this post was submitted on 07 Sep 2024
15 points (94.1% liked)

Firefox

17303 readers
22 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 4 years ago
MODERATORS
k_o_t@lemmy.ml
15
Firefox trojan false positive (?) (lemmy.one)
submitted 2 months ago by wallmenis@lemmy.one to c/firefox@lemmy.ml
9 comments fedilink hide all child comments
 

Hello all.

I recently downloaded firefox from the official site as per usual (windows version) and I ran a virustotal check and got a trojan positive.

The md5sum is: 4409905bd4544c6f45e4d5737f130d75

The sha256sum is:

d390bfce3fed1be8c153aebfb9f28043981071b5338745e9207547178f32bf64

Please verify if this file is legitamate.

you are viewing a single comment's thread
view the rest of the comments
[–] lnxtx@feddit.nl 3 points 2 months ago (1 children)

False-positive?

https://www.virustotal.com/gui/file/d390bfce3fed1be8c153aebfb9f28043981071b5338745e9207547178f32bf64/detection

[–] wallmenis@lemmy.one 4 points 2 months ago (1 children)

I have read on the firefox forum that this particular anti-malware engine flags these like that. I just want to know to be sure. Is there somewhere where I can check if it was officially generated by firefox (other than the signature which seems legit)

[–] wallmenis@lemmy.one 6 points 2 months ago

Follow up:

Ok so aparently 7z compression is the culprit. If I extract the file. There is a setup-stub.exe file that shows clear in there.