Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [*] MalFamily: ""
- [*] MalScore: 10.0
- [*] File Name: "Exes_b3d7442e17bd50c60008113a33f0c6ac.exe"
- [*] File Size: 1490944
- [*] File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
- [*] SHA256: "8e3fd9fab78648d6b96ab567f4dcd13dacb101afc8b1bda85c9f1db3fd7696f0"
- [*] MD5: "b3d7442e17bd50c60008113a33f0c6ac"
- [*] SHA1: "79fa062f66dc1351dd2bc62088f4ea26cdb2bbaf"
- [*] SHA512: "04fefb5a5f8b3e28e3a3c248fc79f8a471eb83103b669e35b41d389ba80ed49b66dd66e15a87439dba57b5bb6d119f48e416e0b92d5121d5900ba260f8e320fb"
- [*] CRC32: "838E2FED"
- [*] SSDEEP: "12288:oL91imwj+9J/axnm5qXAtGrsIS5xr+IbmZMUVtyLwdBuoML8sRTArocdc9aAKUc4:uhL"
- [*] Process Execution: []
- [*] Signatures Detected: [
- {
- "Description": "File has been identified by 43 Antiviruses on VirusTotal as malicious",
- "Details": [
- {
- "MicroWorld-eScan": "Trojan.GenericKD.6308980"
- },
- {
- "FireEye": "Trojan.GenericKD.6308980"
- },
- {
- "McAfee": "GenericRXGB-OC!B3D7442E17BD"
- },
- {
- "Cylance": "Unsafe"
- },
- {
- "VIPRE": "Trojan.Win32.Generic!BT"
- },
- {
- "Alibaba": "Backdoor:MSIL/Generic.9486112e"
- },
- {
- "K7GW": "Trojan-Downloader ( 004c89a51 )"
- },
- {
- "K7AntiVirus": "Trojan-Downloader ( 004c89a51 )"
- },
- {
- "Arcabit": "Trojan.Generic.D604474"
- },
- {
- "TrendMicro": "TROJ_GEN.R002C0PBK19"
- },
- {
- "Symantec": "Backdoor.Ratenjay"
- },
- {
- "Paloalto": "generic.ml"
- },
- {
- "ClamAV": "Win.Malware.Ursu-6873459-0"
- },
- {
- "Kaspersky": "HEUR:Backdoor.MSIL.Generic"
- },
- {
- "BitDefender": "Trojan.GenericKD.6308980"
- },
- {
- "NANO-Antivirus": "Trojan.Win32.Bladabindi.eweguu"
- },
- {
- "Tencent": "Msil.Backdoor.Generic.Pgmp"
- },
- {
- "Emsisoft": "Trojan.GenericKD.6308980 (B)"
- },
- {
- "Comodo": "Malware@#pcimmtfuh5uh"
- },
- {
- "McAfee-GW-Edition": "GenericRXGB-OC!B3D7442E17BD"
- },
- {
- "Trapmine": "malicious.high.ml.score"
- },
- {
- "Sophos": "Troj/MSIL-IRW"
- },
- {
- "Ikarus": "Trojan-Downloader.MSIL.Tiny"
- },
- {
- "Avira": "TR/Dropper.MSIL.jqeyw"
- },
- {
- "MAX": "malware (ai score=99)"
- },
- {
- "Antiy-AVL": "Trojan/Win32.SGeneric"
- },
- {
- "Microsoft": "Backdoor:MSIL/Bladabindi"
- },
- {
- "AegisLab": "Trojan.MSIL.Generic.4!c"
- },
- {
- "ZoneAlarm": "HEUR:Backdoor.MSIL.Generic"
- },
- {
- "GData": "Trojan.GenericKD.6308980"
- },
- {
- "ALYac": "Trojan.GenericKD.6308980"
- },
- {
- "Ad-Aware": "Trojan.GenericKD.6308980"
- },
- {
- "Malwarebytes": "Trojan.Downloader"
- },
- {
- "ESET-NOD32": "a variant of MSIL/TrojanDownloader.Tiny.LO"
- },
- {
- "TrendMicro-HouseCall": "TROJ_GEN.R002C0PBK19"
- },
- {
- "Rising": "Backdoor.Bladabindi!8.B1F (CLOUD)"
- },
- {
- "Yandex": "Backdoor.Bladabindi!Xf6U7iBJY1I"
- },
- {
- "MaxSecure": "Trojan.Malware.11826993.susgen"
- },
- {
- "Fortinet": "MSIL/Injector.RZJ!tr"
- },
- {
- "AVG": "FileRepMetagen [Malware]"
- },
- {
- "Cybereason": "malicious.e17bd5"
- },
- {
- "CrowdStrike": "win/malicious_confidence_90% (W)"
- },
- {
- "Qihoo-360": "Win32/Backdoor.990"
- }
- ]
- },
- {
- "Description": "Clamav Hits in Target/Dropped/SuriExtracted",
- "Details": [
- {
- "target": "clamav:Win.Malware.Ursu-6873459-0, sha256:8e3fd9fab78648d6b96ab567f4dcd13dacb101afc8b1bda85c9f1db3fd7696f0, type:PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
- }
- ]
- }
- ]
- [*] Started Service: []
- [*] Executed Commands: []
- [*] Mutexes: []
- [*] Modified Files: []
- [*] Deleted Files: []
- [*] Modified Registry Keys: []
- [*] Deleted Registry Keys: []
- [*] DNS Communications: []
- [*] Domains: []
- [*] Network Communication - ICMP: []
- [*] Network Communication - HTTP: []
- [*] Network Communication - SMTP: []
- [*] Network Communication - Hosts: []
- [*] Network Communication - IRC: []
- [*] Static Analysis: {
- "dotnet": {
- "customattrs": null,
- "assemblyinfo": {
- "version": "1.0.0.0",
- "name": "WindowsApplication1"
- },
- "assemblyrefs": [
- {
- "version": "2.0.0.0",
- "name": "mscorlib"
- },
- {
- "version": "8.0.0.0",
- "name": "Microsoft.VisualBasic"
- },
- {
- "version": "2.0.0.0",
- "name": "System.Windows.Forms"
- },
- {
- "version": "2.0.0.0",
- "name": "System"
- },
- {
- "version": "2.0.0.0",
- "name": "System.Drawing"
- }
- ],
- "typerefs": [
- {
- "typename": "Microsoft.VisualBasic.ApplicationServices.ConsoleApplicationBase",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.ApplicationServices.User",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.CompilerServices.Conversions",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.CompilerServices.DesignerGeneratedAttribute",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.CompilerServices.NewLateBinding",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.CompilerServices.ProjectData",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.CompilerServices.StandardModuleAttribute",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.CompilerServices.Utils",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.Devices.Computer",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.Devices.Network",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.Devices.ServerComputer",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.HideModuleNameAttribute",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.MyGroupCollectionAttribute",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.Strings",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.BackgroundWorker",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.Component",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.ComponentResourceManager",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.Container",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.Design.HelpKeywordAttribute",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.EditorBrowsableAttribute",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.EditorBrowsableState",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.IContainer",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.ISupportInitialize",
- "assembly": "System"
- },
- {
- "typename": "System.Configuration.ApplicationSettingsBase",
