D:\source\repos\CatrinePerm\CatrinePerm\obj\Debug\net8.0-windows7.0\CatrinePerm.pdb
Overview
overview
10Static
static
3CatrinePer...rm.exe
windows7-x64
10CatrinePer...rm.exe
windows10-2004-x64
10CatrinePer...rm.exe
windows7-x64
10CatrinePer...rm.exe
windows10-2004-x64
10f_000004.js
windows7-x64
3f_000004.js
windows10-2004-x64
3f_00001c.js
windows7-x64
3f_00001c.js
windows10-2004-x64
3CatrinePer...9_0.js
windows7-x64
3CatrinePer...9_0.js
windows10-2004-x64
3CatrinePer...0_0.js
windows7-x64
3CatrinePer...0_0.js
windows10-2004-x64
3CatrinePer...Ex.dll
windows7-x64
1CatrinePer...Ex.dll
windows10-2004-x64
1CatrinePer...PC.dll
windows7-x64
1CatrinePer...PC.dll
windows10-2004-x64
1CatrinePer...ro.dll
windows7-x64
1CatrinePer...ro.dll
windows10-2004-x64
1CatrinePer...re.dll
windows7-x64
1CatrinePer...re.dll
windows10-2004-x64
1CatrinePer...ms.dll
windows7-x64
1CatrinePer...ms.dll
windows10-2004-x64
1CatrinePer...pf.dll
windows7-x64
1CatrinePer...pf.dll
windows10-2004-x64
1CatrinePer...rs.dll
windows7-x64
1CatrinePer...rs.dll
windows10-2004-x64
1CatrinePer...on.dll
windows7-x64
1CatrinePer...on.dll
windows10-2004-x64
1Revo_Unins...up.exe
windows7-x64
7Revo_Unins...up.exe
windows10-2004-x64
7CatrinePer...rp.dll
windows7-x64
1CatrinePer...rp.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
CatrinePerm/CatrinePerm.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
CatrinePerm/CatrinePerm.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
CatrinePerm/CatrinePerm.exe
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
CatrinePerm/CatrinePerm.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
f_000004.js
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
f_000004.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
f_00001c.js
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
f_00001c.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/834cfe7d63b4b479_0.js
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/834cfe7d63b4b479_0.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/e9cf90305a4e5760_0.js
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/e9cf90305a4e5760_0.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
CatrinePerm/ControlzEx.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
CatrinePerm/ControlzEx.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
CatrinePerm/DiscordRPC.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
CatrinePerm/DiscordRPC.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
CatrinePerm/MahApps.Metro.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
CatrinePerm/MahApps.Metro.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
CatrinePerm/Microsoft.Web.WebView2.Core.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
CatrinePerm/Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
CatrinePerm/Microsoft.Web.WebView2.WinForms.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
CatrinePerm/Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
CatrinePerm/Microsoft.Web.WebView2.Wpf.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
CatrinePerm/Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
CatrinePerm/Microsoft.Xaml.Behaviors.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
CatrinePerm/Microsoft.Xaml.Behaviors.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
CatrinePerm/Newtonsoft.Json.dll
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
CatrinePerm/Newtonsoft.Json.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
Revo_Uninstaller_Pro_5.1.1/RevoUninProSetup.exe
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
Revo_Uninstaller_Pro_5.1.1/RevoUninProSetup.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
CatrinePerm/SevenZipSharp.dll
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
CatrinePerm/SevenZipSharp.dll
Resource
win10v2004-20240709-en
General
-
Target
CatrinePerm.rar
-
Size
35.3MB
-
MD5
93f852fd8dd762369828309c5514693a
-
SHA1
3771382cf84495e1aaffa6350d958320492695f3
-
SHA256
8e5387b8e5b1d7437979f00b42b6b481281f9ced1c3a7101f6a5832402563e5b
-
SHA512
45d8330041d3a03d26ed224aaa70663b1c91955159f9dfb23ed1d757c8018ea4279d7aca2f25b1c89f60f85e48f71242d326cdede6e9e1314b0bee3dc56a6eae
-
SSDEEP
786432:kuH8IqFfBevGJk7CZzIDe3AWTdzmpgwfXhf232fSiiAMkA4:jHQBeGDx3AcFMgwPhfJf/if4
Malware Config
Signatures
-
Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/CatrinePerm/CatrinePerm.dll unpack001/CatrinePerm/CatrinePerm.exe unpack001/CatrinePerm/DiscordRPC.dll unpack001/CatrinePerm/SevenZipSharp.dll unpack001/CatrinePerm/SharpCompress.dll unpack001/CatrinePerm/ZstdSharp.dll unpack001/CatrinePerm/de/MahApps.Metro.resources.dll unpack001/CatrinePerm/x64/7z.dll unpack001/CatrinePerm/x86/7z.dll
Files
-
CatrinePerm.rar.rar
-
CatrinePerm/CatrinePerm.deps.json
-
CatrinePerm/CatrinePerm.dll.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 809KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/CatrinePerm.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11.2MB - Virtual size: 11.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-65B163B9-50F0.pma
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Crashpad/settings.dat
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Crashpad/throttle_store.dat
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/AssistanceHome/AssistanceHomeSQLite
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000002
