home

firefox-13108-dp.exe

Penota

Sonepopi

The application firefox-13108-dp.exe, “Penota Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Sonepopi

Product:
Penota

Description:
Penota Setup

MD5:
73e10650047c1fb5e63d33c159cd0402

SHA-1:
920ef0c66da25eedc55bef1d9c7e1dfc2c4899ec

SHA-256:
3cb54f8e923f715f6e7eb83fe8aaeed8a1a26e81fd7d28afd452173e86a364c8

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/15/2024 2:03:52 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.5.4.12

File size:
957.2 KB (980,199 bytes)

Product version:
1.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\firefox-13108-dp.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:rxBAz6a8UnYV1V+WD5UUoeb+ZfKBskh4oCUFLCoDBLENnJi5KQIV:rX86a8bRxhb4fzkhHFLCsMnJGKL

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file firefox-13108-dp.exe has been seen being distributed by the following 23 URLs.

http://www.headsoftwareapps.com/c?x=YJ NtecDBAC V1FQlWmVFbddAmriDJaXhCpLYDR4/QI=&c=Jj zJgiMlUylZWwjGFDMSJ5xNJ/tRWNfdgT5rajJx5MZLrzpUt4KBlGszj5r6v/u6AFvqUHhhsekc9DS0ujwktWsA0KwOALodbjSlXKL34 S8cR7UuvK8bHVr1jYVtHA&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.todayconceptsnew.com/c?x=TZB5rWWcUwZ8HqJoQE4tclqp1Uyg2RUQGTb1H/7oSbo=&c=U972XnbA4SfoIGqY8 gsX pRtvapVHQPy2LSlt9mIexJoh3Bw 5YQ5u80HPgDWfuKO0t1wB0sJ SVKDnU0MWWvjx3jtoaoLmW2Cjo8jZmgJrWfKzL uCTvQhHvZWlYN&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.applicationtourdownload.com/c?x=Fj3BT8 a5FA6KrEySxL0pOh6Cl5 1BzJzR QnqmT/0k=&c=Zg8ZZt65rnPcJQJynevWf1bKDst5EIF 21y4mlLQoVkFXt2UMGnXH1l5aC15kUn1 XFjQzMNqKN0tgvRYjAYDtOQk6vcSDvzWYPtrLLY/Vng7F IeoIwFlhDkhFKKzQ2&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.bundlespresentbundles.com/c?x=eqCMVgMEcHP2jIwEs0Ybk1au HeEWvN/uXLEVXryja0=&c=tVByxzTEtl8OQgZG4dX3jy/TN4aOfWtQ9zham1J/bMHgAJXwtDMYYazFpXfsQ43cEV66Q o/9PdIOIUUeZx/WIW7hLRrNM 2KWoKnmV9hvfqAlkJQYBV6ha2q5qfudZD&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.headsoftwareapps.com/c?x=YJ NtecDBAC V1FQlWmVFbddAmriDJaXhCpLYDR4/QI=&c=Jj zJgiMlUylZWwjGFDMSJ5xNJ/tRWNfdgT5rajJx5MZLrzpUt4KBlGszj5r6v/u6AFvqUHhhsekc9DS0ujwktWsA0KwOALodbjSlXKL34 S8cR7UuvK8bHVr1jYVtHA&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.conceptsgiftcentral.com/c?x=CLdC1Sad19Gg2oPWN/oZPmLqKjfH 1X4Qsolh2EubGU=&c=2IdNh6YNAi/64UYbDRttPbFFTuDSVPCmBM9MeeqLc3jBZ7pVLBwOjzX07sRQXQ8Lc1NkhzytcC4A48oY 