home

fnaf_world.exe

Befibir

Morava Group

The application fnaf_world.exe, “Befibir Setup ” by Morava Group has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.appscleanflash.com and multiple other hosts.
Publisher:
Kulat   (signed by Morava Group)

Product:
Befibir

Description:
Befibir Setup

MD5:
c93a8a500da85214cf3c21f6d14d7d3e

SHA-1:
20cd827c4c5f2ce3725394622ae3e6b02f4dcdee

SHA-256:
803634ed39511e7ad9731d6f8b043a18b7bf532dd04fd4f0b823651b722274c2

Scanner detections:
2 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/6/2024 6:24:18 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/InstallCore.AFW potentially unwanted application
8.0.319.0

Reason Heuristics
PUP.InstallCore.MoravaGr.Installer (M)
16.4.12.22

File size:
971 KB (994,352 bytes)

Product version:
2.3

Copyright:
Software Internet

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\fnaf_world.exe

Digital Signature
Signed by:
Morava Group

Authority:
GlobalSign nv-sa

Valid from:
3/7/2016 2:28:01 AM

Valid to:
3/8/2017 2:28:01 AM

Subject:
CN=Morava Group, O=Morava Group, L=Towson, C=US

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121A83F14C1C6D435814D1A4B9EC949DB5C

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:3mdmwFjzyzV8q8viESE6v3auceqLPmaNtz5DyP2jGnyO9:3gPBeRcviE503auceqLug8CGnyS

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9055

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file fnaf_world.exe has been seen being distributed by the following 50 URLs.

