home

firefox-13108-dp.exe

Installer application

dobreprogramy sp. z o.o.

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application firefox-13108-dp.exe, “Installer application Setup ” by dobreprogramy sp. z o.o has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The installer is marketed through download protals and search ads as the free Mozilla Firefox web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Installer Soft Program   (signed by dobreprogramy sp. z o.o.)

Product:
Installer application

Description:
Installer application Setup

Version:
4.6.4.0

MD5:
27e86416736ac38f6236841ca1328e23

SHA-1:
d39c621c665afb62ad14363d57e6d0edc0da9023

SHA-256:
8620d96c45beb670be51fa53bc569ad92299be44fe9b0d7f15e109b7d3034667

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/27/2024 2:02:10 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.dobreprogramyspzoo.Installer (M)
16.2.1.14

File size:
939.6 KB (962,128 bytes)

Product version:
1.1

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\firefox-13108-dp.exe

Digital Signature
Signed by:
dobreprogramy sp. z o.o.

Authority:
GlobalSign nv-sa

Valid from:
2/13/2015 5:34:27 PM

Valid to:
2/14/2016 5:34:27 PM

Subject:
CN=dobreprogramy sp. z o.o., O=dobreprogramy sp. z o.o., L=Wroclaw, C=PL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B4F3A4313F8A58B614202F80129EBC93

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:bK0MnOP4OXqwVfMacL/BLLpQ/VWVSiPmBuJFTs9QOY4I:b1mOuacL/VLh/PmBuDTslE

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file firefox-13108-dp.exe has been seen being distributed by the following 20 URLs.

