home

7zS.sfx.exe

Firefox

Mozilla Corporation

This is a setup program which is used to install the application. This is installed with multiple programs including Mozilla Firefox 31.0 (x86 en-US) and Mozilla Firefox 21.0 (x86 en-US). The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
Mozilla  (signed by Mozilla Corporation)

Product:
Firefox

Version:
4.42

MD5:
77b374a701512a2b18e4546288c090d9

SHA-1:
e09d34669e82710f460648c6764c86dada4a4037

SHA-256:
61b8710a01d0de6c53b1e60a9e6a455becef0aae86a2589b5bf57140a3a10f9e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:05:43 PM UTC  (today)

File size:
20.3 MB (21,289,608 bytes)

Product version:
4.42

Copyright:
Mozilla

Original file name:
7zS.sfx.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\7zs.sfx.exe

Digital Signature
Signed by:
Mozilla Corporation

Authority:
Thawte, Inc.

Valid from:
10/17/2012 8:00:00 PM

Valid to:
10/18/2013 7:59:59 PM

Subject:
CN=Mozilla Corporation, OU=Release Engineering, O=Mozilla Corporation, L=Mountain View, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3DA9386C2076F738EE246BB8E313A4D4

File PE Metadata
Compilation timestamp:
11/14/2012 8:36:00 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:POW6rwYpJ0mYY6femIJZRrTyQPNRa3VVhLmifa0V/Mp2xoPEpV6+xaAG:2Lp2m/6febZRrOiLu7j/QOoPEpVyD

Entry address:
0x21DD0

Entry point:
60, BE, 00, 80, 41, 00, 8D, BE, 00, 90, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Entropy:
7.9999  (probably packed)

Code size:
40 KB (40,960 bytes)

The file 7zS.sfx.exe has been discovered within the following programs.

CyberLink PowerDVD 12  by CyberLink Corp.
CyberLink PowerDVD 12 is a media player for Microsoft Windows. PowerDVD is distributed on physical media or by download from the Cyberlink website. It is often bundled with a variety of PC systems and peripheral devices (particularly optical drives).
www.CyberLink.com
11% remove it
Mozilla Firefox 18.0.1 (x86 en-US)  by Mozilla
A new feature for Firefox 18 is IonMonkey, Mozilla's next generation JavaScript engine. Mozilla Firefox is a free and open source is a web browser coordinated by Mozilla Corporation and Mozilla Foundation that is a heavily localized.
www.mozilla.com/en-US
4% remove it
Mozilla Firefox 21.0 (x86 en-US)  by Mozilla
Firefox 21 was released on May 14, 2013. The Social API now supports multiple providers, enhanced three-state UI for Do Not Track (DNT).
9% remove it
Mozilla Firefox 22.0 (x86 en-US)  by Mozilla
Mozilla Firefox is a free and open source web browser. Firefox implements many web standards. Firefox uses a sandbox security model, and limits scripts from accessing data from other web sites based on the same origin policy.
5% remove it
Mozilla Firefox 24.0 (x86 en-US)  by Mozilla
Firefox 24 includes support for the new scrollbar style, closing tabs to the right, an improved browser console for debugging, and improved SVG rendering. In addition 9 new security holes were pacthed.
www.mozilla.org/en-US
5% remove it
Mozilla Firefox 25.0 (x86 en-US)  by Mozilla
Firefox 25 features include, the inspector now features autocompletion for css names and values.. If away from Firefox for months, you now will be offered the option to reset it to its default state while preserving your essential information.
5% remove it
Mozilla Firefox 27.0 (x86 en-US)  by Mozilla
Firefox has established a reputation as one of the most innovative web browsers in the market.
6% remove it
Mozilla Firefox 30.0 (x86 en-US)  by Mozilla
Firefox 30, based on Gecko 30. Sidebars button in browser chrome enables faster access to social, bookmark, & history sidebars.
11% remove it
Mozilla Firefox 31.0 (x86 en-US)  by Mozilla
Publisher's description - “Mozilla Firefox is a fast, full-featured Web browser.”
www.mozilla.org
9% remove it
 
Powered by Should I Remove It?

