home

clash-of-clans.exe

Fehobadoh

Delivery Superb (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application clash-of-clans.exe, “Fehobadoh Setup ” by Delivery Superb (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Son   (signed by Delivery Superb (Fried Cookie Ltd.))

Product:
Fehobadoh

Description:
Fehobadoh Setup

MD5:
10c59b2dbd3b6e782574f89188bfb68e

SHA-1:
e502aadace58bb425d645bbc766b3dd8a296ea95

SHA-256:
e7a3ab96b3680b8c2107a6e9193d19f8a5a794eb0d9babbdc875791c42531eec

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/26/2024 7:20:38 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.31.23

File size:
1 MB (1,081,600 bytes)

Product version:
2.7

Copyright:
Application

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\clash-of-clans.exe

Digital Signature
Signed by:
Delivery Superb (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 6:59:53 AM

Valid to:
6/22/2016 10:54:14 AM

Subject:
CN=Delivery Superb (Fried Cookie Ltd.), O=Delivery Superb (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11211DDE033C8F24FD358ED7B6271AD4DE2B

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:lafr4qf07rnL34UAAwVZRBWl1xCOlgqH46T64iD5kvIN:lafcL3fAAwVnu/CqH46T6T5kvY

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9127

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file clash-of-clans.exe has been seen being distributed by the following 24 URLs.