http://www.bestchucklegift.com/c?x=5VgJfQjg06lzkac7XmoerOo9ZGCcxe53YV8ybzWQc0Y=&c=8fPUXis4ka/ZrGsgbIlw8Tigefe51E3vifU9bONziQHJ0xsGKF7KMeSKpIdV41Aj5DVMJr3NEOVjgIUSH73UvXGfjxyDJe7XKYCgRz0qcYqg193MgZhACgIBHocbWYOXvN6UeRkaNCgTseEyFhwVJA==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.farmnowapplications.com/c?x=xRADkc54b hZPP2xvJ0iNiyCcgiMyst024wJwhwnPCs=&c=UHwk3x3bNCUj7bo4Zt4sbH6AN7oyf39zBHXwYkYELq61lhIOePinjiYoPuSHmC9Mb7hm5MHdV7M4QqpkLCqvJc3/2 /Oa7aZnh5bm2cFKE6LT5/FANYpNQZ PTsJyomw7R1AlMevCQvcFCKYD/aUZg==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.dashdownloadscenters.com/c?x=oQtZ1LxQaV47Ng4j5VRK5oaktbptCH 51jhqyQbp3o4=&c=KUef/FrJCy74sWjftXJAyBpdcsuerTqdDMQ74dSOkRXMY10k5 cd3eW BU BvJ79pUP6JYJKu4gjIWQOSFmgLV71U3FX3QFm Ojk9/1orr5K49gleWcJaVc6AhcECiWx96KmnvFAgkyUOoXtiMQ4pQ==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.tagvaultsclean.com/c?x=8qAeLDD4zEKIe4dtA9X 03a pIUxgra/CgeqS95kn9s=&c=c/uiEFeROqMTx1F7krT2IepBfL6qYHC2UDNB1awG2q8V5UYw3MgiVBTMAQbyjJ0UwaRNU0hdJ8MsBGn8pMHt8YTfLZUVE4pmmgIJ9CWsDDJsaU3gZP/y GLJsBCr4Yt9&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.tagvaultsclean.com/c?x=FWStWPI8u1VWH53gFvpfoZhT6tuhl3 XdDP6SfNOEhw=&c=Qx0XU0WUwdxW4uqxAXlEtlljUXQfv3Ct35PATu8dntliqHZXWmsjDKbdX5QNf0oMHeVobp7q28omlN0K1hyIjly2Mh6PMiHPP5YsStHYSMq9HCXBH3Xn/aJ ChCz6SvvhquYP2s7qWyeYAR3f0dXOg==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.centerworldgift.com/c?x= ZvkObWXDhL n7vuuNaTDCcHRPkqY8kH6Oyc4iu9M2E=&c=sQK Yv7WYixfSDeGWMuODYSmA7EEmzYiCXAFLutVmQfn/mRcT615ZmCaC92xfZFfx1bobK/GG9ui7cIO/pE8OfkZ2MTQqSEquDp6vuihIZnh7doOMD7wOdxIxuA1L EcjUz2WQpIpPJQPeFJBqguBg==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.tagvaultsclean.com/c?x=V7zhyjkxycWUUobtQ FnqO6x22v0dbLzIiI0mAN V8Y=&c=SEUGM2btNXnSDAQkwozril6Nwmz0/ZIt9DcYH3D8LKxzwYvPbx5c1U7hzqbDdBm2tZd p4bAa0RDdJNYG7Sdo86uTMXE7AKWpHhkc6GgLFt3g/PlAvKjKFnruOPPNCnH&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.nowmegacurrent.com/c?x=dUOxidG8khOEAABZhnPoqM9re3VABIOf5lrra6tV0rg=&c=iX6ZwJOUNPnkHk1puu09DvWl6KIKFjb1q3rTfRtn4XlKMZXCDzpwsvzOqeGxrZ0f1NiO2prtxrdh8jen9b7PeFP4Z8mmj3EAREQHPUKqVwHbJdCz vl1xBVqGCoV92sG7Fs3BWW0JCftVsCw pii8w==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.dashdownloadscenters.com/c?x=SS/tNuksLFdjjcz CnYfQzUN 3H0HzpSN41B17gzJjU=&c=/N03/pnl0paMcLtMIoYOXOdyLKrF 5myXq xMvRJiaz/g/pZ21fcR06sb4 4kTh7xiA69ajhOQBVMdVvJcxPKRqjnUxIcUG4nHZct/VKrHPD9PnsLeVi0xzBuC5H87GkqaCzr1aTN1/WmHFz1cttMA==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.dashdownloadscenters.com/c?x=ew92HzAWQLe9yBla5KxFYfxCP2VIpEgwzDYmqQRNI18=&c=7cVb9I5x4RE5ODIXkahJHSXv9uXaSmecY99qxxJtIu161ib OhNIj7dKezwcbjXnerWmady7U9oscTRGIgwGvX6ge8uE6mDExmOGZoj895sIe3uJi2RxLH 3 0yC9mYaKLHh6rTWn8JqOCLWs31ZQQ==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.dashdownloadscenters.com/c?x=JxtDrBNHgLBnTJQugc3WGHQQ3lZaybyXQvfibKGs Mk=&c=1pP4FAJ632 g3 