home

five-nights-at-freddys.exe

Pohuk

Delivery Superb (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application five-nights-at-freddys.exe, “Pohuk Setup ” by Delivery Superb (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Delivery Superb (Fried Cookie Ltd.)  (signed and verified)

Product:
Pohuk

Description:
Pohuk Setup

Version:
1.3.4.6

MD5:
f4738a6a66e3674847beb14ad3a73516

SHA-1:
77029f5fa9b4106eeb5e83ec857f817c86281f9f

SHA-256:
7117dc327be37569b69eba01c6bdc57a56a07cccb4d2c40315ee0cb7359ce30a

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
5/13/2024 2:58:27 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.5.26.20

File size:
1006.7 KB (1,030,896 bytes)

Product version:
3.8

Copyright:
Fast Installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\five-nights-at-freddys.exe

Digital Signature
Signed by:
Delivery Superb (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 3:59:53 AM

Valid to:
6/22/2016 7:54:14 AM

Subject:
CN=Delivery Superb (Fried Cookie Ltd.), O=Delivery Superb (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11211DDE033C8F24FD358ED7B6271AD4DE2B

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:1TxJD9SSgnpi3SJi221qVZN/P17cTgZNOG3uiUfN26GcnePYW:1lJD9Eev1qV10dOuM6LW

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9294

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file five-nights-at-freddys.exe has been seen being distributed by the following 13 URLs.