http://www.perkydownloadwarehouse.com/c?x=Of/qmQtAd0XlkOtGGb WxXWyVWOU9MUA9TiW4H744mg=&c=dkvzWS4pBQjBJZBygo1gj9HBwTxE/ynYtergWA7jKxCgxBFsvKfeBFwdUROyATYfXPSCQjd2Tzp08ApCLFkdggrlZ3vYOVUB3MYbu4CKOcyhiE/yJU2WOAhbuQc3juY19T52KZl0Lu/L62eHjlrMcteXc4XtXCG4A26Q8 p/HMg=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=fZsEvcxv q8oVtY3dSxFtD8eHhmmC9/yTnFAP9QF4s=&c=pxxLqCLY1ldv4leN6i0Sycrci7UPMAg1GS/9xhwQIsaWZfudbaaVy6IUnKZgXaG/zEldRmO1evS8AT5i1lG7yme ALWGpwbCwnKah B8taDgV QwKTfZSb3xvPS4VWtMaePQQQOq1O8WymoWdaNqyQ5O7FXwL2Swc/3TPDuk 1w=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=qVCDnqBlMb8pZBcw43jjR7 aMnoDr/YFWeAB7U4 PPU=&c=TvbD9L6Qkfpch6ZJKoIjC5qxUUtKLX1bpmD19yYVBlk4WqcE6U3/RuymOWb2Mh4xJB5oUv9zbII5VaRVIqVIG8uftFrzFPena2GIaBAAJqR sEJi8GTYpQotq t/m2hADbo4xzJP3fa2DI3bd2ZJt50m4v3VPBF7J0i5AJwuTiY=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=Ksd51mdJEMAqnMU0qqcKyFK3rX2MBJgvHa8Y6Pe7llg=&c=TpWsJYkxLVDm UrNoEyphRQnMkdOfDhvhjGf/dNXNg9PcVaRQoMVXxVW3ayQTbhkYMXB6o4j6Ke0SBEthyNyM7hh/2a5g1FUpUCDf9lB8GlJZNKo7nRuo2/zOIaflcwZGHc eRAHKDWBa0keof4ABNv8cSgaGLWuZRRxff7gTrE=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=OcYj30orDRI3N6ESTkzo2ntDK /UaRe0zusQ23wogCM=&c=9zgt9Bk/e7E4NKe0zUjrOjMHbtZ9oSwseDQh8Lc0CVFcrepo4QyA4xxZ6L1uTZvzpbtv7dLZq7SDXE5SX9z98eVvXZQxq9tKdS5V8WFufLwalh0l1nJW18MPzFkpBRTGW7n3q1/GEc9rqn6lcTVryOvPBPo57HiY2M Lsc7ZH2U=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=VvTQ1HlB8zbNMaHDUAtCtBpE928LSdr 9xKlIzjFQXs=&c=OwBdjPcWwBw/MFCdN7hw71eBjvHQx17fg6OuXNuD7HzolDnvbAHc0Ib5E8/gGpF9kLDC5 RpvzNjV0phnkLG8EBpaielUvlisPYLQsHCB22NjmqX4hQr2K681lv1mQi9H7 BPECqv 4b1KgSqOPefS49MXgnTBXgY7Dwfgny2mU=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=p09w8CD4qrpBNs/X6U rsjq4wzWeRWJ4kVvTVlsXB40=&c=Ij5KPV D FPD5VmSfbNRNjV/W/TcYX OG8GvLprpwLKdlRNUBdR26j49lnn7WtAs3IYDKcxBu3/6LTUAnbMPnO9qdAltHadImE64T0ZTpgvbn9yr0Ld5DiITUdQw6K1UyvM0FIr9Yol5PgMmZc2Ddnns4tsdlSepLkoiu/CdmY0=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=34AlqVTcRY9MG6v1BAgFIB6//SyMskhYA6 y3pSsIdo=&c=sWd Y4LrL/4cGLAhb4yqxjAaixAXseezz55Iey62jg73/0AU7CLKzEWycdkNjNP5xSHMuuFfd1EpeIKFTgy8QVpbYfjyy3/y2Qb5RnTGUS8ywG0lofbt/io1VleHhjLMMOqjhTPcCmBRTqn51lhCsTdV2ZcYSUpO2Nx85PeGCuA=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=Eyb4J1w7eAzcB1oQuv8ZEg7u1olpQ9K gBre2G58qpw=&c=BthHNdCWGGwftOaza2bSCJSlnVFh04TrK7f pOTfZ58kHzFx7vlj0qR5PF3TmlarPUa0eCwXaxFVuVDpHlVtr Z3 6HEu5sLbmo4riLhUUOt6tkDXoLnLudQMbf8ZZtZl0VKGKMGOA0VlCg5IKJBrY9wFMRC27rovJ6lAFRRmAM=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=M6h1MULT46ITBmJ gzcyupNRXRlv8dTVh5CbKIKfZU=&c=PuY9XB6Fmnhj7w0V9XmCWIdisVbfMnh2QKIKWr2QTntFJHpXw6G7nkP6UiV9EVPMpDkz6SK0sSlDTQfGQ5nTYg0qN66cfhqs3r9MkZBEnBrdn9GZEI 7CnB2HM1KZYFUdBKi4EljOxaD7KH 6euxW3/mWpXvYqWaVFFQ0EBf9oE=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=MBhoXK7RSG1rFQVvHkfTiKFV2ZJfq1kYqtBH9gwTDRY=&c=rVkI85uh/zHN 7fssQ2mFvDN4RFTM/akPdsUVF/X3YE9Ar9h2Ha2LPLC3jZTLvCrOpAhApe7tILkZpNtjTDPBQNmhuN uv7vJc1JrzDGTKRxXv45shVXktAIUjFYvtafgREbWVnLI4YLi9v6YzEvxCveac/5HguDi5NCg3k1kFc=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=gukxi5ypPl4ub5XTC9c1fEFL/d9GlJdf9UUyHWj0R3I=&c=awvBQfFED8rkf3UJz6dEn0Lw8kBXZTJXnXOSub4GRueB 6stSJsR6d0YULRZN1fpVL9hRUZNZGcRzG0CbyKNZ qGCdbyH6NxuIa53sjwNurp44BrJLl8wr WfxYGdSrXOn 8GwEKBKvIzVwQUA1TnXdfqYEPUHdE7za8j9voZ0k=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=CcWu8beIgpOGl3VzuWCFGCRgHTuWB/IRY0AFyM7EorY=&c=PxwP74IextEJeaOkA6ob