home

five-nights-at-freddys.exe

Dob

Quality Install (Alpha Criteria Ltd.)

The application five-nights-at-freddys.exe, “Dob Setup ” by Quality Install (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.downloadclearbest.com and multiple other hosts.
Publisher:
Pofih   (signed by Quality Install (Alpha Criteria Ltd.))

Product:
Dob

Description:
Dob Setup

MD5:
73ff8e97b21b244df30ba16642f03f7c

SHA-1:
e798240aacfaf3a9fac3d68434392f5e1f0d0d68

SHA-256:
af4dd610cdd8c387a912d8df9bca237593fae75d923254861ea6d8fd47c6fa73

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/26/2024 8:28:53 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.AC.Installer (M)
16.7.3.19

File size:
995.8 KB (1,019,672 bytes)

Product version:
5.6.1

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\five-nights-at-freddys.exe

Digital Signature
Signed by:
Quality Install (Alpha Criteria Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
1/6/2016 8:14:15 AM

Valid to:
8/4/2016 10:59:05 AM

Subject:
CN=Quality Install (Alpha Criteria Ltd.), O=Quality Install (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121BA484E4C31175E4A844ED055428DEC42

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:H8RGd8NZW4pRvmrzNd1PQDw2dRxOrKamFs6tke:Hmfg+RQNLQdOr8V

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9294

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file five-nights-at-freddys.exe has been seen being distributed by the following 9 URLs.

http://www.downloadclearbest.com/c?x=Lbx33X UTCGH/3zJBeChJWPNehsrFNXnHtT6fulE73g=&c=8Es14i BC/XB aV3nUNccN4tPl5VWJb4Rc2wpN dA78KQD9j8wnllQRqmuX17KRYh/vyykfg4 s kqRyksDu1c/D3Zh0AVxyOgCaoMmZV n6E8tejXeBTG6ml2/NOwSs0Ma9vIWKvY7WB9HBA4Ywp2GageFVLViWEnT7KI7sXP4=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload4.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=aHGKKnjYVzmTy2kYp59IOrqnApgsbxPQP2W X5b9T/w=&c=hmGOdDZ8lfBbOqQnw0ebXzu NxbKublZmZLlOgc6fPmf5A0TGVZpIPN4W EQVw Eo297Mtgqi1YzF35gC00H0hK yxbfiDNIL8KAEXztVjNkvRVmkU1VmWIeSqCvXe6vJ6BArXBTUboKm4C88Jf1KuYIm21y6uxws8kSEgWkUL4=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload4.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=kja8VYXT85LP wBobLeYonLUdEc6gEbgO 39pxSlTQc=&c=ZVsYBv/thUNthcox4f4RI2cua0AAUTYNzCaTKTK6qzmBd2iNgUnrlmrMTzXnx3IzM070PBgLpqFu qdGHoEx8zeb6yVW4nS5EI966TLH7Ro3H48XWsmj3DScQUCNDCTVZdtaYpunZyHwxFBMi4/QoLHiRBLNPpsO9fFVp54dBWU=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload4.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=yFSiQr61hI0UfGFOA38fikkKUl6YLNU6v3iHcTSKNeM=&c=zCsBkc7vkZNVcD4Uv6OMd6VS/Lq9oQBnqmmaRnjUnIeKmFj14 dOL/pe67yYw0ES8XB5AXPl9NflGCrLiA8SO/BVO8PajkZIWraudgkDXsKL/oKbEZY3rsnEfM2a3OsxdN/cjuA2Re8itrSa5B2TE3vrUUniHidUIWrdVyShH4E=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload4.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=cXEKAyHD2O6dH2Wn ISDXjlGW08Fe7p3UjNhrtpaOQ4=&c=E 3hvRdbRDbEtzxsSzFy2HdqEdpQBAnLF88BbS4HKSOTcVS0ZbFacA VlSfTBdM pn9lJE17FKm3K5vTyowEOhECiWnSj8XGoR8J9r39Pn2A2kKWz uMtE4s3lk5ZKq5eLBnyrz2jGqMRsVxRNwEOnusvX8UdioFo3y KBbRY7w=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload4.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=WK1T8qpTwZ0pKbfkVuCWzQUc2Z3Piekrh0s7yLkxf2E=&c=ycSGtJAfsZhaYH4As5e7n5fVGHGSz8z1Va1LwQwnqI9xD/aRdufMTCTaoUSGq7G gkXX7KKjl4k7vetGq7EI9NvO9c78SNYcy4f4ynP3vYiS/W8kulagcxSGdgoSPj6OcZJp9jWR zTJp4cHpPri9I9TYnyhvi2O3c0MRkygbCs=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload4.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=lysPztMY5SJKtV8RR/DWI0m1gZJKvNEyUP5tHxc5 xI=&e=0&c=1qqvVmM8/fRjU3C 79JWgq xcJgBe/WSWN6MFph1gU6pf9QUKsu7rwi6ML4LolKMjtx9YmoMXkGgsqhKJy9KIfyh3yJK861naUpLO nY3qB4Y8wCCgxtd/xgmEUECJ60zVKKdpZaqAkPD52w5UZsL5Y6ZWMuMHk/BMfYvv22CPU=&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload4.com/s4m/.../five-nights-at-freddys.exe

http://www.appsworlddelivery.com/c?x=d9XSmQvd3TyFte1tkBsm2ARcIv8DIE29OVuV9qwa9dM=&c=4a6k0YRReSyPvoShadiWOBJ3Hpr UKafoPHuTNhfGjbv3KIM7V05amK5vSYfz3mM4TaLUjimeHt9BcrW5aFjcVdDpcR1WPBusWEv5h36QbhF9AzzZ41OeF9COgBcthsdHhBOVxdUFeSLtuP7I7m6itsOmEqq3tFyvtSMSX2JrUI=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload4.com/s4m/.../five-nights-at-freddys.exe

http://www.downloadclearbest.com/c?x=OQGa7nKuu6uM72CcNgS8TPis6QxO3mROB4UBGqQMC58=&c=ogP10ZYTGS7iYHsGJhpUCNBRAtxPzDBgPVBYgr3ipvv1aN 12s 9t8OdzILobNcP8BXNhV16U7yf5tCXK2OkoecjjttS8GQbQITDeHylTX2xXFPSxwxyFi3nJFrn3OCcM9eyOIp rG6EuZjyImjXEqSqUK8dYK12iTssfmqLnQE=&e=0&downloadAs=Five-Nights-at-Freddys.exe&fallback_url=http://softdownload4.com/s4m/.../five-nights-at-freddys.exe

Remove five-nights-at-freddys.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.