home

firefox-dp.exe

Program

dobreprogramy sp. z o.o.

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application firefox-dp.exe, “Program Setup ” by dobreprogramy sp. z o.o has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The installer is marketed through download protals and search ads as the free Mozilla Firefox web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Application Web   (signed by dobreprogramy sp. z o.o.)

Product:
Program

Description:
Program Setup

MD5:
3ec02937e2c089312b38e9134b9df7b6

SHA-1:
acab117e29af40ce345e274bd643fc6b822483ab

SHA-256:
6c71ef8d8773764af99238ce712e3a058f00c77411e26b0dd4cded03bed7b713

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
6/18/2025 11:10:17 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.dobreprogramyspzoo.Installer (M)
16.2.3.18

File size:
821.5 KB (841,232 bytes)

Product version:
3.3

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\firefox-dp.exe

Digital Signature
Signed by:
dobreprogramy sp. z o.o.

Authority:
GlobalSign nv-sa

Valid from:
2/20/2015 4:15:48 PM

Valid to:
2/21/2016 4:15:48 PM

Subject:
CN=dobreprogramy sp. z o.o., O=dobreprogramy sp. z o.o., L=Wroclaw, C=PL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121E43E26D353CD92710BE588FC941CCD7E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:V/EGltuac9+H7spHv2EzOP88El3M9NGmBKo/aplPXcuD0EgNc3O72ZfwT2+pHTEb:V/ESAau+wsh0dwciqU192p8NTa

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file firefox-dp.exe has been seen being distributed by the following 17 URLs.

http://cdn.goodsoftwarelist.com/c?x=fQUO uFIya5TmsHGD6QD1cDllkpqtA8vRyAOxnWsn/k=&c=kBjXe02NUhF2lxfbwl2TvAyZfi/tg/ykqfABesRfVDcPjoHG9I5RkMmeP3BVep0rFkNTLzznIC7RZ1ep2Pcn DHjRIvabx5DNQSOAQzlHVu01rJOk20 hWdOG4m28xMS3HviVTLPCTKoVXfVKU4L/Q==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.goodsoftwarelist.com/c?x=zuRpE4UKupb1 E/wa/k3WQsv27W0v5nv/wDUQPpjO2E=&c=c7MXPIqvPNLnXHqNqDCLYz67yI 1Aylsfly8mI7/CiqwKdC5zTpvTHdJO27I4CT9tf axbgTKMEqIxqv73jprXUlj6mW4qnSG2ehDL/FnivQSZWUQ7aHsvMe0zSPev8CjUnYNwzsaGQDYeDk0mqwMw==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramydownloadfiles.com//c?x=7Gsb1fcPOkMCAriZlPzk/8 F9G cSytTKQZqwptXJ9Y=&c=l6i4o7xVppC6aljhQrStclQ32jpI/h3NrokbprDsT1tyW9aDJ4iYcXglTmKfH3LsUQ7Ko IiqWxB393SiKukwvP2DOmWBzDX8v3zvArdIAFMRcvzFL3c00 Pcexrg9yBL46vwaTOSta2utsm2QdhCQ==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramydownloads.com/c?x=Et8e1v7lvuI QRTee4uorY0HxJ9AFt88RKWGUgvccWk=&c=Ow6 lsW9EqQ3PNM17Ip7zXMwHggYfUjHXQin1tBnMMNEablXoq4wU/XbXImTJ/XDoQ5N156xuyj3JW 2zmhxkHngMO2Zy12EBnloHKY9w6LMD2IWao9PzURayDALPMpehvP4NJ7k237 TmxX4m8A==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramydownloadfiles.com//c?x=A1Y7RrjF5ZsdMAxxiunrg7x7DN4 8XmdMN93tFoWZQo=&c=ZG8auFLimIx2v377KdoLmmmSckfBiS8srfBHoXQ4PrVlT9N7h5wC4C1WQ44jAzy jv7KvNpz64YQY6OWEbRme nbD0q/MC9DbMIY kcv1dDQ6/6Emo/uhWCbt0QMaOEVmiRALCLzN3f68YnByZFzpQ==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramypldeliverydownloads.com/c?x=2lACKSvLaJGPpykUc1lFouECyfIXHiNYvBsHVLcBB c=&c=xjO7BPppUorxQnoRlNaKXPhdFCL60keFpAcSwqSGyt37dtVweqDZXwhYbTwJzlTh3/Z9U4/K0OxrlXxodRcC4OM/JWQuWlqgaNPX4U8QLXdFYLgjxgFq/xZh//8ic u6RgDBx LkD6qxTi6aR0A10A==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox-13108-dp.exe

