home

firefox_setup_21.0_fr.exe

Mafelobes

MICROMAX STUDIO, S.L.

The application firefox_setup_21.0_fr.exe, “Mafelobes Setup ” by MICROMAX STUDIO, S.L has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.bundlessignscurrent.com and multiple other hosts.
Publisher:
Bemadetuso   (signed by MICROMAX STUDIO, S.L.)

Product:
Mafelobes

Description:
Mafelobes Setup

Version:
4.1.5.1

MD5:
e63c0177d0618f722114d775ae959b3d

SHA-1:
0fe7247e35b1b4953263c598f70f30b430d5434d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/16/2024 3:35:15 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.MICROMAX.Installer (M)
16.4.15.1

File size:
942.9 KB (965,552 bytes)

Product version:
2.7

Copyright:
Fast

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\Documents and Settings\{user}\Local settings\temporary internet files\content.ie5\{random}\firefox_setup_21.0_fr.exe

Digital Signature
Signed by:
MICROMAX STUDIO, S.L.

Authority:
GoDaddy.com, Inc.

Valid from:
9/1/2015 11:11:38 AM

Valid to:
9/1/2016 11:11:38 AM

Subject:
CN="MICROMAX STUDIO, S.L.", O="MICROMAX STUDIO, S.L.", L=Madrid, C=ES

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
79A6DBFB5606456E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:bW2WIKXCZ/YlZQFk7cZG8K22fs3wUQqoQzfQ4tlK+vJ3Y:bzJVAZU+EP2fCwUPoEfQCK+vJ3Y

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file firefox_setup_21.0_fr.exe has been seen being distributed by the following 50 URLs.