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000003
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000004.gz
-
f_000004.js
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000005
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000006
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000007.jpg
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000008
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000009
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000a.jpg
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000b
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000c
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000d
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000e
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000f
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000010.jpg
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000011
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000012
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000013.jpg
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000014
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000015.jpg
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000016.jpg
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000017
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000018
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000019
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001a
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001b
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001c.gz
-
f_00001c.js
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001d
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001e
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001f
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000020
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/17abe5cbf8e5042e_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/21996d712c785472_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/30ab4069bcd4e960_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/335e69ddec2b9ac6_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/35ce725529a79732_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/53611fecf8b5ab80_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/6b13b2ad57dadf37_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/6ca01847ae342030_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/6d73f76c70358990_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/79d2cf8cda0d8aa6_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/8301336a9b75ec4b_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/834cfe7d63b4b479_0.js
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/88afa63b5a682cef_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/96eea5c3db09f29f_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/a339c5999f21cd94_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/ac7388bb9795c190_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/ae6ccf8b9a62537e_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/b1239ec9ef9d858a_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/ba647133983b3317_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/c6c261abb39a3230_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/c92d76186b98552a_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/cc76f77be3608249_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/d6217a15be89da98_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/db254fa43a4b0925_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/dcf100e5a0773ca4_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/e7761c9c06a0c862_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/e99af175840b606b_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/e9cf90305a4e5760_0.js
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/e9f246f3601efd79_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/f87619814a94dcb8_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/fa35a32ef5949d6f_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/index
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/wasm/index
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/DIPS
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/DawnCache/data_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/DawnCache/data_1
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/DawnCache/data_2
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/DawnCache/data_3
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/DawnCache/index
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Rules/000003.log
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Rules/LOG
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Scripts/LOG
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension State/000003.log
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension State/CURRENT
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension State/LOG
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension State/LOG.old
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/ExtensionActivityComp
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/ExtensionActivityEdge
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Favicons
