a38dbe9b85a9b2d55b96ab456da00a39b40b38c67c6557f69954b070fda9fb94

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Sep-21 14:14:42
Detected languages English - United States
Debug artifacts desktop-launcher.pdb
Comments
LegalCopyright License: MPL 2
CompanyName Mozilla Foundation
FileDescription
FileVersion 156.0.1
ProductVersion 156.0.1
InternalName
LegalTrademarks Mozilla
OriginalFilename desktop-launcher.exe
ProductName Firefox
BuildID 20260921121718

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • download.mozilla.org
  • https://www.mozilla.org
  • https://www.mozilla.org/firefox/new/
  • mozilla.org
  • www.mozilla.org
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
 Can access the registry:
  • RegGetValueW
 Can create temporary files:
  • CreateFileW
  • GetTempPathW
 Has Internet access capabilities:
  • WinHttpConnect
  • WinHttpOpen
  • WinHttpOpenRequest
  • WinHttpQueryDataAvailable
  • WinHttpQueryHeaders
  • WinHttpReadData
  • WinHttpReceiveResponse
  • WinHttpSendRequest
  • WinHttpSetStatusCallback
Info The PE is digitally signed. Signer: Mozilla Corporation
Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Safe VirusTotal score: 0/71 (Scanned on 2026-09-23 03:16:33) All the AVs think this file is safe.

Hashes

MD5 196ca6b3f3e5aff58e06281182862c14 🔍
SHA1 fe737232c54d0138ee2bbe3ca47001edb235c4e6 🔍
SHA256 a38dbe9b85a9b2d55b96ab456da00a39b40b38c67c6557f69954b070fda9fb94 🔍
SHA3 3ba38221557304d09e54053e67a322aefd43f78396d97a6e05e48e57d1ab51d2 🔍
SSDeep 6144:3JODzzHTejS/q97frT2uQUHqER70E9P0rc25PvMXDsBRHJeqo:3JgTe4q97fVRzR70E9P0xZUzwHJen 🔍
Imports Hash ccdb603157b5619d36fce9cf87287a20 🔍

DOS Header

e_magic MZ
e_cblp 0x78
e_cp 0x1
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0
e_ss 0
e_sp 0
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x78

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 8
TimeDateStamp 2026-Sep-21 14:14:42
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x35000
SizeOfInitializedData 0x2a000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000000F910 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x75000
SizeOfHeaders 0x400
Checksum 0x6fb48
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x800000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 1a01c3277bfb8ff57eea56f85122e7c9 🔍
SHA1 f526636bc22f0d2b8d1236524a5e4c5fc4941e35 🔍
SHA256 7ea5951c2c81e769ac335e3299a9fc423aa483d74c1f66e8c87072aeb42e3423 🔍
SHA3 555b100562c126ce2b5cd1115b7d298729bcb5ee5844cea52f30204a357a4e36 🔍
VirtualSize 0x34f52
VirtualAddress 0x1000
SizeOfRawData 0x35000
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.46667

.rdata

MD5 f908db2c133b5c69578579eba6a20815 🔍
SHA1 dddc07756804e5f1ad3894d7092d96d87423c718 🔍
SHA256 b068d6f6d2f9cf55856ad865873a701e6bc9a77c983f0dec56aa19348cc42a52 🔍
SHA3 2290a92072a3c25b49c26a7c73a978da0ad746be079225ee9436217b78a866cc 🔍
VirtualSize 0x130bc
VirtualAddress 0x36000
SizeOfRawData 0x13200
PointerToRawData 0x35400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.03553

.data

MD5 13373b856984d102b989697410a89100 🔍
SHA1 a4f858e50e045515e2878b480d6c83d339fcd5ef 🔍
SHA256 53446e2a74c6ab700140c665801ea812889cee0efe1c0009bdd9e9340db7af4e 🔍
SHA3 2143f00b569ba9c26fb37e1253fbbbd724ac1e46cdd5dcd2f380001beb1f87b6 🔍
VirtualSize 0x125d8
VirtualAddress 0x4a000
SizeOfRawData 0x1400
PointerToRawData 0x48600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.76811

