» firefox setup stub 27.0.1.exe
Overview
Analysis
File Details
Downloads (8)

firefox setup stub 27.0.1.exe

Firefox

Mozilla Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from firefox.software.informer.com and multiple other hosts.

File name:

firefox setup stub 27.0.1.exe

Publisher:

Mozilla (signed by Mozilla Corporation)

Product:

Firefox

Version:

4.42

MD5:

6a82b316a8cf8e9cf4308131902bed3b

SHA-1:

deebf12b41e86446594afba1207a8928a193d27d

SHA-256:

4215f1a2036510314d0ef818dfbe8bf5a066813ce296eef4b42c47faa37f6b16

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 4:49:44 PM UTC (today)

File size:

276.2 KB (282,840 bytes)

Product version:

4.42

Mozilla

Original file name:

7zS.sfx.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\firefox setup stub 27.0.1.exe

Digital Signature

Signed by:

Mozilla Corporation

Authority:

DigiCert Inc

Valid from:

9/17/2013 5:30:00 AM

Valid to:

9/21/2016 5:30:00 PM

Subject:

CN=Mozilla Corporation, O=Mozilla Corporation, L=Mountain View, S=CA, C=US

Issuer:

CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0511EAF8579E2662BE622DE5AE0CD408

File PE Metadata

Compilation timestamp:

6/14/2013 10:20:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:FiDTPIs/I5bDbBUVfkmwoCsw+QT1kVM5R6d+FKJUiB4nZROOkSqF2Oq:0TPIbbDbBUVfkmFDFO1D6dRJUhnvkB2/

Entry address:

0x21DE0

Entry point:

60, BE, 00, 80, 41, 00, 8D, BE, 00, 90, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75... 
[+]

Entropy:

7.9053 (probably packed)

Code size:

40 KB (40,960 bytes)

The file firefox setup stub 27.0.1.exe has been seen being distributed by the following 8 URLs.

http://firefox.software.informer.com/.../

https://download-installer.cdn.mozilla.net/pub/firefox/releases/27.0.1/win32/.../Firefox Setup Stub 27.0.1.exe

http://www.capitalheartlaboratory.com/uifp7MsgXE19Xas359jahVHr3otLSWVzo 8FN1n3G_l PzHvzdccImuedMLWYMUrxLV5YO4Ei4c5btgVzhq1UQAjxIEpDqsA8yK0mZHo2pOL4v8B8V7ljTufEAYQ3ifJRiwepe6RkzSEoL0l4hYcOXvz6NaD0mX7pRhOhUUok6bL_HplsLyS5SNstp9lWnhgU1Cr_movlHEdHEx9ey PVMN3G1AkHBHjmAWm0ig8wkYWbdAqYlxSjHWYvIdpKGyG1I8nYx_w3aDaSP1YSzOdikB xHJcTOms6pI_6erdXxYNzqhKgeZC8fx5QqwgsBSaPwaXRogFEssV1H1JSCXLLrtMSDyTfpPlkcAkYL4kls 23t14YUK923it7Sgxlz0Ky6R 19nk7vINzhbm5AlvMWTfQaLADdmgdDne9PJ8PcBe82a2bCCEfyWShZbq3CWsG9mJaWDtGZ4blx3OhAv6XtlFYlY2Gw==-G28AAMRmW6qE8nfvG0yBGcormxbGFKaOceBwbYtcAw5ggw6Tw fLmOQrM5LgkloxbQ O0 ESMhM1GaX48ns5NnQs_G5fB83brrQwRS0rRLOmkIb9Bg==-e

http://www.capitalheartlaboratory.com/phpzV3pystrH0jFcFaAOZEoToE6c6l7r0Gxw5tSHTNiDviXAsxGXBxI8QcevANtwvSqfg41KwcujhergAYD6iJpQ3vhYte4rIUKc7MQM7A282ebkbpt 1czsmFdp7bsvkHNdwcBtUJmvSBiUfeS7slx0GLq02jvJmEDdj5WFBKSZ9RIHnNTtLE5RhFVpnX6alZQfbNE8hulnrz_DL1q8mBSpVKAhrqsnWa0cXZ6V2LeZbWh6ybreMwDOSTwsm9s1mKcU0164Dc_YFfNNn7qcb0ZDBptQiIJ3xOl2A5VUwEMMBpSzrj Rv_hP7K4gA85O1aE2W8DXX0PTf1hWny0bt6Qh8acfxtkKFk1Cni QIzRzaZgrWzAyXqDKh5my8Z9YHo9sik7UEFVQSPkhp2jX4dzo4O_fyhKGsjpDyy4Q JiMuv6y_d2iwbTwBmyfAMlfKNajPTekFrFd_VRKcGZjUX2wRKL8UA==-G28AAMRmW6qE8nfvG0yBGcormxbGFKaOceBwbYtcAw5ggw6Tw fLmOQrM5LgkloxbQ O0 ESMhM1GaX48ns5NnQs_G5fB83brrQwRS0rRLOmkIb9Bg==-e

https://download.mozilla.org/?product=firefox-stub&os=win&lang=en-US&.exe

http://www2.ati.com/.../13-12_win7_win8_64_dd_ccc_whql.exe

https://download-installer.cdn.mozilla.net/pub/firefox/releases/27.0.1/win32/.../Firefox Setup Stub 27.0.1.exe

https://download.mozilla.org/?product=firefox-stub&os=win&lang=en-US

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.