home

firefox setup stub 38.0.5.exe

7-Zip

Mozilla Corporation

This is a setup and installation application. The file has been seen being downloaded from downloads.zoznam.sk and multiple other hosts.
Publisher:
Igor Pavlov  (signed by Mozilla Corporation)

Product:
7-Zip

Description:
7z Setup SFX

Version:
4.42

MD5:
da3ceb8e5c80435f925d76306a642786

SHA-1:
2e883fa928338df4aebed075ffa2aa5bca1a2758

SHA-256:
678866719e7f300ebc08773dea1683d4b5640269eaf10ae160c6e73070aa937f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 5:22:40 AM UTC  (today)

File size:
237.7 KB (243,408 bytes)

Product version:
4.42

Copyright:
Copyright (c) 1999-2006 Igor Pavlov

Original file name:
7zS.sfx.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\firefox setup stub 38.0.5.exe

Digital Signature
Signed by:
Mozilla Corporation

Authority:
DigiCert Inc

Valid from:
9/17/2013 10:00:00 AM

Valid to:
9/21/2016 10:00:00 PM

Subject:
CN=Mozilla Corporation, O=Mozilla Corporation, L=Mountain View, S=CA, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0511EAF8579E2662BE622DE5AE0CD408

File PE Metadata
Compilation timestamp:
4/17/2014 3:29:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:opcXwWcz4fzbayt7YRDbbNUWpfHHUYaHjuAiI9BGt0UsFFAz9iILC015GBobBmKz:Vvc6rBaDbBU0fnHk2I2SAzC0Hmm/

Entry address:
0x21E30

Entry point:
60, BE, 00, 80, 41, 00, 8D, BE, 00, 90, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Entropy:
7.8789

Packer / compiler:
UPX 2.90LZMA

Code size:
40 KB (40,960 bytes)

The file firefox setup stub 38.0.5.exe has been seen being distributed by the following 21 URLs.

http://downloads.zoznam.sk/.../mozilla-firefox-20?did=14049

http://mirror.mirror-files.com/binstallers/BM2/updateadmin/.../Firefox Setup Stub 38.0.5.exe

http://download.mozilla.org/?product=firefox-stub&os=win&lang=en-US

https://docs.google.com/uc?id=0B6a1mhx5aYe4UG4wcG1tdmlVVzg&export=download

http://data.bpkad/Firefox Setup Stub 38.0.5.exe

https://correo.juntadeandalucia.es/.../?_task=mail&_action=get&_mbox=INBOX&_uid=3807&_part=3&_download=1

https://download.mozilla.org/?product=firefox-stub&os=win&lang=pt-BR

http://cdn.downloadsterfiles.net/c?x=VSz4KDenW1SsW1kCg9jmxDjjGCB/DvF8R310JRnvn2U=&c=k7gIbe4axe I9GOjnHeuaLclo8gE81/8qiPyFA895lHB5X7JnpF4INVtcaf7zcyMoq9wEg7Sz6GSmZ0OdooMde7AHXWhNQU79nSVw5p0rl9sur1BUNPaupA3cS0foYdCFAuqZwQo4McYNOEqh/ND7Q==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe&downloadAs=Firefox_Setup.exe

https://ftp.mozilla.org/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe

http://www.bulkhostingbundle.com/c?x=ojCFN0fa6BwblydSagzdNTRtXwoo2tqyIE TV mzN0w=&c=7XspfLnHU2ghsMck9yX1DScRFP0OEPtIRkAI4K38hekrgCCxgwkhoEpY1fHsa36t3Jkw62NeYOD9/O4YA/9bYr32dOWjg38vyuGorCqi4SXfyCj07t5xCr5gBALQrz1/gc2lXgt6zQYCoN EfsoDWg==&downloadAs=Firefox_Setup.exe&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe

http://download.open-download.com/download/810/.../

chrome-extension://bigefpfhnfcobdlfbedofhhaibnlghod/persistent/.../7hxDTRRD

http://www.cleannewquick.com/c?x=QOOnO9IMIarwnnWYnL2Xuik6CEUTR8P KHOIDXRqfjs=&c=mBwB3LWD3Fxk Fi1OaFsavJJdroIIZkKEQwg8Kr/3Vu7MdhdNfcZWAVKdW0GDmePSHCrSE0wnGtBCr6vpGl6vwNLHepuWCn1y3HoWUEN1mKHkFp3ftXr7dsoa079pELc66hJHSKPhU/nvsC6KG8tTA==&downloadAs=Firefox_Setup.exe&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe

http://cdn.open-downloadcontent.com/c?x=RNYM0hKAP2JsLE1zbXTh6y5wG5NZLI8Uc2nJO7azdcE=&c=eNSc bL7MQhyjKQ20Npr GWwWoUZFip1MPjRteQFp7P5i80WKl8kkca3h49coA95MkWDX892kOYSJTb0PATvYqLFpBBo1ODW8K xBos6WLrfCb2KVjd/gquQt8mtaz0Y&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe&downloadAs=Firefox_Setup.exe

http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe

http://www.jdtlrtaenraogggdsdracfilestowers.com/c?x=ENE/pykXoukb6py7vPUP6Lu360z hG C0MrJd62CD5k=&c=pvYarXKwFVJcrzbUwjArufyAZIio3cazWFOS0CB54pdHBtADpd2mcHG b2TFFqj2af2XLt9Ka 6qXPDSf5R0PGE8/UPnD9aUSq5CeQmIwo 47L6FWe6rI1Ripxbzci1WidN8mr7cL3 desjPnrhJ2MpGHpm 0CdMQ4en5s0mU7k=&downloadAs=Firefox_Setup.exe&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe

http://cdn.downloadinfofiles.com/c?x=T96qDPgkjrYD0HR6aLqCjO3CX4fWnWZCJ7QVOdVvsD8=&c=fa1SDDGFaQodBYFPFIwP5PdHmC04JaMYcybYCypZhfPVGyql8ZJlCY0m/khuelviAmpfMWSHMu5VNM4c2IrU0d1DIU/RBhYTkcX9JCcaUIJNMZzhEp8ML9G/ut7rYE8m66DAwMshLH7iQn/gJxbs w==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe&downloadAs=Firefox_Setup.exe

https://download.mozilla.org/?product=firefox-stub&os=win&lang=fr

https://download.mozilla.org/?product=firefox-stub&os=win&lang=ro

https://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe

https://download.mozilla.org/?product=firefox-stub&os=win&lang=en-US

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.