API tools faq
paste
paladin316

Exes_1c0416b01fcec82acf3566c960d2f712_exe_2019-06-24_10_30.json

paladin316
Jun 24th, 2019
2,259
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 74.73 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: ""
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_1c0416b01fcec82acf3566c960d2f712.exe"
  7. [*] File Size: 697856
  8. [*] File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
  9. [*] SHA256: "9dec6dc17b0fa7b92b7d6c499030791332e0e7766ec6b6625d57bc2042bcf8fa"
  10. [*] MD5: "1c0416b01fcec82acf3566c960d2f712"
  11. [*] SHA1: "a2c06d7a6b0d9a502866f8358ef0930d5572e4b5"
  12. [*] SHA512: "0b20d6eb14214151aeb5ecda26c36c1fc44f67a52b1164393ac2f33132845a3009f08a7737a7ecdb333862448820d7a6356726ae4f6f7aa5e75ca01cefd09e9b"
  13. [*] CRC32: "4D5830DF"
  14. [*] SSDEEP: "12288:din70l8RoJ0ZPxA/bbljcyacNHAZue0GbaxpRN7/Ba:d0LG0ZP3Z5VSN"
  15.  
  16. [*] Process Execution: [
  17. "Exes_1c0416b01fcec82acf3566c960d2f712.exe"
  18. ]
  19.  
  20. [*] Signatures Detected: [
  21. {
  22. "Description": "The binary likely contains encrypted or compressed data.",
  23. "Details": [
  24. {
  25. "section": "name: .rsrc, entropy: 7.48, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ, raw_size: 0x00079e00, virtual_size: 0x00079c40"
  26. }
  27. ]
  28. },
  29. {
  30. "Description": "Anomalous .NET characteristics",
  31. "Details": [
  32. {
  33. "anomalous_version": "Assembly version is set to 0"
  34. }
  35. ]
  36. },
  37. {
  38. "Description": "File has been identified by 32 Antiviruses on VirusTotal as malicious",
  39. "Details": [
  40. {
  41. "MicroWorld-eScan": "Trojan.GenericKD.41386908"
  42. },
  43. {
  44. "FireEye": "Trojan.GenericKD.41386908"
  45. },
  46. {
  47. "McAfee": "RDN/Generic.dx"
  48. },
  49. {
  50. "CrowdStrike": "win/malicious_confidence_60% (W)"
  51. },
  52. {
  53. "BitDefender": "Trojan.GenericKD.41386908"
  54. },
  55. {
  56. "TrendMicro": "TROJ_GEN.R061C0RFM19"
  57. },
  58. {
  59. "Symantec": "ML.Attribute.HighConfidence"
  60. },
  61. {
  62. "APEX": "Malicious"
  63. },
  64. {
  65. "Paloalto": "generic.ml"
  66. },
  67. {
  68. "Kaspersky": "HEUR:Trojan.MSIL.Crypt.gen"
  69. },
  70. {
  71. "Alibaba": "Trojan:MSIL/Kryptik.54de118a"
  72. },
  73. {
  74. "Rising": "Trojan.MSIL/Kryptik!1.B1DC (CLOUD)"
  75. },
  76. {
  77. "Endgame": "malicious (high confidence)"
  78. },
  79. {
  80. "Sophos": "Troj/MsilIn-AC"
  81. },
  82. {
  83. "F-Secure": "Trojan.TR/AD.Bladabindi.qwkwg"
  84. },
  85. {
  86. "DrWeb": "Trojan.PWS.Siggen2.19203"
  87. },
  88. {
  89. "McAfee-GW-Edition": "RDN/Generic.dx"
  90. },
  91. {
  92. "Emsisoft": "Trojan.GenericKD.41386908 (B)"
  93. },
  94. {
  95. "Webroot": "W32.Trojan.Gen"
  96. },
  97. {
  98. "Avira": "TR/AD.Bladabindi.qwkwg"
  99. },
  100. {
  101. "Fortinet": "MSIL/GenKryptik.DKXI!tr"
  102. },
  103. {
  104. "ZoneAlarm": "HEUR:Trojan.MSIL.Crypt.gen"
  105. },
  106. {
  107. "Microsoft": "Trojan:Win32/Tiggre!plock"
  108. },
  109. {
  110. "AhnLab-V3": "Trojan/Win32.RL_Kryptik.R276695"
  111. },
  112. {
  113. "Acronis": "suspicious"
  114. },
  115. {
  116. "Ad-Aware": "Trojan.GenericKD.41386908"
  117. },
  118. {
  119. "Malwarebytes": "Trojan.Crypt.XMP"
  120. },
  121. {
  122. "ESET-NOD32": "a variant of MSIL/Kryptik.SAE"
  123. },
  124. {
  125. "Ikarus": "Trojan.MSIL.Crypt"
  126. },
  127. {
  128. "GData": "Win32.Trojan-Stealer.Brilik.4IAWL2"
  129. },
  130. {
  131. "AVG": "Win32:CrypterX-gen [Trj]"
  132. },
  133. {
  134. "Avast": "Win32:CrypterX-gen [Trj]"
  135. }
  136. ]
  137. }
  138. ]
  139.  
  140. [*] Started Service: []
  141.  
  142. [*] Executed Commands: []
  143.  
  144. [*] Mutexes: []
  145.  
  146. [*] Modified Files: []
  147.  
  148. [*] Deleted Files: []
  149.  
  150. [*] Modified Registry Keys: []
  151.  
  152. [*] Deleted Registry Keys: []
  153.  
  154. [*] DNS Communications: []
  155.  
  156. [*] Domains: []
  157.  
  158. [*] Network Communication - ICMP: []
  159.  
  160. [*] Network Communication - HTTP: []
  161.  
  162. [*] Network Communication - SMTP: []
  163.  
  164. [*] Network Communication - Hosts: []
  165.  
  166. [*] Network Communication - IRC: []
  167.  
  168. [*] Static Analysis: {
  169. "dotnet": {
  170. "customattrs": [
  171. {
  172. "type": "TypeDef",
  173. "name": "[mscorlib]System.Reflection.DefaultMemberAttribute",
  174. "value": "It"
  175. },
  176. {
  177. "type": "TypeDef",
  178. "name": "[mscorlib]System.Reflection.DefaultMemberAttribute",
  179. "value": "It"
  180. },
  181. {
  182. "type": "TypeDef",
  183. "name": "[mscorlib]System.Reflection.DefaultMemberAttribute",
  184. "value": "It"
  185. },
  186. {
  187. "type": "TypeDef",
  188. "name": "[mscorlib]System.Diagnostics.DebuggerDisplayAttribute",
  189. "value": "{DebuggerToString("
  190. }
  191. ],
  192. "assemblyinfo": {
  193. "version": "0.0.0.0",
  194. "name": "yTZYEzRxrwttKorcma"
  195. },
  196. "assemblyrefs": [
  197. {
  198. "version": "4.0.0.0",
  199. "name": "mscorlib"
  200. },
  201. {
  202. "version": "4.0.0.0",
  203. "name": "System"
  204. },
  205. {
  206. "version": "4.0.0.0",
  207. "name": "System.Net.Http"
  208. },
  209. {
  210. "version": "4.0.0.0",
  211. "name": "System.Core"
  212. },
  213. {
  214. "version": "4.0.0.0",
  215. "name": "System.Runtime.Serialization"
  216. },
  217. {
  218. "version": "6.0.0.0",
  219. "name": "Newtonsoft.Json"
  220. },
  221. {
  222. "version": "4.0.0.0",
  223. "name": "System.Xml"
  224. },
  225. {
  226. "version": "4.0.0.0",
  227. "name": "System.Xml.Linq"
  228. }
  229. ],
  230. "typerefs": [
  231. {
  232. "typename": "Newtonsoft.Json.Bson.BsonReader",
  233. "assembly": "Newtonsoft.Json"
  234. },
  235. {
  236. "typename": "Newtonsoft.Json.Bson.BsonWriter",
  237. "assembly": "Newtonsoft.Json"
  238. },
  239. {
  240. "typename": "Newtonsoft.Json.DefaultValueHandling",
  241. "assembly": "Newtonsoft.Json"
  242. },
  243. {
  244. "typename": "Newtonsoft.Json.Formatting",
  245. "assembly": "Newtonsoft.Json"
  246. },
  247. {
  248. "typename": "Newtonsoft.Json.JsonReader",
  249. "assembly": "Newtonsoft.Json"
  250. },
  251. {
  252. "typename": "Newtonsoft.Json.JsonSerializer",
  253. "assembly": "Newtonsoft.Json"
  254. },
  255. {
  256. "typename": "Newtonsoft.Json.JsonSerializerSettings",
  257. "assembly": "Newtonsoft.Json"
  258. },
  259. {
  260. "typename": "Newtonsoft.Json.JsonTextReader",
  261. "assembly": "Newtonsoft.Json"
  262. },
  263. {
  264. "typename": "Newtonsoft.Json.JsonTextWriter",
  265. "assembly": "Newtonsoft.Json"
  266. },
  267. {
  268. "typename": "Newtonsoft.Json.JsonWriter",
  269. "assembly": "Newtonsoft.Json"
  270. },
  271. {
  272. "typename": "Newtonsoft.Json.Linq.JArray",
  273. "assembly": "Newtonsoft.Json"
  274. },
  275. {
  276. "typename": "Newtonsoft.Json.Linq.JContainer",
  277. "assembly": "Newtonsoft.Json"
  278. },
  279. {
  280. "typename": "Newtonsoft.Json.Linq.JObject",
  281. "assembly": "Newtonsoft.Json"
  282. },
  283. {
  284. "typename": "Newtonsoft.Json.Linq.JToken",
  285. "assembly": "Newtonsoft.Json"
  286. },
  287. {
  288. "typename": "Newtonsoft.Json.Linq.JTokenReader",
  289. "assembly": "Newtonsoft.Json"
  290. },
  291. {
  292. "typename": "Newtonsoft.Json.Linq.JTokenType",
  293. "assembly": "Newtonsoft.Json"
  294. },
  295. {
  296. "typename": "Newtonsoft.Json.Linq.JValue",
  297. "assembly": "Newtonsoft.Json"
  298. },
  299. {
  300. "typename": "Newtonsoft.Json.MemberSerialization",
  301. "assembly": "Newtonsoft.Json"
  302. },
  303. {
  304. "typename": "Newtonsoft.Json.MissingMemberHandling",
  305. "assembly": "Newtonsoft.Json"
  306. },
  307. {
  308. "typename": "Newtonsoft.Json.NullValueHandling",
  309. "assembly": "Newtonsoft.Json"
  310. },
  311. {
  312. "typename": "Newtonsoft.Json.Required",
  313. "assembly": "Newtonsoft.Json"
  314. },
  315. {
  316. "typename": "Newtonsoft.Json.Serialization.DefaultContractResolver",
  317. "assembly": "Newtonsoft.Json"
  318. },
  319. {
  320. "typename": "Newtonsoft.Json.Serialization.ErrorContext",
  321. "assembly": "Newtonsoft.Json"
  322. },
  323. {
