home

firefox-13108-dp.exe

Fas

Docesipete

The application firefox-13108-dp.exe, “Fas Setup ” has been detected as a potentially unwanted program by 3 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.universecentersigns.com and multiple other hosts.
Publisher:
Docesipete

Product:
Fas

Description:
Fas Setup

Version:
4.5.4.0

MD5:
667261e4955339e66e5b79b8d9aac83f

SHA-1:
aae2b31d4b09b97123d14b9476fc93f70abbfb25

SHA-256:
37e32bbfccfe3dd6a00b1621f61f80249275ea2dfe88531b8460e8762361f3db

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/15/2024 9:45:48 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/InstallCore.AFO.gen potentially unwanted application
8.0.319.0

Kaspersky
not-a-virus:Downloader.Win32.InstallMonster
15.0.0.562

Reason Heuristics
PUP.InstallCore.EST (M)
16.2.29.13

File size:
1.1 MB (1,112,881 bytes)

Product version:
1.5

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\Documents and Settings\{user}\Local settings\temporary internet files\content.ie5\{random}\firefox-13108-dp.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:YRdMs9NnAHY4gDGedk9OA/G+J6bOBZJfWSNSFKFW4wefTE:Yb5jAHGGedkYA1T4KFW4wgE

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file firefox-13108-dp.exe has been seen being distributed by the following 23 URLs.