- "assembly": "System"
- },
- {
- "typename": "System.Configuration.SettingsBase",
- "assembly": "System"
- },
- {
- "typename": "System.Diagnostics.Process",
- "assembly": "System"
- },
- {
- "typename": "System.Drawing.Image",
- "assembly": "System.Drawing"
- },
- {
- "typename": "System.Drawing.Point",
- "assembly": "System.Drawing"
- },
- {
- "typename": "System.Drawing.Size",
- "assembly": "System.Drawing"
- },
- {
- "typename": "System.Drawing.SizeF",
- "assembly": "System.Drawing"
- },
- {
- "typename": "System.Windows.Forms.AutoScaleMode",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.Button",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ButtonBase",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.CheckBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.CheckedListBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ComboBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ContainerControl",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.Control",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.Control/ControlCollection",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.DateTimePicker",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.DialogResult",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.FolderBrowserDialog",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.Form",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.Label",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.LinkLabel",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ListBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ListControl",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ListView",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.MaskedTextBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.MessageBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.MessageBoxButtons",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.MessageBoxIcon",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.MonthCalendar",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.NotifyIcon",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.NumericUpDown",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.PictureBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ProgressBar",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.RadioButton",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.RichTextBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.TextBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ToolTip",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.TreeView",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.WebBrowser",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Activator",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.ArgumentException",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Boolean",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Collections.Hashtable",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Convert",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Diagnostics.DebuggableAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Diagnostics.DebuggerHiddenAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Diagnostics.DebuggerStepThroughAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.EventArgs",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.EventHandler",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Exception",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Globalization.CultureInfo",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.IDisposable",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Int32",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.InvalidOperationException",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Object",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.Assembly",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyCompanyAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyCopyrightAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyDescriptionAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyFileVersionAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyProductAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyTitleAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyTrademarkAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.TargetInvocationException",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Resources.ResourceManager",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.CompilerServices.AccessedThroughPropertyAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.CompilerServices.RuntimeHelpers",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.InteropServices.GuidAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.RuntimeTypeHandle",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.STAThreadAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.String",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.ThreadStaticAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Type",
- "assembly": "mscorlib"
- }
- ]
- },
- "pe": {
- "peid_signatures": null,
- "imports": [
- {
- "imports": [
- {
- "name": "_CorExeMain",
- "address": "0x402000"
- }
- ],
- "dll": "mscoree.dll"
- }
- ],
- "digital_signers": null,
- "exported_dll_name": null,
- "actual_checksum": "0x0016d2b8",
- "overlay": null,
- "imagebase": "0x00400000",
- "reported_checksum": "0x00000000",
- "icon_hash": null,
- "entrypoint": "0x005699fe",
- "timestamp": "2017-12-16 08:09:47",
- "osversion": "4.0",
- "sections": [
- {
- "name": ".text",
- "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00002000",
- "size_of_data": "0x00168000",
- "entropy": "3.32",
- "raw_address": "0x00001000",
- "virtual_size": "0x00167a04",
- "characteristics_raw": "0x60000020"
- },
- {
- "name": ".sdata",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x0016a000",
- "size_of_data": "0x00001000",
- "entropy": "0.53",
- "raw_address": "0x00169000",
- "virtual_size": "0x000000d6",
- "characteristics_raw": "0xc0000040"
- },
- {
- "name": ".rsrc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x0016c000",
