home

firefox_setup.zip

The file firefox_setup.zip has been detected as a potentially unwanted program by 7 anti-malware scanners. It uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from cdn.downloadbinfiles.net.
MD5:
7f9c9417cafbf351a28d6aed0ea5168b

SHA-1:
31839dd93b02898df11843a2ca65ac3b76a855d4

SHA-256:
5727068473684a9a89c5cda393a3c0b328e9260c09eb66958f00789bc6878a3e

Scanner detections:
7 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/15/2024 12:36:46 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
PUA/InstallCore.diur
8.3.2.2

AVG
InstallCore
2016.0.2974

Dr.Web
infected with Trojan.InstallCore.1151
9.0.1.05190

ESET NOD32
Win32/InstallCore.ACP.gen potentially unwanted application
7.0.302.0

NANO AntiVirus
Riskware.Win32.InstallCore.dwusho
0.30.26.3725

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
3.12.26.4

VIPRE Antivirus
Trojan.Win32.Generic
44098

File size:
858.4 KB (878,973 bytes)

Common path:
C:\users\{user}\downloads\firefox_setup.zip

The file firefox_setup.zip has been seen being distributed by the following URL.

http://cdn.downloadbinfiles.net/c?x=Km9G6rvU/KUvhIPDRRKZiegFvYrjiWLDdx2W31zxn4w=&c=iRl6GuxAON0G4JInmjUHrSPHTtGs//M29WPuerY2PXVT75ThPa0FUee6vgU57gOOk/LyGOLofprHPeY8Wbcc65fOfSknlpxrOJB1FmAaZfw73VPy /OchTyM7qi0lE pwF0ofVx0qp1/ekzwwMNs/g==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe&downloadAs=Firefox_Setup.exe

Remove firefox_setup.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.