CatrinePerm[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

CatrinePerm.rar
Size

24.5MB
MD5

e833142567e944de45c2bbbd04ec1c94
SHA1

338ddfae6afc0607b4a468851a8adefc0413ae53
SHA256

ef5945a33a45fb59f4a1bfaecda7cbef60b5db36f86809f6a4330cebbaac6107
SHA512

732b290cb1fc5394e45cca33fbf295460bb52f79268a5da5ecd0203aed2017aa287c2514919a72b20aacfb7bc5e67407c7f0cbcf7df13209cc2a1af7e9ca09cd
SSDEEP

786432:zHrztN3gfmrIT0rXzmpgwfXhf232fSiiARZ:zHr73xrIsMgwPhfJf/i2

Score

3^/10

Malware Config

Signatures

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/CatrinePerm/CatrinePerm.dll
unpack001/CatrinePerm/CatrinePerm.exe
unpack001/CatrinePerm/DiscordRPC.dll
unpack001/CatrinePerm/SevenZipSharp.dll
unpack001/CatrinePerm/SharpCompress.dll
unpack001/CatrinePerm/ZstdSharp.dll
unpack001/CatrinePerm/de/MahApps.Metro.resources.dll
unpack001/CatrinePerm/x64/7z.dll
unpack001/CatrinePerm/x86/7z.dll

Files

CatrinePerm.rar
.rar
CatrinePerm/CatrinePerm.deps.json
CatrinePerm/CatrinePerm.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\source\repos\CatrinePerm\CatrinePerm\obj\Debug\net8.0-windows7.0\CatrinePerm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 809KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/CatrinePerm.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-65B163B9-50F0.pma
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Crashpad/settings.dat
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Crashpad/throttle_store.dat
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/AssistanceHome/AssistanceHomeSQLite
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000002
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000003
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000004
.gz
f_000004
.js
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000005
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000006
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000007
.jpg
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000008
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000009
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000a
.jpg
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000b
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000c
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000d
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000e
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000f
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000010
.jpg
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000011
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000012
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000013
.jpg
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000014
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000015
.jpg
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000016
.jpg
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000017
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000018
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000019
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001a
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001b
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001c
.gz
f_00001c
.js
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001d
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001e
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001f
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000020
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/17abe5cbf8e5042e_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/21996d712c785472_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/30ab4069bcd4e960_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/335e69ddec2b9ac6_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/35ce725529a79732_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/53611fecf8b5ab80_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/6b13b2ad57dadf37_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/6ca01847ae342030_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/6d73f76c70358990_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/79d2cf8cda0d8aa6_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/8301336a9b75ec4b_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/834cfe7d63b4b479_0
.js
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/88afa63b5a682cef_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/96eea5c3db09f29f_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/a339c5999f21cd94_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/ac7388bb9795c190_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/ae6ccf8b9a62537e_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/b1239ec9ef9d858a_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/ba647133983b3317_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/c6c261abb39a3230_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/c92d76186b98552a_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/cc76f77be3608249_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/d6217a15be89da98_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/db254fa43a4b0925_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/dcf100e5a0773ca4_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/e7761c9c06a0c862_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/e99af175840b606b_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/e9cf90305a4e5760_0
.js
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/e9f246f3601efd79_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/f87619814a94dcb8_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/fa35a32ef5949d6f_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/index
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/wasm/index
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/DIPS
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/DawnCache/data_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/DawnCache/data_1
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/DawnCache/data_2
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/DawnCache/data_3
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/DawnCache/index
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Rules/000003.log
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Rules/LOG
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Scripts/LOG
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension State/000003.log
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension State/CURRENT
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension State/LOG
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension State/LOG.old
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/ExtensionActivityComp
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/ExtensionActivityEdge
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Favicons
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/GPUCache/data_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/GPUCache/data_1
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/GPUCache/data_2
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/GPUCache/data_3
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/GPUCache/index
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/History
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/HubApps Icons
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/IndexedDB/https_www.youtube.com_0.indexeddb.leveldb/000003.log
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/IndexedDB/https_www.youtube.com_0.indexeddb.leveldb/CURRENT
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/IndexedDB/https_www.youtube.com_0.indexeddb.leveldb/LOG
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/IndexedDB/https_www.youtube.com_0.indexeddb.leveldb/LOG.old
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/IndexedDB/https_www.youtube.com_0.indexeddb.leveldb/MANIFEST-000001
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Local Storage/leveldb/000003.log
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Login Data
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network Action Predictor
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/Cookies
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/Network Persistent State
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/Reporting and NEL
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/TransportSecurity
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/Trust Tokens
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Preferences
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/PreferredApps
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/README
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Secure Preferences
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/379f1cbab5b08b6fc9e08681e42d8be311441c88/index.txt
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Session Storage/000003.log
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Session Storage/CURRENT
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Session Storage/LOG
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Session Storage/LOG.old
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Shared Dictionary/db
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Top Sites
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Visited Links
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Web Data
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/WebStorage/QuotaManager
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/databases/Databases.db
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/LOG
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/data_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/data_1
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/data_2
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/data_3
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000001
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000002
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000003
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000004
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000005
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000006
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000007
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000008
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000009
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_00000a
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/index
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GraphiteDawnCache/data_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GraphiteDawnCache/data_1
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GraphiteDawnCache/data_2
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GraphiteDawnCache/data_3
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GraphiteDawnCache/index
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Last Version
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Local State
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/ShaderCache/data_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/ShaderCache/data_1
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/ShaderCache/data_2
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/ShaderCache/data_3
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/ShaderCache/index
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings_F95BA787499AB4FA9EFFF472CE383A14
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSynchronousLookupUris
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSynchronousLookupUris_0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-0
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/synchronousLookupUris
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/synchronousLookupUris_636976985063396749.rel.v2
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic_170540185939602997400506234197983529371
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Variations
CatrinePerm/CatrinePerm.pdb
CatrinePerm/CatrinePerm.runtimeconfig.json
CatrinePerm/ControlzEx.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2031 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:da:f6:5b:c1:f7:8e:bf:fe:27:3b:ec:2e:2e:39:7f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