- "size_of_data": "0x00001000",
- "entropy": "1.91",
- "raw_address": "0x0016a000",
- "virtual_size": "0x00000750",
- "characteristics_raw": "0x40000040"
- },
- {
- "name": ".reloc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x0016e000",
- "size_of_data": "0x00001000",
- "entropy": "0.01",
- "raw_address": "0x0016b000",
- "virtual_size": "0x0000000c",
- "characteristics_raw": "0x42000040"
- }
- ],
- "resources": [],
- "dirents": [
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x001699ac",
- "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
- "size": "0x0000004f"
- },
- {
- "virtual_address": "0x0016c000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
- "size": "0x00000750"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x0016e000",
- "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
- "size": "0x0000000c"
- },
- {
- "virtual_address": "0x0016a000",
- "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
- "size": "0x0000001c"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_TLS",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00002000",
- "name": "IMAGE_DIRECTORY_ENTRY_IAT",
- "size": "0x00000008"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00002008",
- "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
- "size": "0x00000048"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
- "size": "0x00000000"
- }
- ],
- "exports": [],
- "guest_signers": {},
- "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
- "icon_fuzzy": null,
- "icon": null,
- "pdbpath": "C:\\Documents and Settings\\Small.hearts@Yahoo\\My Documents\\Visual Studio 2005\\Projects\\WindowsApplication1\\WindowsApplication1\\obj\\Release\\WindowsApplication1.pdb",
- "imported_dll_count": 1,
- "versioninfo": []
- }
- }
- [*] Resolved APIs: []
- [*] Static Analysis: {
- "dotnet": {
- "customattrs": null,
- "assemblyinfo": {
- "version": "1.0.0.0",
- "name": "WindowsApplication1"
- },
- "assemblyrefs": [
- {
- "version": "2.0.0.0",
- "name": "mscorlib"
- },
- {
- "version": "8.0.0.0",
- "name": "Microsoft.VisualBasic"
- },
- {
- "version": "2.0.0.0",
- "name": "System.Windows.Forms"
- },
- {
- "version": "2.0.0.0",
- "name": "System"
- },
- {
- "version": "2.0.0.0",
- "name": "System.Drawing"
- }
- ],
- "typerefs": [
- {
- "typename": "Microsoft.VisualBasic.ApplicationServices.ConsoleApplicationBase",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.ApplicationServices.User",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.CompilerServices.Conversions",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.CompilerServices.DesignerGeneratedAttribute",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.CompilerServices.NewLateBinding",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.CompilerServices.ProjectData",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.CompilerServices.StandardModuleAttribute",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.CompilerServices.Utils",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.Devices.Computer",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.Devices.Network",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.Devices.ServerComputer",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.HideModuleNameAttribute",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.MyGroupCollectionAttribute",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "Microsoft.VisualBasic.Strings",
- "assembly": "Microsoft.VisualBasic"
- },
- {
- "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.BackgroundWorker",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.Component",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.ComponentResourceManager",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.Container",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.Design.HelpKeywordAttribute",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.EditorBrowsableAttribute",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.EditorBrowsableState",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.IContainer",
- "assembly": "System"
- },
- {
- "typename": "System.ComponentModel.ISupportInitialize",
- "assembly": "System"
- },
- {
- "typename": "System.Configuration.ApplicationSettingsBase",
- "assembly": "System"
- },
- {
- "typename": "System.Configuration.SettingsBase",
- "assembly": "System"
- },
- {
- "typename": "System.Diagnostics.Process",
- "assembly": "System"
- },
- {
- "typename": "System.Drawing.Image",
- "assembly": "System.Drawing"
- },
- {
- "typename": "System.Drawing.Point",
- "assembly": "System.Drawing"
- },
- {
- "typename": "System.Drawing.Size",
- "assembly": "System.Drawing"
- },
- {
- "typename": "System.Drawing.SizeF",
- "assembly": "System.Drawing"
- },
- {
- "typename": "System.Windows.Forms.AutoScaleMode",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.Button",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ButtonBase",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.CheckBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.CheckedListBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ComboBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ContainerControl",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.Control",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.Control/ControlCollection",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.DateTimePicker",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.DialogResult",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.FolderBrowserDialog",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.Form",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.Label",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.LinkLabel",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ListBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ListControl",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ListView",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.MaskedTextBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.MessageBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.MessageBoxButtons",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.MessageBoxIcon",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.MonthCalendar",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.NotifyIcon",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.NumericUpDown",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.PictureBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ProgressBar",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.RadioButton",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.RichTextBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.TextBox",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.ToolTip",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.TreeView",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Windows.Forms.WebBrowser",