http://www.universecentersigns.com/c?x=giAeJLA1oIW5SgL8iD4P1PJkde7lXeDk4gDxDrtWRFo=&c=Rs3kLOdXwhVF3xIKv5dH0uyClKVdITac7Dlbu38YzHMHsiQxKrW8b/K8xzapLIaufntV/odw2pXrAoB0MDcnoKVlDi0CtiluSFnJIBxQfLT0o4VH5KVW/igyn98Uqahy&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.repositorysharefarm.com/c?x=aTKUSDpbQc7YYm7GbK0Py49yJr8JIt3iEN0L kFhbSo=&c=QrhHQE4ucQiDmUFUxbM2VTmLEwqh1tydV7El1V0Lv4SyMJDV05p8e6PNv7uej4yTxY3yavEkwxW9JGwEgi79HvdLThn1VrXV6vk8Gy9bR8mkWZtqZ5z JteUypuM9K8e&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.ranchappsquick.com/c?x=TyNO8/q7tY1R7hovyX12Cw2Dcu/PtlkVaq6goixBCyQ=&c=DFqhiEVJs/fJi/yUQ7EX0ZiXTYrhpj FLQuTAv71Rn/ULoAe0OHI/vmyFjLdTNHjRsgkoDmI4QLMcnNkI24Upj8/d2IKZkr5FSdqLbZJxAu RkE2vnvkHMCL7Z5GVTlK&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.townfilesdownload.com/c?x=x8TNfcY3lURMySbZU8J99jFSVdap4UMZs5r4BkQ ikQ=&c=W/LdTJH8eLBknK1j 5SUnHaExTR29ecGdcbA6FY0oofig3LMg9bBK4zdBpOGjyqmlCTc7vsqNRp4QR ZMYsVebCfHcbwkrmwbmH0mJ7N8y3B5G5O WwkK315sWoZT5sp&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.apptowersconcepts.com/c?x=zI1vuvUUNUyAJorcSlrbtAAl7P7b 3 Dmc3DR4us8IM=&c=FFV062RxZNyfx clTOkK5dr10pm8RbVTU2cx1lw7Jwtfzstjlmmz9IvPDQlKrcIskPh9MFfuh7DVctROveWqMbgDi2nt0SJHFP7zX2x8lHNj3qlx9xQ3n4 uOnI26MWV&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.townfilesdownload.com/c?x=RRRXHZbYFt0V015xbo1ZZI8l/m45QRQRL0WcaRxfFZo=&c=rGaPQHy8ylPvwxJn9X7IWW5OtGbG8X5BQJ3srnkQYS6QAxqby4Qqv6so/nTkm1fjPSY3XKNnO3flukrQ C7UcZwlqxr0ZsMOABGu6wAcjrHmjDo54zsQwNc twvWaMiQ&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.townfilesdownload.com/c?x=z3KpkmSLZPy8NscN9IA3EinhdFfxlM4ahTfnloQZErQ=&c= dFrhJm7O4T3HgJmWAaZZ1a89rJD4kcbOZw0jfmCP1DCnCEVQv3Ropll572k/c6nHAVjhgjYqF4tOmi2etQI7gEDXaGjWZ4K47j2Bc533AUdmYvHo jLBlKab48wtzJ1&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.conecpttagtours.com/c?x=gUCKlxafeaI5eIzfGU4Uems uHgtBiXIvPUNObA2Yas=&c=/sbA1DW4CnyoOb8BOXbFq790UU9KjdEsowDuKT6iMSVIwKATmJYYUFIUS99jPQHzCsbs5UE0WR4P1eFkwnJrHBMVKcUbKxiWv IHMqyrkHMaiU12iCCEwr97uUkgN2X9&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.townfilesdownload.com/c?x=/rkEOP3IxHAgsiQsTDSAcTJjlfU4viz61/4L49erpic=&c=uy/DJoXUdL9JytG7l7ndl5H0hUZNvqoyaPL0Tcv59PWjt9YB4CnJdl9Ne6u5cb3m73JgFP6sVuZiVKcPsfIGGje9f Y7PgJw2PtNXOj9jGxdpdOHCE6eCsL8Ccp t57N&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.presentapplicationranch.com/c?x=rXnbQwsHBVQ/ZcNB0 QswTfbf97ztPzBegRqkksleEQ=&c=LPXk3UCvTvC7eWa9 S4LZvur6CXfl6EXbTgGoTYskltRMsmdvrWjU4tow8oERl4xyQ NmqZ3BFEKv1NoWPnAJHIp4j3EmbB3xOSz3 oPKBsMX7Z1DbB2URh Z1vPj/3 &fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.universecentersigns.com/c?x=hHeFvS97CKb1SgSq6f98DQYrfZhYRWiZuAIiGBOuzQ4=&c=5ccEUqzhvdhMDyht/fFx9TvgaA8VXGbAucAf1BIA3013Cl75uzlGa3WCIHg0PUvhvhEnvJIi8coicdgsgv/EJDsKwyOjw15MxJiiIO8qflTxX3c/hMw5bJXtwAhX9dYn&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.repositorysharefarm.com/c?x=pUaKR89limycin8YLzQ9wUeA7MnWUScqekKpQ4SmbOc=&c=OuDWMYo5Rf/Yug73QUuEXtkR23ikalFwn2WFADHG9asywap1cghg9ntp9/dZzPHyA