Bi8TKVV6ij6Q2YYRCJiXwh7pYp u5wdy5t98H9ZqhxSMXTLimd3u/nKYe8wh AV9ILR8H1mMdl3CZ7vfDSiNjywQRw2dZUgjDybA5ZNk6kkqd3cAzBnTlxidRxz KyGj/QaT4jHw==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.dashdownloadscenters.com/c?x=CnEMxvJjhORC/0jetFkRMBopbKvI/M06N9vKtOXcyRE=&c=4yn fpGGcW2GrbH0ocTNAAMXSvvfg8Sc0bzDNhRqd 0MGmd4DICln6WicC4I5U9E6MnJLSUABTIdGGE6zDsmmuB/S/flVoItRHoOmpGGZ1ZmJz7e9Xw2udlhaZw4KglxTlr1HdNhex4p0IYq9FSftA==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.dashdownloadscenters.com/c?x=lFLBJJ2Ls4sW9dJyqG1HlQB1VIJUF2 vEUXARYUulI4=&c=2EHGQ4zW3MDLuG2sAEfwfCmH89vVsDTH3PCxHWJ30DnauU9ud IyBebMR6sbecQuNm59M7BWMHkssb/YIdPR6alIDLTp/irodV57a/4wJCT4UJBWYLA3Jzr9aLUYXjJSQ9B3KjNaGhB6BLjbYu74Kg==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.downloadsendtours.com/c?x=BYzq1dsTgPSXGNIgTxjJ3yA5jQa/9fG/O2Pr3FFe0uQ=&c=D47vVNgtdUKSp1l0FnPWS /Ik02FzafBlE0YNzsiSjgxpzdK8te0l9J8L/1om6FbxEXM BePU0X6lGB0bwu3cVPQdbd88W7jF6KS3i3SL5GIpvNXUwffiNT GmQy5M0cVRL6jazhy7bfBJr W2XS5g==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.dashdownloadscenters.com/c?x=7qYx1JgNpC/hVZuvzbGCKNZ5V6pbsO1TKR5FXxk M3o=&c=EEvwhau5l8qNBL12jdGv7FIMcptnbxPochrjhlMP1mBFMBR9xLzAJB1lPcO/qacXeHbVbV15nt/4TzzNRAo0w8YEbZ6TWGTK2GdvgdbosC7OadolN7S/0Uemi cyown e7q5fBdSpSIDLBD38BMawg==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.softwaregiftconecpt.com/c?x=m4i x3Yovgn6vjvdZbLtF9Bl0cZKezPVw55AzILTwuI=&c=NDum1dvhiySqboCdYGcQT9jDrPU2ey 7bFY7CaJO9i1bdzY8e651vptGKbVuBha7LT57Faa6dc17JSTDT2xqOcPv0SzodEvvyclrYRETG3XpZm0j4JrbErEmQRygvYAPx7rt45O54hgrSWh1wu00sQ==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.dashdownloadscenters.com/c?x=EkRn/eT0wpxCjUGIjhwRR2Q/62nW2IIMW6NKdqCnwj8=&c=a5CJ6XpzaNWPm1R 0tQN6Cw2dRoZtS9qvpRo6K94TgpI8SqI7mJvI6AZhLa08r45BnGls303OokaInGUY0zQgOkjxvT48XjwguBFw QPBb2vDKlwt cdt0hyXKtrs54zjqpNGbaqIn8hmXoZKQ5Sew==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.tagvaultsclean.com/c?x=dIExThGsUnf6OQj/WoCBwb8hlaGXwt3Bxd4EQdMLol8=&c=R7cT39WpeChg2yHrawotQwyBVA85In9tGVYV0QIecWENWbWU1og20vB0vdS72gItB0WLjKrvlhlAKf6hERjMN55zhMyvwp0PFypcLfdSyc8K1UYQ3W1CkegKuiULqHBp&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.cleanheartuniverse.com/c?x=aO9KjJxg2RlfxZT/JHIrU11hhraBL2IF5Y4NiqC DO0=&c=Kj hID9 u5HtkLW OXXj1iMKK8OyR cXFOJLvcih6b5c1UzExbHrStSF7nKdJ4mMR7r2/g9ONljwzaDgn6jcJPGzwdyyvzpojbZnvSIoWzhKdC Q5RBW7jywP N8s5Sw8bwd6hD6BiyF/19NWU6/2Q==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.dashdownloadscenters.com/c?x=ZnzL5t919X/IHenn 5M9hUAKmzDRJ8I5DsnLlsErwsQ=&c=F83snQBzBr4jUH35 ZAPV6VY/9qFVsuu20UvQLNH4os4yK6K987KtdhOl0Szji aNWSNvVOSG/JGdhnkdVPXdefgUnDscyhbVphThK0L nwk1ASuo9WumC1XXGGOhqRQeuWpT2aDlHIT2NWa4JIkVA==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/42.0/win64/.../Firefox Setup 42.0.exe&downloadAs=Firefox-13108-dp.exe

Remove firefox-13108-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.