http://www.appscleanflash.com/.../oKZyRCzseYaQFSSG9Jz9EvYQSiv4OA3BZ1rtq1gFZavhQ0tUmgUBmoFcqmUKmdtoEDp9LHeXkiNQszUTl19LENr8GbovniHBGEt5&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/.../qCxs84UrSDcAY84eINrZg=&c=oqBosuVsO8MRRBeoiV4tK1Dqr 6Pn WkmQZ67HWIrRdZoAY3ibJvei7YAjehvtPHhfBJAaBr3x9VocCYtFq0Ujq4rVs5NSFcGanDO9keopQke3iU8O egzd2NCHss43wUtbP1vd4ktLeF2uWmU1pyJYu8sH uhgMrl QVUSmBJ0=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=qvuQTWgzF1ZY7TkOpA IIXb6sm0JnetSOoO/.../SYxlW0rDX3dU0IJr021hfPKz6feoSBI0Q28Rji CM9MDpIHBJxuBImySkKlflxFir16UCzfvj1S1F3B2v9NkqGRyqa125lz0nVDrUQbL84RNzE=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/.../bu8CBplwpDPqasIsrRj4wftTpaQKt1ToHLXtvW9OMdgU3bOgskePbqUZjaNGbc&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=FPuY7GGtA6s5ZPo7gsQN/tShipfSlVUbKKl8mM1JTa4=&c=MPKwWRj3X6CCMyZ2/QbFVBr4b/Ysx7yoXI4hwSW9AH39PyYvYSbKHWS0h4k8nCfK8C3SYOpmpgFN3gVaxFc/Yuz8V0n0M7CQOJ/.../S5bgQFjrWDfEUz9hGpYUHify4a0S5Gw3CtjhPVkjXe03yZJiDc=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=1ik3138u8Stieo8f0UQBaZzfiCtyfiViKAr54n6EzXY=&c=TOr0bgg7XI12LuIOFwtWRrY1jIAeFSzWMuAYdXxZSiW/dayZ5Y1VF0Bh6kQXw5qml1VFfV4u9CBm9f9h/3T44fBQQ 3iecPfNNZ6AEVkcHe/.../QK4ENALuvP6zf3Kme7bCwO9Dtk&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=iOEiHZnCCoviS QjFoluTCYoPRmYVTLxg4bd2GhOH4=&c=MPwvvDwELuwXoYEOn4RM4Spbou/b2un6L47EChBxQHN3Wzlj E76fjOO/FFcS6AAc/.../IEkfCB53ZB16nyBHBIPpOTRQOWfdqfT3z09Fu1sLg1EQ9tLAXifzFtGalxNzoGrwC4R6Mt9pmrcMJc=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=7wS87CaSohZBGfRn44TOnNYg1LBrVpUp0UWJK27oAow=&c=kjNglDJBpwzwWe1JTQIKOsDqF04s7lknDEcYqLwJACIsu6Lbs9wZNPSn1IvEjK8OY/.../dxUD0ZRYpKtWVKceDhnneq40z6wqdZtQTNduDQ2Vr67CqsuN&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=bWsq PEfi5TFeTylOThgFUgNwebNgjaYaagfzSz32GQ=&c=J7JA5/03onaVies/azBmDYRucjWzO06RIR/5ayEQc7AijZ2vGPCMrMVPQDR5C7T0WVci5D/.../COf4Bb n5 8YLw5l &downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=SJcxe8GRK9nRIzIMH89Oss/CscsSvgMhehv5afC93gM=&c=esKWltAmpN0tmgauW3d ZPO zsPMiTF9ExolId62/w4Mdq2O3CS3HE5k T5IGTCl0fn4c/51L Kck929/.../wSgbDcYaJWGfltO Zvq8JQdY5Eco7ktHJmobJV6Ok9K0QR1qHA6PYWXm583UbeHQtZ0wXaGstE2lVamQoUiO9wK9ihRytMZ7Tz51qOK&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=ePUlaq9E/gCLireK2QOzILT0alc29 pQ1DFdPaDU8KY=&c=16z1vLQfvRTqjaEH jSYLFhE04QMdBLqCUozOw9QHMCvhonMeHFJ5IXowe8rdX7psCSZO6zmDN/p1SZps7VuOWGk/.../5mzpDC TaeBVuas=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=znLughG pKzrtUx5FMvR1cRHy0ZF989YImSsswmQjCI=&c=8nIg7VDPOHx2OgiH6 Rjn ruYoW0U81WSU4LfxkLx8vAFhZIRr94dxdWue5arnfHMujJoR5Q48o2vzDk/.../2NKe1BLqRYH1PnQPujF2AVQxGoYZJWCrq5PiE0oWU3fzTaXGurIiGNYRDgXw=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=o0gO1MYTDztXQ/j hqSd /2tULRQtfZXVDMJ1aLntX8=&c=S9RAJ3 LNlfZpB7qTQOLhlV0bEYrwL1a7gNZOPXf8JwwJDIEuoLXexFjhDF9XTBm/FYbMa1gpA2rbVtnDUXZXo8GNe9h7aMSjQtQ077yNF bfqAIn1 r5VllK1cuOrlqtQ fW/.../sbTsSwViywbtmn&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=RLyS7Ghly7OO6IOmRV6oeAGyhRWmwDmWFjDWadjSoG8=&c=Q94ufIGhP/lD1mJw8Zt5 kcZmzRxX/GYH/v9vWWP12 /MDWyE98r/HEqc8CG D4WxyDZOaft1j5 5HTgDnqV9yzFwgEjC1A0GVSb1jS0aUOOECnPiP/.../TeLWw&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=W50EKkOxff0e/ bm85puWgbnWGudxVbC/xAi77dLkA=&c=YUnJdWUga7SI/NxBZv4Run8Ppit8ufvzzrO5ZJJrAudl1vzs6SpYwZtqQUVGOcr3zs69Ir4iB5R/KCwq9FhS 62mNweQMsNA3raWG22/.../CyyuWsiuGFkdxuKhEMAf5iOSq2N4E4E6VEFhzX4aC8zPAwhf7rDtfQxb&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/.../uHHkpK9WA8v9nt zJQPIqp2DA0IDHepRib