home

fydsetup.exe

Free YouTube Downloader

Vitzo LLC

The application fydsetup.exe, “Free YouTube Downloader Setup ” by Vitzo has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.cycletagcurrent.com and multiple other hosts.
Publisher:
HOW Inc.   (signed by Vitzo LLC)

Product:
Free YouTube Downloader

Description:
Free YouTube Downloader Setup

MD5:
c9a2ed5cdea4e206cc96d4d8dadd6355

SHA-1:
473d1053e87dc24bb220190ff4bb7b8f3b8e8510

SHA-256:
cc3820475eb4a69187698c0c329db820473e8de5ca000a1bd9975fc1e1fe2336

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/27/2024 12:59:12 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Vitzo.Installer (M)
16.5.16.21

File size:
13.5 MB (14,199,176 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\fydsetup.exe

Digital Signature
Signed by:
Vitzo LLC

Authority:
COMODO CA Limited

Valid from:
2/12/2016 4:00:00 AM

Valid to:
2/12/2019 3:59:59 AM

Subject:
CN=Vitzo LLC, O=Vitzo LLC, STREET=16192 Coastal Highway, L=Lewes, S=Delaware, PostalCode=19958, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
014D806D5E0CA6A39858391C6DB95D0F

File PE Metadata
Compilation timestamp:
6/20/1992 2:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:/4bafqUOhpG1luevbBf9r2aqPiL1vDF2M3zc8hGzrHp:wqXOhpG1lFtf9r2XiL1vLjwt

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9990

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file fydsetup.exe has been seen being distributed by the following 22 URLs.

http://www.cycletagcurrent.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

http://www.cycletagcurrent.com/c?x=JwxbfVVDvdNwksXqeHpmSX/iNshZRGqJxIYntYX/i9M=&c=wlj6Vkb3mNzfxXvkXfxsETwcsKTcC2d4VmmyLD0xp1 yrhUuGEY7zQ1h4rmqHmAE9xz8m2GDdziV8eT2M434ZvWZWnRTfcVSe7xQqvZOytao/txLZw69bf1 aoCm78YrIbD5Xi8HWmvLDeTzEk0Tw02pi/ujwqwSQa M3sMBOCl75pVrEQkDNzd4vV2EyhD &e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/WVl6OTRQV1p5ZEZJNU5uVlFXR0pvZVdsSFpUZENTVTgzY0VsVlp5VXlSaVV5UmtkbFRIZ2xNa1l6Wm0xNVVFTlVSazl3U0VFbE0wUW1ZejFWVGxjd1prVXdlRlJFYVVkUU1UWnlSSEphVUhBemRtSldSV0ZDVlhFbE1rWTNaVFZUZEVnd1V6azJkM2RFZVVVNFRVRmhUaVV5Um5CMlZUQnRkRVJVUnpCNGRIZEVaVWMzVWxkR1RHWkxielptYWxWd1VtUmxOa1lsTWtKb1pIcHFha0pJYTJka2VISmxZMVE0ZW1KQ1MzWWxNa0o1VVhCTk1uRkJUVlZWVjNBMFNWRkJaM0JJSlRKQ1ZHTlRWMFZFZDNCblJWRkJZMkZ5ZFdoNE5XNTNKVE5FSlRORUptVTlNQ1prYjNkdWJHOWhaRUZ6UFVaWlJGOVRaWFIxY0M1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWm5aWFI1YjNWMGRXSmxaRzkzYm14dllXUmxjaTVqYjIwbE0wWndKVE5FWkdseVpXTjA=

http://www.cycletagcurrent.com/c?x=6qLszZoE/p7eIBKaTmw9Wr 0KDX1eUIDtuSwS13Zxvs=&c=sXksGchY1I/GPdhGyPHrUW1NjpUdx4nVSV8InngtAqBdwFfQiRpPjV13P dk0WoJv0KNFMv85b/jQPBZC9uNS5EZQ1 zdWv7FTlEmKANtUGGl41935tDe8lBn41qOXK5RCzZdBPThfR33QJBGrO6g==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.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

http://www.cycletagcurrent.com/c?x=f3S6092sTJA04Aw 1LkmK3w HNxsziMrz0fQFBSvj18=&c=jfGi150othcASNNIb 7OIm6rFxOsYr Pb2usrakLEaktRptdRMwZvLGSyuS7Md8D F3cDlBhScq0Y/4nppo0t/OUjW W3UD9LPgbJE9kTrD7i2eHd9GO5EOa7aEkz0hbdfQfokbgNUlCGK9T o7lAtg9H6bQ1uj33pjJGhl9PWLtqEwV9 CQ4snsX6o rZY0&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=Upen7BE6Md4cSCTKyhiculMWfxI0CSBezisLEYNmmIQ=&c=mpdRTbxvepl1gezu5VG6kiU 1Tf3NtjytIR807H4wILJobB3WSD4LcvitttvV07AaUy9csbTbc8OewAp/LLjN 0C/w37K9vFKn9nJS21HZXN9/K4NJqe2AFdTehzfwRDZfBUPXJQAI doaHX7Fa1qSrd/KV4hlGEfvRyqauk51XYFqeBb6t5VwkLPhkK3fQQ&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=rTkara55CjdLV0VXcxAStCnwRoBgQVShHTtuxeHDj1s=&c=Mf/gyw89FwpavAMk4v7LqMOlt9gaVKUSD1kpA9lIV49mPBgpfVHu3Zjmu2r/uK1sXcZU6TTdMii/SkjcXPVDNsVJtMWHnHZbrz2kGb3Jt60Ighs/aIEwKwP1wVWq1ys1WMyXbewNAf9qVoyJjaUarw==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=my9ejZ9O4IXqzq aab8khl0443W7 mWPd2FnVYMNQak=&c=Z/45HUKpzeOsY9CyOBiwKaWjuFbn3y08jj0fuPTbckvsevhWmJd1atlmhMjKCUMbjZ0Pq5evEzguCDrFFom84Nl6CDiFX4p4mCBODAVFNKDL3vtdTPdsw0fd9 P4/dz7ocjhdsZBAz/ 385Hf/vaQA==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://getyoutubedownloader.com/.../FYDSetup.exe