.pdata

MD5 391f3bfc89715ad9eb7f6ec18e38a08d 🔍
SHA1 e7ff115bf46c3d9e8f84e655f6033bb34c75381b 🔍
SHA256 e4fb2a47eecd5185ff3851690ddaba2e9d73fd8040a5c9f750fbc5a81d84eead 🔍
SHA3 1d3dbc55a59816646f614ab52d08c3d107c68923ba82054704cd030edc759c79 🔍
VirtualSize 0x2a90
VirtualAddress 0x5d000
SizeOfRawData 0x2c00
PointerToRawData 0x49a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.44947

.fptable

MD5 bf619eac0cdf3f68d496ea9344137e8b 🔍
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍
VirtualSize 0x100
VirtualAddress 0x60000
SizeOfRawData 0x200
PointerToRawData 0x4c600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

_RDATA

MD5 61eb8ac85a50b2a3efb250d5a3e300ce 🔍
SHA1 26dd2dec41ae35d93b968787bcda4326f02409b4 🔍
SHA256 498b309441364f8a35b36fe8ea0be466e0ade9806686094dfa935909e6364d3a 🔍
SHA3 be2d9a06b98b1121a76febcd12094ab46550a5b8c44ff556ed64fb121affd724 🔍
VirtualSize 0x444
VirtualAddress 0x61000
SizeOfRawData 0x600
PointerToRawData 0x4c800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.96762

.rsrc

MD5 582c79c79f4823376e804a81cc9d5946 🔍
SHA1 51bfe931af5facd131f9d0bc66e526c8154fddd8 🔍
SHA256 05810f7375041189870e1541762fe0aa616c124adfc92794ef4971578e5665bd 🔍
SHA3 58e3b7ff91eccac187a6000bd38d0669dd6f4399fa02ee2f09e05c140b54d8ce 🔍
VirtualSize 0x119c0
VirtualAddress 0x62000
SizeOfRawData 0x11a00
PointerToRawData 0x4ce00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.50466

.reloc

MD5 3b1e5a27851ec01cdecb7c648f9f3684 🔍
SHA1 0d3e3c9104bc5ce7bc40538bf442d3ef92ed45ef 🔍
SHA256 6762f512fecefd3f2c65c0efbee7a226cd9464d3fe0db8391c3de0708595ef1d 🔍
SHA3 2bb23986f4d1a641ab4431c76d1d38a2cf2b9b786ade8cd29cf57915d24e56cc 🔍
VirtualSize 0xa3c
VirtualAddress 0x74000
SizeOfRawData 0xc00
PointerToRawData 0x5e800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.09717

Imports

ADVAPI32.dll RegGetValueW
RPCRT4.dll UuidCreate
SHELL32.dll ShellExecuteExW
WINHTTP.dll WinHttpConnect
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetStatusCallback
KERNEL32.dll CloseHandle
CompareStringW
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetUserDefaultLCID
GetUserDefaultLocaleName
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile

Delayed Imports

IDENTITY

Type LIMITEDACCESSFEATURE
Language English - United States
Codepage UNKNOWN
Size 0x38
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.091
MD5 36e6ead806a73a5a3bc2ce4f4271ab6a 🔍
SHA1 81a2c65bdd3b4acf0fe59c492c9b5bb0f707d5f7 🔍
SHA256 fb2ff6c0153228b41d9724562e77a0c6216a2e7ae8eddd4dd55441d737b3c73b 🔍
SHA3 5b806c73e94216aafbd67724a64e74cabcfcfa7e7f6a2d95945725baca3646d0 🔍

