API tools faq
paste
paladin316

Exes_e2a6b63f76d421e4595678a71aaea73b_exe_2019-07-02_05_30.json

paladin316
Jul 2nd, 2019
2,166
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 39.23 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: ""
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_e2a6b63f76d421e4595678a71aaea73b.exe"
  7. [*] File Size: 581632
  8. [*] File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
  9. [*] SHA256: "2714ea3c6d163b77b4070b7b9870647a21da481839e5d4355093a5393384bff4"
  10. [*] MD5: "e2a6b63f76d421e4595678a71aaea73b"
  11. [*] SHA1: "2cf91fbd96e2a2b09219666b51a204d3a866f0dc"
  12. [*] SHA512: "dbb9e61955441a2832ba1f8de45446d8c8674dcfb6b333610bb556f53bc6a72cc9cd8e378877bb792177a5623406911020e12ea8fe40ddf7f1289978335cf7e4"
  13. [*] CRC32: "EDBC362A"
  14. [*] SSDEEP: "12288:z8sxOWXKOBBszVfsSON9YsU0rnu08ahq0l08anx9sCApN:z8swWXKOBazluKigDsC"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: [
  19. {
  20. "Description": "The binary likely contains encrypted or compressed data.",
  21. "Details": [
  22. {
  23. "section": "name: .text, entropy: 7.95, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x0008d600, virtual_size: 0x0008d524"
  24. }
  25. ]
  26. },
  27. {
  28. "Description": "File has been identified by 45 Antiviruses on VirusTotal as malicious",
  29. "Details": [
  30. {
  31. "MicroWorld-eScan": "Gen:Variant.Ursu.503341"
  32. },
  33. {
  34. "FireEye": "Generic.mg.e2a6b63f76d421e4"
  35. },
  36. {
  37. "ALYac": "Gen:Variant.Ursu.503341"
  38. },
  39. {
  40. "Cylance": "Unsafe"
  41. },
  42. {
  43. "BitDefender": "Gen:Variant.Ursu.503341"
  44. },
  45. {
  46. "TrendMicro": "TROJ_GEN.R002C0WFS19"
  47. },
  48. {
  49. "Symantec": "ML.Attribute.HighConfidence"
  50. },
  51. {
  52. "APEX": "Malicious"
  53. },
  54. {
  55. "Avast": "Win32:CrypterX-gen [Trj]"
  56. },
  57. {
  58. "Kaspersky": "HEUR:Backdoor.MSIL.Androm.gen"
  59. },
  60. {
  61. "Alibaba": "Trojan:Win32/Starter.ali2000005"
  62. },
  63. {
  64. "Tencent": "Win32.Trojan.Inject.Auto"
  65. },
  66. {
  67. "Ad-Aware": "Gen:Variant.Ursu.503341"
  68. },
  69. {
  70. "Sophos": "Mal/Generic-S"
  71. },
  72. {
  73. "F-Secure": "Heuristic.HEUR/AGEN.1035809"
  74. },
  75. {
  76. "DrWeb": "BackDoor.RevetRat.2"
  77. },
  78. {
  79. "Invincea": "heuristic"
  80. },
  81. {
  82. "McAfee-GW-Edition": "BehavesLike.Win32.Generic.hc"
  83. },
  84. {
  85. "Trapmine": "malicious.high.ml.score"
  86. },
  87. {
  88. "Emsisoft": "Gen:Variant.Ursu.503341 (B)"
  89. },
  90. {
  91. "Ikarus": "Trojan.MSIL.Crypt"
  92. },
  93. {
  94. "Cyren": "W32/Trojan.EQBC-9285"
  95. },
  96. {
  97. "Jiangmin": "Backdoor.MSIL.bgdv"
  98. },
  99. {
  100. "Avira": "HEUR/AGEN.1035809"
  101. },
  102. {
  103. "Fortinet": "MSIL/Generic.AP.1BE98B6!tr"
  104. },
  105. {
  106. "Endgame": "malicious (moderate confidence)"
  107. },
  108. {
  109. "Arcabit": "Trojan.Ursu.D7AE2D"
  110. },
  111. {
  112. "ZoneAlarm": "HEUR:Backdoor.MSIL.Androm.gen"
  113. },
  114. {
  115. "Microsoft": "HackTool:Win32/BrowserPassview"
  116. },
  117. {
  118. "AhnLab-V3": "Trojan/Win32.Kryptik.R278666"
  119. },
  120. {
  121. "Acronis": "suspicious"
  122. },
  123. {
  124. "McAfee": "RDN/Generic BackDoor"
  125. },
  126. {
  127. "MAX": "malware (ai score=100)"
  128. },
  129. {
  130. "Malwarebytes": "Spyware.HawkEyeKeyLogger"
  131. },
  132. {
  133. "Panda": "Trj/GdSda.A"
  134. },
  135. {
  136. "ESET-NOD32": "a variant of MSIL/Kryptik.QME"
  137. },
  138. {
  139. "TrendMicro-HouseCall": "TROJ_GEN.R002C0WFS19"
  140. },
  141. {
  142. "Rising": "Trojan.Kryptik!8.8 (CLOUD)"
  143. },
  144. {
  145. "SentinelOne": "DFI - Malicious PE"
  146. },
  147. {
  148. "GData": "Gen:Variant.Ursu.503341"
  149. },
  150. {
  151. "AVG": "Win32:CrypterX-gen [Trj]"
  152. },
  153. {
  154. "Cybereason": "malicious.d96e2a"
  155. },
  156. {
  157. "Paloalto": "generic.ml"
  158. },
  159. {
  160. "CrowdStrike": "win/malicious_confidence_100% (W)"
  161. },
  162. {
  163. "Qihoo-360": "Win32/Trojan.cfe"
  164. }
  165. ]
  166. }
  167. ]
  168.  