  324. "typename": "Newtonsoft.Json.Serialization.ErrorEventArgs",
  325. "assembly": "Newtonsoft.Json"
  326. },
  327. {
  328. "typename": "Newtonsoft.Json.Serialization.IContractResolver",
  329. "assembly": "Newtonsoft.Json"
  330. },
  331. {
  332. "typename": "Newtonsoft.Json.Serialization.JsonProperty",
  333. "assembly": "Newtonsoft.Json"
  334. },
  335. {
  336. "typename": "Newtonsoft.Json.TypeNameHandling",
  337. "assembly": "Newtonsoft.Json"
  338. },
  339. {
  340. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  341. "assembly": "System"
  342. },
  343. {
  344. "typename": "System.Collections.Specialized.NameObjectCollectionBase",
  345. "assembly": "System"
  346. },
  347. {
  348. "typename": "System.Collections.Specialized.NameValueCollection",
  349. "assembly": "System"
  350. },
  351. {
  352. "typename": "System.ComponentModel.DefaultValueAttribute",
  353. "assembly": "System"
  354. },
  355. {
  356. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  357. "assembly": "System"
  358. },
  359. {
  360. "typename": "System.ComponentModel.EditorBrowsableState",
  361. "assembly": "System"
  362. },
  363. {
  364. "typename": "System.ComponentModel.InvalidEnumArgumentException",
  365. "assembly": "System"
  366. },
  367. {
  368. "typename": "System.ComponentModel.ProgressChangedEventArgs",
  369. "assembly": "System"
  370. },
  371. {
  372. "typename": "System.ComponentModel.TypeConverter",
  373. "assembly": "System"
  374. },
  375. {
  376. "typename": "System.ComponentModel.TypeDescriptor",
  377. "assembly": "System"
  378. },
  379. {
  380. "typename": "System.Net.Cookie",
  381. "assembly": "System"
  382. },
  383. {
  384. "typename": "System.Net.HttpStatusCode",
  385. "assembly": "System"
  386. },
  387. {
  388. "typename": "System.Net.TransportContext",
  389. "assembly": "System"
  390. },
  391. {
  392. "typename": "System.Uri",
  393. "assembly": "System"
  394. },
  395. {
  396. "typename": "System.Collections.Generic.HashSet`1",
  397. "assembly": "System.Core"
  398. },
  399. {
  400. "typename": "System.Linq.Enumerable",
  401. "assembly": "System.Core"
  402. },
  403. {
  404. "typename": "System.Linq.IOrderedEnumerable`1",
  405. "assembly": "System.Core"
  406. },
  407. {
  408. "typename": "System.Linq.IQueryable`1",
  409. "assembly": "System.Core"
  410. },
  411. {
  412. "typename": "System.Net.Http.DelegatingHandler",
  413. "assembly": "System.Net.Http"
  414. },
  415. {
  416. "typename": "System.Net.Http.Headers.ContentDispositionHeaderValue",
  417. "assembly": "System.Net.Http"
  418. },
  419. {
  420. "typename": "System.Net.Http.Headers.ContentRangeHeaderValue",
  421. "assembly": "System.Net.Http"
  422. },
  423. {
  424. "typename": "System.Net.Http.Headers.HttpContentHeaders",
  425. "assembly": "System.Net.Http"
  426. },
  427. {
  428. "typename": "System.Net.Http.Headers.HttpHeaderValueCollection`1",
  429. "assembly": "System.Net.Http"
  430. },
  431. {
  432. "typename": "System.Net.Http.Headers.HttpHeaders",
  433. "assembly": "System.Net.Http"
  434. },
  435. {
  436. "typename": "System.Net.Http.Headers.HttpRequestHeaders",
  437. "assembly": "System.Net.Http"
  438. },
  439. {
  440. "typename": "System.Net.Http.Headers.HttpResponseHeaders",
  441. "assembly": "System.Net.Http"
  442. },
  443. {
  444. "typename": "System.Net.Http.Headers.MediaTypeHeaderValue",
  445. "assembly": "System.Net.Http"
  446. },
  447. {
  448. "typename": "System.Net.Http.Headers.MediaTypeWithQualityHeaderValue",
  449. "assembly": "System.Net.Http"
  450. },
  451. {
  452. "typename": "System.Net.Http.Headers.NameValueHeaderValue",
  453. "assembly": "System.Net.Http"
  454. },
  455. {
  456. "typename": "System.Net.Http.Headers.RangeHeaderValue",
  457. "assembly": "System.Net.Http"
  458. },
  459. {
  460. "typename": "System.Net.Http.Headers.RangeItemHeaderValue",
  461. "assembly": "System.Net.Http"
  462. },
  463. {
  464. "typename": "System.Net.Http.Headers.StringWithQualityHeaderValue",
  465. "assembly": "System.Net.Http"
  466. },
  467. {
  468. "typename": "System.Net.Http.HttpClient",
  469. "assembly": "System.Net.Http"
  470. },
  471. {
  472. "typename": "System.Net.Http.HttpClientHandler",
  473. "assembly": "System.Net.Http"
  474. },
  475. {
  476. "typename": "System.Net.Http.HttpContent",
  477. "assembly": "System.Net.Http"
  478. },
  479. {
  480. "typename": "System.Net.Http.HttpMessageHandler",
  481. "assembly": "System.Net.Http"
  482. },
  483. {
  484. "typename": "System.Net.Http.HttpMethod",
  485. "assembly": "System.Net.Http"
  486. },
  487. {
  488. "typename": "System.Net.Http.HttpRequestMessage",
  489. "assembly": "System.Net.Http"
  490. },
  491. {
  492. "typename": "System.Net.Http.HttpResponseMessage",
  493. "assembly": "System.Net.Http"
  494. },
  495. {
  496. "typename": "System.Net.Http.MultipartContent",
  497. "assembly": "System.Net.Http"
  498. },
  499. {
  500. "typename": "System.Net.Http.StreamContent",
  501. "assembly": "System.Net.Http"
  502. },
  503. {
  504. "typename": "System.Net.Http.StringContent",
  505. "assembly": "System.Net.Http"
  506. },
  507. {
  508. "typename": "System.Runtime.Serialization.DataContractSerializer",
  509. "assembly": "System.Runtime.Serialization"
  510. },
  511. {
  512. "typename": "System.Runtime.Serialization.Json.DataContractJsonSerializer",
  513. "assembly": "System.Runtime.Serialization"
  514. },
  515. {
  516. "typename": "System.Runtime.Serialization.Json.JsonReaderWriterFactory",
  517. "assembly": "System.Runtime.Serialization"
  518. },
  519. {
  520. "typename": "System.Runtime.Serialization.XmlObjectSerializer",
  521. "assembly": "System.Runtime.Serialization"
  522. },
  523. {
  524. "typename": "System.Runtime.Serialization.XsdDataContractExporter",
  525. "assembly": "System.Runtime.Serialization"
  526. },
  527. {
  528. "typename": "System.Xml.OnXmlDictionaryReaderClose",
  529. "assembly": "System.Runtime.Serialization"
  530. },
  531. {
  532. "typename": "System.Xml.XmlDictionaryReader",
  533. "assembly": "System.Runtime.Serialization"
  534. },
  535. {
  536. "typename": "System.Xml.XmlDictionaryReaderQuotas",
  537. "assembly": "System.Runtime.Serialization"
  538. },
  539. {
  540. "typename": "System.Xml.XmlDictionaryWriter",
  541. "assembly": "System.Runtime.Serialization"
  542. },
  543. {
  544. "typename": "System.Xml.Serialization.XmlSerializer",
  545. "assembly": "System.Xml"
  546. },
  547. {
  548. "typename": "System.Xml.XmlNode",
  549. "assembly": "System.Xml"
  550. },
  551. {
  552. "typename": "System.Xml.XmlQualifiedName",
  553. "assembly": "System.Xml"
  554. },
  555. {
  556. "typename": "System.Xml.XmlReader",
  557. "assembly": "System.Xml"
  558. },
  559. {
  560. "typename": "System.Xml.XmlWriter",
  561. "assembly": "System.Xml"
  562. },
  563. {
  564. "typename": "System.Xml.XmlWriterSettings",
  565. "assembly": "System.Xml"
  566. },
  567. {
  568. "typename": "System.Xml.Linq.XObject",
  569. "assembly": "System.Xml.Linq"
  570. },
  571. {
  572. "typename": "System.Action`1",
  573. "assembly": "mscorlib"
  574. },
  575. {
  576. "typename": "System.Action`3",
  577. "assembly": "mscorlib"
  578. },
  579. {
  580. "typename": "System.Activator",
  581. "assembly": "mscorlib"
  582. },
  583. {
  584. "typename": "System.ArgumentException",
  585. "assembly": "mscorlib"
  586. },
  587. {
  588. "typename": "System.ArgumentNullException",
  589. "assembly": "mscorlib"
  590. },
  591. {
  592. "typename": "System.ArgumentOutOfRangeException",
  593. "assembly": "mscorlib"
  594. },
  595. {
  596. "typename": "System.Array",
  597. "assembly": "mscorlib"
  598. },
  599. {
  600. "typename": "System.ArraySegment`1",
  601. "assembly": "mscorlib"
  602. },
  603. {
  604. "typename": "System.AsyncCallback",
  605. "assembly": "mscorlib"
  606. },
  607. {
  608. "typename": "System.Buffer",
  609. "assembly": "mscorlib"
  610. },
  611. {
  612. "typename": "System.Byte",
  613. "assembly": "mscorlib"
  614. },
  615. {
  616. "typename": "System.Char",
  617. "assembly": "mscorlib"
  618. },
  619. {