08-10-2019 00:00

Not After

10-02-2021 12:00

Subject

CN=Jan Karger,O=Jan Karger,L=Alsdorf,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-10-2019 00:00

Not After

17-10-2030 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:1b:96:ae:b6:58:56:9b:84:6f:0f:3b:77:26:dd:0a:6a:24:78:3a:65:11:eb:10:86:b4:b0:a3:cf:01:4d:aa
Signer

Actual PE Digest

35:1b:96:ae:b6:58:56:9b:84:6f:0f:3b:77:26:dd:0a:6a:24:78:3a:65:11:eb:10:86:b4:b0:a3:cf:01:4d:aa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/ControlzEx/obj/Release/netcoreapp3.1/ControlzEx.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/DiscordRPC.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/home/runner/work/discord-rpc-csharp/discord-rpc-csharp/DiscordRPC/obj/Release/netstandard2.0/DiscordRPC.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/Logs/2024-02-03_19-23-50.txt
CatrinePerm/Logs/2024-02-03_19-23-57.txt
CatrinePerm/Logs/2024-02-03_19-23-58.txt
CatrinePerm/Logs/2024-02-03_19-24-00.txt
CatrinePerm/Logs/2024-02-03_19-24-03.txt
CatrinePerm/Logs/2024-02-03_19-24-04.txt
CatrinePerm/Logs/2024-02-03_19-24-05.txt
CatrinePerm/Logs/2024-02-03_19-24-06.txt
CatrinePerm/Logs/2024-02-03_19-24-07.txt
CatrinePerm/Logs/2024-02-03_19-41-22.txt
CatrinePerm/Logs/2024-02-03_19-41-23.txt
CatrinePerm/Logs/2024-02-03_19-41-25.txt
CatrinePerm/Logs/2024-02-03_19-41-26.txt
CatrinePerm/Logs/2024-02-03_19-41-27.txt
CatrinePerm/Logs/2024-02-03_19-41-28.txt
CatrinePerm/Logs/2024-02-03_19-42-58.txt
CatrinePerm/Logs/2024-02-03_19-42-59.txt
CatrinePerm/Logs/2024-02-03_19-43-01.txt
CatrinePerm/Logs/2024-02-03_19-43-03.txt
CatrinePerm/Logs/2024-02-03_19-43-05.txt
CatrinePerm/Logs/2024-02-03_19-43-06.txt
CatrinePerm/MahApps.Metro.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2013 12:00

