home

firefox_setup_5.0.exe

Firefox

Mozilla Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Mozilla  (signed by Mozilla Corporation)

Product:
Firefox

Version:
4.42

MD5:
2b27d5c782a50909afb9b3225241ef71

SHA-1:
545405c3a58c96ad1b356ffb016f15de30331df0

SHA-256:
bc3af0f0bf04d3c7bba75febffc8fae0440de3563eb584f48faa15845571531a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:48:05 PM UTC  (today)

File size:
12.9 MB (13,492,896 bytes)

Product version:
4.42

Copyright:
Mozilla

Original file name:
7zS.sfx.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\{random}\firefox_setup_5.0.exe

Digital Signature
Signed by:
Mozilla Corporation

Authority:
Thawte, Inc.

Valid from:
9/28/2010 2:00:00 AM

Valid to:
10/31/2011 12:59:59 AM

Subject:
CN=Mozilla Corporation, OU=Release Engineering, O=Mozilla Corporation, L=Mountain View, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
36E4119288CB154660F7674908EA6B87

File PE Metadata
Compilation timestamp:
8/16/2006 12:27:50 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:AMiydXKF/wruX/DiioiE69PO7Zge2PWxjMczDFaQiAbcq:ewyXuiFZ9POajexA0DFaicq

Entry address:
0x21D00

Entry point:
60, BE, 00, 80, 41, 00, 8D, BE, 00, 90, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Packer / compiler:
UPX 2.90LZMA]

Code size:
40 KB (40,960 bytes)

The file firefox_setup_5.0.exe has been seen being distributed by the following 14 URLs.

https://dw.uptodown.com/dwn/sBl7ugvl2FyfCFhbfu0Wmw4pOjCulspdFGN5NOSXkZ-6EpIwDwe2TPL4CIPKGK4usic7HOqGXfeAehGDwQ5avKCihaYBGczpaswwdKMV54Z2pKhzpaYmFwUyGN6CDhUM/D-jxuZ0HoN2T5GhIF80xwhII3ec0T9mstyoNXe2TnUPeXQGCbIUyXT48uJXXJqI-6KQeZ17-q3iC4-ns_vxfssW3XKaIW08nnhd2xnFk6ep7WM5xzvYEwyVX8cMuHTTs/z9hgPysGiBg5BGSxnFuwJRfhOsvuxOvlDgaSryMi-J7ZGqsB5u2ap3UFQNUS31X1Lf3KmQHxe9blhLWHTpp7vBxiElaFYis6kyVzDyWHrmTicmDZngmulqdNCp4I3Jmj/.../

https://dw.uptodown.com/dwn/g5RYoJKr_Ppcp594djxp9pF4kbzkokMenSvljm0316TKMr1cyIQzMfbmN4shSPJ4CBTOCR_2M4fhwCInQqWiAMPtrIVXNBgfNEYV_FSFDWelHWq1w7m0dHzIW8Euh4ps/iRLYgCG8qTrzxnpSVGq5e1cvRu7Du_Bz7erLexoGTpr_BSxipui3O63IMXovG2uA0kA3_I-DBoQiGsQtJfu_je6FiP6Udz1KieqbuYnh-KEC4oCX9XV_L4YrISiF44A0/bl7fIOQbob6_HAdpqDsgLRGH83y3xyyQ2HMElroTn4exYntPzBDsGLTmnpkre3k2fy_9tgGIIxyXiORRQ3qfH7ChQByP23AhjHONp7VLfSCL35eDH60jfEW1_ZWoa0nO/.../

http://data.mserverz.de/mozilla.org/firefox/releases/5.0/win32/.../Firefox Setup 5.0.exe

https://dw.uptodown.com/dwn/fL-kk_Q2scBirQiPloDsv9y_NhmBhjoo9r2m3bRs0ZA0eh5WrnzY510OGJDa5j-B3QX133dvC2teppG_jB09IH9ybzQTM-W0iTotOfVL_bdQcBO2CzWX18RXxQ4Cni7u/rApIHerfmrQ6hetbEMvC0Of-mew3K2QZMpjwLwDUePZZy-ZEIxYnsN5S1iavCNQQynOfqdGNLlB9HXJu9KTg9g7015226wDkk6kkf-T4d2_uOQFwejYWsidAVZBI3q56/.../

https://dw.uptodown.com/dwn/g0ZzrECNyz1zNYVcWiGUSB4FqDB_UAHG-23HIAiDIDGYIRp8SIBUeqoJxtL5aLDXk_EUPu87kwoAVqfi16jOVh4-hPNxljf0uV0WzwN-sXOE1UqW0Kl2-EyL2Oam-5Ez/7FG7TSAeB4V96SC4Acr8xbT1QGBdWybhZY53JVhtk8p01mVFDiH9lfIS01qAoc9pthcZlPysT4NnExx303zUnD28usoeNRNCOrhJAW3cT-VnsqXBCXGE5kV7oG3lkXw4/dxqiNQ5uAw_69lYmv3W7m9He2jJwJ8AIjKdx8dqHlux8YqTduRSUxhUp5GQ5KQbXCrDavQRcLRfSogQ2WgKVdc5MNcl5Yc33aPP9PqKFjr3q_SF6gSSQKUPrroR7sRK8/.../

