home

freefox-4-0-en-win.exe

MD5:
5c9a0a38c15cda27a7afce6a14b2e1f3

SHA-1:
a7614189dd279cc7c45ed48fd08c9522c34ecd7d

SHA-256:
fb8a2258fe02637eb9827307e82167af25b77ce202a063d2ba3a22bfdcec356c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:15:21 AM UTC  (today)

File size:
11.1 MB (11,657,782 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\freefox-4-0-en-win.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
196608:oBWquORqPfaNrkijR6FNgK321cFIan0x8g3:o8q9qPfaNrkijR6FNtEsIan0qG

Entry point:
1F, 8B, 08, 00, 00, 00, 00, 00, 00, 03, EC, FD, 09, 40, 55, D5, FA, 3F, 0E, EF, C3, 24, 2A, 08, 16, 94, 95, 26, A5, 76, 2D, AB, 6B, A9, DD, 4C, 2B, 34, 31, BB, 37, 0A, 23, A1, EE, 55, CB, 14, 43, 52, 41, 38, C7, 29, 51, F0, 80, 82, 47, 4C, CD, 4C, 73, 16, E7, 79, 16, 67, 70, 02, 67, 10, 64, 1E, 0E, F3, 3E, 1C, E6, 19, 44, 9F, F7, 79, D6, DA, 67, 00, 01, ED, 4E, 7D, FF, BF, F7, 6E, 7D, D8, F3, DE, 6B, AF, CF, E7, 99, D6, 5A, 7B, 1F, E7, BF, 2F, 17, 4C, 05, 41, 30, 43, 01, 10, 84, 08, 81, 4F, 8E, C2, E3, A7...
 
[+]

Entropy:
6.8050

The file freefox-4-0-en-win.exe has been seen being distributed by the following URL.

https://dw14.uptodown.com/dwn/wgfWu1pQC_t1MqaLAxMWL6X5LPW41QrBCbzirQTjxt2u3efvt06mbxJnxNQPSM7XClTU2XdK-FcHOsoeLTPJ60iV7oZU4N3UwfZQNibHM96voYqXdbGlL6gcNKz3yto5/yR_oIl48TUuiA_OYF8xnMg09VDN23XIPrQjS0A9w2r-BzfWRamDawnT8z3rGOeUgMp7pzcP8H7gV1J1dLKGsHPP1XX1VuUahUuhtpelErsYe0VadbapeTWaPQFYideLh/.../freefox-4-0-en-win.exe

Scan freefox-4-0-en-win.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.