Not After

15-01-2038 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:f1:3e:74:a9:79:54:cf:03:51:52:9b:70:d4:f0
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

18-04-2023 00:00

Not After

26-04-2026 23:59

Subject

CN=Jan Karger,O=Jan Karger,L=Alsdorf,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:1e:ec:a7:66:66:83:c5:1f:a7:6d:72:d9:01:79:94:8b:0c:95:54:ac:eb:b2:38:a2:71:8a:9c:51:fe:8b:a3
Signer

Actual PE Digest

b2:1e:ec:a7:66:66:83:c5:1f:a7:6d:72:d9:01:79:94:8b:0c:95:54:ac:eb:b2:38:a2:71:8a:9c:51:fe:8b:a3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/MahApps.Metro/obj/Release/netcoreapp3.1/MahApps.Metro.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/Microsoft.Web.WebView2.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:42:ad:e5:78:ee:a0:6d:20:8d:33:a4:c6:0b:0a:5d:f8:13:cd:39:29:a1:c6:1f:01:eb:4d:57:be:0f:c7:8f
Signer

Actual PE Digest

fb:42:ad:e5:78:ee:a0:6d:20:8d:33:a4:c6:0b:0a:5d:f8:13:cd:39:29:a1:c6:1f:01:eb:4d:57:be:0f:c7:8f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 511KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/Microsoft.Web.WebView2.WinForms.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

88:58:e9:39:22:ef:bd:b9:cf:7f:29:da:fa:1b:5a:81:31:d0:04:6c:7f:4d:19:fe:d9:4d:26:d4:ce:85:16:ce
Signer

Actual PE Digest

88:58:e9:39:22:ef:bd:b9:cf:7f:29:da:fa:1b:5a:81:31:d0:04:6c:7f:4d:19:fe:d9:4d:26:d4:ce:85:16:ce

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.WinForms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/Microsoft.Web.WebView2.Wpf.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

87:c4:36:cb:0e:e1:b3:07:6d:73:65:8a:2a:49:c4:70:3e:5c:7b:e2:dd:26:ac:05:9a:df:55:d7:4b:a9:0e:0a
Signer

Actual PE Digest

87:c4:36:cb:0e:e1:b3:07:6d:73:65:8a:2a:49:c4:70:3e:5c:7b:e2:dd:26:ac:05:9a:df:55:d7:4b:a9:0e:0a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.Wpf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/Microsoft.Xaml.Behaviors.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:70:59:ad:aa:78:86:c6:47:85:ea:1b:87:a0:00:b2:d1:5e:5b:cf:dd:04:ef:db:2b:4b:d6:87:9f:33:63:5e
Signer

Actual PE Digest

0f:70:59:ad:aa:78:86:c6:47:85:ea:1b:87:a0:00:b2:d1:5e:5b:cf:dd:04:ef:db:2b:4b:d6:87:9f:33:63:5e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\305\s\src\Microsoft.Xaml.Behaviors\obj\Release\netcoreapp3.0\Microsoft.Xaml.Behaviors.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2031 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27-04-2018 12:41