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/GPUCache/data_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/GPUCache/data_1
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/GPUCache/data_2
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/GPUCache/data_3
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/GPUCache/index
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/History
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/HubApps Icons
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/IndexedDB/https_www.youtube.com_0.indexeddb.leveldb/000003.log
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/IndexedDB/https_www.youtube.com_0.indexeddb.leveldb/CURRENT
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/IndexedDB/https_www.youtube.com_0.indexeddb.leveldb/LOG
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/IndexedDB/https_www.youtube.com_0.indexeddb.leveldb/LOG.old
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/IndexedDB/https_www.youtube.com_0.indexeddb.leveldb/MANIFEST-000001
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Local Storage/leveldb/000003.log
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Login Data
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network Action Predictor
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/Cookies
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/Network Persistent State
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/Reporting and NEL
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/TransportSecurity
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Network/Trust Tokens
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Preferences
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/PreferredApps
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/README
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Secure Preferences
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Service Worker/CacheStorage/379f1cbab5b08b6fc9e08681e42d8be311441c88/index.txt
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Session Storage/000003.log
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Session Storage/CURRENT
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Session Storage/LOG
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Session Storage/LOG.old
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Shared Dictionary/db
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Top Sites
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Visited Links
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Web Data
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/WebStorage/QuotaManager
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/databases/Databases.db
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/LOG
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/data_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/data_1
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/data_2
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/data_3
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000001
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000002
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000003
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000004
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000005
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000006
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000007
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000008
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_000009
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/f_00000a
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GrShaderCache/index
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GraphiteDawnCache/data_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GraphiteDawnCache/data_1
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GraphiteDawnCache/data_2
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GraphiteDawnCache/data_3
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/GraphiteDawnCache/index
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Last Version
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Local State
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/ShaderCache/data_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/ShaderCache/data_1
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/ShaderCache/data_2
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/ShaderCache/data_3
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/ShaderCache/index
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings_F95BA787499AB4FA9EFFF472CE383A14
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSynchronousLookupUris
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSynchronousLookupUris_0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-0
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/synchronousLookupUris
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/synchronousLookupUris_636976985063396749.rel.v2
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic_170540185939602997400506234197983529371
-
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Variations
-
CatrinePerm/CatrinePerm.runtimeconfig.json
-