  169. [*] Started Service: []
  170.  
  171. [*] Executed Commands: []
  172.  
  173. [*] Mutexes: []
  174.  
  175. [*] Modified Files: []
  176.  
  177. [*] Deleted Files: []
  178.  
  179. [*] Modified Registry Keys: []
  180.  
  181. [*] Deleted Registry Keys: []
  182.  
  183. [*] DNS Communications: []
  184.  
  185. [*] Domains: []
  186.  
  187. [*] Network Communication - ICMP: []
  188.  
  189. [*] Network Communication - HTTP: []
  190.  
  191. [*] Network Communication - SMTP: []
  192.  
  193. [*] Network Communication - Hosts: []
  194.  
  195. [*] Network Communication - IRC: []
  196.  
  197. [*] Static Analysis: {
  198. "dotnet": {
  199. "customattrs": null,
  200. "assemblyinfo": {
  201. "version": "1.0.0.0",
  202. "name": "ChTable"
  203. },
  204. "assemblyrefs": [
  205. {
  206. "version": "2.0.0.0",
  207. "name": "mscorlib"
  208. },
  209. {
  210. "version": "2.0.0.0",
  211. "name": "System.Windows.Forms"
  212. },
  213. {
  214. "version": "2.0.0.0",
  215. "name": "System"
  216. },
  217. {
  218. "version": "2.0.0.0",
  219. "name": "System.Drawing"
  220. }
  221. ],
  222. "typerefs": [
  223. {
  224. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  225. "assembly": "System"
  226. },
  227. {
  228. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  229. "assembly": "System"
  230. },
  231. {
  232. "typename": "System.ComponentModel.EditorBrowsableState",
  233. "assembly": "System"
  234. },
  235. {
  236. "typename": "System.ComponentModel.IContainer",
  237. "assembly": "System"
  238. },
  239. {
  240. "typename": "System.Configuration.ApplicationSettingsBase",
  241. "assembly": "System"
  242. },
  243. {
  244. "typename": "System.Configuration.SettingsBase",
  245. "assembly": "System"
  246. },
  247. {
  248. "typename": "System.Drawing.Point",
  249. "assembly": "System.Drawing"
  250. },
  251. {
  252. "typename": "System.Drawing.Size",
  253. "assembly": "System.Drawing"
  254. },
  255. {
  256. "typename": "System.Drawing.SizeF",
  257. "assembly": "System.Drawing"
  258. },
  259. {
  260. "typename": "System.Windows.Forms.Application",
  261. "assembly": "System.Windows.Forms"
  262. },
  263. {
  264. "typename": "System.Windows.Forms.AutoScaleMode",
  265. "assembly": "System.Windows.Forms"
  266. },
  267. {
  268. "typename": "System.Windows.Forms.Button",
  269. "assembly": "System.Windows.Forms"
  270. },
  271. {
  272. "typename": "System.Windows.Forms.ButtonBase",
  273. "assembly": "System.Windows.Forms"
  274. },
  275. {
  276. "typename": "System.Windows.Forms.CommonDialog",
  277. "assembly": "System.Windows.Forms"
  278. },
  279. {
  280. "typename": "System.Windows.Forms.ContainerControl",
  281. "assembly": "System.Windows.Forms"
  282. },
  283. {
  284. "typename": "System.Windows.Forms.Control",
  285. "assembly": "System.Windows.Forms"
  286. },
  287. {
  288. "typename": "System.Windows.Forms.Control/ControlCollection",
  289. "assembly": "System.Windows.Forms"
  290. },
  291. {
  292. "typename": "System.Windows.Forms.DialogResult",
  293. "assembly": "System.Windows.Forms"
  294. },
  295. {
  296. "typename": "System.Windows.Forms.FileDialog",
  297. "assembly": "System.Windows.Forms"
  298. },
  299. {
  300. "typename": "System.Windows.Forms.Form",
  301. "assembly": "System.Windows.Forms"
  302. },
  303. {
  304. "typename": "System.Windows.Forms.GroupBox",
  305. "assembly": "System.Windows.Forms"
  306. },
  307. {
  308. "typename": "System.Windows.Forms.ListView",
  309. "assembly": "System.Windows.Forms"
  310. },
  311. {
  312. "typename": "System.Windows.Forms.ListView/ListViewItemCollection",
  313. "assembly": "System.Windows.Forms"
  314. },
  315. {
  316. "typename": "System.Windows.Forms.ListViewItem",
  317. "assembly": "System.Windows.Forms"
  318. },
  319. {
  320. "typename": "System.Windows.Forms.OpenFileDialog",
  321. "assembly": "System.Windows.Forms"
  322. },
  323. {
  324. "typename": "System.Windows.Forms.TextBox",
  325. "assembly": "System.Windows.Forms"
  326. },
  327. {
