home

icreinstall_five-nights-at-freddys.exe

Kak

Delivery Superb (Fried Cookie Ltd.)

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_five-nights-at-freddys.exe, “Kak Setup ” by Delivery Superb (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Delivery Superb (Fried Cookie Ltd.)  (signed and verified)

Product:
Kak

Description:
Kak Setup

Version:
5.2.3.2

MD5:
c92bbff444ed1e1dd27d47a5238a9785

SHA-1:
1e02ec351658da6900c46ce6b2717c4ca6b2631e

SHA-256:
406fa7b647fcf18f5ab2504aefa9e0d7c944ec80b970f0d7c0d0f0f0a69cda75

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
5/13/2024 2:30:01 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.5.29.19

File size:
999.1 KB (1,023,096 bytes)

Product version:
3.5

Copyright:
Web Application

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\icreinstall_five-nights-at-freddys.exe

Digital Signature
Signed by:
Delivery Superb (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 6:59:53 AM

Valid to:
6/22/2016 10:54:14 AM

Subject:
CN=Delivery Superb (Fried Cookie Ltd.), O=Delivery Superb (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11211DDE033C8F24FD358ED7B6271AD4DE2B

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:MGvKNIEUG6aLVIO8DWCWnppSucVEpiET0oule0J1orM:MGuH6axIOUWnKulp9Toc0J1l

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9279

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file icreinstall_five-nights-at-freddys.exe has been seen being distributed by the following 20 URLs.