kWRaOc1G/YDnSaAR0IRPJijh7agG55ekeNIQ9 Y71gSbDTqL0onOl2rjtcGn4k&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.chuckledeliverygift.com/c?x=1T62Xc4dDVhXZRCUD1hSoFyOjNjOvqEQkgh2C2u72j8=&c=2OcXy159BARAHZZ3eCLBvxfuotVHuSPXTgjd2It05h7el9qfcLiq/y29Pn9hk0aQketM0ayMxTxnz4AUa4yPf41Ank8cXP5VvaQJk5UFUJKrbxAiSSRURB9YBAYw8Ynf&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.conceptsmetatag.com/c?x=NUODnY9ISDJZbfw8tIrvurTwdNyQEdrqN 4y2JWK zY=&c=wSeFEtqNzCZQiLaEU eY84Jr7BXi9qbNN Ehmil71NhwxdEplo6PTVASsgkcPXeYCUZ aQArX1h48EcD1yeAz6wPawFVkyUg6Qx7IKhYDoY1lWrzB3gbAgTRcByD/xo1&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.giftcontenttown.com/c?x=Pou/9zojqrmFNgKIVtKHkSUeM 3iKep8/NB0yOUFJBY=&c=pBNSUcQreXwmsn9ZnARWKbZN4j tfPdpacOqcnZHOh0FYb8aoK1fv1J3YaASQ1buqagMGkqC/HKsCEXExbmdy2OAz2hrrt74pLt15CUX172tNRSaxYGUAsEb9xmAsEs5&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.vaultfarmbits.com/c?x=Bo3i45U0geElKOOcM5m3mNLwIUhYdlnCUXK/BvezEZc=&c=TqdHbUJBQYNEGhv7o2oB nSWAiektHwX50kcqSZ4jrr/IJ/Z zMO Y0qk1nwzJVqRFCfpa4eCIuOK6jA0Kqytt4bjj2qdCHDeLeMLpnBZC75ybWpcLaA1Jc2ZCakQ Kn&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.giftcontenttown.com/c?x=eAQR85xM3TPMuRVSArsGHj/FS8c6KnTUOdaYQL7PcL4=&c=chi4iYSvzMOJiDNj8KZ7or0x3eVQW3ZkIrK anUTnrw/jj7ILhQjxEHXuQSCQ6JmA3Tpjc5IHB/2JctiZzD2YtN68LjJroPynUgXgOhoyS2YLHv9vy1S05FPtHky2hGb&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.universecentersigns.com/c?x=McEDrBzUBD6PeIScATp/9Pn0yiTwguTmsDx4tPPrlA0=&c= 7cFr2m93bG9mL7H6vJt9dIDsR/GiqsPjt48A6IwdI K6VD4F 0sQHO3xxUMCTt0ezMkrENAorBJt1oyEwjrnLcfc4HhVJ rlwwL0H8fPqjZY7v2uzQZyBpoFvvYrbTF&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.giftcontenttown.com/c?x=quQTd2Xa GngEnxu8AbcP5Nngzx9lnVKCyuba1zqZtc=&c=KpkRLeo/BuzhyjWKKwUV/UuR0fJrYzNHnx1f7CzEef69BvS3kB50BNWVSWHZwL6RQ78nR6chRnyy99CMFjem4QPMG3ehjx5pzG1sRMW7CNl6asI9Uma9R5DsGI Nw11m&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.cleargiftcapital.com/c?x=lwnuKA0uZmMOLuVd0xI0aYbCQ jTuZUrAmu1ETglL6g=&c= b5VQxSsPLROiQ3U/wtMO9yLlYXYBxnDaC9 JupINvnWctY2AwQ9AcJ2tRsKqysLqqe8kvRLzarFvavyXxuetu8wicveSpZtKVgIbAbOQwNwjL9Fgj9Ws6 9ZF/nONzu&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.giftcontenttown.com/c?x=MERdmMUF7ErCU0G1LQSlXTZFSC4koy4EFllddjBwQAA=&c=GAI/ZF8zNK5HjpaxutAJeP7nGPrL2TiNzlsslSQBCmLnKi5jjhCe6XsUibZLTvNYNw 1Ex9ERWsJm8bdnXnH/Cwbs 3M80crbtcxkgg4TV4q4ujnCQsqbFIeZMwWoOxc&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.quicksignapps.com/c?x=T73vt jnrq54dzdV6V2EaQLhT0PKLYAs2hoDQ2taXRQ=&c=L2f5ueT5Z25EWVinzOwWSRHMWByKUPZArfSK4qRjLlFLMujb5fWez IAwhgvmrtedZHGxYuYBGum8L7dGpl4X8qCq8M8421b4pGSCGayZ5NQvD7J0X/9rP8cNs3hOLdB&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.vaultfarmbits.com/c?x=5rZ1S76Y5BdSfl4NuhFm9GnRyUs0g5w2e0jHb/Gyu0s=&c=A4LMAmOthU4O85YX1NWHJeAdTvV2SOckaA8ZsmQDGJ 3TyYvJlCE8ok53cVnju7pTrlxuy8s7VaXbp0JJ59pF5gls652nk5lstTOm GGLJhXtQVGVoW/bbTcmJHTflPl&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

Remove firefox-13108-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.