The file 7zS.sfx.exe has been seen being distributed by the following 50 URLs.

http://filehippo.com/download/file/.../

http://firefox.tr.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-em6CJn6Omkpk=

https://firefox-1.en.softonic.com/download-tracker?th=1/.../AtrgXjZbt0eRAkBh01o8tGYYgpztvVyjHmnSSo53OYxOmM2TODfpvZXXiOb6RXrvO8CjAEDbQ88YHkobyD0j9Bz7VHzU10goUazvrve1JvHsEJpmiKOx5myxhdNA G7maash4SLj12F9F vBgJoFbVtVmgQ==

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

https://mg.mail.yahoo.com/.../download?m=YaDownload&mid=2_0_0_1_1_ADuvCmoAAAKRVacl QdyQPUvgPE&fid=Inbox&pid=2&clean=0&appid=YahooMailNeo&ymreqid=fc8d7981-494a-d8d3-01fb-070013010000

http://filehippo.com/fr/download/file/.../

https://dl-mail.ymail.com/ws/download/mailboxes/@.id==VjJ-jHZSgKiOpw3TDgEFt3G9XbZus8vrHMxVmuKCeU1W08F96iCcJlbdmIJrcVb1RHIS-OZtZrw2rULBXQ-scIJXZQ/messages/@.id==AJtUimIAABKQVOCCaQkrqPgK6XY/content/parts/@.id==2/raw?appid=YahooMailNeo&token=zitEzqOML3j84e6ealFTT5U7-km5qEQF52lp7AcCuBbPbyNqYZbJKKcWwFlvPtpBMhN8TYRCekyTrkj0lsz2fySy3OEKxx4bUlSLG622G6M6y0cZDZK87O4GU8LnZAz6&error=https://mg.mail.yahoo.com/.../iframemsg?id=667ab124-eb5d-3674-b498-89cfcb61387f&ymreqid=64f3f1a8-f3ad-ff84-014f-ca0013010000

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://downloader.ez-download.com/download.php?id=4b8266b51f0b79677dbe30d0bddd25de26ff23b1&z=0&p=eyJweSI6ImV6IiwicnMiOiJnb29nbGUiLCJydCI6InNlYXJjaCIsImMiOiJnYiIsIm8iOiJ3aW43IiwiYiI6ImNoMjciLCJ1X2lkIjoiZXpfNTFjODg2MjY5MDcwMzUuNDczNTQ5NDMiLCJwYV9pZCI6IjAiLCJzdF9pZCI6IjAiLCJzcF9pZCI6IjAwMDQtMDAwMCIsInRzIjoxMzcyMDk2MDM4LCJrdyI6ImZpcmVmb3giLCJjdSI6Im1vemlsbGEgZmlyZWZveCIsImNhIjpudWxsfQ==

http://www.filehippo.com/download/file/.../

http://w7.mien-phi.com/data/Soft/2014/04/.../FirefoxSetup21.0.exe

http://emis.bsu.edu.ge/.../firefox.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://w6.mien-phi.com/data/Soft/2014/04/.../FirefoxSetup21.0.exe

http://filehippo.com/download/file/.../

http://download.informer.com/.../firefox_setup_21.0.exe

http://firefox.software.informer.com/.../

http://w2.mien-phi.com/data/Soft/2014/04/.../FirefoxSetup21.0.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.oldapps.com/firefox.php?app=77B374A701512A2B18E4546288C090D9

http://fs40.filehippo.com/6222/.../Firefox Setup 21.0.exe

http://filehippo.com/download/file/.../

http://fs32.filehippo.com/4181/.../Firefox Setup 21.0.exe

http://filehippo.com/it/download/file/.../

http://115.146.127.186/Data/Soft/Free/.../FirefoxSetup21.0RC1.exe

Latest 30 of 54 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.