CatrinePerm/ControlzEx.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before10-11-2006 00:00Not After10-11-2031 00:00SubjectCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:da:f6:5b:c1:f7:8e:bf:fe:27:3b:ec:2e:2e:39:7fCertificate
IssuerCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before08-10-2019 00:00Not After10-02-2021 12:00SubjectCN=Jan Karger,O=Jan Karger,L=Alsdorf,C=DEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22-10-2013 12:00Not After22-10-2028 12:00SubjectCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-10-2019 00:00Not After17-10-2030 00:00SubjectCN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07-01-2016 12:00Not After07-01-2031 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
35:1b:96:ae:b6:58:56:9b:84:6f:0f:3b:77:26:dd:0a:6a:24:78:3a:65:11:eb:10:86:b4:b0:a3:cf:01:4d:aaSigner
Actual PE Digest35:1b:96:ae:b6:58:56:9b:84:6f:0f:3b:77:26:dd:0a:6a:24:78:3a:65:11:eb:10:86:b4:b0:a3:cf:01:4d:aaDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
/_/src/ControlzEx/obj/Release/netcoreapp3.1/ControlzEx.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 235KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/DiscordRPC.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
/home/runner/work/discord-rpc-csharp/discord-rpc-csharp/DiscordRPC/obj/Release/netstandard2.0/DiscordRPC.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/Logs/2024-02-03_19-23-50.txt
-
CatrinePerm/Logs/2024-02-03_19-23-57.txt
-
CatrinePerm/Logs/2024-02-03_19-23-58.txt
-
CatrinePerm/Logs/2024-02-03_19-24-00.txt
-
CatrinePerm/Logs/2024-02-03_19-24-03.txt
-
CatrinePerm/Logs/2024-02-03_19-24-04.txt
-
CatrinePerm/Logs/2024-02-03_19-24-05.txt
-
CatrinePerm/Logs/2024-02-03_19-24-06.txt
-
CatrinePerm/Logs/2024-02-03_19-24-07.txt
-
CatrinePerm/MahApps.Metro.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2013 12:00Not After15-01-2038 12:00SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
03:aa:f1:3e:74:a9:79:54:cf:03:51:52:9b:70:d4:f0Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before18-04-2023 00:00Not After26-04-2026 23:59SubjectCN=Jan Karger,O=Jan Karger,L=Alsdorf,C=DEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before21-09-2022 00:00Not After21-11-2033 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
b2:1e:ec:a7:66:66:83:c5:1f:a7:6d:72:d9:01:79:94:8b:0c:95:54:ac:eb:b2:38:a2:71:8a:9c:51:fe:8b:a3Signer
Actual PE Digestb2:1e:ec:a7:66:66:83:c5:1f:a7:6d:72:d9:01:79:94:8b:0c:95:54:ac:eb:b2:38:a2:71:8a:9c:51:fe:8b:a3Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
/_/src/MahApps.Metro/obj/Release/netcoreapp3.1/MahApps.Metro.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/Microsoft.Web.WebView2.Core.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19-10-2023 19:51Not After16-10-2024 19:51SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08-07-2011 20:59Not After08-07-2026 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
fb:42:ad:e5:78:ee:a0:6d:20:8d:33:a4:c6:0b:0a:5d:f8:13:cd:39:29:a1:c6:1f:01:eb:4d:57:be:0f:c7:8fSigner
Actual PE Digestfb:42:ad:e5:78:ee:a0:6d:20:8d:33:a4:c6:0b:0a:5d:f8:13:cd:39:29:a1:c6:1f:01:eb:4d:57:be:0f:c7:8fDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 511KB - Virtual size: 511KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/Microsoft.Web.WebView2.WinForms.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19-10-2023 19:51Not After16-10-2024 19:51SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08-07-2011 20:59Not After08-07-2026 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
88:58:e9:39:22:ef:bd:b9:cf:7f:29:da:fa:1b:5a:81:31:d0:04:6c:7f:4d:19:fe:d9:4d:26:d4:ce:85:16:ceSigner
Actual PE Digest88:58:e9:39:22:ef:bd:b9:cf:7f:29:da:fa:1b:5a:81:31:d0:04:6c:7f:4d:19:fe:d9:4d:26:d4:ce:85:16:ceDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.WinForms.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/Microsoft.Web.WebView2.Wpf.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19-10-2023 19:51Not After16-10-2024 19:51SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08-07-2011 20:59Not After08-07-2026 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
87:c4:36:cb:0e:e1:b3:07:6d:73:65:8a:2a:49:c4:70:3e:5c:7b:e2:dd:26:ac:05:9a:df:55:d7:4b:a9:0e:0aSigner
Actual PE Digest87:c4:36:cb:0e:e1:b3:07:6d:73:65:8a:2a:49:c4:70:3e:5c:7b:e2:dd:26:ac:05:9a:df:55:d7:4b:a9:0e:0aDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.Wpf.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/Microsoft.Xaml.Behaviors.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before02-05-2019 21:37Not After02-05-2020 21:37SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08-07-2011 20:59Not After08-07-2026 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0f:70:59:ad:aa:78:86:c6:47:85:ea:1b:87:a0:00:b2:d1:5e:5b:cf:dd:04:ef:db:2b:4b:d6:87:9f:33:63:5eSigner
Actual PE Digest0f:70:59:ad:aa:78:86:c6:47:85:ea:1b:87:a0:00:b2:d1:5e:5b:cf:dd:04:ef:db:2b:4b:d6:87:9f:33:63:5eDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
E:\A\_work\305\s\src\Microsoft.Xaml.Behaviors\obj\Release\netcoreapp3.0\Microsoft.Xaml.Behaviors.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/Newtonsoft.Json.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate
IssuerCN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before10-11-2006 00:00Not After10-11-2031 00:00SubjectCN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23Certificate
