CatrinePerm.rar
- SHA256 8e5387b8e5b1d7437979f00b42b6b481281f9ced1c3a7101f6a5832402563e5b
Overview
overview
10Static
static
3CatrinePer...rm.exe
windows7-x64
10CatrinePer...rm.exe
windows10-2004-x64
10CatrinePer...rm.exe
windows7-x64
10CatrinePer...rm.exe
windows10-2004-x64
10f_000004.js
windows7-x64
3f_000004.js
windows10-2004-x64
3f_00001c.js
windows7-x64
3f_00001c.js
windows10-2004-x64
3CatrinePer...9_0.js
windows7-x64
3CatrinePer...9_0.js
windows10-2004-x64
3CatrinePer...0_0.js
windows7-x64
3CatrinePer...0_0.js
windows10-2004-x64
3CatrinePer...Ex.dll
windows7-x64
1CatrinePer...Ex.dll
windows10-2004-x64
1CatrinePer...PC.dll
windows7-x64
1CatrinePer...PC.dll
windows10-2004-x64
1CatrinePer...ro.dll
windows7-x64
1CatrinePer...ro.dll
windows10-2004-x64
1CatrinePer...re.dll
windows7-x64
1CatrinePer...re.dll
windows10-2004-x64
1CatrinePer...ms.dll
windows7-x64
1CatrinePer...ms.dll
windows10-2004-x64
1CatrinePer...pf.dll
windows7-x64
1CatrinePer...pf.dll
windows10-2004-x64
1CatrinePer...rs.dll
windows7-x64
1CatrinePer...rs.dll
windows10-2004-x64
1CatrinePer...on.dll
windows7-x64
1CatrinePer...on.dll
windows10-2004-x64
1Revo_Unins...up.exe
windows7-x64
7Revo_Unins...up.exe
windows10-2004-x64
7CatrinePer...rp.dll
windows7-x64
1CatrinePer...rp.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
CatrinePerm/CatrinePerm.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
CatrinePerm/CatrinePerm.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
CatrinePerm/CatrinePerm.exe
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
CatrinePerm/CatrinePerm.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
f_000004.js
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
f_000004.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
f_00001c.js
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
f_00001c.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/834cfe7d63b4b479_0.js
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/834cfe7d63b4b479_0.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/e9cf90305a4e5760_0.js
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
CatrinePerm/CatrinePerm.exe.WebView2/EBWebView/Default/Code Cache/js/e9cf90305a4e5760_0.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
CatrinePerm/ControlzEx.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
CatrinePerm/ControlzEx.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
CatrinePerm/DiscordRPC.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
CatrinePerm/DiscordRPC.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
CatrinePerm/MahApps.Metro.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
CatrinePerm/MahApps.Metro.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
CatrinePerm/Microsoft.Web.WebView2.Core.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
CatrinePerm/Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
CatrinePerm/Microsoft.Web.WebView2.WinForms.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
CatrinePerm/Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
CatrinePerm/Microsoft.Web.WebView2.Wpf.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
CatrinePerm/Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
CatrinePerm/Microsoft.Xaml.Behaviors.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
CatrinePerm/Microsoft.Xaml.Behaviors.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
CatrinePerm/Newtonsoft.Json.dll
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
CatrinePerm/Newtonsoft.Json.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
Revo_Uninstaller_Pro_5.1.1/RevoUninProSetup.exe
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
Revo_Uninstaller_Pro_5.1.1/RevoUninProSetup.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
CatrinePerm/SevenZipSharp.dll
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
CatrinePerm/SevenZipSharp.dll
Resource
win10v2004-20240709-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/CatrinePerm/CatrinePerm.dll |
| unpack001/CatrinePerm/CatrinePerm.exe |
| unpack001/CatrinePerm/DiscordRPC.dll |
| unpack001/CatrinePerm/SevenZipSharp.dll |
| unpack001/CatrinePerm/SharpCompress.dll |
| unpack001/CatrinePerm/ZstdSharp.dll |
| unpack001/CatrinePerm/de/MahApps.Metro.resources.dll |
| unpack001/CatrinePerm/x64/7z.dll |
| unpack001/CatrinePerm/x86/7z.dll |
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Oct 31, 2020
CN=Jan Karger,O=Jan Karger,L=Alsdorf,C=DE
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned PE
Checks for missing Authenticode signature.
Jul 6, 2023
CN=Jan Karger,O=Jan Karger,L=Alsdorf,C=DE
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Jan Karger,O=Jan Karger,L=Alsdorf,C=DE
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Jul 26, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 26, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 26, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 26, 2024
Mar 17, 2021
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Jan 1, 0001
Jan 1, 0001
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Jul 26, 2024
Jul 26, 2024
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Jul 26, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 26, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 26, 2024
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=11, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=88, id=1, productName=Unmarked objects,
count=91, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=32, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=122, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=124, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=11, version=8047,
count=8, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=1, id=95, version=2190,
count=90, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=88, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=25, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,