super_mario_bros.exe

Nufa

Prompt Funnel (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application super_mario_bros.exe, “Nufa Setup ” by Prompt Funnel (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Prompt Funnel (Fried Cookie Ltd)  (signed and verified)

Product:
Nufa

Description:
Nufa Setup

Version:
2.5.2.0

MD5:
0c97215166bb8959887fb54089e93be0

SHA-1:
a677f431e4ac6b89589d7e1faf59bc6811e7c633

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
5/15/2024 2:21:52 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.4.20.13

File size:
936.2 KB (958,696 bytes)

Product version:
1.2

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\super_mario_bros.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 8:37:46 PM

Valid to:
5/4/2016 5:57:49 PM

Subject:
CN=Prompt Funnel (Fried Cookie Ltd), O=Prompt Funnel (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11219770E5FF2BA80CECD3514AF9CE966758

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:l1kJ/WiyIKXO2IzURgYS/S/4Pltt6z+5M8Yje5n:lmBTIeB5FK/6z6N8qIn

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9340

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file super_mario_bros.exe has been seen being distributed by the following 50 URLs.

http://cdn.games4windownloads.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

http://cdn.games4windownloads.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

http://cdn.games4windownloads.com/c?x=ZjgqbUunIC59Fn0oIqr35Joh7ZSXgLMM23gOvwVk7cU=&c=61XDugRkFm6EdUQiLvn5uiz1AZc2MaMy/JYESVLQCyxwrU18lWpeDYWzfLnJjT8/aF2DRs3bHo/2V9Wec4i9Zzp8EbVIfJXnlzQ489pspApq95XvjN D r5uwqkyO9txUTA8EukQcVWP8zRXYBSSvPue6FAw3xdvWHzjyUHHUDM=&e=0&downloadAs=super_mario_bros.exe&fallback_url=http://gamefabrique.com/dl/.../super_mario_bros.exe

http://www.bestbundlesbulk.com/c?x=Ln/NWEoe/U7fql2HJY3ghHlX9XNEN/W5nRu/fk6Ua8k=&c=mIQyuR41IC8S4em/7OehlDhRoeXFQQptaAptB/eEoJ33wk6qrAbqH72sg4/HbotD/bUrMoP0m66DcMBrIPnzT6IWMf0ZMLt5ftMMEu69m5NN0Cd1gYIXOY li5exunHW6fpJzc L0MRn3cYHPViLGiD/fJmdp2FXpyqrth/ij17h2VAWEwdGLhWflaS8JBlh&e=0&downloadAs=super_mario_bros.exe&fallback_url=http://gamefabrique.com/dl/.../super_mario_bros.exe

http://cdn.games4windownloads.com/c?x=7gf8x1/zOFHEUAAMdzv5n6RD7rlTqd9DYfy4A8GqPwE=&c=aYNp1PlC2wS6jdKPbVORnI6E4f4ysaGvtiX PGOkEHdbrnITHu12LlMfIJsjetsor1wm3RhK5pk1Ns Add1syyVQ8EsHwVnGijx/7qASGbfA6B9J6DXu4qozxnqAtJ6NBIxP/uNy gxh 8xfQQwx/3b3D1MEYdr3mjeUFuvvXZqliWrv8x1OWcFMNCh1Pazn&e=0&downloadAs=super_mario_bros.exe&fallback_url=http://gamefabrique.com/dl/.../super_mario_bros.exe

http://www.bestbundlesbulk.com/c?x=9Bn4RtU8gs5X /aJ/ 9wlwcXDHjWE0YzcmmkUH8OXFI=&c=ZhZKK5LYkxedGtLlyGL4NVsRnM7couxOlSRbFMMBzZ4IcyXDzYvERNdrNZoET9L0S3bvjnpdEk8uMWoAU9Hxq3SIO654ZmrQ2uVT2zyQS2aC7Tspnm0NhJjGtsr3WGH9OjPpzR0fuGDPjsg86DTypRtWe75 uGQXbXstK/jVg3B0P7mVVoQsjokxlmjjEexq&e=0&downloadAs=super_mario_bros.exe&fallback_url=http://gamefabrique.com/dl/.../super_mario_bros.exe

http://cdn.games4windownloads.com/c?x=5k7KDkwlD3JMDOPUAMb6i2DV4T5u0kWhRNLvII3oOPI=&c=kiqv/QYmjoEHK7HxHwsBMG6EYJBnrA0n3AtWBa6wRF7Z/DPGfIbsMajR3XxDWTMHCSinFTD4QOt09/olx8VpdSv9MzXOF/CtKCsxDZcljy0JpGwGOXoMXGuF7Q8M0rRVXl5m4st0ZB9tDj8ExtqXZzOukDygbAUBjPSTzHrhHs610LGJsU97Ep8AD6T20N1s&e=0&downloadAs=super_mario_bros.exe&fallback_url=http://gamefabrique.com/dl/.../super_mario_bros.exe

http://cdn.games4windownloads.com/c?x=8MtAacBD/V0ZbkagiNBiTbJeMn/XJMteYZSOFKHtGCw=&c=zQv QVHHlwQB9EdqxygE1xQ8PUlRP3LRVGJAft2z0M7kJYWfhle7tflyRT9vj/Er1eXzwUR8q8NyIhz7ioVWOz6e4OU7SM39RKpRhsqaGEOF3QQDVIBAEK7GvJ/pVXRDY4XeLVNuXP7AXI6PhBliivxNZfqc/4AenlLu8J1n2ys=&e=0&downloadAs=super_mario_bros.exe&fallback_url=http://gamefabrique.com/dl/.../super_mario_bros.exe

http://cdn.games4windownloads.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