IssuerCN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before27-04-2018 12:41Not After27-04-2028 12:41SubjectCN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7eCertificate
IssuerCN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=USNot Before25-10-2018 00:00Not After29-10-2021 12:00SubjectSERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-01-2021 00:00Not After06-01-2031 00:00SubjectCN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07-01-2016 12:00Not After07-01-2031 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ee:c0:2c:41:83:44:ba:ad:9f:7a:0a:20:0d:a7:27:4f:fe:7f:9a:a8:86:d1:c1:4b:9d:c6:49:d0:d6:2c:94:42Signer
Actual PE Digestee:c0:2c:41:83:44:ba:ad:9f:7a:0a:20:0d:a7:27:4f:fe:7f:9a:a8:86:d1:c1:4b:9d:c6:49:d0:d6:2c:94:42Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
/_/Src/Newtonsoft.Json/obj/Release/netstandard2.0/Newtonsoft.Json.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 669KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/Revo_Uninstaller_Pro_5.1.1.rar.rar
-
Revo_Uninstaller_Pro_5.1.1/Crack/Readme.txt
-
Revo_Uninstaller_Pro_5.1.1/Crack/revouninstallerpro5.lic
-
Revo_Uninstaller_Pro_5.1.1/RevoUninProSetup.exe.exe windows:5 windows x86 arch:x86
20dd26497880c05caed9305b3c8b9109
Code Sign
0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29Certificate
IssuerCN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:ed:13:4b:1e:cf:56:1a:9e:b5:b0:53:88:bf:f0:47Certificate
IssuerCN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before27-07-2021 00:00Not After06-08-2024 23:59SubjectSERIALNUMBER=200204019,CN=VS Revo Group Ltd.,O=VS Revo Group Ltd.,L=Ruse,C=BG,1.3.6.1.4.1.311.60.2.1.3=#13024247,2.5.4.15=#131450726976617465204f7267616e697a6174696f6eExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before21-09-2022 00:00Not After21-11-2033 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29Certificate
IssuerCN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:ed:13:4b:1e:cf:56:1a:9e:b5:b0:53:88:bf:f0:47Certificate
IssuerCN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before27-07-2021 00:00Not After06-08-2024 23:59SubjectSERIALNUMBER=200204019,CN=VS Revo Group Ltd.,O=VS Revo Group Ltd.,L=Ruse,C=BG,1.3.6.1.4.1.311.60.2.1.3=#13024247,2.5.4.15=#131450726976617465204f7267616e697a6174696f6eExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before21-09-2022 00:00Not After21-11-2033 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
1f:41:0e:e8:91:aa:11:18:6f:71:f4:20:fb:50:a5:f0:67:82:21:5f:63:98:32:39:fd:66:15:8d:88:9a:97:f1Signer
Actual PE Digest1f:41:0e:e8:91:aa:11:18:6f:71:f4:20:fb:50:a5:f0:67:82:21:5f:63:98:32:39:fd:66:15:8d:88:9a:97:f1Digest Algorithmsha256PE Digest Matchestrue93:0a:25:af:e0:8a:c2:47:fd:eb:df:34:ce:d6:9f:ab:8e:7d:cc:f5Signer
Actual PE Digest93:0a:25:af:e0:8a:c2:47:fd:eb:df:34:ce:d6:9f:ab:8e:7d:cc:f5Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
user32
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CloseHandle
Sleep
comctl32
InitCommonControls
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 21KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
CatrinePerm/SevenZipSharp.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
D:\Work\Misc\7zip\CS\SevenZipSharp\SevenZip\obj\Release\SevenZipSharp.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/SharpCompress.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\sharpcompress\sharpcompress\src\SharpCompress\obj\Release\net8.0\SharpCompress.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/System.CodeDom.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7cCertificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before11-05-2023 19:03Not After08-05-2024 19:03SubjectCN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08-07-2011 20:59Not After08-07-2026 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
bd:a3:9a:1f:6d:f3:90:61:6f:40:e2:3f:8c:bd:ea:1a:06:2c:1f:e4:3f:20:36:4a:dd:8b:60:d2:11:ff:26:5cSigner
Actual PE Digestbd:a3:9a:1f:6d:f3:90:61:6f:40:e2:3f:8c:bd:ea:1a:06:2c:1f:e4:3f:20:36:4a:dd:8b:60:d2:11:ff:26:5cDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
/_/artifacts/obj/System.CodeDom/Release/net8.0/System.CodeDom.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/System.Management.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7cCertificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before11-05-2023 19:03Not After08-05-2024 19:03SubjectCN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08-07-2011 20:59Not After08-07-2026 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
b8:96:b4:54:f5:5f:55:38:b2:6f:02:28:c9:f8:a9:f7:3d:7e:2b:9c:c0:7d:8c:3d:6f:f0:8e:5d:e5:99:31:edSigner
Actual PE Digestb8:96:b4:54:f5:5f:55:38:b2:6f:02:28:c9:f8:a9:f7:3d:7e:2b:9c:c0:7d:8c:3d:6f:f0:8e:5d:e5:99:31:edDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
/_/artifacts/obj/System.Management/Release/net8.0/System.Management.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/ZstdSharp.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\Work\c#\ZstdSharp.v2\src\ZstdSharp\obj\Release\net8.0\ZstdSharp.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 394KB - Virtual size: 393KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/de/MahApps.Metro.resources.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/machines.xml.xml
