home

firefox.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from viettel-ca.vn.
MD5:
3fc35407ebe87d2368fd9fa8eb017456

SHA-1:
863a8991855b8222ab28e513b8e1f5d250ab1b5f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/8/2024 12:26:18 AM UTC  (today)

File size:
17.8 MB (18,612,233 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
2/15/2015 3:00:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:gsYFiAjhx1jkV1bXy62ger9FBdpLmYwJWApJqcI7f83LgcSpSwWVH/Q:gvFiAXVWbXHmHAp0JCkclo

Entry address:
0x1D7CB

Entry point:
71, 07, 4B, 8D, 3D, D2, 1F, 14, F9, 8D, 05, 23, 0B, F4, A4, C6, C0, 41, 8B, C2, F3, 86, C7, 8B, F3, F3, 8A, F5, 49, 81, C5, F9, 36, 00, 00, FE, C7, 85, EB, 29, EB, 81, C5, CB, 8E, 00, 00, F3, 24, DC, FE, CB, 1C, 84, 45, 88, EA, 86, E3, 81, FA, D6, 2D, 00, 00, 74, 06, F6, C2, 57, 46, B7, 2B, E8, 00, 00, 00, 00, 77, 02, 84, CE, F6, C3, 33, 71, 07, F2, C6, C5, B3, C6, C6, 3E, 68, 7A, 0F, 00, 00, 69, EA, 5A, 74, F2, CD, 3B, F6, 5B, F7, C3, 39, AE, DF, 16, 87, F0, 69, C3, FD, 98, 91, 2B, 81, F3, 41, 04, 00, 00...
 
[+]

Entropy:
7.9986  (probably packed)

Code size:
162 KB (165,888 bytes)

The file firefox.exe has been seen being distributed by the following URL.

http://viettel-ca.vn/uploads/file/.../Firefox.exe

Scan firefox.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.