http://www.bundlessignscurrent.com/c?x=Z9lejelJBt7wkGCUg0D bga4IvDKMgO/xKaxuBTToIo=&c=IpGfPeT fzmsBB9K8FKKDyPs0p7ViBZcUGL 1EzW3TWyuSTJjf4uw8fdogrQTpBNV3xUTEvqcCwdNs5D3wmhYDzOan2ukcGvFLSsGorBZiOBfK5RpdGa7KsoEy7essrB&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.giftapplicationsconecpt.com/c?x=c7Cs8hKTI3kabG53U3BvwGZ4yFSQUr7l2/3j/Yc9Gpo=&c=9tmm5iiCRHLH3/uqsyBSyKjbUyeR/mRV5GiNk4ElcXQSqlLLhRbR59 bQv SebDkh3mV1/BkDRh LflgwMFGiOlCPOl4M8MFNuP24lsz5LsO3H7teHw7z84wP7DkKGmc&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.gifthosttours.com/c?x=rNXouBuNu7d6f uAyl iID7X7DydBMATsKE1e1SQqeo=&c=10PZSgJZuN BDrKjc/aOYLNrIGKlCTmjFAku0gjEa3ck9p/HAxHE5dl2eertvFr4hYIx HTU9o/3Onsm/VTv/bLCoXRcOZBtjKaJ9/uPIQvOzi9l7Rag02rh7/7ydIqg&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.safecapitalsend.com/c?x=QrMZv8Ir7ytmFZ2nZhGep0zvN9PZggqU0PJv reiEEE=&c=a2Kt7h3 6O2dxJYzJdeTiX5E80sp/t/KnnBqC qo2nom0vKIUNRz5SsTJkupdilnqBmiTaFJZoL/L6UrfcxCxAn/8SFspGxfZ0v3ERdrv2Fe7vKPH7EnSGj0evEsWHo3&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.packagesharebits.com/c?x=iHP8gruAErZ6XJz14a5tbJJTF0hBlVvvOwC4s3STnVA=&c=c59 wr58clJj3 kmTzX3xHoNP6zELyS9OOBC4C1VSFet2fnppDmUHqRfjSti5M3vk9UPo39oBv V43ZbbvtD6 q39kkTm4cuHlrr5Ee97u9J3Rknk3SStyqIGvZbcZrX&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.packagesharebits.com/c?x=pe9N3fgo6AQ80tq68DGF6PKtGEFuILIy4iqfRzn91qo=&c=cTDThh8SvwLi/ZGkIqH0VQz4wyOrnx95I5aoJtFxHqWNFw14DZMR2VrvlUMyGC4ZTFvNy9kZIoJPBCQ8jfKC3YEPeiQAojp4G QuLTfOi5hbZHklGMznnvF9XEGtep G&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.bundledeliverybits.com/c?x=rrf0XUt9WZlmxT8R6GSenoeKytfzAk2M4epjgS cTmY=&c=8uMsJuubzdnxpIYSVd94VphfJU5w43qlVUzJTDDVbThNsPfhPPAIR2O4thNpXnfclHdvzJGb7O2CvGA9xr4YyCK88QkG8pXCjPNfS/amXUnzdT8Mag2jjtTtuKkBiaZ6&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.bundledeliverybits.com/c?x=NQxR3o1HRLyu3E6Y5073Af36VMi8BWmzgC2mQ3f1Akk=&c=R nhL/aAYT6GX2mp0IXzko5ho kCBMmPATzCvdW58T0oEDDbCSfzEwG1T/UBLKkaK35WXZoNpUDXC/8z7yO1IlN 1EYgobqdWj OjVg2TjGBGetHibIrw3jT6SpR25Hg&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.hostingflashmeta.com/c?x=jq5GzRh7/TdqgGwAGmu9TBfAnKWsaj6PGfrdLI7b 2A=&c=zSx/fpFFDlTB43JrrzlCNb7g/x46QTHj5 sv9wP8S/6 ixjFgGPJ8OEjab5HAwGRQOFMRTZc2BTphNFnCe5ZX0rCMJ7ffsL3yIWDGIj1CauPFrMQBlWng7oJlSOFpH8F&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.universesendcity.com/c?x=mKbRug35cwcI5rwDgy2 yUiF6JfX7ENrZJOMUKUXw8Q=&c=mvhE7NlSsgTd0OtCovwNsF259nvB4RV2XmJgCpw8fGs/CHkzA2WmgiFR8onNakVgcZUTu5EWFfd/lVeTjwWNYh2ss qfTTDkDdFgJx0gAXdQ2ieJL152GDTOYluvYeJq&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.applicationscentertour.com/c?x=gjxh9tMeEFvNEHCYPm8hKvKKOT3KMLKKu4w2uFtlGs8=&c=3WfOSieq77O12A8Vn 