-
CatrinePerm/runtimes/win-arm64/native/WebView2Loader.dll
-
CatrinePerm/runtimes/win-x64/native/WebView2Loader.dll.dll windows:5 windows x64 arch:x64
aaa8a1994a594e4746a652eda600aebf
Code Sign
33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19-10-2023 19:51Not After16-10-2024 19:51SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08-07-2011 20:59Not After08-07-2026 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
11:2f:9e:af:30:a1:74:58:83:c3:cf:70:a4:dd:e8:68:d5:b2:e7:29:bc:c3:2e:c1:bd:d4:df:5d:b0:3a:be:09Signer
Actual PE Digest11:2f:9e:af:30:a1:74:58:83:c3:cf:70:a4:dd:e8:68:d5:b2:e7:29:bc:c3:2e:c1:bd:d4:df:5d:b0:3a:be:09Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\_work\e\src\out\Release_x64\WebView2Loader.dll.pdb
Imports
kernel32
CloseHandle
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
Exports
Exports
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gxfg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retplne Size: 512B - Virtual size: 140B
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/runtimes/win-x86/native/WebView2Loader.dll.dll windows:5 windows x86 arch:x86
608537c42a46a95b31cc1ef01ab6eeb0
Code Sign
33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19-10-2023 19:51Not After16-10-2024 19:51SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08-07-2011 20:59Not After08-07-2026 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d0:2f:ed:73:e2:4a:21:77:59:87:7e:e9:8a:85:c6:96:b6:15:49:a0:2c:23:06:11:4d:df:10:a8:94:16:88:9cSigner
Actual PE Digestd0:2f:ed:73:e2:4a:21:77:59:87:7e:e9:8a:85:c6:96:b6:15:49:a0:2c:23:06:11:4d:df:10:a8:94:16:88:9cDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
D:\a\_work\e\src\out\Release\WebView2Loader.dll.pdb
Imports
kernel32
CloseHandle
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
Exports
Exports
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/runtimes/win/lib/net8.0/System.Management.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7bCertificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before11-05-2023 19:03Not After08-05-2024 19:03SubjectCN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08-07-2011 20:59Not After08-07-2026 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
49:77:8d:dc:15:13:5f:8d:f7:74:af:cd:a0:90:66:08:03:f3:bf:ee:4b:1b:24:2b:69:b4:8c:4e:9f:11:64:aaSigner
Actual PE Digest49:77:8d:dc:15:13:5f:8d:f7:74:af:cd:a0:90:66:08:03:f3:bf:ee:4b:1b:24:2b:69:b4:8c:4e:9f:11:64:aaDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
/_/artifacts/obj/System.Management/Release/net8.0-windows/System.Management.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/x64/7z.dll.dll windows:4 windows x64 arch:x64
22ca0a9fa52636be630f15cf36ce68e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
oleaut32
VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
user32
CharUpperW
advapi32
SystemFunction036
msvcrt
strlen
__CxxFrameHandler
wcscmp
realloc
memcpy
free
_CxxThrowException
malloc
memcmp
_purecall
memset
__C_specific_handler
_beginthreadex
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
memmove
kernel32
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
Sleep
CreateEventW
WaitForSingleObject
VirtualFree
VirtualAlloc
SetEvent
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WaitForMultipleObjects
GlobalMemoryStatusEx
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
WriteFile
ReadFile
GetFileAttributesW
GetModuleHandleA
FindFirstFileW
FindClose
GetCurrentThreadId
GetLastError
CloseHandle
CreateFileW
SetFileAttributesW
GetProcAddress
CreateDirectoryW
DeleteFileW
GetTempPathW
SetLastError
GetCurrentProcessId
GetTickCount
Exports
Exports
CreateDecoder
CreateEncoder
CreateObject
GetHandlerProperty
GetHandlerProperty2
GetHashers
GetIsArc
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetCaseSensitive
SetCodecs
SetLargePageMode
Sections
.text Size: 282KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CatrinePerm/x86/7z.dll.dll windows:4 windows x86 arch:x86
cb36a1cf1dc11c2231c4415295a85d2f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
oleaut32
SysAllocStringByteLen
SysAllocStringLen
SysAllocString
SysFreeString
VariantCopy
VariantClear
user32
CharUpperW
msvcrt
_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
memset
realloc
strlen
wcscmp
memcpy
memmove
free
_CxxThrowException
malloc
memcmp
_purecall
__CxxFrameHandler
kernel32
GetModuleHandleW
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
SetEvent
CreateEventW
WaitForSingleObject
InterlockedIncrement
VirtualFree
VirtualAlloc
LoadLibraryW
FreeLibrary
QueryPerformanceCounter
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExW
WaitForMultipleObjects
GlobalMemoryStatus
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
WriteFile
ReadFile
GetFileAttributesW
GetModuleHandleA
GetLastError
CloseHandle
CreateFileW
SetFileAttributesW
GetProcAddress
CreateDirectoryW
DeleteFileW
SetLastError
GetTempPathW
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
FindClose
FindFirstFileW
Exports
Exports
CreateDecoder
CreateEncoder
CreateObject
GetHandlerProperty
GetHandlerProperty2
GetHashers
GetIsArc
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetCaseSensitive
SetCodecs
SetLargePageMode
Sections
.text Size: 222KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