home

31699090_stp.exe

Firefox

Mozilla Corporation

This is a setup program which is used to install the application. This is installed with Mozilla Firefox 28.0 (x86 en-US). The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
Mozilla  (signed by Mozilla Corporation)

Product:
Firefox

Version:
4.42

MD5:
6fea8274b62f29da465d0a991054aa72

SHA-1:
19f004145d2b66b69170048b3ac38d142ba56125

SHA-256:
57ef8f7af4ab3b283f7f52cdeaf21a413f729d8250edbfc94f800fe95cf90511

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:32:25 AM UTC  (today)

File size:
22.2 MB (23,288,584 bytes)

Product version:
4.42

Copyright:
Mozilla

Original file name:
7zS.sfx.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\31699090_stp.exe

Digital Signature
Signed by:
Mozilla Corporation

Authority:
DigiCert Inc

Valid from:
9/16/2013 7:00:00 PM

Valid to:
9/21/2016 7:00:00 AM

Subject:
CN=Mozilla Corporation, O=Mozilla Corporation, L=Mountain View, S=CA, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0511EAF8579E2662BE622DE5AE0CD408

File PE Metadata
Compilation timestamp:
6/14/2013 11:50:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:06Mr6+HD9iW70M4u4I8On+VBE3qqLotEG1dLdwCaAp2CYaY+lgjd9voVuvFd3n:umrW70MMM+WdLs1dL/O+lgR9gMvFNn

Entry address:
0x21DE0

Entry point:
60, BE, 00, 80, 41, 00, 8D, BE, 00, 90, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Entropy:
7.9999

Packer / compiler:
UPX 2.90LZMA]

Code size:
40 KB (40,960 bytes)

The file 31699090_stp.exe has been discovered within the following program.

Mozilla Firefox 28.0 (x86 en-US)  by Mozilla
Firefox has established a reputation as one of the most innovative web browsers in the market.
www.mozilla.org/en-US
4% remove it
 
Powered by Should I Remove It?

The file 31699090_stp.exe has been seen being distributed by the following 39 URLs.

http://filehippo.com/download/file/.../

https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/25.0.1/win32/.../Firefox Setup 25.0.1.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://cdn02.rada.vn/data/soft/2013/11/.../FirefoxSetup25.0.1.exe

http://fs32.filehippo.com/3682/.../Firefox Setup 25.0.1.exe

http://filehippo.com/download/file/.../

http://downloader.ez-download.com/download.php?id=f50f27ee9a46be299726aa8dc8d3836e32422266&z=1&p=eyJweSI6ImV6IiwicnMiOiJnb29nbGUiLCJydCI6InNlYXJjaCIsImMiOiJ1cyIsIm8iOiJ3aW43IiwiYiI6ImNoMjYiLCJ1X2lkIjoiZXpfNTE1ZTA4YTNiZDNhMjQuNzExODY2MzIiLCJwYV9pZCI6IjEiLCJzdF9pZCI6IjAiLCJzcF9pZCI6IjAwMDAtMDAwMCIsInRzIjoxMzY1MTE3MDkxLCJrdyI6Im1vemlsbGEgaW50ZXJuZXQgZXhwbG9yZXIiLCJjdSI6Im1vemlsbGEgaW50ZXJuZXQgZXhwbG9yZXIifQ==

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://soft.isra.edu.pk/files/.../Firefox Setup 25.0.1.exe

http://i.download.idg.pl/fannef/9b1877245033b7c896a9dcb76a236d82/57154333//vol2/w95/przegladarki/ff/.../Firefox Setup 25.0.1.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://downloader.ez-download.com/download.php?id=4b8266b51f0b79677dbe30d0bddd25de26ff23b1&z=0&p=eyJweSI6ImV6IiwicnMiOiJnb29nbGUiLCJydCI6InNlYXJjaCIsImMiOiJ1cyIsIm8iOiJ3aW54cCIsImIiOiJjaDMxIiwidV9pZCI6ImV6XzUyOWZmODE2OWE0OTg0LjU4NTYzMTQ1IiwicGFfaWQiOiIwIiwic3RfaWQiOiIwIiwic3BfaWQiOiIwMDAwLTAwMDAiLCJ0cyI6MTM4NjIxNTQ0Niwia3ciOiJtb3ppbGxhIGZpcmVmb3giLCJjdSI6Im1vemlsbGEgZmlyZWZveCIsImNhIjpudWxsfQ==