29BiZ2S1CVaE/bdAav5yXgb2id5vBWgxT4ricKNgVNXk/uO9cS/Ele8SWdxqoUGKsA0VQx32qHr93z16a9rt27rwhIN2qlYBz1RMGkpBFMZftd&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.universesendcity.com/c?x=hQx8TP67c5onnveaVe/ye2l5OXNuXs1MxtCfJwIZbEQ=&c=BPCDx6w4WWGMWpyLV7P9rQpygV4r9fgtx2x9FlsypNzL47mkQUykNJedkh5oYKolwGcJOzN5d7T28T2qwCGffbSScB9Fdt6pdiL8o/2MHeTd7 V9pWCh/Yh34vmT/WQ&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.contentsignssoftware.com/c?x=Ka14mOixGY8NNjFm/qdsc/TjnmnFI3MuRzRj6DQ1ERo=&c=HJFu6DDR8F/po8ytvjeqh6SWMjnUm5yb7PPE25KQ0erfLP2bM pZVJVVnuowefqNgAWHPOrx0Z3XNUShBEOferiUAPkURvC08J8QyrffcyEnWWC6pEzRsmdpY0ZRTVYU&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.gifthosttours.com/c?x=508BwFtbL0EAni1Ah9WVuGPQ7HKg5eem1aggHRKSxv8=&c=rISQMGXy71c22LWjq2xh44b47snREzf/9yjlpgyNWRMiqh5utR2XvtQ3xypFiOsp1N8xZ00nMNEMArThSVyn6B3dwNyRdtOrAGnGEoPD8XhJLrN/xa259iIIM13iS2vT&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.bitschucklenew.com/c?x=6W3/YiFDQLIjo6Mkmi2YE5a 6706zHQmBextSa/6E38=&c=ucJ6c/dBZyqUHiYguRO29J0uRr5JmhaQFTVuznLoiVBG/5zw4njaA1ixcx7uP3fK1cMsY66lEpTqC/ Ql2S1hRhKsoih1qOdRNvJr44KMf3IRLoy3YZCzNI mS9lUMjf&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.gifthosttours.com/c?x=EzNQJOxXMmJ1IFYwu5z0wBdH9y6XLBRFvnwLgtCeJ28=&c=LPN0EpQ IBPPk7pFLM/WPsT4reBJwINHDGGOMIRcPm8/OAlTucV8x9CRVK3LztpcyFnM8D5pPwOZnHQDw5JdawTabuNxrPGXnjpDBQBVCMYvIRXEOVWta6Ti6S5yPyja&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.bundledeliverybits.com/c?x=9i5HSgYkra Ry9wdQEepJIwp4prKeAxYXYoRUhMPFLo=&c=KZ3kLdu86iSctbxYv6IENz6eg4tb/oUILVq/b1OVY4jFVOjQFYhKk5hsoeuYYpsGrg9hIYxJPJ430BT90h2XEsQJE7V82jwyxAzVQ7rTQRQjkGHPrX4Vj3WHyYECcpEO&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.guardappsconcepts.com/c?x=P9R/hUTor5BrAHAeakb7pV3CZn73fnghK6zwnvL nPM=&c=eTN2UDgPAmvXrA4m8oCUNWOyG2c PufeeTfAg3lZVRDZc/HzSq3QDfo8WYNE237YAAEGeLwdd0c2Hffrq6VX2HgFvf t DuEmIhS9C1zjCHPIsGcSEDAfQ sOVk2v08l&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.guardappsconcepts.com/c?x=3ePTowrWiYQa sCjEQOrlSr7syuv8PwWSVsuxHPgRCI=&c=6jxaSfXao1VdJ38NyyQ3SMJ044QYQV/FP97rhq9xm96DjYvurpMNApfZP61N7I9OToxpwZ8SSzKEQW2J5rHttXm/TMizRCEwT4ujpcAUIVskfo/qGrXUHigRtzhrw9rv&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.bulkapppresent.com/c?x=juSAuPYvbeCdbChT6qiLrd5qgwJhq6nXx0W Qzm9s84=&c=o3FLvs3P2sGjQno21i3eLb/MV8Dtbj5NC d1gJBo3SneuKLvb0RQTh0FQNBbx4bDTGhu qRQpUnYVLedOaWfp7L3M1cuCILZNr0VIf2DkxV7AWB5eBXHqmhqNtgJpe1w&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.hostvaultcycle.com/c?x=Et7bt88pemFRwG6uCD0UBBFIQyK0zLusRnIvTIHOLwU=&c=IwFqDUOaf9RxmGmq91DobdLgYbxTgv7hNFwNXA4ZedT