  328. "typename": "System.Windows.Forms.TextBoxBase",
  329. "assembly": "System.Windows.Forms"
  330. },
  331. {
  332. "typename": "System.Action`1",
  333. "assembly": "mscorlib"
  334. },
  335. {
  336. "typename": "System.Activator",
  337. "assembly": "mscorlib"
  338. },
  339. {
  340. "typename": "System.ArgumentNullException",
  341. "assembly": "mscorlib"
  342. },
  343. {
  344. "typename": "System.Array",
  345. "assembly": "mscorlib"
  346. },
  347. {
  348. "typename": "System.Attribute",
  349. "assembly": "mscorlib"
  350. },
  351. {
  352. "typename": "System.BadImageFormatException",
  353. "assembly": "mscorlib"
  354. },
  355. {
  356. "typename": "System.Byte",
  357. "assembly": "mscorlib"
  358. },
  359. {
  360. "typename": "System.Collections.DictionaryEntry",
  361. "assembly": "mscorlib"
  362. },
  363. {
  364. "typename": "System.Collections.Generic.Dictionary`2",
  365. "assembly": "mscorlib"
  366. },
  367. {
  368. "typename": "System.Collections.Generic.IEnumerable`1",
  369. "assembly": "mscorlib"
  370. },
  371. {
  372. "typename": "System.Collections.Generic.IEnumerator`1",
  373. "assembly": "mscorlib"
  374. },
  375. {
  376. "typename": "System.Collections.Generic.List`1",
  377. "assembly": "mscorlib"
  378. },
  379. {
  380. "typename": "System.Collections.Generic.List`1/Enumerator",
  381. "assembly": "mscorlib"
  382. },
  383. {
  384. "typename": "System.Collections.ICollection",
  385. "assembly": "mscorlib"
  386. },
  387. {
  388. "typename": "System.Collections.IDictionaryEnumerator",
  389. "assembly": "mscorlib"
  390. },
  391. {
  392. "typename": "System.Collections.IEnumerable",
  393. "assembly": "mscorlib"
  394. },
  395. {
  396. "typename": "System.Collections.IEnumerator",
  397. "assembly": "mscorlib"
  398. },
  399. {
  400. "typename": "System.Collections.IList",
  401. "assembly": "mscorlib"
  402. },
  403. {
  404. "typename": "System.Delegate",
  405. "assembly": "mscorlib"
  406. },
  407. {
  408. "typename": "System.Diagnostics.DebuggableAttribute",
  409. "assembly": "mscorlib"
  410. },
  411. {
  412. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  413. "assembly": "mscorlib"
  414. },
  415. {
  416. "typename": "System.Diagnostics.DebuggerHiddenAttribute",
  417. "assembly": "mscorlib"
  418. },
  419. {
  420. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  421. "assembly": "mscorlib"
  422. },
  423. {
  424. "typename": "System.Environment",
  425. "assembly": "mscorlib"
  426. },
  427. {
  428. "typename": "System.EventArgs",
  429. "assembly": "mscorlib"
  430. },
  431. {
  432. "typename": "System.EventHandler",
  433. "assembly": "mscorlib"
  434. },
  435. {
  436. "typename": "System.Globalization.CultureInfo",
  437. "assembly": "mscorlib"
  438. },
  439. {
  440. "typename": "System.IDisposable",
  441. "assembly": "mscorlib"
  442. },
  443. {
  444. "typename": "System.IO.MemoryStream",
  445. "assembly": "mscorlib"
  446. },
  447. {
  448. "typename": "System.IO.SeekOrigin",
  449. "assembly": "mscorlib"
  450. },
  451. {
  452. "typename": "System.IO.Stream",
  453. "assembly": "mscorlib"
  454. },
  455. {
  456. "typename": "System.IO.StreamReader",
  457. "assembly": "mscorlib"
  458. },
  459. {
  460. "typename": "System.IO.TextReader",
  461. "assembly": "mscorlib"
  462. },
  463. {
  464. "typename": "System.NotSupportedException",
  465. "assembly": "mscorlib"
  466. },
  467. {
  468. "typename": "System.Object",
  469. "assembly": "mscorlib"
  470. },
  471. {
  472. "typename": "System.Predicate`1",
  473. "assembly": "mscorlib"
  474. },
  475. {
  476. "typename": "System.Random",
  477. "assembly": "mscorlib"
  478. },
  479. {
  480. "typename": "System.Reflection.Assembly",
  481. "assembly": "mscorlib"
  482. },
  483. {
  484. "typename": "System.Reflection.AssemblyCompanyAttribute",
  485. "assembly": "mscorlib"
  486. },
  487. {
  488. "typename": "System.Reflection.AssemblyConfigurationAttribute",
  489. "assembly": "mscorlib"
  490. },
  491. {
  492. "typename": "System.Reflection.AssemblyCopyrightAttribute",
