Closed antuketot76 closed 5 years ago
Those files are coming from the official Mozilla Firefox built, as the project is young i am not distributing a built from sources version.
Those files are signed with mozilla certificates.
You will get the exact same result with the official Firefox files because they are the same not modified you can try that out Firefox Setup 63.0.3.exe it's the sames files (to extract the exe, once you run it, it create those files in %tmp%)
There is not much we can do about that other than asking AV company to whitelist those files ... mozilla did not do it so... this is because of Filseclab and Cylance. and they are doing so because of 3 possibles reasons.
They are mozilla signed anyway so it's trust-able.
Also Librefox could be applied manually without the installer.
I forget thank you for contributing and reporting back this it's appreciated :)
@intika is right.
It goes like this:
Firefox Setup 63.0.3.exe > setup.exe (in tmp) > system.dll and nsExec.dll
I have uploaded them here (from the official Mozilla build) :
Nothing we can do about it.
Closing this as wontfix... thanks again for taking time for the report
Below are some my analysis inside HA and VT.
Hybrid Analysis - HERE VirusTotal - HERE
But there is 2 file detected as malicious
Check it out for file intergrity