http://www.downloadclearbest.com/c?x=79rhD0y513nyZy81QM80tetYvq dsJzbOshZwGV7Bs8=&c=QGBrcGXwDk/TF1rQ2WWNqORQ4mrIjWTSrys14DRCZJWJkUrvtmLu4fwitzpvgSpme1ay8GeK4/lIUEsFCgkgyZpYCtGSRO3iKxeRunhpN4mJf/k1Luk5G9JHdJnNlLpofgW7eLes98 VPedJi4w/e0chXjZPhnhaqFYIqfmcqfjpLoi2Y39f M4nozi9vs83&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=I9JEY4xw2tkEEtXvKwTfbD73CXQ9wBSuxbU6SnabTms=&c=SPr Dzn3TzdA5/dZOsttxE9hltfV9B9k0ACm43A/aYqNq GrZvtreiuzkyQIyJeHZqCJ 4C9znTK5z1/hQZMHrbgkDCwQUiHi gJ9pyk9HaKdF79VbdgBuue0Wh7GcSd9ssP/srQOGrBvRNnM/W7beMq5eKRqjR9R36r4OOT/ 4=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=nWFXWmw5 iCQ0Y hNpYCH75W wwtTO5NyBZQw0he4i0=&c=dSU3Lv3Y4e/BFAUfXo0IN3DpNAIuZnoymwzRktKYWtMPMTezWUYSKr3/Nzqe5agkp2W6MMSmNB7sIIeodOOal8Vg IbdUduyuc80tsQpw2LAHBduZ1UpvXThDapIVGsPhgD6QXUTe1rn4glgnKezeZf3Bd1v73kF/duZZ2HmWpg=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=8FYZuLasTS9u gwban70Pmhcuv8A/HFPTvUAq94KiO0=&c=/ukWY9fzgU1gc4OLwM O Dq StAOtCxRCloycEH8wnEsQVX9Z/kJH51oRdDcUIdP 8mBmWqS4Qdo2ZpiTN64oJAxwB0Q4S0Zy9JvR8xbwBHz7rIBRVKLFo /bQpgm/ASP84vSPYMvscY3lgU4tS F/aNTcfn/9B1RdR6qVI890=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=gAYd1RT6qkPNJ7OmyK4ccVE2bfm dGAhu6vzUo N7EQ=&c=I9d6QEPAdLTEHXP8HrRMBPYCqvJIxcLZwQCNFtRNskNELhjFDzPp2wcwOl6kyRBu6BMgDmK3CMKLj82rSnOPF8EFnF 3W7mdFVJzp0mRKptNkabWbFNp 85RmwizSA7yI9vGN6Bxecx8uorPOB0kODM7tpFnZBZmb5cggtLED8w=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=0DY7PxJz5OotksL0siofQQnTYL27Mco7N5oapcpo4nA=&c=vUrkE9lLzT ZwZAtdAahqQxiiSRWGMdmHVm7If32urcpafIvkWSPWVPwf1ixUQ8QxOP7qWGm/QSb1BywyxW/z1AlNQtbLc2ob7lM7FYqerQzq3Zw mzxNYLXsom6 DWSj9 uiM1bm8iuPpM85KmtUvCM5mpaOUn52yGLjjJ3RUE=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=AXWBkKjpd86/A02NO 0iajncGycDw01yLiRbA4HCJcI=&c=5kU 3TjjgwwmO8o6M2QfYt29I0gPxfKb7dHzb4LGzPeC5jAGCpSfQwG/Kc3y3zn5cav5VFV/F9LlT5kEKldte53TtN8cUeaFN1qMLOFbwyWERTxjpkGPVUjFPHrNISIHF7HLBqatrwK5GMAap2rjyKiiTPSnCx8/pCQYVoQNN74=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=ZHyONmx7TrXyNMvxOLZaD1YTSq7VpLfvz5FuZ93tMWE=&c=t48X U5pdmQMkm71d OpTwvOgyHs6po0CYnwuQRQTBsA 7Q 52R0JUhDqz1YQ8BmanGeyrFZxqU MZy 9UxgeBT6VQWcFXGogcOXrNxBhp1MXtAESL5sZx5D8xn8O1oDIwQ MyGtOU8cuAWs/lFyNAarOGp300OrvDPnzS3TK1VhuPUnrgcG3t/hRgvD0PE &e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=z6AXuPFUELLjhEyOzDiXTEfEnCcbWW 4wwKZRqt0wm8=&c=h2XxzDDhlu/VaJFQvbb7sAC1jOXc55LZAEbp29pCVRJiHtgNzFUGiH1d9nRZqbGc dAXgmQ2rnbEYQs7t/s/RNeCBV i24Y43Z klolMuyv4rkSqmy3rjtfvVn0Nzbqn7RiJAn2wdjqMeZD2qkKlMPfRCVsA7uZ4 HTXMPNst8xLBVlBDo95niD2tQKoh4Qj&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=295XOCADVVH5zj4MlibQQ3ieUmZRxXYbwxhPig0QhWM=&c=FtUBwJQXcMxRWE87C21sAwTjzchBih3PgpxOatTWzlw0naG6ytJKGqJfTZdp3HIaTlvpfAt1zGgTQ6hSQwmhwZl7qYAUEkrlMkgAhjyrrGtkznw utTJcgbZrpsBJ 1wJZxYnsyHV6UkKUeXVmf XnUGm2ZzuTpdu9sRDVxiXev8KPp346tDA9JaKC0fm6xv&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=jN0KP6xzOB10VOogdVm33Q/qiigiiY9DY9FeY9LhBw8=&c=0KbzbxIMBigRgc6HAIhrMO7BUX0O8CUUyC0WbH7/ZhZ7iEuc3sGq6lYZsPyfMsy3UCOWWKZjkAcICmS6hHRmZk9qtcgPJnqDKzY9RTg0iOhdwhrHXGGRP9w95/ms7IQDX3wlK9xqHFFw5Gy/tNF1SiQhajE1mA5fcB2U9r/oAYI=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=u/fq77DH0Uxe4w4jum8fZhBMdeoC/s9NYkVQia/4a9c=&c=OKfsAhLHTXh/3yoXMrXGFuiiYuNk5krc/xtPcrFbOwy lfUPtp8VxIdv6I1AoiXnvf0y4ETyxGSvWMozAAVGR/1bBzzfaX7u1hcGABCQe3tfhfpCNP1W eK6SbxyyWZMtUVyjNDLJ86 0ftsx20RQxURz76fdDGRwN42YDOdB74=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=CjurPNPY LSctXDzELVg8XCE1z78VfGsL2bziD1ArrU=&c=Af MQBgcHIiN2Ln mYEWQr/K6DSefg15W2ye0tlg08hqIOplvlBEbOJHy/4ndbhs8c FtxjAu9rhifKmhvBPNYXMjrE oY2j7xTOoui64L1dONW4FFZdjiaHLDFd/rSx0sdwrUTh/H0cCowAk79lWXPMZNrB2MyUJp4qc/cFdi8=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

Remove five-nights-at-freddys.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.