http://cdn.dobreprogramydownloadfiles.com//c?x=WNIudCPdvdchE7BxvFu8HX20CsKsorx6MWp uM cyXY=&c=mnoRyY/uUXpdv0NZs8e497XBHElFS4MS7rg/JqZ2J 8jEzD96/clK77jZkn9LAW6kzXPrjRsxXHQfuR/7odE611pDcK E RXJ9LuO46xvjVugoGq1AgDr2u7w86DaqR1TH/eXA1WUDR8rqNsNVLgsw==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramydownloads.com/c?x=8oROCtli9l4bvYxFrqn9F9Q2d7zk KVl3HCn48cZpoA=&c=RfjqOijQDkbgvYpYL9gPfdpu7bPp2EAUBPtWbGot6kf2CIP4EUYsWh6pnZNtjSMCaAlgokUV4QpXsWq/KkzPdJsxNazGwkFgFYaFE9KjmM4Dz9nh eO1CJusdKcm66cxisgnDxdxm42E3QgxB IA3A==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramydownloadfiles.com//c?x=JJORFdQS1c/N8z87h/b5AsRmE0zorgITmxDRBB3W3Po=&c=TKgxvF4LQYMFFSfF 1vGN8I3Fi3fEozaIgPY7rpdjilXdZaMIeYh0mrMR3TzIKYjqg35qvxs5t6giCao5OgrCu6BMs5m1TPp8ZW3L76H24VECD2NcAPaJUeZFKgHjKxpCBsLgO2VG7TqUd4yeSWiBA==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramydownloads.com/c?x=8J2vzqeNVJG03a0IvEKOJXOo4niE0D7Vi02RxDk0B7M=&c=46ZFxvzokDyz20 ibmgBykCb5TlperYb7GsHDUA1hxiVCFV4MURlQ9FCR34cSzlqe3rr5UWYSvTNeZj ZOHl9gwoQW1TkJ5zXj1Fg1YMSHXyRHJPJ2M/UDsB6w2r6nwOAyU2724PXkRUrUi8HAJA8w==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramydownloadfiles.com//c?x=A1Y7RrjF5ZsdMAxxiunrg7x7DN4 8XmdMN93tFoWZQo=&c=ZG8auFLimIx2v377KdoLmmmSckfBiS8srfBHoXQ4PrVlT9N7h5wC4C1WQ44jAzy jv7KvNpz64YQY6OWEbRme nbD0q/MC9DbMIY kcv1dDQ6/6Emo/uhWCbt0QMaOEVmiRALCLzN3f68YnByZFzpQ==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramydownloads.com/c?x=voze9R5ddtmETJsoNgjceg2RQUsWy/uR8nOlwgTv208=&c=JZbUlKoPgh4Qc5jJmFyOoeHRfWIXeG35OZ7Qq0 kdWAKFn2Ka9W/n0TkjaaTyesPd6PmQDdBqJMYfXeWgQ7qEapRluoxTHA8khYGjx3k/LO24/J2i37dBCW3ZMceuNkDMAMWnIuoI4UxS7GR63Uklw==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramydownloadfiles.com//c?x=LwdyNpnofMKTTdTciHuzMVj7XvljnraI hdqqdfsoQM=&c=jpKS5Ja7l5s XpDifyKWm7NIlvVyyUxW2Zw46DC GNPqnyL0tSqHu197Ls73UPtBjv9QIDhT7Nn7Dozit/mPXUyU15 2 BwbbI8sLVxM3KDSlojzCM0dIGE2JwOfwIYkjXqbJm6HISOOghL6h5EXw==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramypldeliverydownloads.com/c?x=ynz ib49V18ty0HYzEd90vi72INDUDRzCD1Qu/ZBpwM=&c= YNB0uWiQcpF66RohyFifRVjeaeXjbGGAV/RSumiDSYeEETSYSBX8Y4zzUhMYDffcTEaw1AA 8LCbyRSDg1LfyCTzrA8eYZnRo5TB1EJuax3LyAZOld382Op0nGhb9PL Any9oRTkViad4A8Hkplg==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox-13108-dp.exe

http://cdn.dobreprogramydownloads.com/c?x=/ G/3QbtLkjjzKvaPhafkwaZEEUCRjyYiLXHi2RnhtY=&c=dJVc3Ti1YSBgx/KzhpLQI4j/s3bidn3jY0gbeC7EDJ2a67MRK7i85GnRKkUoT6QtmYjKKu2ELwrpBdkiiAXfziZPL66C7LJ4Pg9sPZMFqFOqnFZ4L6 l2mojfvac1URIyNeQTjOMjeslAH6WEZhHDg==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramydownloads.com/c?x=bDlSveDVeUNan7QgJ0aUXhEe6lYsROzao9S87oztzPQ=&c=PVY48wmrXY72GiSSt9WXxxopgThFxyvB/Aq7W1f8Ga4tJ3rssvIuu4f2XVFavm1LjbAKedY9X3UTH0hjBIaqLxR2iEmQXzrrNhGfApWtIe7f//3aV3IKzuongvRbWEOk/fjRPkpVjl2fQeHQiaKtaA==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

http://cdn.dobreprogramydownloadfiles.com//c?x=Xb9fVvGfp6astnX2VwYfHvcYE/e03Z1F3770U7N6xRA=&c=WP5N1e6KUyLDv 5qqIHF8/pgQxSj7CxxoCZSEYim drYcHFoRs1089fKmAzFLqK2ydmTuiPsjHIEexSO L qJ71TewHAa/BV2RGb7iOQqnzJcQfyjgLIrg6HVl8RDcmmP9V2LdwbxhuMLrXAWMEeEQ==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox(13108)-dp.exe

Remove firefox-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.