API tools faq
paste
paladin316

Exes_ae716a93e4a7348ffa7dfca38c66fe7b_exe_2019-07-02_16_30.json

paladin316
Jul 2nd, 2019
2,115
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 37.53 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: "Malicious"
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_ae716a93e4a7348ffa7dfca38c66fe7b.exe"
  7. [*] File Size: 504320
  8. [*] File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
  9. [*] SHA256: "1241373051ee647de2fff5e9b57e9d74ac682e652b7346b223cc2922dd277cd2"
  10. [*] MD5: "ae716a93e4a7348ffa7dfca38c66fe7b"
  11. [*] SHA1: "6d3a2d6bd45dcc94589436c15ff0e3f4db4f7bb5"
  12. [*] SHA512: "7f5f0536180550096d7da29927bb7987f2c181bf872cb3a418c0d984bf10b07ac80faa860568eb4200e9cd9d14be84c0446d369b21da44b19ef9157d994581b9"
  13. [*] CRC32: "48F9150A"
  14. [*] SSDEEP: "12288:BQTuvIogPKXKgrACukjvSHdlbBLJ0iR82SjrTBS6Kg:eTozgSXKmn8vLR8zXK"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: [
  19. {
  20. "Description": "The binary likely contains encrypted or compressed data.",
  21. "Details": [
  22. {
  23. "section": "name: .text, entropy: 7.99, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x0007a800, virtual_size: 0x0007a6a4"
  24. }
  25. ]
  26. },
  27. {
  28. "Description": "File has been identified by 23 Antiviruses on VirusTotal as malicious",
  29. "Details": [
  30. {
  31. "Cylance": "Unsafe"
  32. },
  33. {
  34. "Symantec": "ML.Attribute.HighConfidence"
  35. },
  36. {
  37. "APEX": "Malicious"
  38. },
  39. {
  40. "Paloalto": "generic.ml"
  41. },
  42. {
  43. "Kaspersky": "HEUR:Backdoor.MSIL.Androm.gen"
  44. },
  45. {
  46. "Avast": "Win32:CrypterX-gen [Trj]"
  47. },
  48. {
  49. "Tencent": "Win32.Trojan.Inject.Auto"
  50. },
  51. {
  52. "Endgame": "malicious (moderate confidence)"
  53. },
  54. {
  55. "Invincea": "heuristic"
  56. },
  57. {
  58. "McAfee-GW-Edition": "BehavesLike.Win32.Generic.gc"
  59. },
  60. {
  61. "Trapmine": "malicious.moderate.ml.score"
  62. },
  63. {
  64. "FireEye": "Generic.mg.ae716a93e4a7348f"
  65. },
  66. {
  67. "SentinelOne": "DFI - Malicious PE"
  68. },
  69. {
  70. "Avira": "HEUR/AGEN.1035809"
  71. },
  72. {
  73. "Microsoft": "Trojan:Win32/Fuerboos.A!cl"
  74. },
  75. {
  76. "ZoneAlarm": "HEUR:Backdoor.MSIL.Androm.gen"
  77. },
  78. {
  79. "Acronis": "suspicious"
  80. },
  81. {
  82. "ESET-NOD32": "a variant of MSIL/Kryptik.QME"
  83. },
  84. {
  85. "Rising": "Backdoor.Androm!8.113 (TFE:dGZlOgzTskfj70GdCA)"
  86. },
  87. {
  88. "AVG": "Win32:CrypterX-gen [Trj]"
  89. },
  90. {
  91. "Cybereason": "malicious.bd45dc"
  92. },
  93. {
  94. "CrowdStrike": "win/malicious_confidence_100% (D)"
  95. },
  96. {
  97. "Qihoo-360": "HEUR/QVM03.0.4065.Malware.Gen"
  98. }
  99. ]
  100. }
  101. ]
  102.  
  103. [*] Started Service: []
  104.  
  105. [*] Executed Commands: []
  106.  
  107. [*] Mutexes: []
  108.  
  109. [*] Modified Files: []
  110.  
  111. [*] Deleted Files: []
  112.  
  113. [*] Modified Registry Keys: []
  114.  
  115. [*] Deleted Registry Keys: []
  116.  
  117. [*] DNS Communications: []
  118.  
  119. [*] Domains: []
  120.  
  121. [*] Network Communication - ICMP: []
  122.  
  123. [*] Network Communication - HTTP: []
  124.  
  125. [*] Network Communication - SMTP: []
  126.  
  127. [*] Network Communication - Hosts: []
  128.  
  129. [*] Network Communication - IRC: []
  130.  
  131. [*] Static Analysis: {
  132. "dotnet": {
  133. "customattrs": null,
  134. "assemblyinfo": {
  135. "version": "1.0.0.0",
  136. "name": "DarkTableSched"
  137. },
  138. "assemblyrefs": [
  139. {
  140. "version": "2.0.0.0",
  141. "name": "mscorlib"
  142. },
  143. {
  144. "version": "2.0.0.0",
  145. "name": "System.Windows.Forms"
  146. },
  147. {
  148. "version": "2.0.0.0",
  149. "name": "System"
  150. },
  151. {
  152. "version": "2.0.0.0",
  153. "name": "System.Drawing"
  154. }
  155. ],
  156. "typerefs": [
  157. {
  158. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  159. "assembly": "System"
  160. },
  161. {
  162. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  163. "assembly": "System"
  164. },
  165. {
  166. "typename": "System.ComponentModel.EditorBrowsableState",
  167. "assembly": "System"
  168. },
  169. {
  170. "typename": "System.ComponentModel.IContainer",
  171. "assembly": "System"
  172. },
  173. {
  174. "typename": "System.Configuration.ApplicationSettingsBase",
  175. "assembly": "System"
  176. },
  177. {
  178. "typename": "System.Configuration.SettingsBase",
  179. "assembly": "System"
  180. },
  181. {
  182. "typename": "System.Drawing.Point",
  183. "assembly": "System.Drawing"
  184. },
  185. {
  186. "typename": "System.Drawing.Size",
  187. "assembly": "System.Drawing"
  188. },
  189. {
  190. "typename": "System.Drawing.SizeF",
  191. "assembly": "System.Drawing"
  192. },
  193. {
  194. "typename": "System.Windows.Forms.Application",
  195. "assembly": "System.Windows.Forms"
  196. },
  197. {
  198. "typename": "System.Windows.Forms.AutoScaleMode",
  199. "assembly": "System.Windows.Forms"
  200. },
  201. {
  202. "typename": "System.Windows.Forms.Button",
  203. "assembly": "System.Windows.Forms"
  204. },
  205. {
  206. "typename": "System.Windows.Forms.ButtonBase",
  207. "assembly": "System.Windows.Forms"
  208. },
  209. {
  210. "typename": "System.Windows.Forms.CommonDialog",
  211. "assembly": "System.Windows.Forms"
  212. },
  213. {
  214. "typename": "System.Windows.Forms.ContainerControl",
  215. "assembly": "System.Windows.Forms"
  216. },
  217. {
  218. "typename": "System.Windows.Forms.Control",
  219. "assembly": "System.Windows.Forms"
  220. },
  221. {
  222. "typename": "System.Windows.Forms.Control/ControlCollection",
  223. "assembly": "System.Windows.Forms"
  224. },
  225. {
  226. "typename": "System.Windows.Forms.DialogResult",
  227. "assembly": "System.Windows.Forms"
  228. },
  229. {
  230. "typename": "System.Windows.Forms.FileDialog",
  231. "assembly": "System.Windows.Forms"
  232. },
  233. {
  234. "typename": "System.Windows.Forms.Form",
  235. "assembly": "System.Windows.Forms"
  236. },
  237. {
  238. "typename": "System.Windows.Forms.GroupBox",
  239. "assembly": "System.Windows.Forms"
  240. },
  241. {
  242. "typename": "System.Windows.Forms.ListView",
  243. "assembly": "System.Windows.Forms"
  244. },
  245. {
  246. "typename": "System.Windows.Forms.ListView/ListViewItemCollection",
  247. "assembly": "System.Windows.Forms"
  248. },
  249. {
  250. "typename": "System.Windows.Forms.ListViewItem",