  493. "assembly": "mscorlib"
  494. },
  495. {
  496. "typename": "System.Reflection.AssemblyDescriptionAttribute",
  497. "assembly": "mscorlib"
  498. },
  499. {
  500. "typename": "System.Reflection.AssemblyFileVersionAttribute",
  501. "assembly": "mscorlib"
  502. },
  503. {
  504. "typename": "System.Reflection.AssemblyProductAttribute",
  505. "assembly": "mscorlib"
  506. },
  507. {
  508. "typename": "System.Reflection.AssemblyTitleAttribute",
  509. "assembly": "mscorlib"
  510. },
  511. {
  512. "typename": "System.Reflection.AssemblyTrademarkAttribute",
  513. "assembly": "mscorlib"
  514. },
  515. {
  516. "typename": "System.Resources.ResourceManager",
  517. "assembly": "mscorlib"
  518. },
  519. {
  520. "typename": "System.Resources.ResourceSet",
  521. "assembly": "mscorlib"
  522. },
  523. {
  524. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  525. "assembly": "mscorlib"
  526. },
  527. {
  528. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  529. "assembly": "mscorlib"
  530. },
  531. {
  532. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  533. "assembly": "mscorlib"
  534. },
  535. {
  536. "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
  537. "assembly": "mscorlib"
  538. },
  539. {
  540. "typename": "System.Runtime.InteropServices.GuidAttribute",
  541. "assembly": "mscorlib"
  542. },
  543. {
  544. "typename": "System.RuntimeTypeHandle",
  545. "assembly": "mscorlib"
  546. },
  547. {
  548. "typename": "System.STAThreadAttribute",
  549. "assembly": "mscorlib"
  550. },
  551. {
  552. "typename": "System.Security.UnverifiableCodeAttribute",
  553. "assembly": "mscorlib"
  554. },
  555. {
  556. "typename": "System.Threading.Monitor",
  557. "assembly": "mscorlib"
  558. },
  559. {
  560. "typename": "System.Threading.Thread",
  561. "assembly": "mscorlib"
  562. },
  563. {
  564. "typename": "System.Threading.ThreadStart",
  565. "assembly": "mscorlib"
  566. },
  567. {
  568. "typename": "System.Type",
  569. "assembly": "mscorlib"
  570. }
  571. ]
  572. },
  573. "pe": {
  574. "peid_signatures": null,
  575. "imports": [
  576. {
  577. "imports": [
  578. {
  579. "name": "_CorExeMain",
  580. "address": "0x402000"
  581. }
  582. ],
  583. "dll": "mscoree.dll"
  584. }
  585. ],
  586. "digital_signers": null,
  587. "exported_dll_name": null,
  588. "actual_checksum": "0x0008ed8f",
  589. "overlay": null,
  590. "imagebase": "0x00400000",
  591. "reported_checksum": "0x0008ed8f",
  592. "icon_hash": null,
  593. "entrypoint": "0x0048f51e",
  594. "timestamp": "2019-06-23 14:01:26",
  595. "osversion": "4.0",
  596. "sections": [
  597. {
  598. "name": ".text",
  599. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  600. "virtual_address": "0x00002000",
  601. "size_of_data": "0x0008d600",
  602. "entropy": "7.95",
  603. "raw_address": "0x00000200",
  604. "virtual_size": "0x0008d524",
  605. "characteristics_raw": "0x60000020"
  606. },
  607. {
  608. "name": ".rsrc",
  609. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  610. "virtual_address": "0x00090000",
  611. "size_of_data": "0x00000600",
  612. "entropy": "4.06",
  613. "raw_address": "0x0008d800",
  614. "virtual_size": "0x000005a8",
  615. "characteristics_raw": "0x40000040"
  616. },
  617. {
  618. "name": ".reloc",
  619. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  620. "virtual_address": "0x00092000",
  621. "size_of_data": "0x00000200",
  622. "entropy": "0.10",
  623. "raw_address": "0x0008de00",
  624. "virtual_size": "0x0000000c",
  625. "characteristics_raw": "0x42000040"
  626. }
  627. ],
  628. "resources": [],
  629. "dirents": [
  630. {
  631. "virtual_address": "0x00000000",
  632. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  633. "size": "0x00000000"
  634. },
  635. {
  636. "virtual_address": "0x0008f4c8",
  637. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  638. "size": "0x00000053"
  639. },
  640. {
  641. "virtual_address": "0x00090000",
  642. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  643. "size": "0x000005a8"
  644. },
  645. {
  646. "virtual_address": "0x00000000",
  647. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  648. "size": "0x00000000"
  649. },
  650. {
  651. "virtual_address": "0x00000000",
  652. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  653. "size": "0x00000000"
  654. },
  655. {
  656. "virtual_address": "0x00092000",
  657. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  658. "size": "0x0000000c"
  659. },
  660. {
  661. "virtual_address": "0x00000000",
  662. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  663. "size": "0x00000000"
  664. },
  665. {
  666. "virtual_address": "0x00000000",
  667. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  668. "size": "0x00000000"
  669. },
  670. {
  671. "virtual_address": "0x00000000",
  672. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  673. "size": "0x00000000"
  674. },
  675. {
  676. "virtual_address": "0x00000000",
  677. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  678. "size": "0x00000000"
  679. },
  680. {
  681. "virtual_address": "0x00000000",
  682. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  683. "size": "0x00000000"
  684. },
  685. {
  686. "virtual_address": "0x00000000",
  687. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  688. "size": "0x00000000"
  689. },
  690. {
  691. "virtual_address": "0x00002000",
  692. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  693. "size": "0x00000008"
  694. },
  695. {
  696. "virtual_address": "0x00000000",
  697. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  698. "size": "0x00000000"
  699. },
  700. {
  701. "virtual_address": "0x00002008",
  702. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  703. "size": "0x00000048"
  704. },
  705. {
  706. "virtual_address": "0x00000000",
  707. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  708. "size": "0x00000000"
  709. }
  710. ],
  711. "exports": [],
  712. "guest_signers": {},
  713. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  714. "icon_fuzzy": null,
  715. "icon": null,
  716. "pdbpath": null,
  717. "imported_dll_count": 1,
  718. "versioninfo": []
  719. }
  720. }
  721.  
  722. [*] Resolved APIs: []
  723.  
  724. [*] Static Analysis: {
  725. "dotnet": {
  726. "customattrs": null,
  727. "assemblyinfo": {
  728. "version": "1.0.0.0",
  729. "name": "ChTable"
  730. },
  731. "assemblyrefs": [
  732. {
  733. "version": "2.0.0.0",
  734. "name": "mscorlib"
  735. },
  736. {
  737. "version": "2.0.0.0",
  738. "name": "System.Windows.Forms"
  739. },
  740. {
  741. "version": "2.0.0.0",
  742. "name": "System"
  743. },
  744. {
  745. "version": "2.0.0.0",
  746. "name": "System.Drawing"
  747. }
  748. ],
  749. "typerefs": [
  750. {
  751. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  752. "assembly": "System"
  753. },
  754. {
  755. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  756. "assembly": "System"
  757. },
  758. {
  759. "typename": "System.ComponentModel.EditorBrowsableState",
  760. "assembly": "System"
  761. },
  762. {
  763. "typename": "System.ComponentModel.IContainer",
  764. "assembly": "System"
  765. },
  766. {
  767. "typename": "System.Configuration.ApplicationSettingsBase",
  768. "assembly": "System"
  769. },
  770. {
  771. "typename": "System.Configuration.SettingsBase",
  772. "assembly": "System"
  773. },
  774. {
  775. "typename": "System.Drawing.Point",
  776. "assembly": "System.Drawing"
  777. },
  778. {
  779. "typename": "System.Drawing.Size",
  780. "assembly": "System.Drawing"
  781. },
  782. {
  783. "typename": "System.Drawing.SizeF",
  784. "assembly": "System.Drawing"
  785. },
  786. {
  787. "typename": "System.Windows.Forms.Application",
  788. "assembly": "System.Windows.Forms"
  789. },
  790. {
  791. "typename": "System.Windows.Forms.AutoScaleMode",
  792. "assembly": "System.Windows.Forms"
  793. },
  794. {
  795. "typename": "System.Windows.Forms.Button",
  796. "assembly": "System.Windows.Forms"
  797. },
  798. {
  799. "typename": "System.Windows.Forms.ButtonBase",
  800. "assembly": "System.Windows.Forms"
  801. },
  802. {
  803. "typename": "System.Windows.Forms.CommonDialog",
  804. "assembly": "System.Windows.Forms"
  805. },
  806. {
  807. "typename": "System.Windows.Forms.ContainerControl",
  808. "assembly": "System.Windows.Forms"
  809. },
  810. {
  811. "typename": "System.Windows.Forms.Control",
  812. "assembly": "System.Windows.Forms"
  813. },
  814. {
  815. "typename": "System.Windows.Forms.Control/ControlCollection",
  816. "assembly": "System.Windows.Forms"
  817. },
  818. {
  819. "typename": "System.Windows.Forms.DialogResult",
  820. "assembly": "System.Windows.Forms"
  821. },
  822. {
  823. "typename": "System.Windows.Forms.FileDialog",
  824. "assembly": "System.Windows.Forms"
  825. },
  826. {
  827. "typename": "System.Windows.Forms.Form",
  828. "assembly": "System.Windows.Forms"
  829. },
  830. {
  831. "typename": "System.Windows.Forms.GroupBox",
  832. "assembly": "System.Windows.Forms"
  833. },
  834. {
  835. "typename": "System.Windows.Forms.ListView",
  836. "assembly": "System.Windows.Forms"
  837. },
  838. {
  839. "typename": "System.Windows.Forms.ListView/ListViewItemCollection",
  840. "assembly": "System.Windows.Forms"
  841. },
  842. {
  843. "typename": "System.Windows.Forms.ListViewItem",
  844. "assembly": "System.Windows.Forms"
  845. },
  846. {
  847. "typename": "System.Windows.Forms.OpenFileDialog",
  848. "assembly": "System.Windows.Forms"
  849. },
  850. {
  851. "typename": "System.Windows.Forms.TextBox",
  852. "assembly": "System.Windows.Forms"
  853. },
  854. {
  855. "typename": "System.Windows.Forms.TextBoxBase",
  856. "assembly": "System.Windows.Forms"
  857. },
  858. {
  859. "typename": "System.Action`1",
  860. "assembly": "mscorlib"
  861. },
  862. {
  863. "typename": "System.Activator",
  864. "assembly": "mscorlib"
  865. },
  866. {
  867. "typename": "System.ArgumentNullException",
  868. "assembly": "mscorlib"
  869. },
  870. {
  871. "typename": "System.Array",
  872. "assembly": "mscorlib"
  873. },
  874. {
  875. "typename": "System.Attribute",
  876. "assembly": "mscorlib"
  877. },
  878. {
  879. "typename": "System.BadImageFormatException",
  880. "assembly": "mscorlib"
  881. },
  882. {
  883. "typename": "System.Byte",
  884. "assembly": "mscorlib"
  885. },
  886. {
  887. "typename": "System.Collections.DictionaryEntry",
  888. "assembly": "mscorlib"
  889. },
  890. {
  891. "typename": "System.Collections.Generic.Dictionary`2",
  892. "assembly": "mscorlib"
  893. },
  894. {
  895. "typename": "System.Collections.Generic.IEnumerable`1",
  896. "assembly": "mscorlib"
  897. },
  898. {
  899. "typename": "System.Collections.Generic.IEnumerator`1",
  900. "assembly": "mscorlib"
  901. },
  902. {
  903. "typename": "System.Collections.Generic.List`1",
  904. "assembly": "mscorlib"
  905. },
  906. {
  907. "typename": "System.Collections.Generic.List`1/Enumerator",
  908. "assembly": "mscorlib"
  909. },
  910. {
  911. "typename": "System.Collections.ICollection",
  912. "assembly": "mscorlib"
  913. },
  914. {
  915. "typename": "System.Collections.IDictionaryEnumerator",
  916. "assembly": "mscorlib"
  917. },
  918. {
  919. "typename": "System.Collections.IEnumerable",
  920. "assembly": "mscorlib"
  921. },
  922. {
  923. "typename": "System.Collections.IEnumerator",
  924. "assembly": "mscorlib"
  925. },
  926. {
  927. "typename": "System.Collections.IList",
  928. "assembly": "mscorlib"
  929. },
  930. {
  931. "typename": "System.Delegate",
  932. "assembly": "mscorlib"
  933. },
  934. {
  935. "typename": "System.Diagnostics.DebuggableAttribute",
  936. "assembly": "mscorlib"
  937. },
  938. {
  939. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  940. "assembly": "mscorlib"
  941. },
  942. {
  943. "typename": "System.Diagnostics.DebuggerHiddenAttribute",
  944. "assembly": "mscorlib"
  945. },
  946. {
  947. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  948. "assembly": "mscorlib"
  949. },
  950. {
  951. "typename": "System.Environment",
