home

five-nights-at-freddys.exe

Fehobadoh

Delivery Superb (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application five-nights-at-freddys.exe, “Fehobadoh Setup ” by Delivery Superb (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Son   (signed by Delivery Superb (Fried Cookie Ltd.))

Product:
Fehobadoh

Description:
Fehobadoh Setup

MD5:
07abf6fbb241205d9d0a3c48294034f3

SHA-1:
ea1396d955fb7df4fb8c2aa25927f10a5b3ebfdf

SHA-256:
49766275028f19de9e892f5295f7bff34a2d8109e04288fc630157fdab041e14

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
5/9/2024 9:29:54 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.14.8

File size:
1 MB (1,081,600 bytes)

Product version:
2.7

Copyright:
Application

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\five-nights-at-freddys.exe

Digital Signature
Signed by:
Delivery Superb (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 3:59:53 AM

Valid to:
6/22/2016 7:54:14 AM

Subject:
CN=Delivery Superb (Fried Cookie Ltd.), O=Delivery Superb (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11211DDE033C8F24FD358ED7B6271AD4DE2B

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:kafr4qf07rnL34UAAwVZRBWl1xCOlgqH46T64iD5kvIN:kafcL3fAAwVnu/CqH46T6T5kvY

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9127

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file five-nights-at-freddys.exe has been seen being distributed by the following 16 URLs.

http://www.perkydownloadwarehouse.com/c?x=UR8cv4emsAqm Dy9r2yBbM9NFhWx75buGLeub0LdsW0=&c=mdxobHsDdlIsC P7EgFGcdaz/Y37L/rMySW4CxVdx8BZUoT9/n19Wu2AKy4gQiIXwPCqqpc949NuQwbCf8V1Q2EB04cOmZBWCjE5ku734MUltSLCZhKcRagR4IbuVbqAnHCcoVoAheP3uGMeyC7SSfAb9qQ 4Vh4eOfqX1yept4=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/c?x=NXtyTsC3pI4UTxSyWjvbp72bhzZOyH9J235ct3YE320=&c=OU3I/twexiBOphNOFnHv01g8QN7oTvvasmFvdWArnzA8wCiTV5oZu7YbYYgS5ex0tVbQL6MJ9DdNDa7tzeRyqVILaIiSDwHfOPUdPJ0MXo2ldFlPetLvSjuahv x5JGEL43LAg6U/qLJd6zw eAkKAwoPATK7rmNGyGxCDX0j5E=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/WVl6OTRQWE0xUWtsclVHUjRVWEJQTnpGM1drY2xNa1pUSlRKR1kzQk9SMkZzUW1kYWNFWnZjRW8wUzJnNFRWRjJkMGRCSlRORUptTTliVkZUV1ZZbE1rWnNRU1V5UmpGWU4xUjJKVEpHSlRKR2NuUmpRMFJMYTBGM1IyOUlhRWxaVjNvbE1rSjNKVEpDYW5KT2FpVXlRbXQwVTBSME4xWnNhR2M0TkVJM2FrVjNia3BhVFhJeVlrRTVTazR4ZWpCV1lWbEpXV0ZQVUZVbE1rWktZMnBVVURkWE5VYzFNakZyWVZsV09YTnVWV0phZFZZNVZtY3dXR0YzUkRObFZXUmxXR1V3V1d4MmNsRnZKbVJ2ZDI1c2IyRmtRWE05Um1sMlpTMU9hV2RvZEhNdFlYUXRSbkpsWkdSNWN5NWxlR1VtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTBFbE1rWWxNa1p6YjJaMFpHOTNibXh2WVdRekxtTnZiU1V5Um5NMGJTVXlSbk52Wm5RbE1rWm1hWFpsTFc1cFoyaDBjeTFoZEMxbWNtVmtaSGx6TG1WNFpRPT0=

