Electron-seliUI[.]zip

Resubmissions

13/10/2024, 14:06

241013-redlyavejm 7

13/10/2024, 13:59

241013-ramdaazekg 7

Sharing

Copy URL Twitter E-mail

General

Target

Electron-seliUI.zip
Size

3.6MB
MD5

27ca6d717f9c1990e254207b7852ecc3
SHA1

819b6da38ff38009c51bfcd8090859e3e5b05221
SHA256

fd1e033834b6f88ed2f65d198ae770bdfcc9f6e5a253700bf2ed722b1517105a
SHA512

583840275ca823ba070b9f37ede50ce48468079db4266c76011fcfc121574c1b0a2600d759838608834033709f969813fb424184508dd6f4cd74865450f75d73
SSDEEP

98304:a7jctGsgnmdYqewZXCWmexhezq7LwfCpHGx:+jwBulwZXSKheWnwfOGx

Score

7^/10

Malware Config

Signatures

.NET Reactor proctector 1 IoCs

Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

resource	yara_rule
static1/unpack001/SeliwareAPI.dll	net_reactor

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Electron.exe
unpack001/SeliwareAPI.dll
unpack001/websocket-sharp.dll

Files

Electron-seliUI.zip
.zip
Electron.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\School\Downloads\Electron-ZUI-1.0.3a\Electron-ZUI-1.0.3a\Electron\obj\Release\Electron.pdb

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Electron.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-670AC6F2-A924.pma
Electron.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-670AC710-98A0.pma
Electron.exe.WebView2/EBWebView/Crashpad/settings.dat
Electron.exe.WebView2/EBWebView/Crashpad/throttle_store.dat
Electron.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0
Electron.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
Electron.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2
Electron.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3
Electron.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001
.gz
f_000001
.js
Electron.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000002
.gz
f_000002
Electron.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/05e215b5f8eced34_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/0e70277d0918b363_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/1c123a74a4c1d6fa_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/28bfb2a2ec23a339_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/4bf93936548fa546_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/521ad3a57d0de280_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/5b545a07ed763ed6_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/5c53b5b6a381c3f9_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/635921859df6bd85_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/675cc4530212e15c_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/69c3e1f628f40e88_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/70f86e93cf5e0d2f_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/75be61e89f2a03a3_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/76f1afe8f0beaf7c_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/830e3409f3c3716f_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/8863ea0b5c2d2ee4_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/9860c8b131846646_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/99ded36878c2f0ac_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/9b3c082546c45efd_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/9dda0f6454cedea4_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/a186c798256273c3_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/a4e37a3142cf176c_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/a60cac8d98f1b96f_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/a8e06e3343e20234_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/b3fae1b467d8fa28_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/b481231e37db4557_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/c08da006b528292f_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/d463e75e66d61183_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/dbc4213c601dec3d_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/f114ef026d2e21e0_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/f9c0a4400f43d1a9_0
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/index
Electron.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index
Electron.exe.WebView2/EBWebView/Default/Code Cache/wasm/index
Electron.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index
Electron.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0
Electron.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1
Electron.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2
Electron.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3
Electron.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index
Electron.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0
Electron.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1
Electron.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2
Electron.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3
Electron.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index
Electron.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db
Electron.exe.WebView2/EBWebView/Default/Extension Rules/000003.log
Electron.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT
Electron.exe.WebView2/EBWebView/Default/Extension Rules/LOG
Electron.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001
Electron.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log
Electron.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT
Electron.exe.WebView2/EBWebView/Default/Extension Scripts/LOG
Electron.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001
Electron.exe.WebView2/EBWebView/Default/Extension State/000003.log
Electron.exe.WebView2/EBWebView/Default/Extension State/CURRENT
Electron.exe.WebView2/EBWebView/Default/Extension State/LOG
Electron.exe.WebView2/EBWebView/Default/Extension State/LOG.old
Electron.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001
Electron.exe.WebView2/EBWebView/Default/Favicons
Electron.exe.WebView2/EBWebView/Default/GPUCache/data_0
Electron.exe.WebView2/EBWebView/Default/GPUCache/data_1
Electron.exe.WebView2/EBWebView/Default/GPUCache/data_2
Electron.exe.WebView2/EBWebView/Default/GPUCache/data_3
Electron.exe.WebView2/EBWebView/Default/GPUCache/index
Electron.exe.WebView2/EBWebView/Default/History
Electron.exe.WebView2/EBWebView/Default/Local Storage/leveldb/000003.log
Electron.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT
Electron.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG
Electron.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old
Electron.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001
Electron.exe.WebView2/EBWebView/Default/Login Data
Electron.exe.WebView2/EBWebView/Default/Network/Cookies
Electron.exe.WebView2/EBWebView/Default/Network/Network Persistent State
Electron.exe.WebView2/EBWebView/Default/Network/Reporting and NEL
Electron.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports
Electron.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries
Electron.exe.WebView2/EBWebView/Default/Network/TransportSecurity
Electron.exe.WebView2/EBWebView/Default/Network/Trust Tokens
Electron.exe.WebView2/EBWebView/Default/Preferences
Electron.exe.WebView2/EBWebView/Default/README
Electron.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies
Electron.exe.WebView2/EBWebView/Default/Secure Preferences
Electron.exe.WebView2/EBWebView/Default/Session Storage/000003.log
Electron.exe.WebView2/EBWebView/Default/Session Storage/CURRENT
Electron.exe.WebView2/EBWebView/Default/Session Storage/LOG
Electron.exe.WebView2/EBWebView/Default/Session Storage/LOG.old
Electron.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001
Electron.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index
Electron.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index
Electron.exe.WebView2/EBWebView/Default/Shared Dictionary/db
Electron.exe.WebView2/EBWebView/Default/SharedStorage
Electron.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log
Electron.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT
Electron.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG
Electron.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old
Electron.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001
Electron.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log
Electron.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT
Electron.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG
Electron.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old
Electron.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001
Electron.exe.WebView2/EBWebView/Default/Visited Links
Electron.exe.WebView2/EBWebView/Default/Web Data
Electron.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT
Electron.exe.WebView2/EBWebView/Default/shared_proto_db/LOG
Electron.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old
Electron.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001
Electron.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log
Electron.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT
Electron.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG
Electron.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old
Electron.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001
Electron.exe.WebView2/EBWebView/GrShaderCache/data_0
Electron.exe.WebView2/EBWebView/GrShaderCache/data_1
Electron.exe.WebView2/EBWebView/GrShaderCache/data_2
Electron.exe.WebView2/EBWebView/GrShaderCache/data_3
Electron.exe.WebView2/EBWebView/GrShaderCache/f_000001
Electron.exe.WebView2/EBWebView/GrShaderCache/index
Electron.exe.WebView2/EBWebView/GraphiteDawnCache/data_0
Electron.exe.WebView2/EBWebView/GraphiteDawnCache/data_1
Electron.exe.WebView2/EBWebView/GraphiteDawnCache/data_2
Electron.exe.WebView2/EBWebView/GraphiteDawnCache/data_3
Electron.exe.WebView2/EBWebView/GraphiteDawnCache/index
Electron.exe.WebView2/EBWebView/Last Version
Electron.exe.WebView2/EBWebView/Local State
Electron.exe.WebView2/EBWebView/ShaderCache/data_0
Electron.exe.WebView2/EBWebView/ShaderCache/data_1
Electron.exe.WebView2/EBWebView/ShaderCache/data_2
Electron.exe.WebView2/EBWebView/ShaderCache/data_3
Electron.exe.WebView2/EBWebView/ShaderCache/index
Electron.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings
Electron.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings_F95BA787499AB4FA9EFFF472CE383A14
Electron.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings
Electron.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1
Electron.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic
Electron.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic_638004170464094982
Electron.exe.WebView2/EBWebView/SmartScreen/local/downloadCache
Electron.exe.WebView2/EBWebView/SmartScreen/local/downloadCache_
Electron.exe.WebView2/EBWebView/SmartScreen/local/uriCache
Electron.exe.WebView2/EBWebView/SmartScreen/local/uriCache_
Electron.exe.WebView2/EBWebView/Variations
Microsoft.Web.WebView2.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

af:42:c5:19:56:bd:87:8b:8a:19:d4:c7:42:da:1b:8b:13:4a:6c:00:f1:29:f2:19:14:e6:3a:78:5d:51:b8:68
Signer

Actual PE Digest

af:42:c5:19:56:bd:87:8b:8a:19:d4:c7:42:da:1b:8b:13:4a:6c:00:f1:29:f2:19:14:e6:3a:78:5d:51:b8:68

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\PrereleasePackage\Microsoft.Web.WebView2.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 747KB - Virtual size: 747KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Web.WebView2.Core.xml
.xml
Microsoft.Web.WebView2.WinForms.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f3:a7:6b:f5:b3:ba:2a:46:a3:78:fb:58:ee:8c:0a:2a:04:48:8d:e1:97:10:0f:a9:98:68:d8:f6:a0:05:c2:f8
Signer

Actual PE Digest

f3:a7:6b:f5:b3:ba:2a:46:a3:78:fb:58:ee:8c:0a:2a:04:48:8d:e1:97:10:0f:a9:98:68:d8:f6:a0:05:c2:f8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Experimental APIs\net462\Microsoft.Web.WebView2.WinForms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Web.WebView2.WinForms.xml
.xml
Microsoft.Web.WebView2.Wpf.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:ff:35:93:b0:65:fa:29:7c:6a:c0:1a:05:21:8c:cc:69:36:4b:e5:5d:e7:38:24:a3:91:fe:74:c0:c4:53:d8
Signer

Actual PE Digest

4c:ff:35:93:b0:65:fa:29:7c:6a:c0:1a:05:21:8c:cc:69:36:4b:e5:5d:e7:38:24:a3:91:fe:74:c0:c4:53:d8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\Release Experimental APIs\net462\Microsoft.Web.WebView2.Wpf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Web.WebView2.Wpf.xml
.xml
Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

25/10/2018, 00:00

Not After

29/10/2021, 12:00

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Signer

Actual PE Digest

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeliwareAPI.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
runtimes/win-x64/native/WebView2Loader.dll
.dll windows:10 windows x64 arch:x64

f6946d311bccc86e2042a388e375de41

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f8:94:77:4b:07:bd:02:e5:cc:ce:ca:72:7c:e6:81:47:cb:38:36:1d:5c:cc:a3:ce:bd:dc:06:ad:9a:bd:17:c0
Signer

Actual PE Digest

f8:94:77:4b:07:bd:02:e5:cc:ce:ca:72:7c:e6:81:47:cb:38:36:1d:5c:cc:a3:ce:bd:dc:06:ad:9a:bd:17:c0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WebView2Loader.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
GetAvailableCoreWebView2BrowserVersionStringWithOptions

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
scripts/LuaScript.lua
scripts/TxtScript.txt
websocket-sharp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 49KB - Virtual size: 49KB

.rsrc Size: 9KB - Virtual size: 8KB

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

af:42:c5:19:56:bd:87:8b:8a:19:d4:c7:42:da:1b:8b:13:4a:6c:00:f1:29:f2:19:14:e6:3a:78:5d:51:b8:68Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 747KB - Virtual size: 747KB

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

f3:a7:6b:f5:b3:ba:2a:46:a3:78:fb:58:ee:8c:0a:2a:04:48:8d:e1:97:10:0f:a9:98:68:d8:f6:a0:05:c2:f8Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 25KB - Virtual size: 24KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

4c:ff:35:93:b0:65:fa:29:7c:6a:c0:1a:05:21:8c:cc:69:36:4b:e5:5d:e7:38:24:a3:91:fe:74:c0:c4:53:d8Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 68KB - Virtual size: 67KB

.rsrc Size: 1024B - Virtual size: 984B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23Certificate

Extended Key Usages

Key Usages

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7eCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

.text
Size: 49KB - Virtual size: 49KB

.rsrc
Size: 9KB - Virtual size: 8KB

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

af:42:c5:19:56:bd:87:8b:8a:19:d4:c7:42:da:1b:8b:13:4a:6c:00:f1:29:f2:19:14:e6:3a:78:5d:51:b8:68
Signer

.text
Size: 747KB - Virtual size: 747KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

f3:a7:6b:f5:b3:ba:2a:46:a3:78:fb:58:ee:8c:0a:2a:04:48:8d:e1:97:10:0f:a9:98:68:d8:f6:a0:05:c2:f8
Signer

.text
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

4c:ff:35:93:b0:65:fa:29:7c:6a:c0:1a:05:21:8c:cc:69:36:4b:e5:5d:e7:38:24:a3:91:fe:74:c0:c4:53:d8
Signer

.text
Size: 68KB - Virtual size: 67KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 512B - Virtual size: 12B

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Signer

.text
Size: 675KB - Virtual size: 675KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 524KB - Virtual size: 524KB

.rsrc
Size: 1024B - Virtual size: 900B

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

f8:94:77:4b:07:bd:02:e5:cc:ce:ca:72:7c:e6:81:47:cb:38:36:1d:5c:cc:a3:ce:bd:dc:06:ad:9a:bd:17:c0
Signer

.text
Size: 87KB - Virtual size: 87KB

.rdata
Size: 45KB - Virtual size: 45KB

.data
Size: 3KB - Virtual size: 7KB

.pdata
Size: 5KB - Virtual size: 5KB

.gxfg
Size: 4KB - Virtual size: 4KB

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 242KB - Virtual size: 242KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 12B