home

five nights at freddys setup.exe

The application five nights at freddys setup.exe has been detected as a potentially unwanted program by 4 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.dldeliverygrab.com and multiple other hosts.
MD5:
16869a4e746fb36afb32b638cf1bee18

SHA-1:
9e8cea45acf51b23a2aee3a7a82037a48c0a6b46

SHA-256:
9871e7495487b05708e873f9a1a1b58e993074f100c7aca82f8ee36c4748db00

Scanner detections:
4 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/6/2024 10:40:30 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Trojan.InstallCore.1384
9.0.1.05190

ESET NOD32
Win32/InstallCore.ACY.gen potentially unwanted application
7.0.302.0

Sophos
PUA 'Install Core Click run software'
5.22

VIPRE Antivirus
Threat.5226892
45976

File size:
959.7 KB (982,776 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\Documents and Settings\{user}\My documents\five nights at freddys setup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:nzUYA+88/qxmNIqyIHgVRP0zKfyxHQr98X:nzZANMgmuvIu8w

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file five nights at freddys setup.exe has been seen being distributed by the following 12 URLs.

http://www.dldeliverygrab.com/c?x=hfnU2PtI94ysJz sdunBpC3tlxgiIcbjWhtOBK1ZpQA=&c=etyzv3LZDfglC5dOvZTySCUbJbvM8OWIniqJd2WA/vnPI/NAPyF32b12ChVHd2WU41 FdWGr/lQCmRDblXfUYr2gWvA6pxBgX1 Gv Xzw16qih7o0TkGcdGylvrn5nvWovf8OwMjR9J6da778EwVfg==&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php

http://www.bodyranchtag.com/c?x=O3Eg6JkGCxgGI64qrcNPJ103oZfVuoESvYJfN plpFg=&c=9rQEJ2V6xCSkz8pY/Q8M0FGkuLeJhrbjcuUVz06Mp66Fz0HsR0octLsFW9/5uAp9CPis5erNA 0JgxfbVwL7tMmxcMkic0piFd6gPp2APlF9Wg8rnH6Yf/Je1r611zTQ8FKUJ BnG9bDmO5NE6u5Dg==&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php

http://www.dldeliverygrab.com/c?x=apeCJfZzT2/Wp5LotYZ7DP7oHqvPBuXvgyEhlKO mp8=&c=w1RWkfL1VWgSL1cMnPi2zuxq8lf5gm1GiRdEaV7cxoh1CY5dwWdTEwpnqw6GB8fujR9lWZ/jHkuYuiEYLnx Fo1eUAC70RXGEic/2amLlLh 5CiU9mCLlkwpx/PuYCK4ADG/bNLFw7pcTQbRKqfv0Q==&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php

http://www.dldeliverygrab.com/c?x=Dt2KVmpvHJIuhjjXrhOhT9KJKJNGKHD qkFEbi1pcHU=&c= 0Q/h32Y/nSa4ME 6KRgxz0dVlPek5EprGrv/i2gCTsqVXRKJv2c3 54rhLOBF/cqKz0dsEH0utkeWRyjf7nCpy3LQvDWixShBuXlEtjUamC2RGyKyqBaQU PRARC2fFqOhS3g3/3oiQ53sgkvZdIw==&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php

http://www.megatourapplications.com/c?x= cp60M4YHx/3UTzeEWn9rrzTUX2eQrIG84EhXnECsvU=&c=HxF8Mu21V dDWd7npbiZD/Yf49a7hCNC9p6ppnb77HxOBj1t Xon36oatpuGwETiidlyxEF75pqOmNVbjTHSljp52b2W EFKboBfl1zODNgeDLrvHhLfLndv0Xm7rkHUSj ztaoYHLDkgDrLIc2TGw==&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php

http://www.grabpresentapplication.com/c?x=tO2jkTB/b3vmXPfpI2YMk7jMEULOo15vCBIswKCiv1w=&c=ythWebIIpQt5F6FcKYA/Nwt6ZtycZ9N5psKsn2hrhnTZV9leeNsJKxyPF4otB iXKrtgAg9fhN3twKSAjUlNSnvQ31lih3B9np2qe5PXgJsO6DvkSYmLUqq18dscLkpE4OaGWfIgmnuriO/lA/5fpQ==&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php

http://www.megatourapplications.com/c?x=Hb5uV55vZVsQ0Drpj5VPC5RmStZUjRwvZ/afj8HmkCw=&c=lGz29eVZg/fS9sP5Cu9JGPBJ/SGdaJpfob20LXNWHT0GVbrPBvuKtiPxMmWZzlHO5Z2MbmCs ELAcTR5b9cYuBxoUJa1UorVslX567RUIYXO5cm1y7K LaI/GKb3Px21VRYeig6QjbFARPc2mmQhJA==&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php

http://www.contentpresentfactory.com/c?x=yUZHi zKcu3EjDKHYcn1zcWDrYM6D5GHRvMUYve/Bx4=&c=Z1tELrwhaE2FZRT9D7kGIgo7UmvACfIAnB2sgqSGtqLPbHxur5zidCvgeZAOhGM297t2awZoAvU8cHu PNE1POa1j4O1mipVkb9 phyzaT/0sR2SLZRE2rqAHLI6OBLG8GAUVFM7dKoa1xS0PpDxlQ==&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php

http://www.bodyranchtag.com/c?x=bw5/gZOWhKEqdDehEXlavXw27t4Wvor5QkG2/UJEAu0=&c=aekjbXDgRC4Zw/ptMLe/ZcEAUAbZ7nCUyb3hh54hJLB0dm5jmNNuNnavt7sk8WdtgGdml3tCLNBze2jm9XFThwQQL0hLKfF6/5QvW 0BH1nGIGp uThlPR9kwO ulG012XOGKQfEkz677tHc0gw9ag==&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php

http://www.megatourapplications.com/c?x=zvwVem99/Q5Wc23KyU7YkvMPkLgJikdIEIDhvXUu2og=&c=JcGb45yBk E32gOVYpNO9zv Z3Fg Y/3gdvF1aoBztpeYfz/gZaB/1n64cDWiTPF psGj4gYku39/QIqcUc1SNyOqSp6Mw5Qdu1hMB6 AOEF45YONxIg0XA0iiSjRdLGtJBGx72QSfHkEEAzyW1wPQ==&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php

http://www.megatourapplications.com/c?x=sRglhW7cRSTsjKXFIZKXE cniyAyi7op3f3qdixEqL8=&c=BydaZ9U5wQwRSb4X4ZZVfQBy1JRzTFIn4vTMvp22ZGdD1lyQsA7VK3VcNlSMNWOFFUIw5f8QfEXM9XkjBUhtrojpPWggvevyrYl9qXrZiuNnF8pbf7E74D5 8v1SdzeM88rIJbnJ0b9Nt3KrkfwJng==&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php

http://www.applicationstodayvault.com/c?x=b71yG36fxCMDBbD0TYohdU43UhMJlKwZIbCCexFjq/w=&c=UufuSY9jQQPCYcG82qA3R06Kc9TYCcTuz2PCEQp4n1Rc4xRCdzWRLnqeFaE9fDHQcGjBgCx2ggcwybUn seXrvTixSZnfg8WEwWPVkHSQb1lcAX8SQUM/YH9QGheZjphCS6 l0yPmf8q7COSzS/nfw==&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php

Remove five nights at freddys setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.