http://www.bestbundlesbulk.com/c?x=cTnxWyr2PTm0 i5594pjABQaTd2/tG7rkm72ODa1Y3s=&c=afE5LnaBGZAPQkmve0yC9zrRaCLNssWUZ3 Dd46qyQN67jxUqEmmh6LVfSwc622qrhBHBK3UJmXGaMVW L0U4qCRgL9UU1cQ8pkHPoH2il7sJlALDwUdhL 1DnoFTnZurpn Sd8y4vZ UE 3AoaXsmhImotVWL1gvUAnaE5OBDVwifxtQAAFWmrDI/QGRc2j&e=0&downloadAs=super_mario_bros.exe&fallback_url=http://gamefabrique.com/dl/.../super_mario_bros.exe

http://cdn.games4windownloads.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

http://cdn.games4windownloads.com/c?x=89Su Z8MPFdsI2YIB2Tkyh4OUiY2yo07eGDOiWBIRFs=&c=ue e3c3nr4RxAGkJybk9YTGGlgqduGlOF4 ZXoYcQSg3UPL3Cg6OacTULQ5HSTPduNWtZRKJyWC15IePTa6zdAW4ZTP3J0HeauafTGhq6vLSAxLAikshmbjitQD3UXKwRbIDu0YFjpvgoAbh/iSDg5hZD2WryeZYCMYyn9xONf8=&e=0&downloadAs=super_mario_bros.exe&fallback_url=http://gamefabrique.com/dl/.../super_mario_bros.exe

http://cdn.games4windownloads.com/WVl6OTRQVk5oVUVGRmJuTldUR3hIZWxaaVYxbEpWV2hEUkVodEpUSkdXRmhOYzNkQ1UxTnpkamMyTWxRNWRESkdOQ1V6UkNaalBYWkhlVEZvT1d0QmF5VXlRblZaWkZkNmRHY2xNa0puYWpKcE1VNWFSV2hQV0U1Uk0waHhaR2RUWVROSU1GbGlPR1pRZWlVeVFraFVXRTgyUm01TFNteE9VMHBSVGpWRlltTXhiV1YwYW5OWk9HRndheVV5UWpoMlNFZElkeVV5Um10b1NDVXlSa3BNWnpoNWNHUlJSVTlKVG5kTlZUSXpTbVpPVUVWMVNuVjVSVWRqWnpSMGNTVXlSakV3YjJWcldDVXlSa1o0WVdwQ0pUSkdUR05pU2pZM01uWk9kR05HZHlVelJDVXpSQ1psUFRBbVpHOTNibXh2WVdSQmN6MXpkWEJsY2w5dFlYSnBiMTlpY205ekxtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbWRoYldWbVlXSnlhWEYxWlM1amIyMGxNa1prYkNVeVJtNWxjeVV5Um5OMWNHVnlYMjFoY21sdlgySnliM011WlhobA==

http://cdn.games4windownloads.com/WVl6OTRQWE1sTWtaeGIwTmlNVmRZVjJoSFZDVXlSa3RpZEZWR09VcHdjbVpyWXlVeVJtOXVaa2x5YVhremVIVkRZM0JKTVRBbE0wUW1ZejFXY0ZkbWNXRlhKVEpHTkRkVlZIQk9kM0JJSlRKQ04xYzRlRXg0UjFCTmNYRnVPRXRNTkc5bFpWWkhRa2hzZG05NWFIWkZOekkxU25SaEpUSkdKVEpDTW5GTWFuSnlhRGM0WVhOWUpUSkNNRFZPZVRnMFpIRm5TblJtY0VoTE56VjVhMGh0WWtGWVZISm9SRkptU0dKcE1YVlllVmhEU2xCRVIwZzBjV0ZhTTFRMk0wNWhPRGtsTWtKRlJHMUpORGM1V25Gc1pVWXhTU1V5UW01bFpsUjRlVUo0UVNVelJDVXpSQ1psUFRBbVpHOTNibXh2WVdSQmN6MXpkWEJsY2w5dFlYSnBiMTlpY205ekxtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbWRoYldWbVlXSnlhWEYxWlM1amIyMGxNa1prYkNVeVJtNWxjeVV5Um5OMWNHVnlYMjFoY21sdlgySnliM011WlhobA==

http://www.bestbundlesbulk.com/c?x=4Oc2sFmRd6HeMu8H6kWe2BrRmnTCabl1q09HVQTD4GM=&c=NJ8EkMtK4xWzJsyEGOiW1DajecIUkWfKAxDWKxjXB T7QkeEhFe8eyNDNNmJo8gNVAyF4kzSZqDlYfJ knRk3h17GU7OVnv75B7VLlsdsJ7DLWwMW nM2HYenDhelft83ExCjIsxxPfnNcMti79ZjOfOMvObLzkJMpoTRQz2bjJ1Qg2/6X6MxY6UhxuPJogl&e=0&downloadAs=super_mario_bros.exe&fallback_url=http://gamefabrique.com/dl/.../super_mario_bros.exe

http://www.bestbundlesbulk.com/c?x=mb4Y2HLvziHMG6jcTNbtQYGP7qDZ3DoTvBftXxBO40g=&c=Al3wLWuHSTg9lLTnJlYK/X582fOBx96erFgTqbmtq/4WuACXx3PX3Cjk9KsHtIlAlg4yZbvr3omkSfexO4xH1h0TbmkmuA4ryXsJ1d4i57LzAVnqczW6l3I89e58aoAu5TDZiED/4BTvpzmbbmrJP6ztbVDsVW/k/BecjevqetR6FYzbAEU8T2GMSX/XIyR7&e=0&downloadAs=super_mario_bros.exe&fallback_url=http://gamefabrique.com/dl/.../super_mario_bros.exe

Latest 30 of 140 download URLs

Remove super_mario_bros.exe - Powered by Reason Core Security