rKrBBsfK/gHxp3DvAgNiliacqV 6BXahErFa07a2qhDIjkzLk3mm2AhMJL/z5 dOCAZVpwsIWC/Pb8LYB4u0&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.guardappsconcepts.com/c?x=hT73u4N/mU7QzBwlcWHnw6C XIoIh22Ra8Kpv9b0ilQ=&c=weGRIdaL1S73CLQq 1y56/8DJNfBkD4O3ZzSh/eLIKAv0xKN/InIqQbhCY28JL/LnZWMUFrN3yFA8UzGj5A jw4P JD33VlAtGDePR6EXKp3MLwxMJ4kmpce/NYJ AJA&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.packageconecptbulk.com/c?x=kBBu1mFguJwIBAngcOHe2YIfbr/8Z2sBxht0Ru427TY=&c=83bHI31k2hjM4vUGh2t48OSF/RvyEBzpVPUcwxbgPBPVG3F86Gl LY7s8Q1x3meO0uDOptRKwA7uMUxMSXagZQ2VwML63SOaZOWJpuUj3klEVWat9d2kDqzoJob5oWT8&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.packagesharebits.com/c?x=lIAorTQmKQXd4jGMigQ8tcepRQAJQEenZuxiJV0Knxc=&c=WwkiQ1NL2mTfWql mMNlLS6wYRcpOJsEZGj3bxgq8wAjO90DeahpZJDJtKbg0/vM1Ee4kvmEs1S48CxoyYjISq/o/0d bLO6epyAouupK0EGykWVH0Iw4slKF15ke2 R&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.hostvaultcycle.com/c?x=xKxN5aX3hMFNJreOGnyyiazkDtwF23WWUSoguHH6jsk=&c=e1Ild1ZJcMt6SzlDqaLVid704M6t/S5qued eFhbie6Dp3Um0cd/uflDXkpps93pevcHW5Ntng33kbgb NO0Op5n2dkQZADlZL9Fh/IrMTLqlPQo9CYBavUCTG fU5ht&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.dlpresentapps.com/c?x=PZqi7Nvbw14ZQghTN7GBkPF/54yHTacRBQxvXIlI7Uc=&c=UUnYDf3mgk1FKiDWD2lNl2TKnX2wPTVobGcu1h1/P DYuCHcsouIgnPT37xXSmxQfofp3B8e4AioadcleCTsfhA0cBKz8VszI nbwj8BG7q9mpm5N/TLkGr68SsEFZqJ&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.bulkapppresent.com/c?x=oeUiGUM0KkVfG kRb0/C8U0Sg50o7Utw1u84m/74eTg=&c= QRbbem0ZVOOjktvFSxrY/DdZs4MecLOt DWpwjkyuA6i1yRnsE2xYiu N1jNIkjPNaEjTeD9CGwGW7N6ERVcRv1ipqbE5nNDCdlQW85AlsYuZ9bCp3HIFSSwRaJfu6E&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.filesranchtoday.com/c?x=V7XvmhPSbzBfgRSTgwtbnYH 2Nl08lpwBBRbRftHal4=&c=sQnEbXo0mR1uyqGwZRYa22ZljysUh4O8P38wZwCcXqLgjNcl74JEw1XuGaOfyNMZuHz7okIwJxTd8XjVd2QEvtb06ENtUQNxjKYyCl2h4YsRxVC8 4H4niFvV8p1H/rb&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.safecapitalsend.com/c?x=JgaIH3DXLiF5CpCCgEidv5VvekCgv2aI5W65Jb0Q20s=&c=Qa2DY7oXMVOggP1jrmq3IjJfi80zUqMxoR/X5pEVbqWNb O5E P/vjI2JBG/i E2Q7O0/oI2qiuoYCEHCyaM9gBk5BadHnfpGMDe0v78rUtlXJZctbZeMl9GmpIfs6Wl&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

http://www.townchuckletours.com/c?x=6BYt VBhpevvrCT0dlUZ1NlUjfXEKEc16MaS f7dSKo=&c=6NSbR73pj2cjHXFMN7iiMlgNUMsKD5xLYSS2XQNIMP g//CEcNWJvXzJZ7BBP7guE0L1AnxIQyspUiL9Vm0vdJmQeDb9EuF13/w2McqPGbIYDuAjRlemWtpHYibE0LIx&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe

Latest 30 of 86 download URLs

Remove firefox_setup_21.0_fr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.