o70Uvsvbg9qzAXKRwS7JO3CulBZpZ9IHFdaNtkELomWKTlFg uOJBXhGda3pHDR/DeDVaDw8V5loyE5K8bmuBEezyQi4aa7YnZ2Lene6ffJGsz7ECFbqJwGlLW8qpfNYU3kqtOCzPjGOWL8OkhhbPQ=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=2sM717gMzn72GbxH1caoi2lJJNs5xoIpa A4ikO8RE4=&c=LnKqgbh B 8w BAT2msPNkifkgdb1yUeGJdijNSeJ/eduStcvrNowBQnyUQGLuTxaDklJbnRChQEw fWUAnuR9I6yWSRCd8QLzq96c4VtlcyUjIbe1WKAp/UDuBMpdrdfir6uiShAx5arkptS29aXMoF8fGiRv1I/XxdfJYACd8=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=zpybWHWncuembYLRejVSlJBJnvEEf9jGgrhlipvj2EM=&c=uj ZzOMT Rhy2THHTQy/mmeRB0RzPvs0yNCIcuoqnXcZ9MqytecjQMVgEefwL3jSNa3WhnwisxwM0HEjDNSR nzSnwEC l7XMlXKMRTD6QlqEOf0OqpT9xrJ5dbHwMj9kND1J9WhviLKTxgY1tszjYSuFTeshC5y3kR 1UFDP0g=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=W1KD 4EBuG 2k3M4eCWBPOT 9OJxa6EYYXuPVZTH5Ow=&c=goBkQZGcdjnPCBziLJ/DiLL5siKAzIMpoGr0KasN4WyOgX7yxl4KlU pt8BGNN/HqopvZwgYBhqOT4kRrPQmXwDn5FgY5Fg0pf/jTL7XJ0L6KEiMbHBD05oghrRRIkSj4HTSGUl2Nij63/tRRAgAsGJk3RbZV1CslTGPWUOkoUw=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=gh1wMPwIfHl5eJVzcAJAWoFcxh7dPEVyZ a7 LkrLvY=&c=MUSwwNYn7bntT/VFJkMxfJJV NnDyt3fFWj/tUMqphqn49xWrZVmTDeB7bsqPZDyTMyHFD 7zqlqr2cIJixMnn0cx4rpnpYUTaxLrIMLgZ5lNJLEFIltBd0n7e ABoWCBsAR6vyUhqDNysUjbklE0Zp8KNeJOT563ff2PU2yFeE=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=Om1yL2Kdi9vTuL2E WZgy1FxGGabQd6iR/twBYASC2I=&c=T7ZHQVtG1WKENvf4/voYzsAWsltVZ7ZFMBABvhf6ILf1ymejZyepek3rPAJphLHIx16bEa3gAY0ROEqBFdzJIzjHxY0wR2yPgDw9Gf4PjElztil4rgmaUyWt8YyTpCYiCmwc0mi03odUOQ//Qp8XpCZkXktb6zNtFD7FfGQOBRk=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=u6H4xY1xXxwsIyrfjWuctvW23mKVMpGZSO2YPCW5Szc=&c=Otuq6OoEwMYXs5iCguGEYdj3veTtQWvW9nSfaJger5sonoU3RTljfbEnBvvGHP3zX5bzUVLDLOc0KOk0gz9C1ucfdmPDeArIcu69CKjC7vfOqrQoiDgg8CD282RpbLp8cM8DFy4I6WqChLneDq1EMdroXPp2gBe0FDwjXfBXb2s=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=mQk7OdACXuoj5EsXcImfh1cgA4CHY3wn 7iyqvj3TNw=&c=ZZqxQlvsL5NkVJd6KyZfh9p G xhOnmFNtDjxDgcSWvQQJhy3SoxNjdPRn9Uj8pcs9OxeNs6Tv9PjLLzulUUU6qthHhCs90t6y105N lBUKe41CCafI0CFQrAPTdmWbI7sj8rgAXZMixoYfz4QFhEhsAXFq5ZvQZbnm/Db7vLsU=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=KUbZe1gC248JetWW0E2iCHwJBJiYTaIEGoI0on/O0Ps=&c=0u S7uKQz8xQLW5TWZ16TMJt/2/6oQ5AjReJ/3cgHE3vHQ4cHIVWoHQ mG/vh/0hoceO jE6vAuBv/os77I1Hu4Ec2QbfU//sekRqqq5iNTKN ixwTrgxRIxxqy6Xa/Q ibN91btgveyqF/e/Gy6G4Vn5oGBN8wFkiki0ji3aJo=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=6PO UsDv 1qOgiQHcopmONNnvrY8OjFSLAR7aMRe2eI=&c=uD6qZIAUM3r/IIl8TWLnO9f/GxNmK7rOPVO5JZnOCGmbi523Z2iEcmbs/QKW77rDj9WPKjA jq6x4zXmjXgo0axANBlWhR/rnHOvkvtHPb/49X0lr4OY2sTVOTc1/Lh/mNAulOPbdyhQ9GIYjbTYVNF1qhYJOHTEIm212sBzPDM=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=e/3CqmYT1udbLpQ3Qb0bqzgXs2JRhmSsJUi42r2rSX4=&c=0ua6 c4fxe6JbaQtzlBFQjJUwBTKm6Z3GH4WBGpZHfmj79z4DmM8B8RrJ1cjOiRjIn/RqIo Fstb06XsYV6uuOF8m LLvcRygm 2q/pmfLJBKDWHmARLHMRVzFB4QQ13EfJ Dw8mQVRtAkDyUZcYJsOmlyQ79DvyGSkxGHSetBE=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

http://www.perkydownloadwarehouse.com/c?x=jmgaMo5k2R96FwA7Lb6 qHpe6zdm0rxQXIf/KVSnZEk=&c=mFPZbWj8AD0JhjVvZ9 017R5uc 4jp1YFnYDHLShpOG1ObUw6T01FjFTKLGSqtjfp2wRUy9B7tSNTXbOxdd0hj3/u/6IfaetzkfoU/S H0hwEEEx4NlXE6mXAdZReiX3NXZ3W50xzByuGwUH7cznC3wkSNfm6K21tEnNHl1cKx8=&e=0&downloadAs=Clash-of-Clans.exe&fallback_url=http://softdownload3.com/s4m/.../Clash-of-Clans.exe

Remove clash-of-clans.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.