Not After

27-04-2028 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

25-10-2018 00:00

Not After

29-10-2021 12:00

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:c0:2c:41:83:44:ba:ad:9f:7a:0a:20:0d:a7:27:4f:fe:7f:9a:a8:86:d1:c1:4b:9d:c6:49:d0:d6:2c:94:42
Signer

Actual PE Digest

ee:c0:2c:41:83:44:ba:ad:9f:7a:0a:20:0d:a7:27:4f:fe:7f:9a:a8:86:d1:c1:4b:9d:c6:49:d0:d6:2c:94:42

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/netstandard2.0/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 669KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/Revo_Uninstaller_Pro_5.1.1.rar
.rar .ps1 polyglot
Revo_Uninstaller_Pro_5.1.1/Crack/Readme.txt
Revo_Uninstaller_Pro_5.1.1/Crack/revouninstallerpro5.lic
.ps1
Revo_Uninstaller_Pro_5.1.1/RevoUninProSetup.exe
.exe windows:5 windows x86 arch:x86

20dd26497880c05caed9305b3c8b9109

Code Sign

0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29
Certificate

Issuer

CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:ed:13:4b:1e:cf:56:1a:9e:b5:b0:53:88:bf:f0:47
Certificate

Issuer

CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

27-07-2021 00:00

Not After

06-08-2024 23:59

Subject

SERIALNUMBER=200204019,CN=VS Revo Group Ltd.,O=VS Revo Group Ltd.,L=Ruse,C=BG,1.3.6.1.4.1.311.60.2.1.3=#13024247,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29
Certificate

Issuer

CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:ed:13:4b:1e:cf:56:1a:9e:b5:b0:53:88:bf:f0:47
Certificate

Issuer

CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

27-07-2021 00:00

Not After

06-08-2024 23:59

Subject

SERIALNUMBER=200204019,CN=VS Revo Group Ltd.,O=VS Revo Group Ltd.,L=Ruse,C=BG,1.3.6.1.4.1.311.60.2.1.3=#13024247,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:41:0e:e8:91:aa:11:18:6f:71:f4:20:fb:50:a5:f0:67:82:21:5f:63:98:32:39:fd:66:15:8d:88:9a:97:f1
Signer

Actual PE Digest

1f:41:0e:e8:91:aa:11:18:6f:71:f4:20:fb:50:a5:f0:67:82:21:5f:63:98:32:39:fd:66:15:8d:88:9a:97:f1

Digest Algorithm

sha256

PE Digest Matches

true

93:0a:25:af:e0:8a:c2:47:fd:eb:df:34:ce:d6:9f:ab:8e:7d:cc:f5
Signer

Actual PE Digest

93:0a:25:af:e0:8a:c2:47:fd:eb:df:34:ce:d6:9f:ab:8e:7d:cc:f5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CloseHandle
Sleep

comctl32

InitCommonControls

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CatrinePerm/SevenZipSharp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Work\Misc\7zip\CS\SevenZipSharp\SevenZip\obj\Release\SevenZipSharp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/SharpCompress.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\sharpcompress\sharpcompress\src\SharpCompress\obj\Release\net8.0\SharpCompress.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 556KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/System.CodeDom.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-05-2023 19:03

Not After

08-05-2024 19:03

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bd:a3:9a:1f:6d:f3:90:61:6f:40:e2:3f:8c:bd:ea:1a:06:2c:1f:e4:3f:20:36:4a:dd:8b:60:d2:11:ff:26:5c
Signer

Actual PE Digest

bd:a3:9a:1f:6d:f3:90:61:6f:40:e2:3f:8c:bd:ea:1a:06:2c:1f:e4:3f:20:36:4a:dd:8b:60:d2:11:ff:26:5c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.CodeDom/Release/net8.0/System.CodeDom.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/System.Management.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-05-2023 19:03

Not After

08-05-2024 19:03

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b8:96:b4:54:f5:5f:55:38:b2:6f:02:28:c9:f8:a9:f7:3d:7e:2b:9c:c0:7d:8c:3d:6f:f0:8e:5d:e5:99:31:ed
Signer