http://www.downloadclearbest.com/c?x=EnHIsLdvdvhLDhk8OF9d1wy5hwNkTwG0xl04ElGdlHQ=&c=ptDmdDNSHnVugei9bm0XMF7L/NbFkkjg/Vqrh6eIShK7JNKXVbLYGLAgosDR8AMrVIPoowdPAFekcCvYrtyOmEazJm0bc0NapQX0i1 84C7o0fE DwvEqi2o6cdtbGJIYFmN/9aJLJPleq92mlNF6tpFQW/z1SWBRK9p9z1Mn/c=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=YMBtuQ o73cpnKojPQsAsYwoA61oYS0jhSB1tZNGnSI=&c= MN/PJn18YVVtp/jrXhe1WnDqaMBps2zsfiJgh6D3dnQDtIjdr8XckezgKaP2cCtE9/LFz tH6nZ34XErtsi/trXGxdOSanWwmgoIsykakHF24rjlrgariHFjj97nhmRTaxH/3I0OA2QHT8nbCGlzb0J5WMZdc3WHQIajLc5xno=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=E9TX8 9q1uZ7zYKZjvz9NUcscjQ0tkr8XTruy6YHG6Q=&c=fVlJiPQP1IPXhi5BEqtkX1LvBV0ohLk5D1tuccVu8xh674lIsJ/iI5bjhPEgd2iiWWwDrFKR1NwNrxXqkWcNiCqHUhaGhSh2ZvW/H 34tXal699mIHTsgwXDzKOuR7ayjoT5HZYFjWPJpBFLj0iQUWDItWCVH KeUgGVT7FXRPvllnUPtBsXjjMli0r2Yiib&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=D3tYQF80GXqkhkmeKR9w4sbd7O1z56HR1kHgtg3EVtE=&c=xytZQfA6xcu8EfK2mUdcolui/FmIBrZY2/Gf1eRFFgWQl52E5BwfhUDE0REfzJVceqt8OwQrA9byhR276prN3mf9dRefImrD16BRbo35tOH7upMCUhuqz4JgwGj5nFHc407zpXBIU34UYyWARqjKRo8PT7MwxAF5bSI68GcQ3O9rcKjOhVZCXWFtYvFJMjcV&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=Ts64FAp7n5mGzwWtE0/LxQhCOOMcW6g0tyYBnbssSus=&c=kJweVacCfKZw8hV3k0KCDyCXleqnm0SW3x wUFQ2WseQAtyrQNda40DfphxV6uTiio 6AVclvPVKJrJtdRL 97VdM2yjxyRqt9oQZYvI55Azp0pD8M A9Pvgqf66oCdWuq07xdiy27GcrvJb5 4trCvmC25IpaxjfQZu 57jTvN79Iln1N2sGpgxh3ALQ6UO&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=zSXo95iQC5XXDZSyVC848lIUrHDPBpxSML4hXy6luM4=&c=Hl rKWMYBWODjMR54wg8flbOOhnwZEoJfvncbCxLqeqFEcXfEuJH18z/TXXqYypccVZBeeaJLQNhlZ7/CNd12ulkINS9nLkV5hWxZ/yFIGsUzb084OjYsbkfFVfhCN5hRZQu/KeLqmfvrkqcTQ 0yzl8sPHqZvMRt23PIQ1sgM4=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x= 0ZZjuESKbZCkcO/vIW0VvS254ej7dUV JGD8P4ZfJ8=&c=KlLhdAmpblS92ZrdYmD22OuXDP5yxcbv8ge8iYAngAc4hcg4I7nwqGdeC GXOR3TgDXu6seafYiXuJoasThoGjEIf nBvkFvb6t9ZitkDcGKdS2jeJNfKzHcuMeiBR1Yw5DNRgTzMFbiMH1ls2DC fAIQ7gfTtUNH1xVhCBcCVY=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=IBldPa3pEbrgkHVBni Jd6 SLQUpJjrVJBPvdd5NNXw=&c=tWGsKQ6UnAreq0h0X3tUy3ciajoKdleFSQy6dii/ClcHdsnxoocPHPiFBsB4keCZYXWE0qu1ToXfx1FOS1rR/XkvsouBBZLdh7sKMsBfq8mlxgKFEW282Se/8hL8foaEbikUPpCiAY8iqE5gOXjoC7IlZ9dYzZKf5 vOyQpG ew=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=nClsHBvnU1ueNO15lSOmMWGMcErZIa1Zq9iasC4okfw=&c=84eziylTodeLXf/2l sG8iUbAIb85W8jOQ5HQJYyaJ1EY45W8uMnIuRDGC2nxUjVYnxjrbcFvaIcQF ByOHQX76HhPPOtz8PlS5b4QnD4vjVbcWKSSoSzff8 xU7rRpOG5u2qa44FMAaQbLLdwTmRNdU3DIX 85ISlpaiGXMU1Y=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=/3j8WxWqWmMP3rwcO7MIMeALwugztAitvBP8PeAzWZI=&c=JoyJnn7JZcsnNxS8odTytcdcMrMvXmUSpxyqlShc6C mr O7BA7S27r3K/akH 5mfo8nawLaSGQW61BXV/3bebWUVGahlkJbRaaTOfsfANlGnQ2Bsv9aafK7cHinIqp9utAvHAlId3SJKKf9gyYeW8O8x6rn0h6QSKYPpc7j05jJ05yjtCYm5mAIZ6UlfJeG&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=AqUTo/yOt/qXZao3kTaiixu8XDQsb38sk4ChjREtolU=&c=QHsMxbEw6vOKuqqkaukkFUvs/Y1qjzpfUI69CWcCrUGwUB8C0gapx/eGNoZGoGn1nK4 