03-07-2017 , 08:51 PM
https://www.virustotal.com/en/file/a499f.../analysis/ SHA256: a499f6cc268bc0a1edc1f4bb9a4feb84de0ca754f4c2167e96351bebe60d9bdd
File name: Firefox Setup Stub 52.0.exe
Detection ratio: 1 / 61
Analysis date: 2017-03-07 15:53:28 UTC ( 3 hours, 52 minutes ago )Rising Trojan.Win32.Zurgop.r (classic) 20170307( big false positive by Rising Security Company from China calling this version of Firefox a Trojan) Signature verification Signed file, verified signature
Signing date 10:39 PM 3/2/2017
Signers
[+] Mozilla Corporation
[+] DigiCert SHA2 Assured ID Code Signing CA
[+] DigiCert
Counter signers
[+] Symantec Time Stamping Services Signer - G4
[+] Symantec Time Stamping Services CA - G2
[+] Thawte Timestamping CA
Packers identified
F-PROT NSIS, 7Z, UPX
PEiD UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser VirusTotal metadata
First submission 2017-03-07 15:53:28 UTC ( 3 hours, 52 minutes ago )
Last submission 2017-03-07 15:53:28 UTC ( 3 hours, 52 minutes ago )
File names Firefox Setup Stub 52.0.exe
Firefox Setup Stub 52.0[1].exe: https://www.mozilla.org/en-US/firefox/52...easenotes/ See what’s new in Firefox!
Release Notes tell you what’s new in Firefox. As always, we welcome your feedback. You can also file a bug in Bugzilla or see the system requirements of this release.
DESKTOP ANDROID IOS OTHER RELEASES
52.0
Firefox Release
March 7, 2017
Version 52.0, first offered to Release channel users on March 7, 2017
We'd also like to extend a special thank you to all of the new Mozillians who contributed to this release of Firefox!
new
Added support for WebAssembly, an emerging standard that brings near-native performance to Web-based games, apps, and software libraries without the use of plugins.
Added automatic captive portal detection, for easier access to Wi-Fi hotspots. When accessing the Internet via a captive portal, Firefox will alert users and open the portal login page in a new tab.
Added user warnings for non-secure HTTP pages with logins. Firefox now displays a “This connection is not secure” message when users click into the username and password fields on pages that don’t use HTTPS.
Implemented the Strict Secure Cookies specification which forbids insecure HTTP sites from setting cookies with the "secure" attribute. In some cases, this will prevent an insecure site from setting a cookie with the same name as an existing "secure" cookie from the same base domain.
Enhanced Sync to allow users to send and open tabs from one device to another.
fixed
Various security fixes
Improved text input for third-party keyboard layouts on Windows. This will address some keyboard layouts that
have chained dead keys
input two or more characters with a non-printable key or a dead key sequence
input a character even when a dead key sequence failed to compose a character
changed
Removed support for Netscape Plugin API (NPAPI) plugins other than Flash. Silverlight, Java, Acrobat and the like are no longer supported.
Removed Battery Status API to reduce fingerprinting of users by trackers
Improved experience for downloads:
Notification in the toolbar when a download fails
Quick access to five most recent downloads rather than three
Larger buttons for canceling and restarting downloads
Display (but allow users to override) an “Untrusted Connection” error when encountering SHA-1 certificates that chain up to a root certificate included in Mozilla’s CA Certificate Program. (Note: Firefox continues to permit SHA-1 certificates that chain to manually imported root certificates.) Read more about the Mozilla Security Team’s plans to deprecate SHA-1
Migrated Firefox users on Windows XP and Windows Vista operating systems to the extended support release (ESR) version of Firefox.