0B9pziqLXwKFp7QA6fZICAF4NpUVHEfsPMv9cS2XKA/xa2S&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.guardtagbest.com/c?x=JMBunjk7heZKcsONzAdFNud2hbmu9qbnQZ/sv/0/RWs=&c=4mDF14iRTvl5ETLwCtoXSTnqQscZAIiGyBkacpKbokPFJ 3SZ61cd3eywSrWXq4s/8FKs3B1u4zw6mZbsk/F5cKPE2hnG9zl1WwQjoljpRDVkXTW1w54sGq8yxi95Inv&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.todayconceptsnew.com/c?x=YS9 jb5lcEHYt0HoKdMLamtNd8jCir7j0SnUtsWDcmk=&c=ML9caHd3yPk9Sqw8axCAtExZtyyugwNHouXdWRysgn FoZazb4rJVcgRupaddRY6y3/tPM YnlXvrC6wLBMK5nZcvretNbn9PXsthNc7wWcnaaY0KLro68LmlpTmAz49&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.todayconceptsnew.com/c?x=iZRdT7boF0NNY5zitep4SehB6I6//RPwC2dusAm9Zr0=&c=YSrFzXhU1CU2vjFMn7foqJyTZQ1APDCILrcHKEmpOly QftlDPHjIuQVr0WjKDnVrHgYS99wpqdxKkBkOV3rHCQdd6NZalM5jF5vUGfNVCLaVO9G1WKjMOF9YNIsfEfp&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.conceptsgiftcentral.com/c?x=mVGnYZhvhlxhkFj7ZXECnsE/NmgqOTbv ZzvqKYo7TA=&c=5h1ztCndYZhu74/wqP/QP Z s7zQJmQI EnLGYdV28hYLk43HBEHJ6WULAsQv5gDiaR6tCTpx8ohlN7PWi7lTChfbgySUcw/AcEiFjCxuwCdzCWQGBeGc6t14amy6TSA&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.conecptmetaclean.com/c?x=tBzRIngjE Tpm3rr HK74oUmdfKsmEiABGhTXsZlE2o=&c=VLUcZObghQvyAmpyvMbC6D9XXNhBvIopfEp8G/iQ6fi9A0ucq/SH3pH8vSbUzV0MzouhO76W9YE9UvEs2OP 3rgHf8Hlzctrh7FMDhvVhJkFarNkLtH8jS9nBP8HJloW&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.cleanupdateworld.com/c?x=Bci/cBS39t RwtSGNl7ZMWS2rnHM770GAp6IK7qyb8s=&c=6ygfaD9ZeDHkQ2ruYjzod1tb gVJ3K LEDBqBuGZhVaKD8VwMxqpQWZ0uwHQxzh2sDCe2vJc s0m6D7rCEbWgArJxHc6yNzaGL1S/Y1569An/375b8TPlAK3ynfFuC1R&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.conceptsgiftcentral.com/c?x=hNd2AOy42WozXUND4LkE7IuABLOdP0n1LKh2rKtidNs=&c=acc14 35CCz77UI7z3u9boRgQA8/2Ysxj2NL/PMoqSzDqJGAsXamirWcfsap7hcy0U3A/cDj10HlceN9R AnQalMKZhRI8ajKyPfAc65l4r1yBmz87bNuRIBON/KcBIZ&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.conecptmetaclean.com/c?x=jiDspFMU9AUU5J/3w8N AvOE2gnD 04B0YAbB18hKHc=&c=zFH3eyjgJQ4naohoQwFTMXB4TMifaBb1wdZJkeMFRManYfRnK TjgbLUj/ovwNdGLqY JZuhYGwgVGr684XYnX0Jm1uIS26EFbPX1XONHFJBhpQjq5ZFALW MJ0Vle8L&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.chucklebestapp.com/c?x=o8fR6gBfbTh2IS3 orV3Nnre7Mjnn6/f3wLSx/ Pu/4=&c=tuVsSzVj86UygvX92xKRLscIgSPqBL2vc5/PPjH7S1w9u/KPuzDoPEGCFNvGdQApaTvZdJonpTpHod4TguH1B8o5 dlstXdazGIQgli33p0ajVIHQ693aiRFLaLZof 3&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.conecptmetaclean.com/c?x=k6CUK8jeyEqkSiB VIfAbb 0AdL3TcqBD3wWQRo4ZlY=&c=EeldqC3n9iFuXpTCRvrhfe2uk8Zh 91FEkJtiiv3IErOAgHoF52jfm4R1yBrTfhHjKm7Dl7up4OzACDgTWlF2At0RgjeHCIl/cb7Z4Tryxu3ip6sm4IfoXknzYm5gU/j&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.todayconceptsnew.com/c?x=jGGJkH0fsGcUgeJsol3uf7wFLqO8J1 sktJnBUmwwlM=&c=tbWyg/2qfNC/65QqrudYDb2ThfTbDBCIVFGioNtqy1XFmicAHbh8vWlC4dg3Sk oMxwFe5MIf Z1eTXBKxa3bZ6T2OFZ8lVVxMQlSbFqrEiIoRxX QrjhUahKnD8J/Bc&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.sendtodaychuckle.com/c?x=y01EvYsrmJwZM3OuC58w48VEhd6/E8cN0yxHlJDFXbE=&c=UWiykezKEPs0GcpS4GghwNODBOFK1oL5TrQHguuyHqbcZvHSbk7lROVwHkGyVos6usGMuyq5n2kKmSGQGWPxEd9BJdVOY1Rud9NPCwhmuAeYLBKJ8QLS6VtoYSryvxl3&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.sendnowtown.com/c?x=a/PvYIPkLZEKYL8xmxK97rqComVIN/LPGxYe2vlrs1Y=&c=BUTo4d8FbYUz6rG5MlmfeN1V86haIeL4/tnpQxg8OxTF2x23V8JCBQGVhQDUArAQPnXSp9 EMWPaulLIoHrwD6wBoBJ7LUrZn0k5OLAewRTUVDoAM4KPSJTVSGdUh xJ&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.headsoftwareapps.com/c?x=vMNWKNSJCeLtm6Utz4k9cHvJW6LVFEZqdqvj7WjbfJU=&c=iAetilaGvftGHIIAtbrvYy Jx5cZY3wunJpyzoqqWc1AwlAa5qWVVLbO9/UVDD4lbe3i0qufu7CFKgsJ/2d0FaiIm3Vzq/qfYL2vxhZDY3d6KuhoPRi8XI2A3USiL540&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.presentbundlesnew.com/c?x=eJN7atzYY2efqzdsoDl5lhYRWIc4q5EtercXGbtESmQ=&c=gGjcsJZ66a6 jRcoaCFmdAPcnSB6f2Pz7pJNjwVQN1Y6nCVGEkSgmFndidKRf/uyofvadMvlP1X Wm6Cw3RkcelHWryskm 6diR0anOMrOleLgMYSqmH81UHsiIKKTQi&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.tourcontentdownloads.com/c?x=gr8D5OdAoXpjf9l4feIApi/7aLvRgS1AKO/Y/uHzjng=&c=2lOF Bwjn1mKj0m6JaV30P9pC9D9gO5bdedY9cTC9w4NoyY3ebdNdrCV84swIrXr1wBwgwl9gD5tpiw4i5xVH4ifeL5A6J9P865af3ugY1EGrs6Q6hgJFY efZ0LGspl&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

http://www.headsoftwareapps.com/c?x=6CYYFUa3gpScUpGTQpUZNt a9PyARAfEuYRxLCaBouA=&c=tyYWu I3anHWXk1630tFrZ14JhyoPjaYx3yazb2G8lSJch8RzLJ2SgRn3yRkzyj7OmU4ICWO5 A9a6lSs5A4pLf2 guuYKqyOhTA9mzLfDOu PF48MgPbQuu9AZy7Iyl&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/46.0.1/win64/.../Firefox Setup 46.0.1.exe&downloadAs=Firefox-13108-dp.exe

Remove firefox-13108-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.