  620. "typename": "System.Collections.Concurrent.ConcurrentDictionary`2",
  621. "assembly": "mscorlib"
  622. },
  623. {
  624. "typename": "System.Collections.DictionaryEntry",
  625. "assembly": "mscorlib"
  626. },
  627. {
  628. "typename": "System.Collections.Generic.Dictionary`2",
  629. "assembly": "mscorlib"
  630. },
  631. {
  632. "typename": "System.Collections.Generic.ICollection`1",
  633. "assembly": "mscorlib"
  634. },
  635. {
  636. "typename": "System.Collections.Generic.IComparer`1",
  637. "assembly": "mscorlib"
  638. },
  639. {
  640. "typename": "System.Collections.Generic.IDictionary`2",
  641. "assembly": "mscorlib"
  642. },
  643. {
  644. "typename": "System.Collections.Generic.IEnumerable`1",
  645. "assembly": "mscorlib"
  646. },
  647. {
  648. "typename": "System.Collections.Generic.IEnumerator`1",
  649. "assembly": "mscorlib"
  650. },
  651. {
  652. "typename": "System.Collections.Generic.IEqualityComparer`1",
  653. "assembly": "mscorlib"
  654. },
  655. {
  656. "typename": "System.Collections.Generic.IList`1",
  657. "assembly": "mscorlib"
  658. },
  659. {
  660. "typename": "System.Collections.Generic.KeyNotFoundException",
  661. "assembly": "mscorlib"
  662. },
  663. {
  664. "typename": "System.Collections.Generic.KeyValuePair`2",
  665. "assembly": "mscorlib"
  666. },
  667. {
  668. "typename": "System.Collections.Generic.List`1",
  669. "assembly": "mscorlib"
  670. },
  671. {
  672. "typename": "System.Collections.Generic.List`1/Enumerator",
  673. "assembly": "mscorlib"
  674. },
  675. {
  676. "typename": "System.Collections.ICollection",
  677. "assembly": "mscorlib"
  678. },
  679. {
  680. "typename": "System.Collections.IDictionary",
  681. "assembly": "mscorlib"
  682. },
  683. {
  684. "typename": "System.Collections.IDictionaryEnumerator",
  685. "assembly": "mscorlib"
  686. },
  687. {
  688. "typename": "System.Collections.IEnumerable",
  689. "assembly": "mscorlib"
  690. },
  691. {
  692. "typename": "System.Collections.IEnumerator",
  693. "assembly": "mscorlib"
  694. },
  695. {
  696. "typename": "System.Collections.IEqualityComparer",
  697. "assembly": "mscorlib"
  698. },
  699. {
  700. "typename": "System.Collections.ObjectModel.Collection`1",
  701. "assembly": "mscorlib"
  702. },
  703. {
  704. "typename": "System.Comparison`1",
  705. "assembly": "mscorlib"
  706. },
  707. {
  708. "typename": "System.Convert",
  709. "assembly": "mscorlib"
  710. },
  711. {
  712. "typename": "System.DBNull",
  713. "assembly": "mscorlib"
  714. },
  715. {
  716. "typename": "System.DateTimeOffset",
  717. "assembly": "mscorlib"
  718. },
  719. {
  720. "typename": "System.Delegate",
  721. "assembly": "mscorlib"
  722. },
  723. {
  724. "typename": "System.Diagnostics.DebuggableAttribute",
  725. "assembly": "mscorlib"
  726. },
  727. {
  728. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  729. "assembly": "mscorlib"
  730. },
  731. {
  732. "typename": "System.Diagnostics.DebuggerDisplayAttribute",
  733. "assembly": "mscorlib"
  734. },
  735. {
  736. "typename": "System.Diagnostics.DebuggerHiddenAttribute",
  737. "assembly": "mscorlib"
  738. },
  739. {
  740. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  741. "assembly": "mscorlib"
  742. },
  743. {
  744. "typename": "System.Enum",
  745. "assembly": "mscorlib"
  746. },
  747. {
  748. "typename": "System.Environment",
  749. "assembly": "mscorlib"
  750. },
  751. {
  752. "typename": "System.EventArgs",
  753. "assembly": "mscorlib"
  754. },
  755. {
  756. "typename": "System.EventHandler",
  757. "assembly": "mscorlib"
  758. },
  759. {
  760. "typename": "System.EventHandler`1",
  761. "assembly": "mscorlib"
  762. },
  763. {
  764. "typename": "System.Exception",
  765. "assembly": "mscorlib"
  766. },
  767. {
  768. "typename": "System.FormatException",
  769. "assembly": "mscorlib"
  770. },
  771. {
  772. "typename": "System.Func`1",
  773. "assembly": "mscorlib"
  774. },
  775. {
  776. "typename": "System.Func`2",
  777. "assembly": "mscorlib"
  778. },
  779. {
  780. "typename": "System.Func`3",
  781. "assembly": "mscorlib"
  782. },
  783. {
  784. "typename": "System.Func`4",
  785. "assembly": "mscorlib"
  786. },
  787. {
  788. "typename": "System.GC",
  789. "assembly": "mscorlib"
  790. },
  791. {
  792. "typename": "System.Globalization.CultureInfo",
  793. "assembly": "mscorlib"
  794. },
  795. {
  796. "typename": "System.Globalization.DateTimeFormatInfo",
  797. "assembly": "mscorlib"
  798. },
  799. {
  800. "typename": "System.Globalization.DateTimeStyles",
  801. "assembly": "mscorlib"
  802. },
  803. {
  804. "typename": "System.Globalization.NumberFormatInfo",
  805. "assembly": "mscorlib"
  806. },
  807. {
  808. "typename": "System.Globalization.NumberStyles",
  809. "assembly": "mscorlib"
  810. },
  811. {
  812. "typename": "System.Guid",
  813. "assembly": "mscorlib"
  814. },
  815. {
  816. "typename": "System.IAsyncResult",
  817. "assembly": "mscorlib"
  818. },
  819. {
  820. "typename": "System.ICloneable",
  821. "assembly": "mscorlib"
  822. },
  823. {
  824. "typename": "System.IDisposable",
  825. "assembly": "mscorlib"
  826. },
  827. {
  828. "typename": "System.IFormatProvider",
  829. "assembly": "mscorlib"
  830. },
  831. {
  832. "typename": "System.IO.BinaryReader",
  833. "assembly": "mscorlib"
  834. },
  835. {
  836. "typename": "System.IO.BinaryWriter",
  837. "assembly": "mscorlib"
  838. },
  839. {
  840. "typename": "System.IO.BufferedStream",
  841. "assembly": "mscorlib"
  842. },
  843. {
  844. "typename": "System.IO.File",
  845. "assembly": "mscorlib"
  846. },
  847. {
  848. "typename": "System.IO.FileOptions",
  849. "assembly": "mscorlib"
  850. },
  851. {
  852. "typename": "System.IO.FileStream",
  853. "assembly": "mscorlib"
  854. },
  855. {
  856. "typename": "System.IO.IOException",
  857. "assembly": "mscorlib"
  858. },
  859. {
  860. "typename": "System.IO.MemoryStream",
  861. "assembly": "mscorlib"
  862. },
  863. {
  864. "typename": "System.IO.Path",
  865. "assembly": "mscorlib"
  866. },
  867. {
  868. "typename": "System.IO.SeekOrigin",
  869. "assembly": "mscorlib"
  870. },
  871. {
  872. "typename": "System.IO.Stream",
  873. "assembly": "mscorlib"
  874. },
  875. {
  876. "typename": "System.IO.StreamReader",
  877. "assembly": "mscorlib"
  878. },
  879. {
  880. "typename": "System.IO.StreamWriter",
  881. "assembly": "mscorlib"
  882. },
  883. {
  884. "typename": "System.IO.TextReader",
  885. "assembly": "mscorlib"
  886. },
  887. {
  888. "typename": "System.IO.TextWriter",
  889. "assembly": "mscorlib"
  890. },
  891. {
  892. "typename": "System.Int32",
  893. "assembly": "mscorlib"
  894. },
  895. {
  896. "typename": "System.Int64",
  897. "assembly": "mscorlib"
  898. },
  899. {
  900. "typename": "System.InvalidOperationException",
  901. "assembly": "mscorlib"
  902. },
  903. {
  904. "typename": "System.Lazy`1",
  905. "assembly": "mscorlib"
  906. },
  907. {
  908. "typename": "System.Math",
  909. "assembly": "mscorlib"
  910. },
  911. {
  912. "typename": "System.NotImplementedException",
  913. "assembly": "mscorlib"
  914. },
  915. {
  916. "typename": "System.NotSupportedException",
  917. "assembly": "mscorlib"
  918. },
  919. {
  920. "typename": "System.Nullable`1",
  921. "assembly": "mscorlib"
  922. },
  923. {
  924. "typename": "System.Object",
  925. "assembly": "mscorlib"
  926. },
  927. {
  928. "typename": "System.ObjectDisposedException",
  929. "assembly": "mscorlib"
  930. },
  931. {
  932. "typename": "System.OperationCanceledException",
  933. "assembly": "mscorlib"
  934. },
  935. {
  936. "typename": "System.ParamArrayAttribute",
  937. "assembly": "mscorlib"
  938. },
  939. {
  940. "typename": "System.Reflection.Assembly",
  941. "assembly": "mscorlib"
  942. },
  943. {
  944. "typename": "System.Reflection.ConstructorInfo",
  945. "assembly": "mscorlib"
  946. },
  947. {
  948. "typename": "System.Reflection.DefaultMemberAttribute",
  949. "assembly": "mscorlib"
  950. },
  951. {
  952. "typename": "System.Reflection.MemberInfo",
  953. "assembly": "mscorlib"
  954. },
  955. {