  952. "assembly": "mscorlib"
  953. },
  954. {
  955. "typename": "System.EventArgs",
  956. "assembly": "mscorlib"
  957. },
  958. {
  959. "typename": "System.EventHandler",
  960. "assembly": "mscorlib"
  961. },
  962. {
  963. "typename": "System.Globalization.CultureInfo",
  964. "assembly": "mscorlib"
  965. },
  966. {
  967. "typename": "System.IDisposable",
  968. "assembly": "mscorlib"
  969. },
  970. {
  971. "typename": "System.IO.MemoryStream",
  972. "assembly": "mscorlib"
  973. },
  974. {
  975. "typename": "System.IO.SeekOrigin",
  976. "assembly": "mscorlib"
  977. },
  978. {
  979. "typename": "System.IO.Stream",
  980. "assembly": "mscorlib"
  981. },
  982. {
  983. "typename": "System.IO.StreamReader",
  984. "assembly": "mscorlib"
  985. },
  986. {
  987. "typename": "System.IO.TextReader",
  988. "assembly": "mscorlib"
  989. },
  990. {
  991. "typename": "System.NotSupportedException",
  992. "assembly": "mscorlib"
  993. },
  994. {
  995. "typename": "System.Object",
  996. "assembly": "mscorlib"
  997. },
  998. {
  999. "typename": "System.Predicate`1",
  1000. "assembly": "mscorlib"
  1001. },
  1002. {
  1003. "typename": "System.Random",
  1004. "assembly": "mscorlib"
  1005. },
  1006. {
  1007. "typename": "System.Reflection.Assembly",
  1008. "assembly": "mscorlib"
  1009. },
  1010. {
  1011. "typename": "System.Reflection.AssemblyCompanyAttribute",
  1012. "assembly": "mscorlib"
  1013. },
  1014. {
  1015. "typename": "System.Reflection.AssemblyConfigurationAttribute",
  1016. "assembly": "mscorlib"
  1017. },
  1018. {
  1019. "typename": "System.Reflection.AssemblyCopyrightAttribute",
  1020. "assembly": "mscorlib"
  1021. },
  1022. {
  1023. "typename": "System.Reflection.AssemblyDescriptionAttribute",
  1024. "assembly": "mscorlib"
  1025. },
  1026. {
  1027. "typename": "System.Reflection.AssemblyFileVersionAttribute",
  1028. "assembly": "mscorlib"
  1029. },
  1030. {
  1031. "typename": "System.Reflection.AssemblyProductAttribute",
  1032. "assembly": "mscorlib"
  1033. },
  1034. {
  1035. "typename": "System.Reflection.AssemblyTitleAttribute",
  1036. "assembly": "mscorlib"
  1037. },
  1038. {
  1039. "typename": "System.Reflection.AssemblyTrademarkAttribute",
  1040. "assembly": "mscorlib"
  1041. },
  1042. {
  1043. "typename": "System.Resources.ResourceManager",
  1044. "assembly": "mscorlib"
  1045. },
  1046. {
  1047. "typename": "System.Resources.ResourceSet",
  1048. "assembly": "mscorlib"
  1049. },
  1050. {
  1051. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  1052. "assembly": "mscorlib"
  1053. },
  1054. {
  1055. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  1056. "assembly": "mscorlib"
  1057. },
  1058. {
  1059. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  1060. "assembly": "mscorlib"
  1061. },
  1062. {
  1063. "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
  1064. "assembly": "mscorlib"
  1065. },
  1066. {
  1067. "typename": "System.Runtime.InteropServices.GuidAttribute",
  1068. "assembly": "mscorlib"
  1069. },
  1070. {
  1071. "typename": "System.RuntimeTypeHandle",
  1072. "assembly": "mscorlib"
  1073. },
  1074. {
  1075. "typename": "System.STAThreadAttribute",
  1076. "assembly": "mscorlib"
  1077. },
  1078. {
  1079. "typename": "System.Security.UnverifiableCodeAttribute",
  1080. "assembly": "mscorlib"
  1081. },
  1082. {
  1083. "typename": "System.Threading.Monitor",
  1084. "assembly": "mscorlib"
  1085. },
  1086. {
  1087. "typename": "System.Threading.Thread",
  1088. "assembly": "mscorlib"
  1089. },
  1090. {
  1091. "typename": "System.Threading.ThreadStart",
  1092. "assembly": "mscorlib"
  1093. },
  1094. {
  1095. "typename": "System.Type",
  1096. "assembly": "mscorlib"
  1097. }
  1098. ]
  1099. },
  1100. "pe": {
  1101. "peid_signatures": null,
  1102. "imports": [
  1103. {
  1104. "imports": [
  1105. {
  1106. "name": "_CorExeMain",
  1107. "address": "0x402000"
  1108. }
  1109. ],
  1110. "dll": "mscoree.dll"
  1111. }
  1112. ],
  1113. "digital_signers": null,
  1114. "exported_dll_name": null,
