhttw7bZa3v/RL316kmpwmeE=&c=dC0QdnjKAtqLEY4MaJdtIVfA0fvFQp8jpmnA9h1IACwJRdpMgGTmibmiSFzzOMNVQUZRDnayxpPwxPJM1uIB01x8MjyTUcgPO9yJlEQAauWece9xSFlc8p78TCa Y6beCXETniwZR7WG9aKjaQBMop6vhLRxgUMJuvwYNrlLpvY=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=T379xkp7u73dcmETdw/FUM90pvla9lZDnbhSvxwHbVw=&c=6wvxCbX8DjgyfbazY49tzGc9DSDjb5zz5Hst3xbQ0isHw1qYK dJ7RQXUzmm VrzPBaqJnHcdayVdv397 KWQJxznNDfeKCX5YVjxh/EsAg4ItlfYsbl7zujskvm2g5lPQGS1zF CYpdJgzRrG1bAw==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=KOA 6dcTO0G9befYoHY9W1 1h9VKWAq2BWitrXfu7jw=&c=eavaADCJrUy7m5CbtfFEeUSevCK5XXrbjVni6GdPMNx76hn0salbZ4eXzIEARok6y3cVCUXs1JHcrLjGvmDk3riZT/7Wz6GPRIQHO2hQZPi/W1B/EBhnyjVLcs2yRnYL7J5c7WSx5WY91qAtHMSl6IxSgN5eu EdDhf9JTXFxBAIJBcpuEJuna0coErzSDHE&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=guAH0DT60slcTVDMGa9Y7lwpvnYo l7E0h8VXxbQDQo=&c=7gyhp4jUeiEN/JOSiHiNVJqCCILTRVdHFRf2BRjywYi4Wo6SjNqQq oAMQI kxGiCEgNFCgesJeQH23OKRxVh3EjU0AgXc5xuXNGm7j65env79nVuDXB1q jBsuPWjwaBkq31qixU9OKu/ij83Axxw==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=fUwSF9x9MdgBfTfJ4uBSz2UelTuC23NKPtHf0At1OnQ=&c=Hn5Jw/EqqE swlmY3DVktd6XR61rg3X/ptLWA0trnFy96tDVG61oVZPRGd8qMCR0ac6p1HSRWuI5fplfJCdX/9tvU3M7kYoEaoNKZDOBnT5JMEYzttH6EP/WwvoCTWqXkR9wJkl95v fYR4Y9rxzWCL5axkwohFlD9uvrQAsl/4=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=Me0Y9eAJEA foiAnrfeTz2vxtGn0mfr/NqcnP7G2V9c=&c=pvXizCfUugyZnFl9GCcLtWp6aoxCNWfKfk9JnpyTtp5kXiMyWKBFrka1Fh3HOQ8OTwuB9kPIYVzCSX4JKh74PdpJ8VYlo6NbbeL0X5UkD07mBiVbhqx0gNcLcjwnuu/3ZpJuk9iGWkbo6uo2i4BWIw==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=A70hBzMOv5Gzv1pQWUF7RdUa4QmaeT1hcjpk OWmsyU=&c=xNkhJUi6g2jwwQznEkMdmsSlCjMpOwDNyH4UxvKMniZaejOFoHt32Y7qbm8F51nLNqH0RuoIQkkjB4rFA5jdDIxbxQhigKim765t7WcYQcT9djYJc1IyIag7IKcDeKlJhtEMCBlPIftrFbKT5TGLS1i41bhq8gWbpLrvqiagu2d8B23wygmccE6CMu4idXRo&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=eQGPqhlQLsNu8kNSke222/4LPu3CSuNK6VxNtUSXYdM=&c=wQUhMa4mMKXjBz3MbF2eudXbQHKMdsk7 M8SxL54mQY4H2a5Zo5SmQaAiR5Cl3WE6LEqyEmGNCMZ0YrAstefCReM/OoSsZc376qJBUE9YPHz9rh6MJwQHMzlnjVa dH3C5gJ8bvN58crMfpStp18jlGktCibANVH1yIzd7Be2LA=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=1vIbPZ5pYiiD/rlKEbV 7L32lf d6T72/S/Q44GUouY=&c=Uks6snPIBVYhuB2SztCzBTeZ O4qhwhxrj6rFWMiCbq/CYkVL6YvfFQqSIjp3I2WnHU0WSwqENfiw44k6VUKIz1hcpXYQuoE zeq/qOCHVRlgU5Ru33Vtj2A5AW4HDY2bWO8X1Ndnbx5nNHrJ 2i2OySKIcyZBrTYq1Jl3owCCo=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=T8TDiyY97OBKwJVdvphuRAllmMxvAmgJlKyHYxJWe2I=&c=0H6amY8UU/FHscveKT5eDwnDN2nQfgpowaJ0D7B39Jg4lAcadHZopj4LZYzBxo0BA5rBQMargmROeXVFdhha2/CJtGwLBLV45sqDEhT5cxN6A8DMWH/eu01AvWBTHriqnC27KOEXWx0nTRhmMKywqbvJGbsex8ge9Np0W76jJF4=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=WAvTqMl6vSnX/s4wHWgMOXNw9812bhZxzLJG4EmgyAE=&c=jN7Zu04g5BA22EmaXT0alVnMG6Z9oGdeyoN71RtKDr0eWQfOFHKAMweCUQELC7taAEIqVRTJ9v45Z6j2ABAXXjH5LMxFmqpDzNAU8vIoiEuzcQEHQOqqlpUqZioaXw9kuOilommf6qQFiMJCXTFLp0x1Yp6ElrwdZp5j0cP6pR8uSBNt/jncX3tv8HzjYzXg&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

Latest 30 of 870 download URLs

Remove fyd_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.