|
Download
|
|
|
SHA256
|
f7a884b1c5580238dcd382bd9dcb8a03e503c6f95264df36c57d4c26ad4b9b46
|
|
Referer
|
|
|
Magic
|
Windows executable file (EXE)
|
|
Request
|
GET /pub/firefox/releases/55.0.1/win32/en-US/Firefox%20Setup%2055.0.1.exe HTTP/1.1
User-Agent: NSIS InetBgDL (Mozilla)
Connection: Keep-Alive
Host: download.cdn.mozilla.net
|
|
Response Header
|
HTTP/1.1 200 OK
Content-Type: application/x-msdos-program
Content-Length: 34050760
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 10 Aug 2017 15:18:52 GMT
ETag: "6aa5c82c6c8ea9c90bd5b3155997fe40"
x-amz-version-id: AMI4foKMGWlck33FR7iGLpLJQayRxLGV
Accept-Ranges: bytes
Server: AmazonS3
X-Amz-Cf-Id: MoVVvqa3zZcNRU2I3YCSnwx1X28A2C1i9u3QLclOqU_2srDFhm3ohA==
Date: Tue, 15 Aug 2017 20:28:46 GMT
Connection: keep-alive
|
|
HEX Peek (128 B)
|
0000 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
0010 B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0030 00 00 00 00 00 00 00 00 00 00 00 00 E0 00 00 00 ................
0040 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
0050 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
0060 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
0070 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
|
|
PE Info
|
Meta-data
================================================================================
Size: 34050760 bytes
MD5: 6aa5c82c6c8ea9c90bd5b3155997fe40
SHA1: 54f29a163f6f583ea477774ef1aa6f7503ed782d
Date: 0x595D0F4C [Wed Jul 5 16:09:48 2017 UTC]
EP: 0x430c80 UPX1 1/3 [SUSPICIOUS]
CRC: Claimed: 0x207d68c, Actual: 0x207d68c
Resource entries
================================================================================
Name RVA Size Lang Sublang Type
--------------------------------------------------------------------------------
RT_ICON 0x312cc 0x4228 LANG_ENGLISH SUBLANG_ENGLISH_US
RT_ICON 0x354f8 0x25a8 LANG_ENGLISH SUBLANG_ENGLISH_US
RT_ICON 0x37aa4 0x10a8 LANG_ENGLISH SUBLANG_ENGLISH_US
RT_ICON 0x38b50 0x468 LANG_ENGLISH SUBLANG_ENGLISH_US
RT_DIALOG 0x2dfa8 0xb8 LANG_ENGLISH SUBLANG_ENGLISH_US
RT_STRING 0x2e060 0x94 LANG_ENGLISH SUBLANG_ENGLISH_US
RT_STRING 0x2e0f4 0x9c LANG_ENGLISH SUBLANG_ENGLISH_US
RT_GROUP_ICON 0x38fbc 0x3e LANG_ENGLISH SUBLANG_ENGLISH_US
RT_VERSION 0x39000 0x274 LANG_ENGLISH SUBLANG_ENGLISH_US
RT_MANIFEST 0x39278 0x554 LANG_ENGLISH SUBLANG_ENGLISH_US
None 0x2e998 0x9 LANG_NEUTRAL SUBLANG_NEUTRAL
Sections
================================================================================
Name VirtAddr VirtSize RawSize Entropy
--------------------------------------------------------------------------------
UPX0 0x1000 0x22000 0x0 0.000000 [SUSPICIOUS]
UPX1 0x23000 0xe000 0xe000 7.872814 [SUSPICIOUS]
.rsrc 0x31000 0x9000 0x8a00 5.648615
Version info
================================================================================
LegalCopyright: Mozilla
InternalName: 7zS.sfx
FileVersion: 4.42
CompanyName: Mozilla
ProductName: Firefox
ProductVersion: 4.42
FileDescription: Firefox
OriginalFilename: 7zS.sfx.exe
Translation: 0x0409 0x04b0
|