Actual PE Digest

b8:96:b4:54:f5:5f:55:38:b2:6f:02:28:c9:f8:a9:f7:3d:7e:2b:9c:c0:7d:8c:3d:6f:f0:8e:5d:e5:99:31:ed

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Management/Release/net8.0/System.Management.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/ZstdSharp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\c#\ZstdSharp.v2\src\ZstdSharp\obj\Release\net8.0\ZstdSharp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/de/MahApps.Metro.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/machines.xml
.xml
CatrinePerm/runtimes/win-arm64/native/WebView2Loader.dll
CatrinePerm/runtimes/win-x64/native/WebView2Loader.dll
.dll windows:5 windows x64 arch:x64

aaa8a1994a594e4746a652eda600aebf

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

11:2f:9e:af:30:a1:74:58:83:c3:cf:70:a4:dd:e8:68:d5:b2:e7:29:bc:c3:2e:c1:bd:d4:df:5d:b0:3a:be:09
Signer

Actual PE Digest

11:2f:9e:af:30:a1:74:58:83:c3:cf:70:a4:dd:e8:68:d5:b2:e7:29:bc:c3:2e:c1:bd:d4:df:5d:b0:3a:be:09

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\WebView2Loader.dll.pdb

Imports

kernel32

CloseHandle
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/runtimes/win-x86/native/WebView2Loader.dll
.dll windows:5 windows x86 arch:x86

608537c42a46a95b31cc1ef01ab6eeb0

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d0:2f:ed:73:e2:4a:21:77:59:87:7e:e9:8a:85:c6:96:b6:15:49:a0:2c:23:06:11:4d:df:10:a8:94:16:88:9c
Signer

Actual PE Digest

d0:2f:ed:73:e2:4a:21:77:59:87:7e:e9:8a:85:c6:96:b6:15:49:a0:2c:23:06:11:4d:df:10:a8:94:16:88:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release\WebView2Loader.dll.pdb

Imports

kernel32

CloseHandle
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/runtimes/win/lib/net8.0/System.Management.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-05-2023 19:03

Not After

08-05-2024 19:03

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:77:8d:dc:15:13:5f:8d:f7:74:af:cd:a0:90:66:08:03:f3:bf:ee:4b:1b:24:2b:69:b4:8c:4e:9f:11:64:aa
Signer

Actual PE Digest

49:77:8d:dc:15:13:5f:8d:f7:74:af:cd:a0:90:66:08:03:f3:bf:ee:4b:1b:24:2b:69:b4:8c:4e:9f:11:64:aa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Management/Release/net8.0-windows/System.Management.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/x64/7z.dll
.dll windows:4 windows x64 arch:x64

22ca0a9fa52636be630f15cf36ce68e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

oleaut32

VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
SysFreeString
SysAllocStringLen

user32

CharUpperW

advapi32

SystemFunction036

msvcrt

strlen
__CxxFrameHandler
wcscmp
realloc
memcpy
free
_CxxThrowException
malloc
memcmp
_purecall
memset
__C_specific_handler
_beginthreadex
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
memmove

kernel32

InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
Sleep
CreateEventW
WaitForSingleObject
VirtualFree
VirtualAlloc
SetEvent
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WaitForMultipleObjects
GlobalMemoryStatusEx
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
WriteFile
ReadFile
GetFileAttributesW
GetModuleHandleA
FindFirstFileW
FindClose
GetCurrentThreadId
GetLastError
CloseHandle
CreateFileW
SetFileAttributesW
GetProcAddress
CreateDirectoryW
DeleteFileW
GetTempPathW
SetLastError
GetCurrentProcessId
GetTickCount

Exports

Exports

CreateDecoder
CreateEncoder
CreateObject
GetHandlerProperty
GetHandlerProperty2
GetHashers
GetIsArc
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetCaseSensitive
SetCodecs
SetLargePageMode

