Hash mismatch for Firefox Installer and VirusTotal alert
Hello,
I downloaded the Firefox installer from the official website (https://www.mozilla.org/ru/firefox/download/thanks/). After downloading, I checked the SHA256 hash of the file: 051deb55cf9579e1f9b3bad71ec4a390353c568ef21849671953d08343b4e890.
However, this hash does not match any of the hashes listed on the official page: https://ftp.mozilla.org/pub/firefox/releases/133.0.3/SHA256SUMS.
Additionally, a VirusTotal scan flagged the file with a potential virus alert.
Could you clarify why there might be a discrepancy in the hash and whether this file could be legitimate?
Thank you.
所有回复 (1)
You likely downloaded a small online Firefox stub installer and not the full offline Firefox setup for Windows.
The VirusTotal scan having one result is likely a false positive. I am guessing it was about the 7zip (7zs.sfx) as some antivirus still trip up on that for the last couple decades even. Also this false positive tend to happen with the small online stub installer and not the full offline setup.
Try the full setup for Windows from https://www.mozilla.orgfirefox/all/desktop-release/win64/ and pick your language.
Since these files are compressed with 7zip you can extract the full setup and use it like it was a .zip version instead if you wanted to.