http://www.perkydownloadwarehouse.com/c?x=4BLzLhQP6JnyjzUE9nG0PeA5W1nU0FI1kK/9bSgIPyI=&c=Z2IBk4JAGdAXCsc/Qs3rzRMbRL8epFqZ5v1VClXU064Wr0Pj3i7fWzKlRJKJR1XGhgnjtnpp FuWbJTWrbI4sIFcsDA/jTsTnLC6MalLMZk5UabmA a2qClO e 822Kd12IcBVFCg6OHAaLAHWkhee8KPLoXeE3XvRlZhHrga8A=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/c?x=6/pRta/racrHwec nx8q74MWkeNJP RSKZPFc6uZ9es=&c=cWP zKi1SXyUunaj5oOjq1AcjM/j5lxJdT4QahLY4Nhk1Leoz3Z7lFnfuNlkAK7622AdUJByEARZn1OfW3z /9RwBS ynCx4yVt20SH4QoPxkL0ftJME OpzxlC6Ncc5k9 TbI4ZCibXLAIUsrVZimmSpPeGdNYKP8xxM9GglDY=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/c?x=Xm3fvDOKEn2KFtbvMH316OUcoBFrLktrTTMC Tgiezs=&c=MxaT/edoNJGbowcUumZaN3ghTXEwCcgdEWq4ZftnaSMMDFFVgM39lHrJIW87y84iYaRjH20epZBWhRdP6UZxTuKR/RPeRk7ppeMNG2fhUT3hSSCxdLz99UOIBjarsjnEFclBedjxrqWlpBpvW4XlxZAIZ1O0G9wgKX6tWf1LZF4=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/c?x=KYDSHhk 52HwwHxCsJk83l4WXxD7ZxRKttUDkSPBClc=&c=mS5kNgo2IXVxA jcxt1YZHPSjodNpT2HaHu8CCQph3CY7nmZUbFhKj7uP7g1o6MuztqlDqf4krwf FPB10S/TIybi5IoidZv86EKj duEsvg023wUIvE4SSKc5O4X9UE16EXmOuZ7GqboKerN4x8/Prdqj2/OWix8tvFlJnCqmM=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/c?x=pDNs0GcrzjngNZmihKoBH5ixoDVOoGBr9ODv1bMOsp0=&c=gpeoZ8iBs9TKT5WT6P uOWvE1fpdrEfIre/ET0SQ9oZcfObZDxSQFpB4hu2OgSOAj7m9W9D e4KKL857Fo2X7S76kp2FY70GKTNefQLSEe27aqqfZpYkaUB1zU2prkgrSjJf9yo1pJ/6QMsdAJK9IYzGsb2V7yzhVZnguUf4jkc=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/c?x=FUN lpOc/4c5SDLXCIyRR1C5XXNbfHydTW/23Cw2QE8=&c=BfC7JxQsZcW8Ggm0DJd8GDBIEHkTIYSRyf5FYJNV 6Re3sMILdSODZUyfqIUsYcCSju0mXF1mVGV1Rv4DcQZxtFmVGS6pH5/AwOcNvLF7ueWpxOdnjQyrnSdrZ8VbJvoz794 sDdv9SVvZQ1xwdbQU3GclbCFRY0RfmRrE6MDZc=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/c?x=YR9gpCWrnh6pkUv3YTrF5h8pi211Lb2hezuv8OvJV4I=&c=P9C0LYaXqk8wS9tusqDOtG30WEsCaRBFfKa46YTYL6C7CZ73H 1NRqnsfj2CLGvvAJsk3NdujL7eZVgChXV2Y8f1QqQxTXx0LtZ1Qa//aFKXBPLZJHQPvNFQx9n1XzMCJoZeuxcM2zoISDSCXV/Q6IrsCaAXSfDdlylhjQWkXgE=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/c?x=fir3bDiC5VjlfptOKHI6 14W/2ys5bukyv8ZHpKulJ4=&c=HYvmpThxPsKBvie3tYPq3ePOy SOdREyilLckf8uqKjAWV20nPFz5TXo8YSHgBPl 4CAAqsdpmSEAHADTIL8n8Xfob3PE6rPjR20TGl1 MmcGcndm41pFv6fRddwHMlh47Ht5C z3hwPuiMfUMSkaCpcYwKGDvw0DknsfFbsgiQ=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/c?x=kuHtflliZsTTBHG2IY7ZrWaC96/q6Hrt3qzgM4i1SLc=&c=0cxnwaCukbqinurcwi8elMl2fc4uLWSUc1MjXN1cXLU5i/wz/9E3Af3/uiyM7qLEUXGwQs/dJMewj/DVSifHmh1hNUcI0KVKPn/HX8PU6AnBikbZD5nf5qKf1F/0Uw3vgRwzGrrbb3jZxgFY3TiwhFK4BRucuBxIbCyA5OB9JH8=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/c?x=cszdFN/gpc0tFOV45/PfxUcNEdC zLIBI3PKN2aZf0g=&c=o3gkUOS2eMU9sO05G4d9GEf XypbAs87bSPmXraYe6y186IFrWogJsxCJKA1LdusgEsYig1xtX 3Ho6G3uBphtFFrwyUFw1H7R7122loFEro3 slDBoCpSlZWE0MRS8FsulFgei971 FS0E/FHFbP62jC90raUNrGcT61u4hUPA=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/c?x=C3Shl3h809OdRE6F//ddKFbnoj3Uy6qT1DIKlcWsliw=&c=UvD3uMzltTmS0rijW9ub0RvGf08Ui9TfOd1zNokqGG8FCAHTzaW20R15w cymFFSiEGh7iZ41wpq3 uWoE6CtoE7pu/meDmV542X2oNqS97ko2wO76TAhEbAVdy8FQ7jDxu3bofdXAA8cvLm3 Lt EGJEsDnGp8FDUspTvf4l6I=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.com/c?x=23dg3baNIcV3wcpmbB3S/yOZEso/JTK7GQQMH Hf9iI=&c=hjiYHkV6rNl/X4z1jKbjbZLapVXt92AaNJltXDqdM7I6KjzEjICfhOWj0aLN60MR7ROHfgeb9T8kNJPcQKx1Rr2mB1TC/iveiKg31a/DmEigPJQnJNlJTekd9TYRSsGdS8xgZ/QbCQ8Y Yu4WoXdu7C932IDKZ3scM9BaSumvMA=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.perkydownloadwarehouse.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

Remove five-nights-at-freddys.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.