home

download.exe

7-Zip

Mozilla Corporation

This is a setup and installation application. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Igor Pavlov  (signed by Mozilla Corporation)

Product:
7-Zip

Description:
7z Setup SFX

Version:
4.42

MD5:
2d6b119609b4ff96f552b1d6247eefce

SHA-1:
53af359d5dff8adb23b3089bf0d323479ea11825

SHA-256:
c9dd16881bbdfcfbe92c77c77d7707de44af9c148335196f52f9015632fc926e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:04:11 PM UTC  (today)

File size:
43.1 MB (45,190,736 bytes)

Product version:
4.42

Copyright:
Copyright (c) 1999-2006 Igor Pavlov

Original file name:
7zS.sfx.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\download.exe

Digital Signature
Signed by:
Mozilla Corporation

Authority:
DigiCert Inc

Valid from:
7/9/2015 12:00:00 AM

Valid to:
7/13/2018 12:00:00 PM

Subject:
CN=Mozilla Corporation, O=Mozilla Corporation, L=Mountain View, S=California, C=US

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
09E65AD807B8497B0749D41568D626D0

File PE Metadata
Compilation timestamp:
4/17/2014 5:29:40 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:lhGU42EZatJdy9zbzBB0pfqliSMv5MuJ0DeRG5IGOoTCJFwaWlFDHG8insFxVZle:fA2EQX85z/0pfYoTMeRG5a2ayFDmTqmB

Entry address:
0x21E30

Entry point:
60, BE, 00, 80, 41, 00, 8D, BE, 00, 90, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Packer / compiler:
UPX 2.90LZMA

Code size:
40 KB (40,960 bytes)

The file download.exe has been seen being distributed by the following 23 URLs.

http://lb.cdn.m6web.fr/d/c/a/1e2a6a8c05a072569ae63f62072964c0/5783de95/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://lb.cdn.m6web.fr/d/c/a/053d564c94d7be23d84610c8d51e3ceb/57a20b1b/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://lb.cdn.m6web.fr/d/c/a/4bc4f86b1621e82748bb5768b3ecf915/579c5f3e/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://lb.cdn.m6web.fr/d/c/a/acc33fb53902f3f374a448a0067947df/5788ba42/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://lb.cdn.m6web.fr/d/c/a/ae7661ac27a0375ad87d514d09f32ee8/57818d91/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://lb.cdn.m6web.fr/d/c/a/ed32a59b8cdd16a5e6e6e47c42d9dd49/579c7105/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://lb.cdn.m6web.fr/d/c/a/92f536099a8d236559a5d355cad8a655/577e0006/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://lb.cdn.m6web.fr/d/c/a/10c23cfd01922b4cd8bf969922911405/5793456c/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://d210.cdn.m6web.fr/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://ec.ccm2.net/www.commentcamarche.net/download/.../Firefox_Setup_47.0.1.exe

http://lb.cdn.m6web.fr/d/c/a/f4efd51f74e0df8ac1a2e2bb68e72a05/5788016e/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://lb.cdn.m6web.fr/d/c/a/487c008a6374a8cbc7684e2afefe96b9/57a866e0/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://lb.cdn.m6web.fr/d/c/a/494e6af21e6dd37e93e709c5939b2ba8/579139ed/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://lb.cdn.m6web.fr/d/c/a/32e0144d6e59cb5569047f552abb010a/578b881a/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://telechargement5.pcastuces.com/temp6bs2/.../Firefox_Setup_47.0.1.exe

http://d110.cdn.m6web.fr/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

https://download.mozilla.org/?product=firefox-47.0.1-SSL&os=win&lang=fr

http://lb.cdn.m6web.fr/d/c/a/3b990b103a407ae343425cb867da6d26/57764288/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://lb.cdn.m6web.fr/d/c/a/4a47a51f11e73c346adc095d9ebcabbc/577d2bd5/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

http://download.cdn.mozilla.net/pub/firefox/releases/47.0.1/win32/.../Firefox Setup 47.0.1.exe

http://lb.cdn.m6web.fr/d/c/a/9e2332952c13cd87af7628ea9ac49da3/57767f11/soft/.../mozilla-firefox_47-0-1_fr_11003_32.exe

https://download-installer.cdn.mozilla.net/pub/firefox/releases/47.0.1/win32/.../Firefox Setup 47.0.1.exe

http://download.mozilla.org/?product=firefox-47.0.1&os=win&lang=fr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.