zk7/YoeBLBNEka/WEnF63zADoX2QQpXaJoXDHph6iXp8UaILmWrvcOXp sz3wUew8O3xk5Jn3J WJDeeYQq w92t7ZswNVruPhUSNz6sp2kObrvHiP3mvK3onSek&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=5PUN/ewioGYfS zhZKSBORRtD5PeQy7aEVkRlbgdPOs=&c=mgHhiE/Gw0wpoeVSM/D2MCpv6oP7HHa9BVpwpNqQzCezv6WDpGtk0lrUKpKSCSealqDRwOmd7aYVOZN/msikFnrk3FOPXeDXkcj6vgVTQM3/q6W95jUIcIQZCVZ/BtlJhtsXLbZSbm0mQOvCy7MWPi6RvvoJ/P0Wovwkf K7RNo=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=IB9fKtOmB8prp QGlaAthLku3wA7CUlUX0e8UUiK7kY=&c=QqvLj1j0tN5aZ1bqGWq9zyhrR yfqLpftoH7s3nuX8mOt0acf3rRerOK8GQyfEY0817f8hiksforeFiF/62gUwXEAFlmnRpqBmA6Z6U7lhTzwyoxjZ54BKGIFQUpt0hcFU9Fv/8HsGScw H776TK9gKKyAo vajddSXrBP3WIlUwfTFIpVpxVQ3cS4h4Ev8 &e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=v6bscVtP8i484EVDKpVpq6FFHuvKfWl/hIojfVoP1Zk=&c=me28312KzTUmbid4a/oMccKcJeYK99xrDE3WlEFciR0UaL6Fo/CL37/Ib2ULq3JuNArX9p3T5hFCPJ0d0xPapRvL gX6KB3Jx364ZnoSKnufzBagbxk3dBvKLjvjIAOOBZvODFmQL0cHxhAhCc9YNmt82z0JhU/0ACTlpbAiY6z5amEKDwmpdAKwBtITeYSI&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=rjPezo/V5aDzzkGPNawGaVotJgL05YminDWJhhgMMz8=&c=OpurbFc0sySKK1yjTe79lYi4BHvQmuVp xf7mkURLoG2POJkq1SZm36H4xKiI6kminqhxXUZyRIhfoc1ZgjAyWPwVcnTG CR5aMkPP6tPlrBUAKCbfJ0pZYkLf6qghjOdRDl7lxRkw4ngAZavRCuLINmyHFJe9t7LhNZ6fjqlEqkN1306kXXYeIGwgLyuXIl&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=q0jeykQPo d4Wo/sv0eSP1K5OUYjKKUG1af 728ytgc=&c=KIOI4At9PImVIIlJSA1y43PfXN8BZI7xhmM6s38RO/ zhYZlVufY/RvHcOl5rBU4pEMiPGmj gdtZqzq0V3TsGMTbc1CM5cy7XWrUyBvp3nzoE1GyIx3yo9JqcQWWABsCdPav3kDT4duQ9i/vGeO9dYQ8IavJEfi06lstABclts=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=777GV4oMZs6adZ74qP5GtRhO7M/usCMf5jkYJdx7tAs=&c=0TCr67eZB/sOoRVrjdH2THTzOc2mxesH8yxKHHo9051FgvPeiL9LXWojugLL8Nvq1fwWBsJayWYf9MX 2GibASDbE3ZmOD6Nr7DvkSkdHB2HfP5aF3FxrGDnJyql3PW4aH2XyrQ6e8K4wg40U1JLO ZHpKeZ Lzqrgs/Z4tyODE=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=jMIKzOfVD idkcvU0noavml2x0L2KjN1Dc1w8fZtZkA=&c=nlpfCcTfEm0A2MWppiDgvJRTgem2hu9TT7 iNFtftxc xRGTNVABMQpgrDt3fMucSsRLV5dQglUOO3WnbkAQMNgIkPW24L4PK3BDgA2fKkqoknFSxYxQy3EyBxwNlTjwbt4aqICO0U373O89 YKYTcrOeBFjRlaEorEEdc5GjAqs0USDSApzZetwTytdiqwD&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=WFTisk/mx/ZYDqksVfN/Av2iuhocGkP RK8WNPfg lo=&c=VpvVcAQLv5cYkr9WnKtzmxHDcAn9k1EbDKegEoS 8eohVv qh9UmY7 Aa5ioH/8J0hzJqKQYW7q82hKIqRA2g9 7W8rYp1XKCKuc13L8ozzzLkp841UWF89rrHIEw7EvH8iZ01eyKenDAUywNIjMJbfUoKScZAPpB2A egXpPmE=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=BZ7/BUSdX4/p03RzPOoaQpwlNv D/SVngfBh9L3MG88=&c=1AHPOkKp69sJe75nb7YaLIJwG6ZC826zGxpqnQDUS7/xhfACeTF3x/AsfdcioTJOVGU1zYam7J4EP4WxKMZhylRR88hHcJkCuwNkwh6I99kvvUuVa3LVtkk1Y2TUnjhPU13 FH33X0JwpxL27RtlGengit3jsXnKp/S00UKzvYOWMzQFzGNFsowa3UWCZRLe&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload3.com/s4m/.../five-nights-at-freddys.exe

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)

Remove icreinstall_five-nights-at-freddys.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.