wXIjHM=&c=CbRSxVtTgsdncvpGjedFEfBIgx8rwfFkA7LtmcUJQeowJ6Xqln6DhPXKQghCIt4U2EgZE80Xku2tQ7BH bYRr5EPJggdWgKlS7ZT6DCL7rK3yjoaN4hJmOn79Txxk38O&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/.../en9fJrgSuMfyConVFU=&c=8rn581JkQmLZEnxWqORwzVeWa0OfLtRjFBQpNJZFFeRxAnmE LTThxNtmOCnkZsuNPumrfxCt9PovHsKTgl6pGf4hFnb5M4zywTp1qG9uSJyrmK k08EG3Nvn4nP98ojY473O5VLi QZu0Di41stP3uNP0dtW4oSGAfw4msPQY=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=sOzYjJlCnvBJg7xiQra09OGM8Anx5S5arJCOcTl6GSQ=&c=QJWiiCDd3ZLg/JegssEV3hzC0COmRAPl8zYiZM6yHXriFs2w1/9/QCLp0gCSol2MxFumH6lwNMHylxangechqUMMcXeEu zaVfsxSyRflIDIubsmMgm8M5aL6stYsuclygvvP8EbLBXvIxsRNBPYNmBVa6lC3gYv7/.../RvMQbP1&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/.../HG7lwNCaJ3Kxr3MsuOM3LgEOL86eJ7EdxRCg swAteuDss9pjk7hJtCvbJCwldSlV0oKOpbo9oKXOqwI59mNoR 2C2uzk2Ecw8hJIfTwxDB YbFHDU=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=Ql79vYUTrurzAOtbxijIaAXFAj7KNkzcUXZV ZhvYCA=&c=DtP6JLgKRnTVQSvcYCc8ukA7zY3vtkpXhhAmAcS9tksj0xc1ZwxpUfbT1AIt3hxpB1JNWEiD972jJ1YbmhMmdvL4vZIcBcg0XZAdHeJ8j9UkdtULfJjv/Uh/I3e3hKLsV4r 2LcGKO9KHMR67ArXxrvlSW/.../tCP 7ySSLhmLsaA&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=CbMnqBWCCMTao6pBS/Z5E/alxM6C Z/.../y2lWSA6ANTEa9cL9vWbdWDhZ2KrBykMkFZr9DHPNUGhUXr509O5L6zgAqQmyNAndn0FSIWwH6s kiiL aSl9IjWONJ3rEnAehfKCdDQqhkLqiHj4CsxGhRuStbMGM1NaLCTixTZSJ1td RiZM19uEWdDj5uyWT7gHYqzYco=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=cnNlXRvlfxoLcoI0QO0geP/.../bgth WsemGitdaOPiutaMgGJzCfyCdiUYZb5Tc5zQzMkXBjB7c=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=oITOztvxgGpKcwzUMT QVAK/YTr3BTo6FUXUHcUaNy0=&c=BSl11TjFORzOXZwxdUdsG24lX9tFzqnJuiF274b/.../kZUrFbUcqZrSEoT 10&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=775XJyZBNzPYJcUY XMASArchazYjAPUOgsT6 uu/.../mktNipWj9DtvW7KHfEj&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=HH/YO8GN7oonTVc84qL9fBUub2ZEhKc2w oKqFV Hw4=&c=dhhWNhiIV80MEi49Rv WCnlOJZ/9lV657471nmVczswQRSBzGm8VvEbh5ke8 agsYmOOp/IO/.../5BDskScwCrdFqa2OUkRHngtuI1Nkv7qkpNsqqQXgP9GSyBeoLQ4H1r9vOtVAZBdFHoOvxfqo=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=JAQQIVWN7tI08432x6bth7MiadAd2z2n34IuhEMPzwc=&c= Dr3hD7mTBejfG 7/R6lDbNM7K73Num1p/yb1N8dnT08F2k9qo7eU5 YVKklxZI3b68rFrdSO4YMP1AZciuc5aa4 SioFW7fUA1ItSH9TOB4xX89j3KheWnxUMs 3yty7n0iIfvup3vQB6t7/mwkIllEhIcWMDyY6xD/.../YNkxxpjCiJFPs&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=vSBZSFLmY5b/ZchwIkR/UY0KgRlOzIDY2nns6DWfPdw=&c=JmSbO64G1vKY6p/.../wFia Nf2ChIKJhbRABGz9E nTJmRVvLiV8jkXJdbUcxdygqXowczLQHX1EambiKbdNy3312GdvfjTaM0W28WkWPlIqdaLyYHwHzjr1mCxUTeqLfr923QUQIYSjhKPlXH4JP3pODGi&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=vKqW1f uoKQiFkbtiZYnckPP3DPvxPF4ax6IvcXSZqE=&c=8QniXB5qCWerZpZVM1cJpTs7LHD 3MxOiQCONkSc3M6KI9ZhZn7OvwXO2n0axVv3ppF9RWGhETJJYqMsOIF9nyzgiQgnmYs5 EOoDZ1ngokzJaPtp8kTAZ lYZn92MZlqe4NITb4Xc0o61WY5xtZICfZ0CBKo dEdgEo3 v7n y W8ZrgbKFBpGKF0GWRcjU&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/.../IEkskPpThNBprmlA3qlkN VJZUiomxGpITLHgMFbhtBhaGsUJUQYBCoQPVodnwfSjT09VCttifZU6jwIUtf1n1ow&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appscleanflash.com/c?x=Ip/Z2Rl6tLpbAZEzrXh8xvE4PFCcznxxyPnMApwBXvw=&c=sACIAQMVRM/hixOXP6oNlc9oMOosxyo5nqIBatPqxKi0mIKqCoxBXhhkAQJr EhisgoVbFSD44TVOr r9m09OQKoneYtBiDEzqluE3B/.../y7bzOuU8E15fCqPD4uNbL1mck3ldY2GomWCJEZWNhyA1NIxfec5&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

Latest 30 of 110 download URLs

Remove fnaf_world.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.