home

firefoxsetup17.0.exe

Firefox

Mozilla

This is a setup program which is used to install the application. The file has been seen being downloaded from m1.download.com.vn.
Publisher:
Mozilla

Product:
Firefox

Version:
4.42

MD5:
aa5dc0e6574d6cbb11324db490ef0713

SHA-1:
8cf81a59ec11171616eb40d006af9b1c9d9a7593

SHA-256:
7a2333a7cc759cbc671cdd7e6e3eb1b3366e7eb8d0b2cfe01cd384c0473a60ce

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 11:33:10 PM UTC  (a few moments ago)

File size:
18.5 MB (19,450,336 bytes)

Product version:
4.42

Copyright:
Mozilla

Original file name:
7zS.sfx.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\firefoxsetup17.0.exe

File PE Metadata
Compilation timestamp:
10/19/2012 9:53:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:/98BRCWmu3zCqijUaYNYmlWilsW1a4pm/0hLgkrsA9aUu64d:qBGKOqWd+YmrlsW1a4pmMhj9cUwd

Entry address:
0x21DA0

Entry point:
60, 88, E4, F7, C1, E2, 78, F1, A2, D3, F0, FE, C6, F7, C3, 6C, B6, D6, C3, FF, C9, 0F, B6, D7, 0F, BA, F1, 14, 88, EE, 0F, BD, DD, F7, D1, 8B, C9, E8, 00, 00, 00, 00, 59, 8D, 1D, 96, 45, 80, 46, 0F, BA, E8, 88, D1, D0, 0F, AD, DE, BB, 60, DE, 9D, 94, C1, E8, 89, 69, D5, 7F, F4, 04, 1C, 68, D9, 01, 5D, 00, 68, 5F, 88, 5A, 00, 81, F3, 85, 9B, 1C, 4C, 0F, AF, F2, 81, E6, E6, AC, 9D, F5, 0F, AB, D2, 0F, BF, F6, C6, C3, 6B, F7, D0, 0F, BB, C6, 0F, C1, F3, 40, 0F, AF, D1, 69, F9, 0F, 01, 90, 29, 0F, BA, FB, DD...
 
[+]

Entropy:
7.9999  (probably packed)

Code size:
40 KB (40,960 bytes)

The file firefoxsetup17.0.exe has been seen being distributed by the following URL.

http://m1.download.com.vn/Data/Soft/2012/11/.../FirefoxSetup17.0.exe

Scan firefoxsetup17.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.