Gridinsoft Logo
File Icon

The firefox.exe (Firefox) File Analysis

Technical Analysis

File Name firefox.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.225.174
Database Version 2025-09-26 01:00:38 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
712,832
File Size (bytes)
2025-09-26
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
cb25269a54e7d734093b7d0a255b8f10
SHA1
a3a2f0e5d1605978798bdc7d9214f85e92e6ff1c
SHA256
c2758ebaed009ae03671d091e6358fbf7a8f509c493bf561bea172573fdf834a
SHA512
638f515e4f0df7c9ff233aeb96f340a2943f7516c39ff29e8e225b91856aa3be9754e4d7d5132c9f71671299589866704baca41cdd2ddce4f9bbaa4ac509ca9a
ImpHash
088de000eea8a59f6825898e1a0feacb

PE Analysis

Basic Information

Icon
Hash: b64c22dda2d144c061611d4369a70613
Fuzzy: bd3f1caee634c8c828adeb07a75367cc
dHash: 4a630d1d948ce071
Image Base 0x140000000
Entry Point 0x140038470
Compilation Time 2025-08-27 02:15:48
Checksum 0x000b63f2 (Actual: 0x000b63f2)
OS Version 10.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path firefox.pdb
Digital Signature OK
Imports 17 libraries
Exports 101 functions
Resources 35 Resources
Sections 9 Sections

Version Information

Comments
LegalCopyright ©Firefox and Mozilla Developers; available under the MPL 2 license.
CompanyName Mozilla Corporation
FileDescription Firefox
FileVersion 142.0.1
ProductVersion 142.0.1
InternalName Firefox
LegalTrademarks Firefox is a Trademark of The Mozilla Foundation.
OriginalFilename firefox.exe
ProductName Firefox
BuildID 20250827004350
Translation 0x0000 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 368,657 bytes 369,152 bytes 6.32 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 5B39D2DD4CFC5BD98C6FF4245F7EEC51
.rdata 0x0005c000 59,764 bytes 59,904 bytes 5.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B68236B04E92D2D76158AB245D40962E
.data 0x0006b000 11,472 bytes 1,536 bytes 3.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 529496D19820D44B00F14D0E6D4B49B8
.pdata 0x0006e000 10,032 bytes 10,240 bytes 5.55 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FA50233B3202DCFEB87700F8B74911AC
.freestd 0x00071000 16 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BF619EAC0CDF3F68D496EA9344137E8B
.retplne 0x00072000 36 bytes 512 bytes 0.56 (Normal) 0x00000000 60E7349E46063B144CF642326DA037FD
.tls 0x00073000 25 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1F354D76203061BFDD5A53DAE48D5435
.rsrc 0x00074000 255,848 bytes 256,000 bytes 7.17 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6690D52EAF92207C5649C7D4812BA0D0
.reloc 0x000b3000 1,208 bytes 1,536 bytes 4.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 655E437EF0618FB55DF8A9A883DDBDAD
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 35 (253,892 bytes)
Resource Type Count Total Size Percentage
LIMITEDACCESSFEATURE 1 56 bytes
0%
RT_ICON 24 250,716 bytes
98.7%
RT_STRING 1 46 bytes
0%
RT_GROUP_ICON 7 378 bytes
0.1%
RT_VERSION 1 1,004 bytes
0.4%
RT_MANIFEST 1 1,692 bytes
0.7%

Certificate Chain Analysis

Certificate Information
Product Firefox
Description Firefox
File Version 142.0.1
Original Name firefox.exe
Signing Date 03:02 AM 08/27/2025 (136 days ago)
Verification Status Signed
Signers Mozilla Corporation; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert SHA256 RSA4096 Timestamp Responder 2025 1; DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1; DigiCert Trusted Root G4; DigiCert
Internal Name Firefox
Copyright ©Firefox and Mozilla Developers; available under the MPL 2 license.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-06-09 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 01 24 0A FB 1E 38 0B 8A 16 F1 4B 71 9D F4 D3 C0
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #2 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Mozilla Corporation #3 Chain
Validity Period: 2025-01-09 00:00:00 → 2027-01-08 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0F 0E F7 C2 D8 19 27 3E 8C 13 F0 16 D2 E0 9B 25
DigiCert Trusted Root G4 #4 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #5 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #6 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware