Mozilla Corporation - 0.042% Detection Rate *
Did you just download a file that has a digital signature from Mozilla Corporation and wonder if the file is safe? If that's the case, please read on.
You will probably see Mozilla Corporation when double-clicking to run the file. The publisher name shows up as the "Verified publisher" in the UAC dialog as the screenshot shows:
You can also view the Mozilla Corporation certificate with the following procedure:
- Open up Windows Explorer and locate the Mozilla Corporation file
- Right-click on the file and select Properties
- Click on the Digital Signatures tab
- Click the View Certificate button
Here's a screenshot of a file that has been digitally signed by Mozilla Corporation:
As you can see in the screenshot above, Windows states that "This digital signature is OK". This means that the file has been published by Mozilla Corporation and that the file has not been tampered with.
If you click the View Certificate button shown in the screengrab above, you can see all the details of the certificate, such as when it was issued, who issued the certificate, how long it is valid, etc. You can also view the address for Mozilla Corporation, such as the street name, city and country.
DigiCert Assured ID Code Signing CA-1, Thawte Code Signing CA, DigiCert SHA2 Assured ID Code Signing CA and Thawte Code Signing CA - G2 has issued the Mozilla Corporation certificates. You can also see the details of the issuer by clicking the View Certificate button shown in the screenshot above.
Mozilla Corporation Files
These are the Mozilla Corporation files I've gathered, thanks to the FreeFixer users.
The FreeFixer tool treats files from Mozilla Corporation as safe, which means that the Mozilla Corporation files will appear with a green background and that there's no removal checkbox for the file. However, as you can see in the scan results below, a few of the anti-virus scanners detects the Mozilla Corporation file(s). My guess is that those detections are false positives and that the files are safe. It's unlikely that Mozilla Corporation would ship a malware file.
| Detection Ratio | File Name |
|---|---|
| 1/57 | firefox.exe |
| 1/56 | firefox.exe |
| 1/44 | plugin-container.exe |
| 1/57 | firefox.exe |
| 1/57 | firefox.exe |
| 1/57 | plugin-container.exe |
| 1/57 | plugin-hang-ui.exe |
| 1/61 | maintenanceservice_installer.exe |
| 1/46 | ffffffffffffece3.isw |
| 1/42 | smime3.dll |
| 1/46 | firefox.exe |
| 1/57 | firefox.exe |
| 1/57 | webapprt-stub.exe |
| 1/56 | breakpadinjector.dll |
| 1/56 | maintenanceservice_tmp.exe |
| 1/50 | xpcom.dll |
| 1/47 | crashreporter.exe |
| 1/57 | firefox.exe |
| 1/47 | browsercomps.dll |
| 1/68 | Firefox Installer.exe |
| 1/72 | Firefox Installer.exe |
| 0/56 | clearkey.dll |
| 0/43 | plugin-container.exe |
| 0/42 | mozglue.dll |
| 0/46 | plugin-hang-ui.exe |
| 0/49 | dmw.exe |
| 0/56 | sandboxbroker.dll |
| 0/55 | gmpopenh264.dll |
| 0/55 | firefox.exe |
| 0/47 | webapprt-stub.exe |
| 0/54 | firefox.exe |
Scanner and Detection Names
Here is the detection names for the Mozilla Corporation files. I've grouped the detection names by each scanner engine. Thanks to VirusTotal for the scan results.
As mentioned above, I think these detections are false positives since it is very unlikely that Mozilla Corporation would ship a malware file.
| Scanner | Detection Names |
|---|---|
| Antiy-AVL | Trojan/Win32.Agent, Trojan/Win32.Jorik |
| Bkav | W32.HfsAdware.51B8, W32.HfsAdware.B570, W32.HfsAdware.11DF |
| ByteHero | Trojan.Malware.Win32.xPack.g, Virus.Win32.Heur.i |
| Cylance | Unsafe |
| Emsisoft | Gen:Variant.Adware.Graftor.126013 (B), Gen:Variant.Adware.Strictor.48623 (B) |
| Fortinet | W32/Generic.AC.3AF0DF!tr |
| Rising | Trojan.Win32.Zurgop.r (classic) , PE:Malware.Techsnab!6.2585 [F] |
| Tencent | Trojan.Win32.YY.Gen.3 |
* How the Detection Percentage is Calculated
The detection percentage is based on that I have gathered 50155 scan reports for the Mozilla Corporation files. 21 of these scan results came up with some sort of detection. You can review the full details of the scan results by examining the files listed above.
Analysis Details
The analysis is done on certificates with the following serial numbers:
- 0511eaf8579e2662be622de5ae0cd408
- 25cc3735e9ec1fc971670e73e369c791
- 09e65ad807b8497b0749d41568d626d0
- 3da9386c2076f738ee246bb8e313a4d4
- 6b26c64d4ed9d82aabefde3cf99c0215
- 36e4119288cb154660f7674908ea6b87
- 0c5396dcb2949c70fac48ab08a07338e