Sections

.text
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CatrinePerm/x86/7z.dll
.dll windows:4 windows x86 arch:x86

cb36a1cf1dc11c2231c4415295a85d2f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

SysAllocStringByteLen
SysAllocStringLen
SysAllocString
SysFreeString
VariantCopy
VariantClear

user32

CharUpperW

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
memset
realloc
strlen
wcscmp
memcpy
memmove
free
_CxxThrowException
malloc
memcmp
_purecall
__CxxFrameHandler

kernel32

GetModuleHandleW
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
SetEvent
CreateEventW
WaitForSingleObject
InterlockedIncrement
VirtualFree
VirtualAlloc
LoadLibraryW
FreeLibrary
QueryPerformanceCounter
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExW
WaitForMultipleObjects
GlobalMemoryStatus
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
WriteFile
ReadFile
GetFileAttributesW
GetModuleHandleA
GetLastError
CloseHandle
CreateFileW
SetFileAttributesW
GetProcAddress
CreateDirectoryW
DeleteFileW
SetLastError
GetTempPathW
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
FindClose
FindFirstFileW

Exports

Exports

CreateDecoder
CreateEncoder
CreateObject
GetHandlerProperty
GetHandlerProperty2
GetHashers
GetIsArc
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetCaseSensitive
SetCodecs
SetLargePageMode

Sections

.text
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 809KB - Virtual size: 808KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 398KB - Virtual size: 398KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

08:da:f6:5b:c1:f7:8e:bf:fe:27:3b:ec:2e:2e:39:7fCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

35:1b:96:ae:b6:58:56:9b:84:6f:0f:3b:77:26:dd:0a:6a:24:78:3a:65:11:eb:10:86:b4:b0:a3:cf:01:4d:aaSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 235KB - Virtual size: 234KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 80KB - Virtual size: 79KB

.rsrc Size: 1024B - Virtual size: 916B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:aa:f1:3e:74:a9:79:54:cf:03:51:52:9b:70:d4:f0Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

.text
Size: 809KB - Virtual size: 808KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 398KB - Virtual size: 398KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

08:da:f6:5b:c1:f7:8e:bf:fe:27:3b:ec:2e:2e:39:7f
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

35:1b:96:ae:b6:58:56:9b:84:6f:0f:3b:77:26:dd:0a:6a:24:78:3a:65:11:eb:10:86:b4:b0:a3:cf:01:4d:aa
Signer

.text
Size: 235KB - Virtual size: 234KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 80KB - Virtual size: 79KB

.rsrc
Size: 1024B - Virtual size: 916B

.reloc
Size: 512B - Virtual size: 12B

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:aa:f1:3e:74:a9:79:54:cf:03:51:52:9b:70:d4:f0
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

b2:1e:ec:a7:66:66:83:c5:1f:a7:6d:72:d9:01:79:94:8b:0c:95:54:ac:eb:b2:38:a2:71:8a:9c:51:fe:8b:a3
Signer

.text
Size: 3.4MB - Virtual size: 3.4MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

fb:42:ad:e5:78:ee:a0:6d:20:8d:33:a4:c6:0b:0a:5d:f8:13:cd:39:29:a1:c6:1f:01:eb:4d:57:be:0f:c7:8f
Signer

.text
Size: 511KB - Virtual size: 511KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

88:58:e9:39:22:ef:bd:b9:cf:7f:29:da:fa:1b:5a:81:31:d0:04:6c:7f:4d:19:fe:d9:4d:26:d4:ce:85:16:ce
Signer

.text
Size: 27KB - Virtual size: 27KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

87:c4:36:cb:0e:e1:b3:07:6d:73:65:8a:2a:49:c4:70:3e:5c:7b:e2:dd:26:ac:05:9a:df:55:d7:4b:a9:0e:0a
Signer

.text
Size: 35KB - Virtual size: 34KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate