EverEdge[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

EverEdge.zip
Size

268.9MB
MD5

58d476d6d62a703e95f696dcafe713ea
SHA1

e651d95f1f85e051d0c0656def3ddf220453c36b
SHA256

17ad52bf7bc0a65323ee8ddf392c39833559a65b74dfeaa683fb46157984e530
SHA512

02f4011f0d031ac3d76c1375ea875c5164db7d413b8490b7f3dd84025e94ba505fab1ce8d78c4e8144e8a0a1237ced06f0014cc0e710a60662da081d388a2acc
SSDEEP

6291456:Evy/Y1b7FyuB0DT5noFqm1KbCKRCJtMAZgwiYIr:nYPkVGjPo5AZ/y

Score

3^/10

Malware Config

Signatures

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EverEdge/Data/EverEdge.dll
unpack001/EverEdge/Data/EverEdge.exe
unpack001/EverEdge/Data/NAudio.Asio.dll
unpack001/EverEdge/Data/NAudio.Core.dll
unpack001/EverEdge/Data/NAudio.Midi.dll
unpack001/EverEdge/Data/NAudio.Wasapi.dll
unpack001/EverEdge/Data/NAudio.WinForms.dll
unpack001/EverEdge/Data/NAudio.WinMM.dll
unpack001/EverEdge/Data/NAudio.dll
unpack001/EverEdge/Data/WpfAnimatedGif.dll

Files

EverEdge.zip
.zip
EverEdge/Data/EverEdge.deps.json
EverEdge/Data/EverEdge.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\kruig\source\repos\EverEdge\obj\Debug\net7.0-windows\EverEdge.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.4MB - Virtual size: 10.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/EverEdge.exe
.exe windows:6 windows x64 arch:x64

78da59308ee0088a874b4a6cdd7d91bd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

Imports

kernel32

FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
RtlUnwind
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_exit
_cexit
_seh_filter_exe
_set_app_type
_configure_wide_argv
__p___argc
_initialize_wide_environment
_get_initial_wide_environment
__p___wargv
exit
terminate
_errno
_initterm
abort
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
setvbuf
__stdio_common_vswprintf
__stdio_common_vsnwprintf_s
__stdio_common_vfwprintf
_set_fmode
fflush
_wfsopen
__p__commode
fputws
__acrt_iob_func
fputwc

api-ms-win-crt-heap-l1-1-0

_callnewh
_set_new_mode
free
malloc
calloc

api-ms-win-crt-string-l1-1-0

_wcsdup
strcpy_s
wcsnlen
toupper
wcsncmp
strcspn

api-ms-win-crt-convert-l1-1-0

_wtoi
wcstoul

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
localeconv
_lock_locales
_unlock_locales
___mb_cur_max_func
___lc_codepage_func
setlocale
___lc_locale_name_func
__pctype_func

api-ms-win-crt-math-l1-1-0

frexp
__setusermatherr

api-ms-win-crt-time-l1-1-0

_time64
wcsftime
_gmtime64_s

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-6587639E-4D60.pma
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Crashpad/settings.dat
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Crashpad/throttle_store.dat
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/AssistanceHome/AssistanceHomeSQLite
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001
.gz
f_000001
.html .js polyglot
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000002
.gz
f_000002
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000003
.gz
f_000003
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000004
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000005
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000006
.gz
f_000006
.js
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000007
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000008
.gz
f_000008
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000009
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000a
.gz
f_00000a
.js
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000b
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000c
.gz
f_00000c
.js
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000d
.gz
f_00000d
.js
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000e
.gz
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000f
.gz
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000010
.gz
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000011
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000012
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000013
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000014
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000015
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000016
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000017
.gz
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000018
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000019
.gz
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001a
.gz
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001b
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001c
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/1195959597acee32_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/159548d7373f4094_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/16295d3d755731cd_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/1dcfae6816b83551_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/2bdc707094aacad1_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/3f2ff64828fd38d2_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/4365261b30f6977e_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/5af5b45fc89d6a06_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/63d9d022afa2a04a_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/647c362804b27f08_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/68e6c40ff749e0aa_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/72053fc2a0aca23a_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/7adedcfad059c153_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/8033e8b1f13ca00d_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/88f39968932a743f_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/8cbe34d64dd52e34_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/8e073450b73a8120_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/8e6acaf50baa25eb_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/8f3c2e2c260a7099_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/98065b50f042b72b_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/9a13e5cea6282c08_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/9a2d86e9274f59ba_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/9cb666c719955a9f_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/9f46d1af4d3f53a6_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/a7b748b68d9331e8_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/ae8cc36cf3412996_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/d9d1346c9d3916ad_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/dbbb1d9b494320d6_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/dbd82cf4b35cd9c3_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/eafa4a91c794d878_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/ef3ea9980aa9e624_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/f8f58366a4de63ef_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/wasm/index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/DIPS
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/DawnCache/data_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/DawnCache/data_1
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/DawnCache/data_2
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/DawnCache/data_3
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/DawnCache/index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension Rules/000003.log
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension Rules/LOG
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension Scripts/LOG
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension State/000003.log
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension State/CURRENT
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension State/LOG
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension State/LOG.old
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/ExtensionActivityComp
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/ExtensionActivityEdge
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Favicons
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/GPUCache/data_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/GPUCache/data_1
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/GPUCache/data_2
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/GPUCache/data_3
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/GPUCache/index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/History
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Local Storage/leveldb/000003.log
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Login Data
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Network Action Predictor
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Network/Cookies
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Network/Network Persistent State
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Network/Reporting and NEL
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Network/TransportSecurity
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Network/Trust Tokens
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Preferences
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/PreferredApps
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/README
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Secure Preferences
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/f56bfb986dc43b7d725c421f76f49d3c8fb9acfd/3720c8e5-6a6d-40c8-98ff-2c41534195d7/index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/f56bfb986dc43b7d725c421f76f49d3c8fb9acfd/3720c8e5-6a6d-40c8-98ff-2c41534195d7/index-dir/the-real-index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/f56bfb986dc43b7d725c421f76f49d3c8fb9acfd/b0d2563f-5a5f-4e8b-af05-fd8477996fd0/index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/f56bfb986dc43b7d725c421f76f49d3c8fb9acfd/b0d2563f-5a5f-4e8b-af05-fd8477996fd0/index-dir/the-real-index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/f56bfb986dc43b7d725c421f76f49d3c8fb9acfd/index.txt
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Session Storage/000003.log
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Session Storage/CURRENT
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Session Storage/LOG
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Session Storage/LOG.old
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Shared Dictionary/db
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Top Sites
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Visited Links
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/Web Data
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/WebStorage/QuotaManager
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/databases/Databases.db
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/shared_proto_db/LOG
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GrShaderCache/data_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GrShaderCache/data_1
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GrShaderCache/data_2
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GrShaderCache/data_3
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GrShaderCache/f_000001
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GrShaderCache/f_000002
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GrShaderCache/f_000003
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GrShaderCache/index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GraphiteDawnCache/data_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GraphiteDawnCache/data_1
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GraphiteDawnCache/data_2
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GraphiteDawnCache/data_3
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/GraphiteDawnCache/index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Last Version
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Local State
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/ShaderCache/data_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/ShaderCache/data_1
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/ShaderCache/data_2
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/ShaderCache/data_3
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/ShaderCache/index
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings_F95BA787499AB4FA9EFFF472CE383A14
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSynchronousLookupUris
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSynchronousLookupUris_0
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/RemoteData/synchronousLookupUris
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/RemoteData/synchronousLookupUris_638343870221005468
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic_638004170464094982
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/local/downloadCache
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/local/downloadCache_
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/local/uriCache
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/SmartScreen/local/uriCache_
EverEdge/Data/EverEdge.exe.WebView2/EBWebView/Variations
EverEdge/Data/EverEdge.pdb
EverEdge/Data/EverEdge.runtimeconfig.json
EverEdge/Data/Microsoft.Web.WebView2.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:42:ad:e5:78:ee:a0:6d:20:8d:33:a4:c6:0b:0a:5d:f8:13:cd:39:29:a1:c6:1f:01:eb:4d:57:be:0f:c7:8f
Signer

Actual PE Digest

fb:42:ad:e5:78:ee:a0:6d:20:8d:33:a4:c6:0b:0a:5d:f8:13:cd:39:29:a1:c6:1f:01:eb:4d:57:be:0f:c7:8f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 511KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/Microsoft.Web.WebView2.WinForms.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

88:58:e9:39:22:ef:bd:b9:cf:7f:29:da:fa:1b:5a:81:31:d0:04:6c:7f:4d:19:fe:d9:4d:26:d4:ce:85:16:ce
Signer

Actual PE Digest

88:58:e9:39:22:ef:bd:b9:cf:7f:29:da:fa:1b:5a:81:31:d0:04:6c:7f:4d:19:fe:d9:4d:26:d4:ce:85:16:ce

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.WinForms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/Microsoft.Web.WebView2.Wpf.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

87:c4:36:cb:0e:e1:b3:07:6d:73:65:8a:2a:49:c4:70:3e:5c:7b:e2:dd:26:ac:05:9a:df:55:d7:4b:a9:0e:0a
Signer

Actual PE Digest

87:c4:36:cb:0e:e1:b3:07:6d:73:65:8a:2a:49:c4:70:3e:5c:7b:e2:dd:26:ac:05:9a:df:55:d7:4b:a9:0e:0a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.Wpf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/NAudio.Asio.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\markh\code\mygithub\NAudio\NAudio.Asio\obj\Release\netstandard2.0\NAudio.Asio.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/NAudio.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\markh\code\mygithub\NAudio\NAudio.Core\obj\Release\netstandard2.0\NAudio.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/NAudio.Midi.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\markh\code\mygithub\NAudio\NAudio.Midi\obj\Release\netstandard2.0\NAudio.Midi.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/NAudio.Wasapi.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\markh\code\mygithub\NAudio\NAudio.Wasapi\obj\Release\netstandard2.0\NAudio.Wasapi.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/NAudio.WinForms.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\markh\code\mygithub\NAudio\NAudio.WinForms\obj\Release\netcoreapp3.1\NAudio.WinForms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/NAudio.WinMM.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\markh\code\mygithub\NAudio\NAudio.WinMM\obj\Release\netstandard2.0\NAudio.WinMM.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/NAudio.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\markh\code\mygithub\NAudio\NAudio\obj\Release\net6.0-windows\NAudio.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/01/2021, 00:00

Not After

14/01/2046, 23:59

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/07/2021, 00:00

Not After

14/07/2031, 23:59

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Not Before

13/08/2021, 00:00

Not After

29/10/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:a2:f8:77:6a:5b:04:46:97:f9:ac:0c:85:0b:b9:3c:9d:a2:ac:a9:a3:72:91:5b:d9:ed:db:47:d0:c2:9e:3d
Signer

Actual PE Digest

12:a2:f8:77:6a:5b:04:46:97:f9:ac:0c:85:0b:b9:3c:9d:a2:ac:a9:a3:72:91:5b:d9:ed:db:47:d0:c2:9e:3d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net6.0/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 681KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/System.Speech.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/05/2023, 19:03

Not After

08/05/2024, 19:03

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

75:5a:8d:f8:cb:72:cd:10:e0:20:fa:aa:03:31:0f:7d:e0:63:90:90:e4:03:54:ca:6d:2e:47:e6:07:70:8c:4c
Signer

Actual PE Digest

75:5a:8d:f8:cb:72:cd:10:e0:20:fa:aa:03:31:0f:7d:e0:63:90:90:e4:03:54:ca:6d:2e:47:e6:07:70:8c:4c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Speech/Release/net7.0/System.Speech.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/WpfAnimatedGif.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\wpfanimatedgif\WpfAnimatedGif\obj\Release\netcoreapp3.0\WpfAnimatedGif.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/audio/140HZ.wav
EverEdge/Data/audio/146HZ.wav
EverEdge/Data/audio/doubleSnap.wav
EverEdge/Data/audio/licking1.wav
EverEdge/Data/audio/licking2.wav
EverEdge/Data/audio/licking3.wav
EverEdge/Data/audio/licking4.wav
EverEdge/Data/audio/moaning.wav
EverEdge/Data/audio/snap.wav
EverEdge/Data/audio/tickLong.wav
EverEdge/Data/buttongradient.png
.png
EverEdge/Data/heartsbgblack.png
.png
EverEdge/Data/pinkbg.png
.png
EverEdge/Data/runtimes/win-arm64/native/WebView2Loader.dll
EverEdge/Data/runtimes/win-x64/native/WebView2Loader.dll
.dll windows:5 windows x64 arch:x64

aaa8a1994a594e4746a652eda600aebf

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

11:2f:9e:af:30:a1:74:58:83:c3:cf:70:a4:dd:e8:68:d5:b2:e7:29:bc:c3:2e:c1:bd:d4:df:5d:b0:3a:be:09
Signer