  956. "typename": "System.Reflection.MethodBase",
  957. "assembly": "mscorlib"
  958. },
  959. {
  960. "typename": "System.Reflection.MethodInfo",
  961. "assembly": "mscorlib"
  962. },
  963. {
  964. "typename": "System.Resources.ResourceManager",
  965. "assembly": "mscorlib"
  966. },
  967. {
  968. "typename": "System.Runtime.CompilerServices.AsyncStateMachineAttribute",
  969. "assembly": "mscorlib"
  970. },
  971. {
  972. "typename": "System.Runtime.CompilerServices.AsyncTaskMethodBuilder",
  973. "assembly": "mscorlib"
  974. },
  975. {
  976. "typename": "System.Runtime.CompilerServices.AsyncTaskMethodBuilder`1",
  977. "assembly": "mscorlib"
  978. },
  979. {
  980. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  981. "assembly": "mscorlib"
  982. },
  983. {
  984. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  985. "assembly": "mscorlib"
  986. },
  987. {
  988. "typename": "System.Runtime.CompilerServices.ExtensionAttribute",
  989. "assembly": "mscorlib"
  990. },
  991. {
  992. "typename": "System.Runtime.CompilerServices.IAsyncStateMachine",
  993. "assembly": "mscorlib"
  994. },
  995. {
  996. "typename": "System.Runtime.CompilerServices.IteratorStateMachineAttribute",
  997. "assembly": "mscorlib"
  998. },
  999. {
  1000. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  1001. "assembly": "mscorlib"
  1002. },
  1003. {
  1004. "typename": "System.Runtime.CompilerServices.TaskAwaiter",
  1005. "assembly": "mscorlib"
  1006. },
  1007. {
  1008. "typename": "System.Runtime.CompilerServices.TaskAwaiter`1",
  1009. "assembly": "mscorlib"
  1010. },
  1011. {
  1012. "typename": "System.Runtime.Serialization.SerializationInfo",
  1013. "assembly": "mscorlib"
  1014. },
  1015. {
  1016. "typename": "System.Runtime.Serialization.StreamingContext",
  1017. "assembly": "mscorlib"
  1018. },
  1019. {
  1020. "typename": "System.RuntimeTypeHandle",
  1021. "assembly": "mscorlib"
  1022. },
  1023. {
  1024. "typename": "System.String",
  1025. "assembly": "mscorlib"
  1026. },
  1027. {
  1028. "typename": "System.StringComparer",
  1029. "assembly": "mscorlib"
  1030. },
  1031. {
  1032. "typename": "System.StringComparison",
  1033. "assembly": "mscorlib"
  1034. },
  1035. {
  1036. "typename": "System.Text.Encoding",
  1037. "assembly": "mscorlib"
  1038. },
  1039. {
  1040. "typename": "System.Text.StringBuilder",
  1041. "assembly": "mscorlib"
  1042. },
  1043. {
  1044. "typename": "System.Text.UTF8Encoding",
  1045. "assembly": "mscorlib"
  1046. },
  1047. {
  1048. "typename": "System.Text.UnicodeEncoding",
  1049. "assembly": "mscorlib"
  1050. },
  1051. {
  1052. "typename": "System.Threading.CancellationToken",
  1053. "assembly": "mscorlib"
  1054. },
  1055. {
  1056. "typename": "System.Threading.Interlocked",
  1057. "assembly": "mscorlib"
  1058. },
  1059. {
  1060. "typename": "System.Threading.Tasks.Task",
  1061. "assembly": "mscorlib"
  1062. },
  1063. {
  1064. "typename": "System.Threading.Tasks.TaskCompletionSource`1",
  1065. "assembly": "mscorlib"
  1066. },
  1067. {
  1068. "typename": "System.Threading.Tasks.TaskStatus",
  1069. "assembly": "mscorlib"
  1070. },
  1071. {
  1072. "typename": "System.Threading.Tasks.Task`1",
  1073. "assembly": "mscorlib"
  1074. },
  1075. {
  1076. "typename": "System.Threading.WaitHandle",
  1077. "assembly": "mscorlib"
  1078. },
  1079. {
  1080. "typename": "System.TimeSpan",
  1081. "assembly": "mscorlib"
  1082. },
  1083. {
  1084. "typename": "System.Type",
  1085. "assembly": "mscorlib"
  1086. },
  1087. {
  1088. "typename": "System.ValueType",
  1089. "assembly": "mscorlib"
  1090. },
  1091. {
  1092. "typename": "System.Version",
  1093. "assembly": "mscorlib"
  1094. }
  1095. ]
  1096. },
  1097. "pe": {
  1098. "peid_signatures": null,
  1099. "imports": [
  1100. {
  1101. "imports": [
  1102. {
  1103. "name": "_CorExeMain",
  1104. "address": "0x402000"
  1105. }
  1106. ],
  1107. "dll": "mscoree.dll"
  1108. }
  1109. ],
  1110. "digital_signers": null,
  1111. "exported_dll_name": null,
  1112. "actual_checksum": "0x000b2216",
  1113. "overlay": null,
  1114. "imagebase": "0x00400000",
  1115. "reported_checksum": "0x000b2216",
  1116. "icon_hash": null,
  1117. "entrypoint": "0x0043231e",
  1118. "timestamp": "2019-05-15 13:52:10",
  1119. "osversion": "4.0",
  1120. "sections": [
  1121. {
  1122. "name": ".text",
  1123. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  1124. "virtual_address": "0x00002000",
  1125. "size_of_data": "0x00030400",
  1126. "entropy": "6.06",
  1127. "raw_address": "0x00000200",
  1128. "virtual_size": "0x00030324",
  1129. "characteristics_raw": "0x60000020"
  1130. },
  1131. {
  1132. "name": ".rsrc",
  1133. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  1134. "virtual_address": "0x00034000",
  1135. "size_of_data": "0x00079e00",
  1136. "entropy": "7.48",
  1137. "raw_address": "0x00030600",
  1138. "virtual_size": "0x00079c40",
  1139. "characteristics_raw": "0x40000040"
  1140. },
  1141. {
  1142. "name": ".reloc",
  1143. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  1144. "virtual_address": "0x000ae000",
  1145. "size_of_data": "0x00000200",
  1146. "entropy": "0.10",
  1147. "raw_address": "0x000aa400",
  1148. "virtual_size": "0x0000000c",
  1149. "characteristics_raw": "0x42000040"
  1150. }
  1151. ],
  1152. "resources": [],
  1153. "dirents": [
  1154. {
  1155. "virtual_address": "0x00000000",
  1156. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  1157. "size": "0x00000000"
  1158. },
  1159. {
  1160. "virtual_address": "0x000322cc",
  1161. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  1162. "size": "0x0000004f"
  1163. },
  1164. {
  1165. "virtual_address": "0x00034000",
  1166. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  1167. "size": "0x00079c40"
  1168. },
  1169. {
  1170. "virtual_address": "0x00000000",
  1171. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  1172. "size": "0x00000000"
  1173. },
  1174. {
  1175. "virtual_address": "0x00000000",
  1176. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  1177. "size": "0x00000000"
  1178. },
  1179. {
  1180. "virtual_address": "0x000ae000",
  1181. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  1182. "size": "0x0000000c"
  1183. },
  1184. {
  1185. "virtual_address": "0x00032240",
  1186. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  1187. "size": "0x0000001c"
  1188. },
  1189. {
  1190. "virtual_address": "0x00000000",
  1191. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  1192. "size": "0x00000000"
  1193. },
  1194. {
  1195. "virtual_address": "0x00000000",
  1196. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  1197. "size": "0x00000000"
  1198. },
  1199. {
  1200. "virtual_address": "0x00000000",
  1201. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  1202. "size": "0x00000000"
  1203. },
  1204. {
  1205. "virtual_address": "0x00000000",
  1206. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  1207. "size": "0x00000000"
  1208. },
  1209. {
  1210. "virtual_address": "0x00000000",
  1211. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  1212. "size": "0x00000000"
  1213. },
  1214. {
  1215. "virtual_address": "0x00002000",
  1216. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  1217. "size": "0x00000008"
  1218. },
  1219. {
  1220. "virtual_address": "0x00000000",
  1221. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  1222. "size": "0x00000000"
  1223. },
  1224. {
  1225. "virtual_address": "0x00002008",
  1226. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  1227. "size": "0x00000048"
  1228. },
  1229. {
  1230. "virtual_address": "0x00000000",
  1231. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  1232. "size": "0x00000000"
  1233. }
  1234. ],
  1235. "exports": [],
  1236. "guest_signers": {},
  1237. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  1238. "icon_fuzzy": null,
  1239. "icon": null,
  1240. "pdbpath": "C:\\xampp\\htdocs\\Aspire\\files\\darklorddyagi07_yTZYEzRxrwttKorc\\yTZYEzRxrwttKorcma.pdb",
  1241. "imported_dll_count": 1,
  1242. "versioninfo": []
  1243. }
  1244. }
  1245.  
  1246. [*] Resolved APIs: [
  1247. "advapi32.dll.RegOpenKeyExW",
  1248. "advapi32.dll.RegQueryInfoKeyW",
  1249. "advapi32.dll.RegEnumKeyExW",
  1250. "advapi32.dll.RegEnumValueW",
  1251. "advapi32.dll.RegCloseKey",
  1252. "advapi32.dll.RegQueryValueExW",
  1253. "kernel32.dll.QueryActCtxW",
  1254. "shlwapi.dll.UrlIsW"
  1255. ]
  1256.  
  1257. [*] Static Analysis: {
  1258. "dotnet": {
  1259. "customattrs": [
  1260. {
  1261. "type": "TypeDef",
  1262. "name": "[mscorlib]System.Reflection.DefaultMemberAttribute",
  1263. "value": "It"
  1264. },
  1265. {
  1266. "type": "TypeDef",
  1267. "name": "[mscorlib]System.Reflection.DefaultMemberAttribute",
  1268. "value": "It"
  1269. },
  1270. {
  1271. "type": "TypeDef",
  1272. "name": "[mscorlib]System.Reflection.DefaultMemberAttribute",
  1273. "value": "It"
  1274. },
  1275. {
  1276. "type": "TypeDef",
  1277. "name": "[mscorlib]System.Diagnostics.DebuggerDisplayAttribute",
  1278. "value": "{DebuggerToString("
  1279. }
  1280. ],
  1281. "assemblyinfo": {
  1282. "version": "0.0.0.0",
  1283. "name": "yTZYEzRxrwttKorcma"
  1284. },
  1285. "assemblyrefs": [
  1286. {
  1287. "version": "4.0.0.0",
  1288. "name": "mscorlib"
  1289. },
  1290. {
  1291. "version": "4.0.0.0",
  1292. "name": "System"
  1293. },
  1294. {
  1295. "version": "4.0.0.0",
  1296. "name": "System.Net.Http"
  1297. },
  1298. {
  1299. "version": "4.0.0.0",
  1300. "name": "System.Core"
  1301. },
  1302. {
  1303. "version": "4.0.0.0",
  1304. "name": "System.Runtime.Serialization"
  1305. },
  1306. {
  1307. "version": "6.0.0.0",
  1308. "name": "Newtonsoft.Json"
  1309. },
  1310. {
  1311. "version": "4.0.0.0",
  1312. "name": "System.Xml"
  1313. },
  1314. {
  1315. "version": "4.0.0.0",
  1316. "name": "System.Xml.Linq"
  1317. }
  1318. ],
  1319. "typerefs": [
  1320. {
  1321. "typename": "Newtonsoft.Json.Bson.BsonReader",
  1322. "assembly": "Newtonsoft.Json"
  1323. },
  1324. {
  1325. "typename": "Newtonsoft.Json.Bson.BsonWriter",
  1326. "assembly": "Newtonsoft.Json"
  1327. },
  1328. {
  1329. "typename": "Newtonsoft.Json.DefaultValueHandling",
  1330. "assembly": "Newtonsoft.Json"
  1331. },
  1332. {
  1333. "typename": "Newtonsoft.Json.Formatting",
  1334. "assembly": "Newtonsoft.Json"
  1335. },
  1336. {
  1337. "typename": "Newtonsoft.Json.JsonReader",
  1338. "assembly": "Newtonsoft.Json"
  1339. },
  1340. {
  1341. "typename": "Newtonsoft.Json.JsonSerializer",
  1342. "assembly": "Newtonsoft.Json"
  1343. },
  1344. {
  1345. "typename": "Newtonsoft.Json.JsonSerializerSettings",
  1346. "assembly": "Newtonsoft.Json"
  1347. },
  1348. {
  1349. "typename": "Newtonsoft.Json.JsonTextReader",
  1350. "assembly": "Newtonsoft.Json"
  1351. },
  1352. {
  1353. "typename": "Newtonsoft.Json.JsonTextWriter",
  1354. "assembly": "Newtonsoft.Json"
  1355. },
  1356. {
  1357. "typename": "Newtonsoft.Json.JsonWriter",
  1358. "assembly": "Newtonsoft.Json"
  1359. },
  1360. {
  1361. "typename": "Newtonsoft.Json.Linq.JArray",
  1362. "assembly": "Newtonsoft.Json"
  1363. },
  1364. {
  1365. "typename": "Newtonsoft.Json.Linq.JContainer",
  1366. "assembly": "Newtonsoft.Json"
  1367. },
  1368. {
  1369. "typename": "Newtonsoft.Json.Linq.JObject",
  1370. "assembly": "Newtonsoft.Json"
  1371. },
  1372. {
  1373. "typename": "Newtonsoft.Json.Linq.JToken",
  1374. "assembly": "Newtonsoft.Json"
  1375. },
  1376. {
  1377. "typename": "Newtonsoft.Json.Linq.JTokenReader",
  1378. "assembly": "Newtonsoft.Json"
  1379. },
  1380. {
  1381. "typename": "Newtonsoft.Json.Linq.JTokenType",
  1382. "assembly": "Newtonsoft.Json"
  1383. },
  1384. {
  1385. "typename": "Newtonsoft.Json.Linq.JValue",
  1386. "assembly": "Newtonsoft.Json"
  1387. },
  1388. {
  1389. "typename": "Newtonsoft.Json.MemberSerialization",
  1390. "assembly": "Newtonsoft.Json"
  1391. },
  1392. {
  1393. "typename": "Newtonsoft.Json.MissingMemberHandling",
  1394. "assembly": "Newtonsoft.Json"
  1395. },
  1396. {
  1397. "typename": "Newtonsoft.Json.NullValueHandling",
  1398. "assembly": "Newtonsoft.Json"
  1399. },
  1400. {
  1401. "typename": "Newtonsoft.Json.Required",
  1402. "assembly": "Newtonsoft.Json"
  1403. },
  1404. {
  1405. "typename": "Newtonsoft.Json.Serialization.DefaultContractResolver",
  1406. "assembly": "Newtonsoft.Json"
  1407. },
  1408. {
  1409. "typename": "Newtonsoft.Json.Serialization.ErrorContext",
  1410. "assembly": "Newtonsoft.Json"
  1411. },
  1412. {
  1413. "typename": "Newtonsoft.Json.Serialization.ErrorEventArgs",
  1414. "assembly": "Newtonsoft.Json"
  1415. },
  1416. {
  1417. "typename": "Newtonsoft.Json.Serialization.IContractResolver",
  1418. "assembly": "Newtonsoft.Json"
  1419. },
  1420. {
  1421. "typename": "Newtonsoft.Json.Serialization.JsonProperty",
  1422. "assembly": "Newtonsoft.Json"
  1423. },
  1424. {
  1425. "typename": "Newtonsoft.Json.TypeNameHandling",
  1426. "assembly": "Newtonsoft.Json"
  1427. },
  1428. {
  1429. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  1430. "assembly": "System"
  1431. },
  1432. {
  1433. "typename": "System.Collections.Specialized.NameObjectCollectionBase",
  1434. "assembly": "System"
  1435. },
  1436. {
  1437. "typename": "System.Collections.Specialized.NameValueCollection",
  1438. "assembly": "System"
  1439. },
  1440. {
  1441. "typename": "System.ComponentModel.DefaultValueAttribute",
  1442. "assembly": "System"
  1443. },
  1444. {
  1445. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  1446. "assembly": "System"
  1447. },
  1448. {
  1449. "typename": "System.ComponentModel.EditorBrowsableState",
  1450. "assembly": "System"
  1451. },
  1452. {
  1453. "typename": "System.ComponentModel.InvalidEnumArgumentException",
  1454. "assembly": "System"
  1455. },
  1456. {
  1457. "typename": "System.ComponentModel.ProgressChangedEventArgs",
  1458. "assembly": "System"
  1459. },
  1460. {
  1461. "typename": "System.ComponentModel.TypeConverter",
  1462. "assembly": "System"
  1463. },
  1464. {
  1465. "typename": "System.ComponentModel.TypeDescriptor",
  1466. "assembly": "System"
  1467. },
  1468. {
  1469. "typename": "System.Net.Cookie",
  1470. "assembly": "System"
  1471. },
  1472. {
  1473. "typename": "System.Net.HttpStatusCode",
  1474. "assembly": "System"
  1475. },
  1476. {
  1477. "typename": "System.Net.TransportContext",
  1478. "assembly": "System"
  1479. },
  1480. {
  1481. "typename": "System.Uri",
  1482. "assembly": "System"
  1483. },
  1484. {
  1485. "typename": "System.Collections.Generic.HashSet`1",
  1486. "assembly": "System.Core"
  1487. },
  1488. {
  1489. "typename": "System.Linq.Enumerable",
  1490. "assembly": "System.Core"
  1491. },
  1492. {
  1493. "typename": "System.Linq.IOrderedEnumerable`1",
  1494. "assembly": "System.Core"
  1495. },
  1496. {
  1497. "typename": "System.Linq.IQueryable`1",
  1498. "assembly": "System.Core"
  1499. },
  1500. {
  1501. "typename": "System.Net.Http.DelegatingHandler",
  1502. "assembly": "System.Net.Http"
  1503. },
  1504. {
  1505. "typename": "System.Net.Http.Headers.ContentDispositionHeaderValue",
  1506. "assembly": "System.Net.Http"
  1507. },
  1508. {
  1509. "typename": "System.Net.Http.Headers.ContentRangeHeaderValue",
  1510. "assembly": "System.Net.Http"
  1511. },
  1512. {
  1513. "typename": "System.Net.Http.Headers.HttpContentHeaders",
  1514. "assembly": "System.Net.Http"
  1515. },
  1516. {
  1517. "typename": "System.Net.Http.Headers.HttpHeaderValueCollection`1",
  1518. "assembly": "System.Net.Http"
  1519. },
  1520. {
  1521. "typename": "System.Net.Http.Headers.HttpHeaders",
  1522. "assembly": "System.Net.Http"
  1523. },
  1524. {
  1525. "typename": "System.Net.Http.Headers.HttpRequestHeaders",
  1526. "assembly": "System.Net.Http"
  1527. },
  1528. {
  1529. "typename": "System.Net.Http.Headers.HttpResponseHeaders",
  1530. "assembly": "System.Net.Http"
  1531. },
  1532. {
  1533. "typename": "System.Net.Http.Headers.MediaTypeHeaderValue",
  1534. "assembly": "System.Net.Http"
  1535. },
  1536. {
  1537. "typename": "System.Net.Http.Headers.MediaTypeWithQualityHeaderValue",
  1538. "assembly": "System.Net.Http"
  1539. },
  1540. {
  1541. "typename": "System.Net.Http.Headers.NameValueHeaderValue",
  1542. "assembly": "System.Net.Http"
  1543. },
  1544. {
  1545. "typename": "System.Net.Http.Headers.RangeHeaderValue",
  1546. "assembly": "System.Net.Http"
  1547. },
  1548. {
  1549. "typename": "System.Net.Http.Headers.RangeItemHeaderValue",
  1550. "assembly": "System.Net.Http"
  1551. },
  1552. {
  1553. "typename": "System.Net.Http.Headers.StringWithQualityHeaderValue",
  1554. "assembly": "System.Net.Http"
  1555. },
  1556. {
  1557. "typename": "System.Net.Http.HttpClient",
  1558. "assembly": "System.Net.Http"
  1559. },
  1560. {
  1561. "typename": "System.Net.Http.HttpClientHandler",
  1562. "assembly": "System.Net.Http"
  1563. },
  1564. {
  1565. "typename": "System.Net.Http.HttpContent",
  1566. "assembly": "System.Net.Http"
  1567. },
  1568. {
  1569. "typename": "System.Net.Http.HttpMessageHandler",
  1570. "assembly": "System.Net.Http"
  1571. },
  1572. {
  1573. "typename": "System.Net.Http.HttpMethod",
  1574. "assembly": "System.Net.Http"
  1575. },
  1576. {
  1577. "typename": "System.Net.Http.HttpRequestMessage",
  1578. "assembly": "System.Net.Http"
  1579. },
  1580. {
  1581. "typename": "System.Net.Http.HttpResponseMessage",
  1582. "assembly": "System.Net.Http"
  1583. },
  1584. {
  1585. "typename": "System.Net.Http.MultipartContent",
  1586. "assembly": "System.Net.Http"
  1587. },
  1588. {
  1589. "typename": "System.Net.Http.StreamContent",
  1590. "assembly": "System.Net.Http"
  1591. },
  1592. {
  1593. "typename": "System.Net.Http.StringContent",
  1594. "assembly": "System.Net.Http"
  1595. },
  1596. {
  1597. "typename": "System.Runtime.Serialization.DataContractSerializer",
  1598. "assembly": "System.Runtime.Serialization"
  1599. },
  1600. {
  1601. "typename": "System.Runtime.Serialization.Json.DataContractJsonSerializer",
  1602. "assembly": "System.Runtime.Serialization"
  1603. },
  1604. {
  1605. "typename": "System.Runtime.Serialization.Json.JsonReaderWriterFactory",
  1606. "assembly": "System.Runtime.Serialization"
  1607. },
  1608. {
  1609. "typename": "System.Runtime.Serialization.XmlObjectSerializer",
  1610. "assembly": "System.Runtime.Serialization"
  1611. },
  1612. {
  1613. "typename": "System.Runtime.Serialization.XsdDataContractExporter",
  1614. "assembly": "System.Runtime.Serialization"
  1615. },
  1616. {
  1617. "typename": "System.Xml.OnXmlDictionaryReaderClose",
  1618. "assembly": "System.Runtime.Serialization"
  1619. },
  1620. {
  1621. "typename": "System.Xml.XmlDictionaryReader",
  1622. "assembly": "System.Runtime.Serialization"
  1623. },
  1624. {
  1625. "typename": "System.Xml.XmlDictionaryReaderQuotas",
  1626. "assembly": "System.Runtime.Serialization"
  1627. },
  1628. {
  1629. "typename": "System.Xml.XmlDictionaryWriter",
  1630. "assembly": "System.Runtime.Serialization"
  1631. },
  1632. {
  1633. "typename": "System.Xml.Serialization.XmlSerializer",
  1634. "assembly": "System.Xml"
  1635. },
  1636. {
  1637. "typename": "System.Xml.XmlNode",
  1638. "assembly": "System.Xml"
  1639. },
  1640. {
  1641. "typename": "System.Xml.XmlQualifiedName",
  1642. "assembly": "System.Xml"
  1643. },
  1644. {
  1645. "typename": "System.Xml.XmlReader",
  1646. "assembly": "System.Xml"
  1647. },
  1648. {
  1649. "typename": "System.Xml.XmlWriter",
  1650. "assembly": "System.Xml"
  1651. },
  1652. {
  1653. "typename": "System.Xml.XmlWriterSettings",
  1654. "assembly": "System.Xml"
  1655. },
  1656. {
  1657. "typename": "System.Xml.Linq.XObject",
  1658. "assembly": "System.Xml.Linq"
  1659. },
  1660. {
  1661. "typename": "System.Action`1",
  1662. "assembly": "mscorlib"
  1663. },
  1664. {
  1665. "typename": "System.Action`3",
  1666. "assembly": "mscorlib"
  1667. },
  1668. {
  1669. "typename": "System.Activator",
  1670. "assembly": "mscorlib"
  1671. },
  1672. {
  1673. "typename": "System.ArgumentException",
  1674. "assembly": "mscorlib"
  1675. },
  1676. {
  1677. "typename": "System.ArgumentNullException",
  1678. "assembly": "mscorlib"
  1679. },
  1680. {
  1681. "typename": "System.ArgumentOutOfRangeException",
  1682. "assembly": "mscorlib"
  1683. },
  1684. {
  1685. "typename": "System.Array",
  1686. "assembly": "mscorlib"
  1687. },
  1688. {
  1689. "typename": "System.ArraySegment`1",
  1690. "assembly": "mscorlib"
  1691. },
  1692. {
  1693. "typename": "System.AsyncCallback",
  1694. "assembly": "mscorlib"
  1695. },
  1696. {
  1697. "typename": "System.Buffer",
  1698. "assembly": "mscorlib"
  1699. },
  1700. {
  1701. "typename": "System.Byte",
  1702. "assembly": "mscorlib"
  1703. },
  1704. {
  1705. "typename": "System.Char",
  1706. "assembly": "mscorlib"
  1707. },
  1708. {
  1709. "typename": "System.Collections.Concurrent.ConcurrentDictionary`2",
  1710. "assembly": "mscorlib"
  1711. },
  1712. {
  1713. "typename": "System.Collections.DictionaryEntry",
  1714. "assembly": "mscorlib"
  1715. },
  1716. {
  1717. "typename": "System.Collections.Generic.Dictionary`2",
  1718. "assembly": "mscorlib"
  1719. },
  1720. {
  1721. "typename": "System.Collections.Generic.ICollection`1",
  1722. "assembly": "mscorlib"
  1723. },
  1724. {
  1725. "typename": "System.Collections.Generic.IComparer`1",
  1726. "assembly": "mscorlib"
  1727. },
  1728. {
  1729. "typename": "System.Collections.Generic.IDictionary`2",
  1730. "assembly": "mscorlib"
  1731. },
  1732. {
  1733. "typename": "System.Collections.Generic.IEnumerable`1",
  1734. "assembly": "mscorlib"
  1735. },
  1736. {
  1737. "typename": "System.Collections.Generic.IEnumerator`1",
  1738. "assembly": "mscorlib"
  1739. },
  1740. {
  1741. "typename": "System.Collections.Generic.IEqualityComparer`1",
  1742. "assembly": "mscorlib"
  1743. },
  1744. {
  1745. "typename": "System.Collections.Generic.IList`1",
  1746. "assembly": "mscorlib"
  1747. },
  1748. {
  1749. "typename": "System.Collections.Generic.KeyNotFoundException",
  1750. "assembly": "mscorlib"
  1751. },
  1752. {
  1753. "typename": "System.Collections.Generic.KeyValuePair`2",
  1754. "assembly": "mscorlib"
  1755. },
  1756. {
  1757. "typename": "System.Collections.Generic.List`1",
  1758. "assembly": "mscorlib"
  1759. },
  1760. {
  1761. "typename": "System.Collections.Generic.List`1/Enumerator",
  1762. "assembly": "mscorlib"
  1763. },
  1764. {
  1765. "typename": "System.Collections.ICollection",
  1766. "assembly": "mscorlib"
  1767. },
  1768. {
  1769. "typename": "System.Collections.IDictionary",
  1770. "assembly": "mscorlib"
  1771. },
  1772. {
  1773. "typename": "System.Collections.IDictionaryEnumerator",
  1774. "assembly": "mscorlib"
  1775. },
  1776. {
  1777. "typename": "System.Collections.IEnumerable",
  1778. "assembly": "mscorlib"
  1779. },
  1780. {
  1781. "typename": "System.Collections.IEnumerator",
  1782. "assembly": "mscorlib"
  1783. },
  1784. {
  1785. "typename": "System.Collections.IEqualityComparer",
  1786. "assembly": "mscorlib"
  1787. },
  1788. {
  1789. "typename": "System.Collections.ObjectModel.Collection`1",
  1790. "assembly": "mscorlib"
  1791. },
  1792. {
  1793. "typename": "System.Comparison`1",
  1794. "assembly": "mscorlib"
  1795. },
  1796. {
  1797. "typename": "System.Convert",
  1798. "assembly": "mscorlib"
  1799. },
  1800. {
  1801. "typename": "System.DBNull",
  1802. "assembly": "mscorlib"
  1803. },
  1804. {
  1805. "typename": "System.DateTimeOffset",
  1806. "assembly": "mscorlib"
  1807. },
  1808. {
  1809. "typename": "System.Delegate",
  1810. "assembly": "mscorlib"
  1811. },
  1812. {
  1813. "typename": "System.Diagnostics.DebuggableAttribute",
  1814. "assembly": "mscorlib"
  1815. },
  1816. {
  1817. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  1818. "assembly": "mscorlib"
  1819. },
  1820. {
  1821. "typename": "System.Diagnostics.DebuggerDisplayAttribute",
  1822. "assembly": "mscorlib"
  1823. },
  1824. {
  1825. "typename": "System.Diagnostics.DebuggerHiddenAttribute",
  1826. "assembly": "mscorlib"
  1827. },
  1828. {
  1829. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  1830. "assembly": "mscorlib"
  1831. },
  1832. {
  1833. "typename": "System.Enum",
  1834. "assembly": "mscorlib"
  1835. },
  1836. {
  1837. "typename": "System.Environment",
  1838. "assembly": "mscorlib"
  1839. },
  1840. {
  1841. "typename": "System.EventArgs",
  1842. "assembly": "mscorlib"
  1843. },
  1844. {
  1845. "typename": "System.EventHandler",
  1846. "assembly": "mscorlib"
  1847. },
  1848. {
  1849. "typename": "System.EventHandler`1",
  1850. "assembly": "mscorlib"
  1851. },
  1852. {
  1853. "typename": "System.Exception",
  1854. "assembly": "mscorlib"
  1855. },
  1856. {
  1857. "typename": "System.FormatException",
  1858. "assembly": "mscorlib"
  1859. },
  1860. {
  1861. "typename": "System.Func`1",
  1862. "assembly": "mscorlib"
  1863. },
  1864. {
  1865. "typename": "System.Func`2",
  1866. "assembly": "mscorlib"
  1867. },
  1868. {
  1869. "typename": "System.Func`3",
  1870. "assembly": "mscorlib"
  1871. },
  1872. {
  1873. "typename": "System.Func`4",
  1874. "assembly": "mscorlib"
  1875. },
  1876. {
  1877. "typename": "System.GC",
  1878. "assembly": "mscorlib"
  1879. },
  1880. {
  1881. "typename": "System.Globalization.CultureInfo",
  1882. "assembly": "mscorlib"
  1883. },
  1884. {
  1885. "typename": "System.Globalization.DateTimeFormatInfo",
  1886. "assembly": "mscorlib"
  1887. },
  1888. {
  1889. "typename": "System.Globalization.DateTimeStyles",
  1890. "assembly": "mscorlib"
  1891. },
  1892. {
  1893. "typename": "System.Globalization.NumberFormatInfo",
  1894. "assembly": "mscorlib"
  1895. },
  1896. {
  1897. "typename": "System.Globalization.NumberStyles",
  1898. "assembly": "mscorlib"
  1899. },
  1900. {
  1901. "typename": "System.Guid",
  1902. "assembly": "mscorlib"
  1903. },
  1904. {
  1905. "typename": "System.IAsyncResult",
  1906. "assembly": "mscorlib"
  1907. },
  1908. {
  1909. "typename": "System.ICloneable",
  1910. "assembly": "mscorlib"
  1911. },
  1912. {
  1913. "typename": "System.IDisposable",
  1914. "assembly": "mscorlib"
  1915. },
  1916. {
  1917. "typename": "System.IFormatProvider",
  1918. "assembly": "mscorlib"
  1919. },
  1920. {
  1921. "typename": "System.IO.BinaryReader",
  1922. "assembly": "mscorlib"
  1923. },
  1924. {
  1925. "typename": "System.IO.BinaryWriter",
  1926. "assembly": "mscorlib"
  1927. },
  1928. {
  1929. "typename": "System.IO.BufferedStream",
  1930. "assembly": "mscorlib"
  1931. },
  1932. {
  1933. "typename": "System.IO.File",
  1934. "assembly": "mscorlib"
  1935. },
  1936. {
  1937. "typename": "System.IO.FileOptions",
  1938. "assembly": "mscorlib"
  1939. },
  1940. {
  1941. "typename": "System.IO.FileStream",
  1942. "assembly": "mscorlib"
  1943. },
  1944. {
  1945. "typename": "System.IO.IOException",
  1946. "assembly": "mscorlib"
  1947. },
  1948. {
  1949. "typename": "System.IO.MemoryStream",
  1950. "assembly": "mscorlib"
  1951. },
  1952. {
  1953. "typename": "System.IO.Path",
  1954. "assembly": "mscorlib"
  1955. },
  1956. {
  1957. "typename": "System.IO.SeekOrigin",
  1958. "assembly": "mscorlib"
  1959. },
  1960. {
  1961. "typename": "System.IO.Stream",
  1962. "assembly": "mscorlib"
  1963. },
  1964. {
  1965. "typename": "System.IO.StreamReader",
  1966. "assembly": "mscorlib"
  1967. },
  1968. {
  1969. "typename": "System.IO.StreamWriter",
  1970. "assembly": "mscorlib"
  1971. },
  1972. {
  1973. "typename": "System.IO.TextReader",
  1974. "assembly": "mscorlib"
  1975. },
  1976. {
  1977. "typename": "System.IO.TextWriter",
  1978. "assembly": "mscorlib"
  1979. },
  1980. {
  1981. "typename": "System.Int32",
  1982. "assembly": "mscorlib"
  1983. },
  1984. {
  1985. "typename": "System.Int64",
  1986. "assembly": "mscorlib"
  1987. },
  1988. {
  1989. "typename": "System.InvalidOperationException",
  1990. "assembly": "mscorlib"
  1991. },
  1992. {
  1993. "typename": "System.Lazy`1",
  1994. "assembly": "mscorlib"
  1995. },
  1996. {
  1997. "typename": "System.Math",
  1998. "assembly": "mscorlib"
  1999. },
  2000. {
  2001. "typename": "System.NotImplementedException",
  2002. "assembly": "mscorlib"
  2003. },
  2004. {
  2005. "typename": "System.NotSupportedException",
  2006. "assembly": "mscorlib"
  2007. },
  2008. {
  2009. "typename": "System.Nullable`1",
  2010. "assembly": "mscorlib"
  2011. },
  2012. {
  2013. "typename": "System.Object",
  2014. "assembly": "mscorlib"
  2015. },
  2016. {
  2017. "typename": "System.ObjectDisposedException",
  2018. "assembly": "mscorlib"
  2019. },
  2020. {
  2021. "typename": "System.OperationCanceledException",
  2022. "assembly": "mscorlib"
  2023. },
  2024. {
  2025. "typename": "System.ParamArrayAttribute",
  2026. "assembly": "mscorlib"
  2027. },
  2028. {
  2029. "typename": "System.Reflection.Assembly",
  2030. "assembly": "mscorlib"
  2031. },
  2032. {
  2033. "typename": "System.Reflection.ConstructorInfo",
  2034. "assembly": "mscorlib"
  2035. },
  2036. {
  2037. "typename": "System.Reflection.DefaultMemberAttribute",
  2038. "assembly": "mscorlib"
  2039. },
  2040. {
  2041. "typename": "System.Reflection.MemberInfo",
  2042. "assembly": "mscorlib"
  2043. },
  2044. {
  2045. "typename": "System.Reflection.MethodBase",
  2046. "assembly": "mscorlib"
  2047. },
  2048. {
  2049. "typename": "System.Reflection.MethodInfo",
  2050. "assembly": "mscorlib"
  2051. },
  2052. {
  2053. "typename": "System.Resources.ResourceManager",
  2054. "assembly": "mscorlib"
  2055. },
  2056. {
  2057. "typename": "System.Runtime.CompilerServices.AsyncStateMachineAttribute",
  2058. "assembly": "mscorlib"
  2059. },
  2060. {
  2061. "typename": "System.Runtime.CompilerServices.AsyncTaskMethodBuilder",
  2062. "assembly": "mscorlib"
  2063. },
  2064. {
  2065. "typename": "System.Runtime.CompilerServices.AsyncTaskMethodBuilder`1",
  2066. "assembly": "mscorlib"
  2067. },
  2068. {
  2069. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  2070. "assembly": "mscorlib"
  2071. },
  2072. {
  2073. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  2074. "assembly": "mscorlib"
  2075. },
  2076. {
  2077. "typename": "System.Runtime.CompilerServices.ExtensionAttribute",
  2078. "assembly": "mscorlib"
  2079. },
  2080. {
  2081. "typename": "System.Runtime.CompilerServices.IAsyncStateMachine",
  2082. "assembly": "mscorlib"
  2083. },
  2084. {
  2085. "typename": "System.Runtime.CompilerServices.IteratorStateMachineAttribute",
  2086. "assembly": "mscorlib"
  2087. },
  2088. {
  2089. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  2090. "assembly": "mscorlib"
  2091. },
  2092. {
  2093. "typename": "System.Runtime.CompilerServices.TaskAwaiter",
  2094. "assembly": "mscorlib"
  2095. },
  2096. {
  2097. "typename": "System.Runtime.CompilerServices.TaskAwaiter`1",
  2098. "assembly": "mscorlib"
  2099. },
  2100. {
  2101. "typename": "System.Runtime.Serialization.SerializationInfo",
  2102. "assembly": "mscorlib"
  2103. },
  2104. {
  2105. "typename": "System.Runtime.Serialization.StreamingContext",
  2106. "assembly": "mscorlib"
  2107. },
  2108. {
  2109. "typename": "System.RuntimeTypeHandle",
  2110. "assembly": "mscorlib"
  2111. },
  2112. {
  2113. "typename": "System.String",
  2114. "assembly": "mscorlib"
  2115. },
  2116. {
  2117. "typename": "System.StringComparer",
  2118. "assembly": "mscorlib"
  2119. },
  2120. {
  2121. "typename": "System.StringComparison",
  2122. "assembly": "mscorlib"
  2123. },
  2124. {
  2125. "typename": "System.Text.Encoding",
  2126. "assembly": "mscorlib"
  2127. },
  2128. {
  2129. "typename": "System.Text.StringBuilder",
  2130. "assembly": "mscorlib"
  2131. },
  2132. {
  2133. "typename": "System.Text.UTF8Encoding",
  2134. "assembly": "mscorlib"
  2135. },
  2136. {
  2137. "typename": "System.Text.UnicodeEncoding",
  2138. "assembly": "mscorlib"
  2139. },
  2140. {
  2141. "typename": "System.Threading.CancellationToken",
  2142. "assembly": "mscorlib"
  2143. },
  2144. {
  2145. "typename": "System.Threading.Interlocked",
  2146. "assembly": "mscorlib"
  2147. },
  2148. {
  2149. "typename": "System.Threading.Tasks.Task",
  2150. "assembly": "mscorlib"
  2151. },
  2152. {
  2153. "typename": "System.Threading.Tasks.TaskCompletionSource`1",
  2154. "assembly": "mscorlib"
  2155. },
  2156. {
  2157. "typename": "System.Threading.Tasks.TaskStatus",
  2158. "assembly": "mscorlib"
  2159. },
  2160. {
  2161. "typename": "System.Threading.Tasks.Task`1",
  2162. "assembly": "mscorlib"
  2163. },
  2164. {
  2165. "typename": "System.Threading.WaitHandle",
  2166. "assembly": "mscorlib"
  2167. },
  2168. {
  2169. "typename": "System.TimeSpan",
  2170. "assembly": "mscorlib"
  2171. },
  2172. {
  2173. "typename": "System.Type",
  2174. "assembly": "mscorlib"
  2175. },
  2176. {
  2177. "typename": "System.ValueType",
  2178. "assembly": "mscorlib"
  2179. },
  2180. {
  2181. "typename": "System.Version",
  2182. "assembly": "mscorlib"
  2183. }
  2184. ]
  2185. },
  2186. "pe": {
  2187. "peid_signatures": null,
  2188. "imports": [
  2189. {
  2190. "imports": [
  2191. {
  2192. "name": "_CorExeMain",
  2193. "address": "0x402000"
  2194. }
  2195. ],
  2196. "dll": "mscoree.dll"
  2197. }
  2198. ],
  2199. "digital_signers": null,
  2200. "exported_dll_name": null,
  2201. "actual_checksum": "0x000b2216",
  2202. "overlay": null,
  2203. "imagebase": "0x00400000",
  2204. "reported_checksum": "0x000b2216",
  2205. "icon_hash": null,
  2206. "entrypoint": "0x0043231e",
  2207. "timestamp": "2019-05-15 13:52:10",
  2208. "osversion": "4.0",
  2209. "sections": [
  2210. {
  2211. "name": ".text",
  2212. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  2213. "virtual_address": "0x00002000",
  2214. "size_of_data": "0x00030400",
  2215. "entropy": "6.06",
  2216. "raw_address": "0x00000200",
  2217. "virtual_size": "0x00030324",
  2218. "characteristics_raw": "0x60000020"
  2219. },
  2220. {
  2221. "name": ".rsrc",
  2222. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  2223. "virtual_address": "0x00034000",
  2224. "size_of_data": "0x00079e00",
  2225. "entropy": "7.48",
  2226. "raw_address": "0x00030600",
  2227. "virtual_size": "0x00079c40",
  2228. "characteristics_raw": "0x40000040"
  2229. },
  2230. {
  2231. "name": ".reloc",
  2232. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  2233. "virtual_address": "0x000ae000",
  2234. "size_of_data": "0x00000200",
  2235. "entropy": "0.10",
  2236. "raw_address": "0x000aa400",
  2237. "virtual_size": "0x0000000c",
  2238. "characteristics_raw": "0x42000040"
  2239. }
  2240. ],
  2241. "resources": [],
  2242. "dirents": [
  2243. {
  2244. "virtual_address": "0x00000000",
  2245. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  2246. "size": "0x00000000"
  2247. },
  2248. {
  2249. "virtual_address": "0x000322cc",
  2250. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  2251. "size": "0x0000004f"
  2252. },
  2253. {
  2254. "virtual_address": "0x00034000",
  2255. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  2256. "size": "0x00079c40"
  2257. },
  2258. {
  2259. "virtual_address": "0x00000000",
  2260. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  2261. "size": "0x00000000"
  2262. },
  2263. {
  2264. "virtual_address": "0x00000000",
  2265. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  2266. "size": "0x00000000"
  2267. },
  2268. {
  2269. "virtual_address": "0x000ae000",
  2270. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  2271. "size": "0x0000000c"
  2272. },
  2273. {
  2274. "virtual_address": "0x00032240",
  2275. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  2276. "size": "0x0000001c"
  2277. },
  2278. {
  2279. "virtual_address": "0x00000000",
  2280. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  2281. "size": "0x00000000"
  2282. },
  2283. {
  2284. "virtual_address": "0x00000000",
  2285. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  2286. "size": "0x00000000"
  2287. },
  2288. {
  2289. "virtual_address": "0x00000000",
  2290. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  2291. "size": "0x00000000"
  2292. },
  2293. {
  2294. "virtual_address": "0x00000000",
  2295. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  2296. "size": "0x00000000"
  2297. },
  2298. {
  2299. "virtual_address": "0x00000000",
  2300. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  2301. "size": "0x00000000"
  2302. },
  2303. {
  2304. "virtual_address": "0x00002000",
  2305. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  2306. "size": "0x00000008"
  2307. },
  2308. {
  2309. "virtual_address": "0x00000000",
  2310. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  2311. "size": "0x00000000"
  2312. },
  2313. {
  2314. "virtual_address": "0x00002008",
  2315. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  2316. "size": "0x00000048"
  2317. },
  2318. {
  2319. "virtual_address": "0x00000000",
  2320. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  2321. "size": "0x00000000"
  2322. }
  2323. ],
  2324. "exports": [],
  2325. "guest_signers": {},
  2326. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  2327. "icon_fuzzy": null,
  2328. "icon": null,
  2329. "pdbpath": "C:\\xampp\\htdocs\\Aspire\\files\\darklorddyagi07_yTZYEzRxrwttKorc\\yTZYEzRxrwttKorcma.pdb",
  2330. "imported_dll_count": 1,
  2331. "versioninfo": []
  2332. }
  2333. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!