» fnaf_world.exe
Overview
Analysis
File Details
Downloads (45)

fnaf_world.exe

Tefolimane

Morava Group

The application fnaf_world.exe, “Tefolimane Setup ” by Morava Group has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.appsfilessafe.com and multiple other hosts.

File name:

fnaf_world.exe

Publisher:

Morava Group (signed and verified)

Product:

Tefolimane

Description:

Tefolimane Setup

Version:

2.6.5.1

MD5:

99eff837b91d6bffe9b752b5065ec512

SHA-1:

ae3c6de95bb43a4d937971c789d6bfc881918005

SHA-256:

9ecfeea5b2acd89ff8d91001b94e239599916b1659e136914706828f5ed8886d

Scanner detections:

1 / 68

Status:

Potentially unwanted

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:

12/26/2024 2:00:10 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallCore.MoravaGr.Installer (M)

16.5.29.22

File size:

941.3 KB (963,928 bytes)

Product version:

5.0

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\fnaf_world.exe

Digital Signature

Signed by:

Morava Group

Authority:

GlobalSign nv-sa

Valid from:

3/7/2016 12:28:01 AM

Valid to:

3/8/2017 12:28:01 AM

Subject:

CN=Morava Group, O=Morava Group, L=Towson, C=US

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121A83F14C1C6D435814D1A4B9EC949DB5C

File PE Metadata

Compilation timestamp:

6/19/1992 3:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:nPKuMrVmZ4u/Z3Yiq92KkaYFzk7qxLPOy1Q83bGBE1BiVZ8urh:nCnUZ1/zv3Fzk7qlH1QfBE1B0Zjrh

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE... 
[+]

Entropy:

7.9349

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file fnaf_world.exe has been seen being distributed by the following 45 URLs.

http://www.appsfilessafe.com/.../TO0TiFcbsb26fDK1pkq86A0jtExOS2B6ZWf7ISy1ecGFlRIAWgj8Y tSnlkDzxTxRfmxZZlsXDR3TYXE2zNJOT48Jr2zI=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/.../1I=&c=wsHbqYQyEsTS9M9w0kTVuv TncaveBhHhE7Rb9G2yzgXl13vdYocesboRNULRTcRQNgpBIhcCFcGVHdb8KfXfg6FBJrhVoXj3VyRTl2qc1K4sV25zSK3MYcAJWDnr5y0ep3zIbiBb0vPDilXPz6RGc4srQ6YtlyN2KLtbXW3kHk=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=6bHv49EfnGe5woyqfTzheJ2mam4ymxyddm2ebEVNaEA=&c=cxXNWLjes1pinPQqKiNjhmCVRwualkAgKI5/r0ooXVGOl2i4fwFqy6cFfnMnQrXEvuXccCKkHXpbb RV6f8neb2O/.../U3mDhAn88&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=42mfOmVK0vwDuTHaN98CSpWeIKc6k F9u9fwyl8dUEM=&c=KjIWT6s3BXmsY9PcdzgmSe/nn1k4dbHlr0vSGQgITWs6TYk6yk1zSg3e6LstcdWqgk7EuHFuzdvePlmGrMVBi5w47CCNA0Bu9RSc4YCZhb1P1bABvt88Xz2IAi1YYMHQRePaTCyj4vVcRPOwlYkvweXaTg/.../TSU7uBnBeRlmbAE9x8hz3irnamPFf8tX&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=eQl3L 4Cy7N2s6QKPK9RXpDaRAUviSFf8V9GTU3FvcM=&c=quJ3lI4HQ2ZcVEKTa41Wy2aKGoMsazALG jyEkpwIP3TaPGs/.../gLvacv6SQ5b0Ztm7XZbog324 &downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/.../SjGEBFTVHzQmKveT8yzUqRxfJQmeBkCKKd 8xU2nJjPBoG444dXeKHUYppLMoGkGqrEvqz451Urdas4ogmm2SmfUidNACWp7Iu0jLytUYq1H aA49d9pIhI=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=XmVdtSuhyNaBxb2F0NKxLvjpZF91dpZic/y15l7phCU=&c=jau3 JKNED2f5Cqvg93GcRKffu9xhHQCmNPi1OakYyvfvF9MHv0c OMj/45Pyy4nmC2 FLTJ6LHzsHSEh TtczFRPyMaRWmizjKOgjmyv8/.../MH3tlU7yfXCOa5boOI&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=wkWtyX8NEMbuO3beD1f5LU473c4TN0w HVE EZN86N4=&c=5NS55yCUsDXETWQ7ZTUcyMy7K/iVdYzntyq7lwhRASHQ0LWoD//Q7YXGr67NB 7Z9U8wbCgbnATDz8ozGLnm1WE7Wg m0EACRZt4rCf1bFYG twDIAZgVInmvNshnq4mN8iKaTzXUngk9GS4PjjG49qLJ9UfrEmVH/.../91vuFT8Vt&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=t7Kv/td3mbTTWIElE685XP4BDsyg8oJbaWrZzT2Wkis=&c=3ZuDyrzI3/BHjln96peKR72LOMbqmpSW HTRM6Vpu OYF0PCmj0XhzUbuAX4yXmwYdvlBWnA9mUf9lO/oCIQgjv a4BagjCMJh/.../4zoWRacjifIxyx9J79m4wKw=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/.../vqJCWWDjq48m7 SSXUwqjEiNBSSCl5BB9Uhjj71LGbi ZF9SZUpqb0tu1cZhWDVi7B0Iw5rjK8ZcETs&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=5eeVxUvTD6wrSV0ymbGLoFPeef7ULAvYYyIOtZdRTIQ=&c=4 N0Kyenfx thste5/.../P4bxiT9xn5UvOOKdGQjBVfuDoAK9c d61zErDAk7AoHZ1ra5JemGsOLAi BG3dNDSq1CGGsEYqBJxLxuLONKhXn KNhreQGpluw&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=eVi/D9lk782JJiL3rwraZKPa3yUc5vttP84RPZ/VbyU=&c=fjqAOslb43dHlPEFIZ6OIpA5nPwMSHpHqxMVFYtktmWru1g6Po6mJte/.../fG2zuY35zbL4dZBGnaYz4slQk0WMFQv9OMt8oUNWCp8TDFGc5aK54O3zODBrfTa5xnXO2E&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=CpwosUqyWr4thqbXFCU1JMVpyXDMTZSRe2UfkXFVJdM=&c=B6mZ0uotMxJn2A1hUqgmaG6DoKiFFyLc/br6DjjCC4G tL6bqlvcfQ6mtgRFITvUuRpmOIvYI38asvia4up8XzN/ /XvdUZ0ne vIoc6TmsD8PtdBjRin6azMb4YpPBPs6 otBUvIV4v4mH QoA b72t rrnzFo7Slj5N/2pkRDyVTvd6/.../fIaALySN&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/.../Lx124PSMLoJeuaDEFCo4WWKtpJoppszjLD1yaxuBIwNEtXqWC645ru00StMPajXtw0sCv7bRAvfTdkhWzoWGl4XH7mH pyPtxbkYUh2RyVDTdtY8KE0MQcLO&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=dcOY/TlpJy4l8Ce34/hJcyscXa54iCNMk0Cl1sOxlmY=&c=sbtqacIFgziIcsIp7 MSiIx4otDnIRAcVFKdxd0A09xbzqUhNNTm6VkCEHbgsC/.../PC0RnmKtPW0JHl1iKD7JLz2JjgB5McZYKKvHWGaK20WIFgyNr7dkxQS0NO4tr5MhGGZ3TfsVV6iEVsnXlnLvM6trJnNzHbGram39EqBDDca&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=w0B0jtDHNsilI5QtYe//w0kUVm08sav3JAyHvdOEb3M=&c=Ut71p7ykSBAl6Dphqr2jO1VqVV/lbwQJ372Q92vsv5AmuRx2lQ 4IZKs9BHH EwbmV5BjSlHT loUYmARTtEfwbgUB0SeHf1//7rGyOVMRN5sOb3 0SPfl8ZIKxFqNEp&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=Cw3UV/ER0e1rTTvREasHY3ORd6o4ZeQqFhiJKnjyP7g=&c=9MZDjZWhpUgTNHbknKEOz0Fx5O6E8V/iPp1KfGlwBsau2OWdFQLQUhMIuc64XrFXq/9c1eWfCjO/zUdvVLRUTr03u4h62AS WYyQLY81WbEkmq5dh6Gv7dpQ//MWx0L &downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=cQn1yR3ljOz7OTYQfnrgGc r7E45cg/GeXGNzc58 HU=&c=yd01fKF4BbMMsgpb7f9inXlzRpr0wA6AqIzSDq2GZPwpIN4tFTMk84 KkC/cnmrZXd2O15PsM6o4OCLfrH4iYIf37ti8ed55RCbjLKGgGx0fGIfcs5b0gbKqVsOmM/.../ZMM=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=Cnv3JWAsxZqbVUtSrjPngjsTQ74/84I7P1kd69bqKmU=&c=TXMNWiR0X QYekrxZLGF/.../Hcei4CwkqfSY TkfLBHknwEZ1V2GsPRCWzhXyfUmeyHPc8DoJY6TuKzLGwjU9ZlXridcMjVMzENL2P8PSSSJDdKNRrdEAMwT4NJyRwIE&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=1vuRvy8D1tfenrDqJ C7 w3zkdK1BrtZH675OTctojU=&c=2MJR cB1bU4Ff vzMBYq7DhBL129E9wG 0OdfSdNu8h6k6UpQnAIyMRNJiFzlXKh1VqkEJ8T6ziNndS5uEMGTSgcz3j4ysbsP4Eczcn4YX8pEYcRCeVx6SYnDoDD3Yu7mRa Gwu764Fjn97NYODEZRsv7tm6XX uCkXkFiEfwWw=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/.../oaHrwkzGEdULQ=&c=p18kfKwsoflmUJN4OQrjtRXqjXG3EO4jRpmKouVzxiYxX2APg0nHrUWBNkwktJzg0Gl4VMbfon0xXDKRhojPYhHMdZI kG9 vm7fsJf8De14AgYfbVtuyu8BFLoM5mSE&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x= n9/JRGaVxfiYczKkRNSR4IAyOR8O/VWBi/v8oTLINc=&c=w3XO9enco19XGOCUi/.../BFzzAWCKNqcXfBgrPs2r74HpvuoXaRpsoI439GzjaOPjGT0nZ68SKtcn89JJca7lNSL5BdvtVtfVIQlk1vyEWXUvBLh3b3YCMkV1X3&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/.../GjOKXilKgsTSIGQMWEgIvXIuF WxTZiBemnXobnbq2I6gA=&e=0&downloadAs=FNaFWorld.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=T9XaUjMPs6j6Rcybqyv92PMEKj7aKOlcTTVoPLKNTeY=&c=q5xchbt9jdHMln2hjzvDy/M AJjkuyO7pFEgGhdGJQIyUAHrj9d/ R 6uV1vpG6vcokOFlF5uvx3jPPr5UnnsrdgrnM9X78XP9zAh9l5/.../yARe9g5GojrhMFv&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=eD4ZLib/aEygmFEo8A4nAv86uvMy/.../q5aEpsaLPi2F6YD1FWvkoKSci1E1ljJyCPWPtbuziK2pTFXnxtaHlKMkIHyAFgG7Ng2KUI4iH9ERe4Exu rrksUSPGkcWwg1bFHsInOJtM07RXNr u&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=7LBmw5RsliS0u4jNh8R9zJvu72Unh05CnAWHq5VJOx4=&c=QHt2CXm3nEqLYXNaKGywutpSGO/pV80BIRGDEJKpBRdkXSgdU9S2yAmWqIsS9vGgELTmdDTW8bn7ODYzTihYKMEFp7TOM5ZvN/.../LVvMf8JkdzkUuM57ewQ=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=7sAqEaH0dM9U0Tz681w0CJMu5hkyt0XI7nIet/cZ5DE=&c=J6C3Qf/cW2OwwRauVKgd2aIzn/ai7teahnTGJzBlAVoT6g1mxObEUZjVn/5kNuPbUUGVEkF8gqER7vIQtJr5o6jM08lpXyoJ6pX934EFEQOYfhDM3uFgNip BTwh6F5xnGqUqQj/.../WECA=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=Fdme30dlK0O0ROR9aie6VWhXcPbC 7jZUEzWIckc3mE=&c=1JMOuYRR8TQGAcyuGEwwS97y0/.../N3&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=N2n1cwACGOoPE7nQ70DPJi7EwPiX3P9EqCQ8YHpeQYA=&c=4W2kdLmDhEC seZikHOaVoTVx4t7Ic rXFqVf7Oq/C7uWXlFO/jx6/r6Kl4BYlzTMLa5UakJr ZniVPVOcPzDJ/GpmyNjB3NQHiVmtQ7NyseYsFMRwWIbC5BgvTSas/.../r947nZJ0cbm x0IIgaYZ6JjqJlW8KJVP2UkXecc9fBCMy3xdmEJ3mpCPOGCyIJU&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

http://www.appsfilessafe.com/c?x=BS8RyIEDCEpDwMH6c7vheL0gIMlCaiXU4GB46EdqISQ=&c=PSC1mpc1yLD4qSt1ZKfmHj7OMyrKX1mPXYruUQuqSpwbs9iCd5yZioHXDvR4axCHgW4p0mw53W3PyzcxcsZKjH1jOqzoDITvJ3ciM8iGzVuo7i//CRduL7lugsgt0QDVixmNmyOCgpEN7ZvFpQyoPqzUwyzNXwA0c5QAX2lTC6A=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL

Latest 30 of 45 download URLs

Remove fnaf_world.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.