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x528
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.57637
MD5 9ef9b589dc222b68dfe323d5ee586f4f 🔍
SHA1 75ccee51a1649ada9714577db4de84aa9edfeb98 🔍
SHA256 b011ce8cc0a9e0a2ea6371c54ced59a6f85df39bd472074b3a1b9c6bb091286f 🔍
SHA3 f7ccda6497d58946266df08a9f420b5b1fda472489c899c8bfbcaf22755616f1 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1428
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.12398
MD5 a3b195fb3ad80f9bc343ecad38dc8afe 🔍
SHA1 789e46dce6cd6f2b39f45fc2325f7b6e40fcf558 🔍
SHA256 31d1c398501702fbfa6c88109d8b563d39af9c58c86fbe102c826a9faae88dc9 🔍
SHA3 f2965cc559f17e81f30b4be22ab171cb3560a100ecb203190346323876365110 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2d28
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.10872
MD5 4f2e710bc461acacfeca9eef116767b7 🔍
SHA1 6ac5300341438710a2e8e5a543e04bfbb83e30b4 🔍
SHA256 4aad470e8f0abbf5f77d188ea8cb3b0f90a45a82249105aa40d58bd1cd58fbaf 🔍
SHA3 f0eb6f7f8b924c5ec6c1cb3d7dcadd5bb10c38a05c6dce7ddf053638cef802f9 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xc42a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.9823
Detected Filetype PNG graphic file
MD5 042a45cb9cdee4528142ae10e2501114 🔍
SHA1 3653ec6f84b853ff508156f32b77fa31062caa0b 🔍
SHA256 48bd16b990c81456412f9339aaf0e748d2f58a039f210a7d88492b57bddf5107 🔍
SHA3 9f6ee9b3adc81cb87ac8b95d5da51b0d5cd1a985bce460fc9872f3072bb28662 🔍

1 (#2)

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x3e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.49052
Detected Filetype Icon file
MD5 d2c3d620e4104e75278efffa93cbd1fa 🔍
SHA1 b2557517c0ab93855317dc913fa1f2a1be131636 🔍
SHA256 7c8159b1a924a1f8d00dab0db314e134adf76477364789133e124ff1f68fb0fc 🔍
SHA3 6e8063f8c857c32ccc29e68994d363787a00d6c31b6026e24f9cc725452f0e82 🔍

1 (#3)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x32c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.3577
MD5 54e8b1b482f404715c58a3a6b83cc5eb 🔍
SHA1 37346b67bf1d1db59a802f3cfb669ea4b00751d6 🔍
SHA256 13596cd43518306516ee2d380a813ee08b5e524563620284932241d2d456b27d 🔍
SHA3 0bf81b97b48a0f4c665cfd4429fbc8ff7a26ba94346bd5d69f17b2b04ca39db8 🔍

IDR_COMCTL32_MANIFEST

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x466
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.75547
MD5 937073371446fc86768c5b3cbfe989f6 🔍
SHA1 b667cca0233d5543ed89c689b393689acc93047a 🔍
SHA256 61efea6e786ac0b04926b579c026851ac2a375afdbe42bc39d652ba78fdeea83 🔍
SHA3 5f22d7859d29785bc6d6707e25b9be9e7b9afd377b37c63a17bff1921f4db11d 🔍

1 (#4)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x466
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.75547
MD5 937073371446fc86768c5b3cbfe989f6 🔍
SHA1 b667cca0233d5543ed89c689b393689acc93047a 🔍
SHA256 61efea6e786ac0b04926b579c026851ac2a375afdbe42bc39d652ba78fdeea83 🔍
SHA3 5f22d7859d29785bc6d6707e25b9be9e7b9afd377b37c63a17bff1921f4db11d 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 156.0.1.575
ProductVersion 156.0.1.575
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DLL
Language UNKNOWN
Comments
LegalCopyright License: MPL 2
CompanyName Mozilla Foundation
FileDescription
FileVersion (#2) 156.0.1
ProductVersion (#2) 156.0.1
InternalName
LegalTrademarks Mozilla
OriginalFilename desktop-launcher.exe
ProductName Firefox
BuildID 20260921121718
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Sep-21 14:14:42
Version 0.0
SizeofData 45
AddressOfRawData 0x44ecc
PointerToRawData 0x442cc
Referenced File desktop-launcher.pdb

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x14004a0c0
GuardCFCheckFunctionPointer 5368992440
GuardCFDispatchFunctionPointer 0
GuardCFFunctionTable 0
GuardCFFunctionCount 0
GuardFlags (EMPTY)
CodeIntegrity.Flags 0
CodeIntegrity.Catalog 0
CodeIntegrity.CatalogOffset 0
CodeIntegrity.Reserved 0
GuardAddressTakenIatEntryTable 0
GuardAddressTakenIatEntryCount 0
GuardLongJumpTargetTable 0
GuardLongJumpTargetCount 0

RICH Header

Errors

Leave a comment

No comments yet.