https://dw17.uptodown.com/dwn/aEkjVlkJYINGnF6AhbkXbKWzud5s8QmOUo0Rbo1QDuNVlVrl8XumuFpAaykmrBVN-yyMfjisGV5qtU73MLHUp-gGy9MlRUGO2DGIlk2a1d1BhS5LcPp5w8qRqlzu0bnV/-gbPj-YZAl4YsHLAJD8cAyXWzcEfGz_6dH912rvf9wnbJo_hrYWX-72gtFWtu_jWy2TpSicrqK4fn30_gQ0D2wmdr34EmLr26--KywoYLfzd0CRAFxTO7d9aQfwWSEbB/5wnazQS6-x4xzA5x7amWaLzNCzwdIjpD03q2nTsR86sZuwM8_mK0Avq3nLQRaliRD6b633TnWf2gynejwT61-jj92AO_rIYafbIRI1Tw6MGi9O_ZX5SmsTFlSSuYnbw2/.../firefox-5-0-es-win.exe

https://dw.uptodown.com/dwn/TaGmjvbTZTxHGxjTSlEmQnOzkUMoocFsXGSc2G1qsi61YjxoGj6BYCVgwKunib978CqOueqLBVZjVZpSFJz7GJO65Efzft-MSVkRcJSuXQlHQBhpCmVF8ZzM8IANsT6V/zZuIk9kHGPsrQwAUJfP4Q5peKNU-XxNGEH1KVXwjyHj6JlOoE195_9-tp-1xM81NMWlhXSfwIF5z8NsSy1lbVLCrENNmF5c2qK92acHnBGQBkNEh3SREaIGafuYOoaVq/.../

https://dw.uptodown.com/dwn/VJhVMd5PwJz_ep0BR1p31x3kV--SwZPLErM0BfHimGdrYAw8dfGD6umbnAXQDaac_cjszoNxiazAYkU3ZbLGKi0rwi0WNdb8bTwPTLjCQye34BAuFueQ6UNTlBEpViT3/x7LczT0b9oG6hrzOpSZKlkuBw4HYZ3XVJspIlv94z_JeFuKAVggxBb2xN_HEadlsxEHLYJy4yu51tXwJ5xDIwwcR7Za_8AP67yM0Bbon2vm_vWcF3cnfSZ513r-4mNQf/.../

http://dw.uptodown.com/dwn/SfizBS2SwCDbaRPyQBCW85wiEck1f_DRPsrfu6Thg6OrsrAwIV4k-JUUpIki0CjitfcK8u-9usI2kvTS2I64LjNIu1yMWQs5G_ZvqgeSaNeshWJj9VjRMhwYnsbzP8sG/wrEhjRFAZV8_5PgDznZtucppQjQFiTFle58SBZs37qD9UHVJYTp1wEDLnUr4z3Mhbfl-fxwcpCboXupsYmMAE8mzqJ86fdiMDWjap7d6Wfl7Em-f9K_n9nBR7x5hvUA3/.../

http://dw.uptodown.com/dwn/STPKvgfHQhVdAY1PZUNjpk0DorZMz2ysNiaQjfM5gPrs6cWd6J2yO8i6thNY8zevqEhlugTU4uSnSghol2qTiX8-hOVOLsHHvwEc7xj-CNrnmapyO6jk-xuwiYWvOYLd/PzARBVpLsLcAR_XUpyOH4x6cGs13sycQriIbEb-TQawZ_bquGwGCPR1AiH12bDcgup2lIapfXUeBQhWYHJ1-1ry4kb82dY7as3S_Xv4qQfyszHZ6kbPQIdes8xFJsFb_/.../

http://dw.uptodown.com/dwn/ta2dGyCsIZjuEaWTHbPmqEPtgt07yR1hAgcFwZ0u8z6iwVJDwS3kkgux6YcWzX9-W3q0X-gjFvDCRFsHXcpW1HqcVkJs8J7JP-HbPlxA2nNEuctBrL8kgZ1ZJb1EiKhB/kaPpMUM4dA4JR_vCgd4Yd2wTh4zrrZ01h4oHzx1JxP14z5Zx_H3CO_ohDGbmDIc0XzTGOJ9bA2zR5848VLeyIFdoFLM3eqxUlUVHTVHhzci4j0UdB2yxwyg6uYPPrBbu/.../

http://fibreforge.net/mozilla/firefox/releases/5.0/win32/.../Firefox Setup 5.0.exe

http://mirror.informatik.uni-mannheim.de/pub/mirrors/mozilla.org/firefox/releases/5.0/win32/.../Firefox Setup 5.0.exe

http://mozilla.ntua.gr/pub/mozilla.org/firefox/releases/5.0/win32/.../Firefox Setup 5.0.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.