  1115. "actual_checksum": "0x0008ed8f",
  1116. "overlay": null,
  1117. "imagebase": "0x00400000",
  1118. "reported_checksum": "0x0008ed8f",
  1119. "icon_hash": null,
  1120. "entrypoint": "0x0048f51e",
  1121. "timestamp": "2019-06-23 14:01:26",
  1122. "osversion": "4.0",
  1123. "sections": [
  1124. {
  1125. "name": ".text",
  1126. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  1127. "virtual_address": "0x00002000",
  1128. "size_of_data": "0x0008d600",
  1129. "entropy": "7.95",
  1130. "raw_address": "0x00000200",
  1131. "virtual_size": "0x0008d524",
  1132. "characteristics_raw": "0x60000020"
  1133. },
  1134. {
  1135. "name": ".rsrc",
  1136. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  1137. "virtual_address": "0x00090000",
  1138. "size_of_data": "0x00000600",
  1139. "entropy": "4.06",
  1140. "raw_address": "0x0008d800",
  1141. "virtual_size": "0x000005a8",
  1142. "characteristics_raw": "0x40000040"
  1143. },
  1144. {
  1145. "name": ".reloc",
  1146. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  1147. "virtual_address": "0x00092000",
  1148. "size_of_data": "0x00000200",
  1149. "entropy": "0.10",
  1150. "raw_address": "0x0008de00",
  1151. "virtual_size": "0x0000000c",
  1152. "characteristics_raw": "0x42000040"
  1153. }
  1154. ],
  1155. "resources": [],
  1156. "dirents": [
  1157. {
  1158. "virtual_address": "0x00000000",
  1159. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  1160. "size": "0x00000000"
  1161. },
  1162. {
  1163. "virtual_address": "0x0008f4c8",
  1164. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  1165. "size": "0x00000053"
  1166. },
  1167. {
  1168. "virtual_address": "0x00090000",
  1169. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  1170. "size": "0x000005a8"
  1171. },
  1172. {
  1173. "virtual_address": "0x00000000",
  1174. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  1175. "size": "0x00000000"
  1176. },
  1177. {
  1178. "virtual_address": "0x00000000",
  1179. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  1180. "size": "0x00000000"
  1181. },
  1182. {
  1183. "virtual_address": "0x00092000",
  1184. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  1185. "size": "0x0000000c"
  1186. },
  1187. {
  1188. "virtual_address": "0x00000000",
  1189. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  1190. "size": "0x00000000"
  1191. },
  1192. {
  1193. "virtual_address": "0x00000000",
  1194. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  1195. "size": "0x00000000"
  1196. },
  1197. {
  1198. "virtual_address": "0x00000000",
  1199. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  1200. "size": "0x00000000"
  1201. },
  1202. {
  1203. "virtual_address": "0x00000000",
  1204. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  1205. "size": "0x00000000"
  1206. },
  1207. {
  1208. "virtual_address": "0x00000000",
  1209. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  1210. "size": "0x00000000"
  1211. },
  1212. {
  1213. "virtual_address": "0x00000000",
  1214. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  1215. "size": "0x00000000"
  1216. },
  1217. {
  1218. "virtual_address": "0x00002000",
  1219. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  1220. "size": "0x00000008"
  1221. },
  1222. {
  1223. "virtual_address": "0x00000000",
  1224. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  1225. "size": "0x00000000"
  1226. },
  1227. {
  1228. "virtual_address": "0x00002008",
  1229. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  1230. "size": "0x00000048"
  1231. },
  1232. {
  1233. "virtual_address": "0x00000000",
  1234. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  1235. "size": "0x00000000"
  1236. }
  1237. ],
  1238. "exports": [],
  1239. "guest_signers": {},
  1240. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  1241. "icon_fuzzy": null,
  1242. "icon": null,
  1243. "pdbpath": null,
  1244. "imported_dll_count": 1,
  1245. "versioninfo": []
  1246. }
  1247. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!