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://downloader.ez-download.com/download.php?id=4b8266b51f0b79677dbe30d0bddd25de26ff23b1&z=0&p=eyJweSI6ImV6IiwicnMiOiJnb29nbGUiLCJydCI6InNlYXJjaCIsImMiOiJjYSIsIm8iOiJ3aW44cHQxIiwiYiI6ImNoMzEiLCJ1X2lkIjoiZXpfNTJjYzY3YTc2ODA2MDcuNzA4MTI0MDYiLCJwYV9pZCI6IjAiLCJzdF9pZCI6IjAiLCJzcF9pZCI6IjAwMDAtMDAwMCIsInRzIjoxMzg5MTI3NTkxLCJrdyI6ImZpcmVmb3giLCJjdSI6ImZpcmVmb3giLCJjYSI6bnVsbH0=

http://downloader.ez-download.com/download.php?id=4b8266b51f0b79677dbe30d0bddd25de26ff23b1&z=0&p=eyJweSI6ImV6IiwicnMiOiJnb29nbGUiLCJydCI6InNlYXJjaCIsImMiOiJ1cyIsIm8iOiJ3aW54cCIsImIiOiJjaDMxIiwidV9pZCI6ImV6XzUyOGZlZjYzNDM0MTY2LjI0NjIxMjE3IiwicGFfaWQiOiIwIiwic3RfaWQiOiIwIiwic3BfaWQiOiIwMDAwLTAwMDAiLCJ0cyI6MTM4NTE2NDY0Mywia3ciOiJtb3ppbGxhIGZpcmVmb3giLCJjdSI6Im1vemlsbGEgZmlyZWZveCIsImNhIjpudWxsfQ==

http://downloader.ez-download.com/download.php?id=0b9477df1fb5c88fc05fdd1ce0dbae3f33d63c40B&z=0&p=eyJweSI6ImV6IiwicnMiOiJiaW5nIiwicnQiOiJzZWFyY2giLCJjIjoidXMiLCJvIjoid2luNyIsImIiOiJjaDMxIiwidV9pZCI6ImV6XzUyYWRmY2E0MGI3YjQ3LjE2MjYyODAyIiwicGFfaWQiOiIwIiwic3RfaWQiOiIwIiwic3BfaWQiOiIwMDAxLTAwMDAiLCJ0cyI6MTM4NzEzNDExNiwia3ciOiIwcGVyYSBicm93c2VyIGZyZWUgZG93bmxvYWQiLCJjdSI6ImRvd25sb2FkIGZpcmVmb3ggNiIsImNhIjpudWxsfQ==

http://download.mozilla.org/?product=firefox-25.0.1&os=win&lang=en-US

http://downloader.ez-download.com/download.php?id=4b8266b51f0b79677dbe30d0bddd25de26ff23b1&z=0&p=eyJweSI6ImV6IiwicnMiOiJnb29nbGUiLCJydCI6InNlYXJjaCIsImMiOiJjYSIsIm8iOiJ3aW52IiwiYiI6ImNoMzEiLCJ1X2lkIjoiZXpfNTJiZGEwZWQ2Y2YzODcuMzg0NjQ5MDAiLCJwYV9pZCI6IjAiLCJzdF9pZCI6IjAiLCJzcF9pZCI6IjAwMDAtMDAwMCIsInRzIjoxMzg4MTU5MjEzLCJrdyI6ImZpcmVmb3giLCJjdSI6ImZpcmVmb3giLCJjYSI6bnVsbH0=

http://downloader.ez-download.com/download.php?id=65c0fee9d122da246a8b965859994a415da86b32&z=0&p=eyJweSI6ImV6IiwicnMiOiJiaW5nIiwicnQiOiJzZWFyY2giLCJjIjoidXMiLCJvIjoid2luNyIsImIiOiJjaDMxIiwidV9pZCI6ImV6XzUyOTk3ZmIxNGUxNjg5LjkzNzc2NzIwIiwicGFfaWQiOiIwIiwic3RfaWQiOiIwIiwic3BfaWQiOiIwMDA0LTAwMDAiLCJ0cyI6MTM4NTc5MTQwOSwia3ciOiJmaXJlZm94IGRvd25sb2FkIiwiY3UiOiJmaXJlZm94IGRvd25sb2FkIiwiY2EiOm51bGx9

http://dl.revenyou.com/Files//Setup_product_3067.exe

http://downloader.ez-download.com/download.php?id=9527e2a6879911e89a89c8977cfd2a9681f77e59B&z=0&p=eyJweSI6ImV6IiwicnMiOiJnb29nbGUiLCJydCI6InNlYXJjaCIsImMiOiJnYiIsIm8iOiJ3aW43IiwiYiI6ImNoMzEiLCJ1X2lkIjoiZXpfNTJhY2RkMTU3YTMwMTguNDk0MzM4MDQiLCJwYV9pZCI6IjAiLCJzdF9pZCI6IjAiLCJzcF9pZCI6IjAwMDAtMDAwMCIsInRzIjoxMzg3MDYwNTAxLCJrdyI6ImZpcmVmb3giLCJjdSI6ImZpcmVmb3giLCJjYSI6bnVsbH0=

http://dl12.afterdawn.com/download/b4aceef7a6a7a1181cb061c38693ace3/52fe796f/.../Firefox_Setup_25.0.1.exe

http://www.afterdawn.com/software/.../download.cfm?version_id=72404&software_id=603&mirror_id=0&installer=0

Latest 30 of 39 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.