When not using Direct2D on Windows, Skia is used for content rendering
developer
Enabled CSS Grid Layout, opening up a world of new possibilities for graphic design
Redesigned Responsive Design Mode to include device selection, network throttling, and more
Improved security for screen sharing, which now shows a preview and no longer requires a whitelisted domain
Developer Information
unresolved
Google Hangouts temporarily won't work
File name: Firefox Setup Stub 52.0.exe
Detection ratio: 1 / 61
Analysis date: 2017-03-07 15:53:28 UTC ( 3 hours, 52 minutes ago )Rising Trojan.Win32.Zurgop.r (classic) 20170307( big false positive by Rising Security Company from China calling this version of Firefox a Trojan) Signature verification Signed file, verified signature
Signing date 10:39 PM 3/2/2017
Signers
[+] Mozilla Corporation
[+] DigiCert SHA2 Assured ID Code Signing CA
[+] DigiCert
Counter signers
[+] Symantec Time Stamping Services Signer - G4
[+] Symantec Time Stamping Services CA - G2
[+] Thawte Timestamping CA
Packers identified
F-PROT NSIS, 7Z, UPX
PEiD UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser VirusTotal metadata
First submission 2017-03-07 15:53:28 UTC ( 3 hours, 52 minutes ago )
Last submission 2017-03-07 15:53:28 UTC ( 3 hours, 52 minutes ago )
File names Firefox Setup Stub 52.0.exe
Firefox Setup Stub 52.0[1].exe: https://www.mozilla.org/en-US/firefox/52...easenotes/ See what’s new in Firefox!
Release Notes tell you what’s new in Firefox. As always, we welcome your feedback. You can also file a bug in Bugzilla or see the system requirements of this release.
DESKTOP ANDROID IOS OTHER RELEASES
52.0
Firefox Release
March 7, 2017
Version 52.0, first offered to Release channel users on March 7, 2017
We'd also like to extend a special thank you to all of the new Mozillians who contributed to this release of Firefox!
new
Added support for WebAssembly, an emerging standard that brings near-native performance to Web-based games, apps, and software libraries without the use of plugins.
Added automatic captive portal detection, for easier access to Wi-Fi hotspots. When accessing the Internet via a captive portal, Firefox will alert users and open the portal login page in a new tab.
Added user warnings for non-secure HTTP pages with logins. Firefox now displays a “This connection is not secure” message when users click into the username and password fields on pages that don’t use HTTPS.
Implemented the Strict Secure Cookies specification which forbids insecure HTTP sites from setting cookies with the "secure" attribute. In some cases, this will prevent an insecure site from setting a cookie with the same name as an existing "secure" cookie from the same base domain.
Enhanced Sync to allow users to send and open tabs from one device to another.
fixed
Various security fixes
Improved text input for third-party keyboard layouts on Windows. This will address some keyboard layouts that
have chained dead keys
input two or more characters with a non-printable key or a dead key sequence
input a character even when a dead key sequence failed to compose a character
changed
Removed support for Netscape Plugin API (NPAPI) plugins other than Flash. Silverlight, Java, Acrobat and the like are no longer supported.
Removed Battery Status API to reduce fingerprinting of users by trackers
Improved experience for downloads:
Notification in the toolbar when a download fails
Quick access to five most recent downloads rather than three
Larger buttons for canceling and restarting downloads
Display (but allow users to override) an “Untrusted Connection” error when encountering SHA-1 certificates that chain up to a root certificate included in Mozilla’s CA Certificate Program. (Note: Firefox continues to permit SHA-1 certificates that chain to manually imported root certificates.) Read more about the Mozilla Security Team’s plans to deprecate SHA-1
Migrated Firefox users on Windows XP and Windows Vista operating systems to the extended support release (ESR) version of Firefox.
When not using Direct2D on Windows, Skia is used for content rendering
developer
Enabled CSS Grid Layout, opening up a world of new possibilities for graphic design
Redesigned Responsive Design Mode to include device selection, network throttling, and more
Improved security for screen sharing, which now shows a preview and no longer requires a whitelisted domain
Developer Information
unresolved
Google Hangouts temporarily won't work