http://www.cycletagcurrent.com/c?x=eEzktUr0fp4yfMB9LbkBGhvokw9fCAGCjSrUp5iF8xk=&c=MTBwwi7VZ5J91bVPvmeMnd1LvGUuDgXY3zFqoVOalqesFzzZ7UcbLpGzgmXT5vLKAigdU0kdeY5Ku75TB3hERFP2ZPtE/2CjAVpfjFFwasenCLYV302HxnSKLna0NtQnJoqQDs19TszVTyyrxpWxqA==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.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

http://www.cycletagcurrent.com/c?x=ZxSGV6cLJdaGGkMyBaTcr z6JRQFOqbOFtcFXnJ97Vk=&c=DMS3OQZ5tFqxblWroLoDsYmFTkTZDLZLKworpOWcGkJfPHGzTcg CY58nGsOikkRlcdCy/Ms35jjRbtl4MJfgoBkyfj2brSYX3erIz87FxeOU79VmkE/7i2M AgEXHiVHC4zU6ghLZr8gNg5FsgiiA==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=CoGYsObMa4Rv/GoJpkBg1whiv9nOynZXPKRzmF4iF90=&c=OWpuLd03fYACIUgjQtWdbzEoyaTVcLyhm8TAIhRbpcyARU0p98XTubmZxsL Uttxzbf1zXLoNlDODZoU39lwMyUMXqU2wAdgELehs6nWjkOqaEy2nlc17hEUJdn3nDc8jC536IPRrH1pVP4Ct/7dEPHHygNYRTBmRigp847IQ18=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.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

http://www.cycletagcurrent.com/c?x=4F919yBqbzq32GOrs1J6 6CyPYNi 4kZ5fQD9cqQozc=&c=eVTygGWJ06CtsCZefMDbGJNdsSkHetLnzWzmmHU2 zI736rznqqgQYvH7 h8iGb1sxQpSTWe8Pkq9clO9pZeaGPJLgD7df/VOofYrjc2BjtbwION rr4haEnYq4l1Vzg IZlQZlhEiAMe3JlLF tX ayV00BNRZ7FCjRqGO3HMv56u4seJzbmIRnVoCHNswU&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.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

http://www.cycletagcurrent.com/c?x=pJ/k MgmphdZQk3Pj5P8MsX6tafm3TozUwqzw6EJ0uI=&c=upLT/xatH9JlY94p7mn8WfyGmzPEJzmeIeLGAFWIcjnrjaXKgNJnQrLYCI6eMYSjUmQlPOK8JCewykgG2TxAjYHR8wOpo9L9NtlCwlM47uruG/FpSLJ2z3uLY2 CSYg77Ed9XdUG1I5dJd5f3sp0sg==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.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

http://www.cycletagcurrent.com/c?x=EBLpPOA69bLKNO7IDu9UMPeyqaBgzoEJCwvpMteFiyw=&c=Loyw8aCvOTTW/5exk1nHsprv5Q67q376DMfy1ajWVsr80C xY7y9F3DCowjAzVEqEsNsKHH5hP4CRgLzPrK0ZyzbhhNGlMsNCp9OF2noJau6vs7KpfKwwtVRX4J91nCdMTF WMNj7rbvdjjSFGThDw==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=wHbxpc/OPySvHV64 vbFc2KVFU c9hQlPs4QYwqqsVc=&c=UE6nmb0ZSJveNZZOiqDFot3es8j6EKpTILH5J5lj30JQ/SMkpRT6H /E28oyNinrEuYQgtLpUu8kkzHZn93jY43hfOVJ3tXyDOHfnobUZMJwZkicvtOaaWa6IRpZD5k1d7OOCaq klOvTSlz3d pQ82tl3q1v5Qh4rA/9Tz4MTI=&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

http://www.cycletagcurrent.com/c?x=8mhXT4 AQvJwCFpzLPFcdaKKEM07jS6KaY2ZhRqyxE4=&c=/fDmdyLYyIhJFRSmeVPkt1r0H4qkFcVyE5LGev 1 1yJMAsJlINkzvDRFycRxl zyTrGOBEka0P0h6gy/LnNbhJJP/CVT9Ulw6Jy8o2v5amEa3OSoVe2YdDdpQudzY4gOT/xBuHMG4NljFBbzoYdug==&e=0&downloadAs=FYD_Setup.exe&fallback_url=http://getyoutubedownloader.com?p=direct

Remove fydsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.