- "assembly": "System.Windows.Forms"
- },
- {
- "typename": "System.Activator",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.ArgumentException",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Boolean",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Collections.Hashtable",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Convert",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Diagnostics.DebuggableAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Diagnostics.DebuggerHiddenAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Diagnostics.DebuggerStepThroughAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.EventArgs",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.EventHandler",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Exception",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Globalization.CultureInfo",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.IDisposable",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Int32",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.InvalidOperationException",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Object",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.Assembly",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyCompanyAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyCopyrightAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyDescriptionAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyFileVersionAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyProductAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyTitleAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.AssemblyTrademarkAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Reflection.TargetInvocationException",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Resources.ResourceManager",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.CompilerServices.AccessedThroughPropertyAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.CompilerServices.RuntimeHelpers",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Runtime.InteropServices.GuidAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.RuntimeTypeHandle",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.STAThreadAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.String",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.ThreadStaticAttribute",
- "assembly": "mscorlib"
- },
- {
- "typename": "System.Type",
- "assembly": "mscorlib"
- }
- ]
- },
- "pe": {
- "peid_signatures": null,
- "imports": [
- {
- "imports": [
- {
- "name": "_CorExeMain",
- "address": "0x402000"
- }
- ],
- "dll": "mscoree.dll"
- }
- ],
- "digital_signers": null,
- "exported_dll_name": null,
- "actual_checksum": "0x0016d2b8",
- "overlay": null,
- "imagebase": "0x00400000",
- "reported_checksum": "0x00000000",
- "icon_hash": null,
- "entrypoint": "0x005699fe",
- "timestamp": "2017-12-16 08:09:47",
- "osversion": "4.0",
- "sections": [
- {
- "name": ".text",
- "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00002000",
- "size_of_data": "0x00168000",
- "entropy": "3.32",
- "raw_address": "0x00001000",
- "virtual_size": "0x00167a04",
- "characteristics_raw": "0x60000020"
- },
- {
- "name": ".sdata",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x0016a000",
- "size_of_data": "0x00001000",
- "entropy": "0.53",
- "raw_address": "0x00169000",
- "virtual_size": "0x000000d6",
- "characteristics_raw": "0xc0000040"
- },
- {
- "name": ".rsrc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x0016c000",
- "size_of_data": "0x00001000",
- "entropy": "1.91",
- "raw_address": "0x0016a000",
- "virtual_size": "0x00000750",
- "characteristics_raw": "0x40000040"
- },
- {
- "name": ".reloc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x0016e000",
- "size_of_data": "0x00001000",
- "entropy": "0.01",
- "raw_address": "0x0016b000",
- "virtual_size": "0x0000000c",
- "characteristics_raw": "0x42000040"
- }
- ],
- "resources": [],
- "dirents": [
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x001699ac",
- "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
- "size": "0x0000004f"
- },
- {
- "virtual_address": "0x0016c000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
- "size": "0x00000750"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x0016e000",
- "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
- "size": "0x0000000c"
- },
- {
- "virtual_address": "0x0016a000",
- "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
- "size": "0x0000001c"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_TLS",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00002000",
- "name": "IMAGE_DIRECTORY_ENTRY_IAT",
- "size": "0x00000008"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00002008",
- "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
- "size": "0x00000048"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
- "size": "0x00000000"
- }
- ],
- "exports": [],
- "guest_signers": {},
- "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
- "icon_fuzzy": null,
- "icon": null,
- "pdbpath": "C:\\Documents and Settings\\Small.hearts@Yahoo\\My Documents\\Visual Studio 2005\\Projects\\WindowsApplication1\\WindowsApplication1\\obj\\Release\\WindowsApplication1.pdb",
- "imported_dll_count": 1,
- "versioninfo": []
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment