home

CAT.exe

Geek Squad MRI Toolset

Geek Squad, Inc

Publisher:
Geek Squad  (signed by Geek Squad, Inc)

Product:
Geek Squad MRI Toolset

Description:
MRI Covert Agent Tools

Version:
5.8.1.1755

MD5:
c7fac93f75cfc0a7e1a659cd9484d68f

SHA-1:
8689c187bd60934705597c123ecc8e1b85a49457

SHA-256:
0f52e2e63fc1e899d66c4d4ea78ffc08cef889a73f9d5d7f32ea68b0058b332c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/25/2025 10:08:54 AM UTC  (today)

File size:
11.3 MB (11,836,072 bytes)

Product version:
5.8.1.1755

Copyright:
Confidential Trade Secret of ©2004-2013 Best Buy Enterprise Services, Inc. For internal use only.

Original file name:
CAT.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\logmein rescue applet\lmir0001.tmp\script_10\cat.exe

Digital Signature
Signed by:
Geek Squad, Inc

Authority:
VeriSign, Inc.

Valid from:
8/22/2012 5:00:00 PM

Valid to:
10/20/2015 4:59:59 PM

Subject:
CN="Geek Squad, Inc", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Geek Squad, Inc", L=Richfield, S=Minnesota, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
17B0F46F91056186FDA5574552E97B6A

File PE Metadata
Compilation timestamp:
11/5/2013 8:44:53 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
196608:dt/MW74Y+S0KNSm6kvT1arFZWNKjB/Wo5OLT47LRv5+/zD+N1fIPViZBTPF:7AS0QSBkErF84JWo5OLTMRv5ogdj7F

Entry address:
0x13C38

Entry point:
B8, DC, 56, 05, 01, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, F3, 38, 4A, 7C, 13, 5F, 5B, A5, 82, FB, FF, E0, 1F, 28, 9C, D9, 78, E0, 75, E2, 5E, D6, 59, F2, 22, 9B, 21, 99, FC, B6, DE, 65, 3E, BB, C9, AF, D6, 85, 7C, 5A, 0C, 17, 43, A4, 04, 1C, 18, 78, B5, 8D, F4, FA, 6A, 90, CC, A5, F9, 08, 8A, 2A, 6E, D8, 67, AF, E6, 39, CA, A3, 64, 8D, B0, 67, FF, 39, 31, CE, 29, 21, 70, F8, ED, 34, 6B, 46, 5D, 9B, F1, DF, 24, 58, BE, 5E, DB...
 
[+]

Entropy:
7.9505

Packer / compiler:
PECompact v2

Code size:
162 KB (165,888 bytes)

Scan CAT.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.