Actual PE Digest

11:2f:9e:af:30:a1:74:58:83:c3:cf:70:a4:dd:e8:68:d5:b2:e7:29:bc:c3:2e:c1:bd:d4:df:5d:b0:3a:be:09

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\WebView2Loader.dll.pdb

Imports

kernel32

CloseHandle
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/runtimes/win-x86/native/WebView2Loader.dll
.dll windows:5 windows x86 arch:x86

608537c42a46a95b31cc1ef01ab6eeb0

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d0:2f:ed:73:e2:4a:21:77:59:87:7e:e9:8a:85:c6:96:b6:15:49:a0:2c:23:06:11:4d:df:10:a8:94:16:88:9c
Signer

Actual PE Digest

d0:2f:ed:73:e2:4a:21:77:59:87:7e:e9:8a:85:c6:96:b6:15:49:a0:2c:23:06:11:4d:df:10:a8:94:16:88:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release\WebView2Loader.dll.pdb

Imports

kernel32

CloseHandle
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/Data/runtimes/win/lib/net7.0/System.Speech.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/05/2023, 19:03

Not After

08/05/2024, 19:03

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

24:c8:9a:89:08:ad:09:e9:a0:a1:08:83:d0:7a:03:ec:c8:fc:38:c7:65:3a:0b:91:32:10:ab:2c:78:ad:98:c8
Signer

Actual PE Digest

24:c8:9a:89:08:ad:09:e9:a0:a1:08:83:d0:7a:03:ec:c8:fc:38:c7:65:3a:0b:91:32:10:ab:2c:78:ad:98:c8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Speech/Release/net7.0-windows/System.Speech.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 656KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EverEdge/EverEdge.lnk
.lnk

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 10.4MB - Virtual size: 10.4MB

.rsrc Size: 103KB - Virtual size: 102KB

.reloc Size: 512B - Virtual size: 12B

78da59308ee0088a874b4a6cdd7d91bd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

advapi32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

Sections

.text Size: 99KB - Virtual size: 99KB

.rdata Size: 39KB - Virtual size: 39KB

.data Size: 2KB - Virtual size: 5KB

.pdata Size: 5KB - Virtual size: 5KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 103KB - Virtual size: 102KB

.reloc Size: 1024B - Virtual size: 840B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

fb:42:ad:e5:78:ee:a0:6d:20:8d:33:a4:c6:0b:0a:5d:f8:13:cd:39:29:a1:c6:1f:01:eb:4d:57:be:0f:c7:8fSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 511KB - Virtual size: 511KB

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

88:58:e9:39:22:ef:bd:b9:cf:7f:29:da:fa:1b:5a:81:31:d0:04:6c:7f:4d:19:fe:d9:4d:26:d4:ce:85:16:ceSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 27KB - Virtual size: 27KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate

Extended Key Usages

.text
Size: 10.4MB - Virtual size: 10.4MB

.rsrc
Size: 103KB - Virtual size: 102KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 99KB - Virtual size: 99KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 2KB - Virtual size: 5KB

.pdata
Size: 5KB - Virtual size: 5KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 103KB - Virtual size: 102KB

.reloc
Size: 1024B - Virtual size: 840B

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

fb:42:ad:e5:78:ee:a0:6d:20:8d:33:a4:c6:0b:0a:5d:f8:13:cd:39:29:a1:c6:1f:01:eb:4d:57:be:0f:c7:8f
Signer

.text
Size: 511KB - Virtual size: 511KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

88:58:e9:39:22:ef:bd:b9:cf:7f:29:da:fa:1b:5a:81:31:d0:04:6c:7f:4d:19:fe:d9:4d:26:d4:ce:85:16:ce
Signer

.text
Size: 27KB - Virtual size: 27KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

87:c4:36:cb:0e:e1:b3:07:6d:73:65:8a:2a:49:c4:70:3e:5c:7b:e2:dd:26:ac:05:9a:df:55:d7:4b:a9:0e:0a
Signer

.text
Size: 35KB - Virtual size: 34KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 31KB - Virtual size: 31KB

.rsrc
Size: 1024B - Virtual size: 848B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 181KB - Virtual size: 181KB

.rsrc
Size: 1024B - Virtual size: 848B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 43KB - Virtual size: 43KB

.rsrc
Size: 1024B - Virtual size: 848B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 173KB - Virtual size: 172KB

.rsrc
Size: 1024B - Virtual size: 864B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 31KB - Virtual size: 31KB

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 512B - Virtual size: 12B