  251. "assembly": "System.Windows.Forms"
  252. },
  253. {
  254. "typename": "System.Windows.Forms.OpenFileDialog",
  255. "assembly": "System.Windows.Forms"
  256. },
  257. {
  258. "typename": "System.Windows.Forms.TextBox",
  259. "assembly": "System.Windows.Forms"
  260. },
  261. {
  262. "typename": "System.Windows.Forms.TextBoxBase",
  263. "assembly": "System.Windows.Forms"
  264. },
  265. {
  266. "typename": "System.Action`1",
  267. "assembly": "mscorlib"
  268. },
  269. {
  270. "typename": "System.Activator",
  271. "assembly": "mscorlib"
  272. },
  273. {
  274. "typename": "System.ArgumentNullException",
  275. "assembly": "mscorlib"
  276. },
  277. {
  278. "typename": "System.Array",
  279. "assembly": "mscorlib"
  280. },
  281. {
  282. "typename": "System.Attribute",
  283. "assembly": "mscorlib"
  284. },
  285. {
  286. "typename": "System.BadImageFormatException",
  287. "assembly": "mscorlib"
  288. },
  289. {
  290. "typename": "System.Byte",
  291. "assembly": "mscorlib"
  292. },
  293. {
  294. "typename": "System.Collections.DictionaryEntry",
  295. "assembly": "mscorlib"
  296. },
  297. {
  298. "typename": "System.Collections.Generic.Dictionary`2",
  299. "assembly": "mscorlib"
  300. },
  301. {
  302. "typename": "System.Collections.Generic.IEnumerable`1",
  303. "assembly": "mscorlib"
  304. },
  305. {
  306. "typename": "System.Collections.Generic.IEnumerator`1",
  307. "assembly": "mscorlib"
  308. },
  309. {
  310. "typename": "System.Collections.Generic.List`1",
  311. "assembly": "mscorlib"
  312. },
  313. {
  314. "typename": "System.Collections.Generic.List`1/Enumerator",
  315. "assembly": "mscorlib"
  316. },
  317. {
  318. "typename": "System.Collections.ICollection",
  319. "assembly": "mscorlib"
  320. },
  321. {
  322. "typename": "System.Collections.IDictionaryEnumerator",
  323. "assembly": "mscorlib"
  324. },
  325. {
  326. "typename": "System.Collections.IEnumerable",
  327. "assembly": "mscorlib"
  328. },
  329. {
  330. "typename": "System.Collections.IEnumerator",
  331. "assembly": "mscorlib"
  332. },
  333. {
  334. "typename": "System.Collections.IList",
  335. "assembly": "mscorlib"
  336. },
  337. {
  338. "typename": "System.Delegate",
  339. "assembly": "mscorlib"
  340. },
  341. {
  342. "typename": "System.Diagnostics.DebuggableAttribute",
  343. "assembly": "mscorlib"
  344. },
  345. {
  346. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  347. "assembly": "mscorlib"
  348. },
  349. {
  350. "typename": "System.Diagnostics.DebuggerHiddenAttribute",
  351. "assembly": "mscorlib"
  352. },
  353. {
  354. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  355. "assembly": "mscorlib"
  356. },
  357. {
  358. "typename": "System.Environment",
  359. "assembly": "mscorlib"
  360. },
  361. {
  362. "typename": "System.EventArgs",
  363. "assembly": "mscorlib"
  364. },
  365. {
  366. "typename": "System.EventHandler",
  367. "assembly": "mscorlib"
  368. },
  369. {
  370. "typename": "System.Globalization.CultureInfo",
  371. "assembly": "mscorlib"
  372. },
  373. {
  374. "typename": "System.IDisposable",
  375. "assembly": "mscorlib"
  376. },
  377. {
  378. "typename": "System.IO.MemoryStream",
  379. "assembly": "mscorlib"
  380. },
  381. {
  382. "typename": "System.IO.SeekOrigin",
  383. "assembly": "mscorlib"
  384. },
  385. {
  386. "typename": "System.IO.Stream",
  387. "assembly": "mscorlib"
  388. },
  389. {
  390. "typename": "System.IO.StreamReader",
  391. "assembly": "mscorlib"
  392. },
  393. {
  394. "typename": "System.IO.TextReader",
  395. "assembly": "mscorlib"
  396. },
  397. {
  398. "typename": "System.NotSupportedException",
  399. "assembly": "mscorlib"
  400. },
  401. {
  402. "typename": "System.Object",
  403. "assembly": "mscorlib"
  404. },
  405. {
  406. "typename": "System.Predicate`1",
  407. "assembly": "mscorlib"
  408. },
  409. {
  410. "typename": "System.Random",
  411. "assembly": "mscorlib"
  412. },
  413. {
  414. "typename": "System.Reflection.Assembly",
  415. "assembly": "mscorlib"
  416. },
  417. {
  418. "typename": "System.Reflection.AssemblyCompanyAttribute",
  419. "assembly": "mscorlib"
  420. },
  421. {
  422. "typename": "System.Reflection.AssemblyConfigurationAttribute",
  423. "assembly": "mscorlib"
  424. },
  425. {
  426. "typename": "System.Reflection.AssemblyCopyrightAttribute",
  427. "assembly": "mscorlib"
  428. },
  429. {
  430. "typename": "System.Reflection.AssemblyDescriptionAttribute",
  431. "assembly": "mscorlib"
  432. },
  433. {
  434. "typename": "System.Reflection.AssemblyFileVersionAttribute",
  435. "assembly": "mscorlib"
  436. },
  437. {
  438. "typename": "System.Reflection.AssemblyProductAttribute",
  439. "assembly": "mscorlib"
  440. },
  441. {
  442. "typename": "System.Reflection.AssemblyTitleAttribute",
  443. "assembly": "mscorlib"
  444. },
  445. {
  446. "typename": "System.Reflection.AssemblyTrademarkAttribute",
  447. "assembly": "mscorlib"
  448. },
  449. {
  450. "typename": "System.Resources.ResourceManager",
  451. "assembly": "mscorlib"
  452. },
  453. {
  454. "typename": "System.Resources.ResourceSet",
  455. "assembly": "mscorlib"
  456. },
  457. {
  458. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  459. "assembly": "mscorlib"
  460. },
  461. {
  462. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  463. "assembly": "mscorlib"
  464. },
  465. {
  466. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  467. "assembly": "mscorlib"
  468. },
  469. {
  470. "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
  471. "assembly": "mscorlib"
  472. },
  473. {
  474. "typename": "System.Runtime.InteropServices.GuidAttribute",
  475. "assembly": "mscorlib"
  476. },
  477. {
  478. "typename": "System.RuntimeTypeHandle",
  479. "assembly": "mscorlib"
  480. },
  481. {
  482. "typename": "System.STAThreadAttribute",
  483. "assembly": "mscorlib"
  484. },
  485. {
  486. "typename": "System.Security.UnverifiableCodeAttribute",
  487. "assembly": "mscorlib"
  488. },
  489. {
  490. "typename": "System.Threading.Monitor",
  491. "assembly": "mscorlib"
  492. },
  493. {
  494. "typename": "System.Threading.Thread",
  495. "assembly": "mscorlib"
  496. },
  497. {
  498. "typename": "System.Threading.ThreadStart",
  499. "assembly": "mscorlib"
  500. },
  501. {
  502. "typename": "System.Type",
  503. "assembly": "mscorlib"
  504. }
  505. ]
  506. },
  507. "pe": {
  508. "peid_signatures": null,
  509. "imports": [
  510. {
  511. "imports": [
  512. {
  513. "name": "_CorExeMain",
  514. "address": "0x402000"
  515. }
  516. ],
  517. "dll": "mscoree.dll"
  518. }
  519. ],
  520. "digital_signers": null,
  521. "exported_dll_name": null,
  522. "actual_checksum": "0x00080622",
  523. "overlay": null,
  524. "imagebase": "0x00400000",
  525. "reported_checksum": "0x00080622",
  526. "icon_hash": null,
  527. "entrypoint": "0x0047c69e",
  528. "timestamp": "2019-06-23 14:05:52",
  529. "osversion": "4.0",
  530. "sections": [
  531. {
  532. "name": ".text",
  533. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  534. "virtual_address": "0x00002000",
  535. "size_of_data": "0x0007a800",
  536. "entropy": "7.99",
  537. "raw_address": "0x00000200",
  538. "virtual_size": "0x0007a6a4",
  539. "characteristics_raw": "0x60000020"
  540. },
  541. {
  542. "name": ".rsrc",
  543. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  544. "virtual_address": "0x0007e000",
  545. "size_of_data": "0x00000600",
  546. "entropy": "4.19",
  547. "raw_address": "0x0007aa00",
  548. "virtual_size": "0x000005f0",
  549. "characteristics_raw": "0x40000040"
  550. },
  551. {
  552. "name": ".reloc",
  553. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  554. "virtual_address": "0x00080000",
  555. "size_of_data": "0x00000200",
  556. "entropy": "0.10",
  557. "raw_address": "0x0007b000",
  558. "virtual_size": "0x0000000c",
  559. "characteristics_raw": "0x42000040"
  560. }
  561. ],
  562. "resources": [],
  563. "dirents": [
  564. {
  565. "virtual_address": "0x00000000",
  566. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  567. "size": "0x00000000"
  568. },
  569. {
  570. "virtual_address": "0x0007c648",
  571. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  572. "size": "0x00000053"
  573. },
  574. {
  575. "virtual_address": "0x0007e000",
  576. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  577. "size": "0x000005f0"
  578. },
  579. {
  580. "virtual_address": "0x00000000",
  581. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  582. "size": "0x00000000"
  583. },
  584. {
  585. "virtual_address": "0x00000000",
  586. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  587. "size": "0x00000000"
  588. },
  589. {
  590. "virtual_address": "0x00080000",
  591. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  592. "size": "0x0000000c"
  593. },
  594. {
  595. "virtual_address": "0x00000000",
  596. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  597. "size": "0x00000000"
  598. },
  599. {
  600. "virtual_address": "0x00000000",
  601. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  602. "size": "0x00000000"
  603. },
  604. {
  605. "virtual_address": "0x00000000",
  606. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  607. "size": "0x00000000"
  608. },
  609. {
  610. "virtual_address": "0x00000000",
  611. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  612. "size": "0x00000000"
  613. },
  614. {
  615. "virtual_address": "0x00000000",
  616. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  617. "size": "0x00000000"
  618. },
  619. {
  620. "virtual_address": "0x00000000",
  621. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  622. "size": "0x00000000"
  623. },
  624. {
  625. "virtual_address": "0x00002000",
  626. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  627. "size": "0x00000008"
  628. },
  629. {
  630. "virtual_address": "0x00000000",
  631. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  632. "size": "0x00000000"
  633. },
  634. {
  635. "virtual_address": "0x00002008",
  636. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  637. "size": "0x00000048"
  638. },
  639. {
  640. "virtual_address": "0x00000000",
  641. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  642. "size": "0x00000000"
  643. }
  644. ],
  645. "exports": [],
  646. "guest_signers": {},
  647. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  648. "icon_fuzzy": null,
  649. "icon": null,
  650. "pdbpath": null,
  651. "imported_dll_count": 1,
  652. "versioninfo": []
  653. }
  654. }
  655.  
  656. [*] Resolved APIs: []
  657.  
  658. [*] Static Analysis: {
  659. "dotnet": {
  660. "customattrs": null,
  661. "assemblyinfo": {
  662. "version": "1.0.0.0",
  663. "name": "DarkTableSched"
  664. },
  665. "assemblyrefs": [
  666. {
  667. "version": "2.0.0.0",
  668. "name": "mscorlib"
  669. },
  670. {
  671. "version": "2.0.0.0",
  672. "name": "System.Windows.Forms"
  673. },
  674. {
  675. "version": "2.0.0.0",
  676. "name": "System"
  677. },
  678. {
  679. "version": "2.0.0.0",
  680. "name": "System.Drawing"
  681. }
  682. ],
  683. "typerefs": [
  684. {
  685. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  686. "assembly": "System"
  687. },
  688. {
  689. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  690. "assembly": "System"
  691. },
  692. {
  693. "typename": "System.ComponentModel.EditorBrowsableState",
  694. "assembly": "System"
  695. },
  696. {
  697. "typename": "System.ComponentModel.IContainer",
  698. "assembly": "System"
  699. },
  700. {
  701. "typename": "System.Configuration.ApplicationSettingsBase",
  702. "assembly": "System"
  703. },
  704. {
  705. "typename": "System.Configuration.SettingsBase",
  706. "assembly": "System"
  707. },
  708. {
  709. "typename": "System.Drawing.Point",
  710. "assembly": "System.Drawing"
  711. },
  712. {
  713. "typename": "System.Drawing.Size",
  714. "assembly": "System.Drawing"
  715. },
  716. {
  717. "typename": "System.Drawing.SizeF",
  718. "assembly": "System.Drawing"
  719. },
  720. {
  721. "typename": "System.Windows.Forms.Application",
  722. "assembly": "System.Windows.Forms"
  723. },
  724. {
  725. "typename": "System.Windows.Forms.AutoScaleMode",
  726. "assembly": "System.Windows.Forms"
  727. },
  728. {
  729. "typename": "System.Windows.Forms.Button",
  730. "assembly": "System.Windows.Forms"
  731. },
  732. {
  733. "typename": "System.Windows.Forms.ButtonBase",
  734. "assembly": "System.Windows.Forms"
  735. },
  736. {
  737. "typename": "System.Windows.Forms.CommonDialog",
  738. "assembly": "System.Windows.Forms"
  739. },
  740. {
  741. "typename": "System.Windows.Forms.ContainerControl",
  742. "assembly": "System.Windows.Forms"
  743. },
  744. {
  745. "typename": "System.Windows.Forms.Control",
  746. "assembly": "System.Windows.Forms"
  747. },
  748. {
  749. "typename": "System.Windows.Forms.Control/ControlCollection",
  750. "assembly": "System.Windows.Forms"
  751. },
  752. {
  753. "typename": "System.Windows.Forms.DialogResult",
  754. "assembly": "System.Windows.Forms"
  755. },
  756. {
  757. "typename": "System.Windows.Forms.FileDialog",
  758. "assembly": "System.Windows.Forms"
  759. },
  760. {
  761. "typename": "System.Windows.Forms.Form",
  762. "assembly": "System.Windows.Forms"
  763. },
  764. {
  765. "typename": "System.Windows.Forms.GroupBox",
  766. "assembly": "System.Windows.Forms"
  767. },
  768. {
  769. "typename": "System.Windows.Forms.ListView",
  770. "assembly": "System.Windows.Forms"
  771. },
  772. {
  773. "typename": "System.Windows.Forms.ListView/ListViewItemCollection",
  774. "assembly": "System.Windows.Forms"
  775. },
  776. {
  777. "typename": "System.Windows.Forms.ListViewItem",
  778. "assembly": "System.Windows.Forms"
  779. },
  780. {
  781. "typename": "System.Windows.Forms.OpenFileDialog",
  782. "assembly": "System.Windows.Forms"
  783. },
  784. {
  785. "typename": "System.Windows.Forms.TextBox",
  786. "assembly": "System.Windows.Forms"
  787. },
  788. {
  789. "typename": "System.Windows.Forms.TextBoxBase",
  790. "assembly": "System.Windows.Forms"
  791. },
  792. {
  793. "typename": "System.Action`1",
  794. "assembly": "mscorlib"
  795. },
  796. {
  797. "typename": "System.Activator",
  798. "assembly": "mscorlib"
  799. },
  800. {
  801. "typename": "System.ArgumentNullException",
  802. "assembly": "mscorlib"
  803. },
  804. {
  805. "typename": "System.Array",
  806. "assembly": "mscorlib"
  807. },
  808. {
  809. "typename": "System.Attribute",
  810. "assembly": "mscorlib"
  811. },
  812. {
  813. "typename": "System.BadImageFormatException",
  814. "assembly": "mscorlib"
  815. },
  816. {
  817. "typename": "System.Byte",
  818. "assembly": "mscorlib"
  819. },
  820. {
  821. "typename": "System.Collections.DictionaryEntry",
  822. "assembly": "mscorlib"
  823. },
  824. {
  825. "typename": "System.Collections.Generic.Dictionary`2",
  826. "assembly": "mscorlib"
  827. },
  828. {
  829. "typename": "System.Collections.Generic.IEnumerable`1",
  830. "assembly": "mscorlib"
  831. },
  832. {
  833. "typename": "System.Collections.Generic.IEnumerator`1",
  834. "assembly": "mscorlib"
  835. },
  836. {
  837. "typename": "System.Collections.Generic.List`1",
  838. "assembly": "mscorlib"
  839. },
  840. {
  841. "typename": "System.Collections.Generic.List`1/Enumerator",
  842. "assembly": "mscorlib"
  843. },
  844. {
  845. "typename": "System.Collections.ICollection",
  846. "assembly": "mscorlib"
  847. },
  848. {
  849. "typename": "System.Collections.IDictionaryEnumerator",
  850. "assembly": "mscorlib"
  851. },
  852. {
  853. "typename": "System.Collections.IEnumerable",
  854. "assembly": "mscorlib"
  855. },
  856. {
  857. "typename": "System.Collections.IEnumerator",
  858. "assembly": "mscorlib"
  859. },
  860. {
  861. "typename": "System.Collections.IList",
  862. "assembly": "mscorlib"
  863. },
  864. {
  865. "typename": "System.Delegate",
  866. "assembly": "mscorlib"
  867. },
  868. {
  869. "typename": "System.Diagnostics.DebuggableAttribute",
  870. "assembly": "mscorlib"
  871. },
  872. {
  873. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  874. "assembly": "mscorlib"
  875. },
  876. {
  877. "typename": "System.Diagnostics.DebuggerHiddenAttribute",
  878. "assembly": "mscorlib"
  879. },
  880. {
  881. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  882. "assembly": "mscorlib"
  883. },
  884. {
  885. "typename": "System.Environment",
  886. "assembly": "mscorlib"
  887. },
  888. {
  889. "typename": "System.EventArgs",
  890. "assembly": "mscorlib"
  891. },
  892. {
  893. "typename": "System.EventHandler",
  894. "assembly": "mscorlib"
  895. },
  896. {
  897. "typename": "System.Globalization.CultureInfo",
  898. "assembly": "mscorlib"
  899. },
  900. {
  901. "typename": "System.IDisposable",
  902. "assembly": "mscorlib"
  903. },
  904. {
  905. "typename": "System.IO.MemoryStream",
  906. "assembly": "mscorlib"
  907. },
  908. {
  909. "typename": "System.IO.SeekOrigin",
  910. "assembly": "mscorlib"
  911. },
  912. {
  913. "typename": "System.IO.Stream",
  914. "assembly": "mscorlib"
  915. },
  916. {
  917. "typename": "System.IO.StreamReader",
  918. "assembly": "mscorlib"
  919. },
  920. {
  921. "typename": "System.IO.TextReader",
  922. "assembly": "mscorlib"
  923. },
  924. {
  925. "typename": "System.NotSupportedException",
  926. "assembly": "mscorlib"
  927. },
  928. {
  929. "typename": "System.Object",
  930. "assembly": "mscorlib"
  931. },
  932. {
  933. "typename": "System.Predicate`1",
  934. "assembly": "mscorlib"
  935. },
  936. {
  937. "typename": "System.Random",
  938. "assembly": "mscorlib"
  939. },
  940. {
  941. "typename": "System.Reflection.Assembly",
  942. "assembly": "mscorlib"
  943. },
  944. {
  945. "typename": "System.Reflection.AssemblyCompanyAttribute",
  946. "assembly": "mscorlib"
  947. },
  948. {
  949. "typename": "System.Reflection.AssemblyConfigurationAttribute",
  950. "assembly": "mscorlib"
  951. },
  952. {
  953. "typename": "System.Reflection.AssemblyCopyrightAttribute",
  954. "assembly": "mscorlib"
  955. },
  956. {
  957. "typename": "System.Reflection.AssemblyDescriptionAttribute",
  958. "assembly": "mscorlib"
  959. },
  960. {
  961. "typename": "System.Reflection.AssemblyFileVersionAttribute",
  962. "assembly": "mscorlib"
  963. },
  964. {
  965. "typename": "System.Reflection.AssemblyProductAttribute",
  966. "assembly": "mscorlib"
  967. },
  968. {
  969. "typename": "System.Reflection.AssemblyTitleAttribute",
  970. "assembly": "mscorlib"
  971. },
  972. {
  973. "typename": "System.Reflection.AssemblyTrademarkAttribute",
  974. "assembly": "mscorlib"
  975. },
  976. {
  977. "typename": "System.Resources.ResourceManager",
  978. "assembly": "mscorlib"
  979. },
  980. {
  981. "typename": "System.Resources.ResourceSet",
  982. "assembly": "mscorlib"
  983. },
  984. {
  985. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  986. "assembly": "mscorlib"
  987. },
  988. {
  989. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  990. "assembly": "mscorlib"
  991. },
  992. {
  993. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  994. "assembly": "mscorlib"
  995. },
  996. {
  997. "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
  998. "assembly": "mscorlib"
  999. },
  1000. {
  1001. "typename": "System.Runtime.InteropServices.GuidAttribute",
  1002. "assembly": "mscorlib"
  1003. },
  1004. {
  1005. "typename": "System.RuntimeTypeHandle",
  1006. "assembly": "mscorlib"
  1007. },
  1008. {
  1009. "typename": "System.STAThreadAttribute",
  1010. "assembly": "mscorlib"
  1011. },
  1012. {
  1013. "typename": "System.Security.UnverifiableCodeAttribute",
  1014. "assembly": "mscorlib"
  1015. },
  1016. {
  1017. "typename": "System.Threading.Monitor",
  1018. "assembly": "mscorlib"
  1019. },
  1020. {
  1021. "typename": "System.Threading.Thread",
  1022. "assembly": "mscorlib"
  1023. },
  1024. {
  1025. "typename": "System.Threading.ThreadStart",
  1026. "assembly": "mscorlib"
  1027. },
  1028. {
  1029. "typename": "System.Type",
  1030. "assembly": "mscorlib"
  1031. }
  1032. ]
  1033. },
  1034. "pe": {
  1035. "peid_signatures": null,
  1036. "imports": [
  1037. {
  1038. "imports": [
  1039. {
  1040. "name": "_CorExeMain",
  1041. "address": "0x402000"
  1042. }
  1043. ],
  1044. "dll": "mscoree.dll"
  1045. }
  1046. ],
  1047. "digital_signers": null,
  1048. "exported_dll_name": null,
  1049. "actual_checksum": "0x00080622",
  1050. "overlay": null,
  1051. "imagebase": "0x00400000",
  1052. "reported_checksum": "0x00080622",
  1053. "icon_hash": null,
  1054. "entrypoint": "0x0047c69e",
  1055. "timestamp": "2019-06-23 14:05:52",
  1056. "osversion": "4.0",
  1057. "sections": [
  1058. {
  1059. "name": ".text",
  1060. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  1061. "virtual_address": "0x00002000",
  1062. "size_of_data": "0x0007a800",
  1063. "entropy": "7.99",
  1064. "raw_address": "0x00000200",
  1065. "virtual_size": "0x0007a6a4",
  1066. "characteristics_raw": "0x60000020"
  1067. },
  1068. {
  1069. "name": ".rsrc",
  1070. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  1071. "virtual_address": "0x0007e000",
  1072. "size_of_data": "0x00000600",
  1073. "entropy": "4.19",
  1074. "raw_address": "0x0007aa00",
  1075. "virtual_size": "0x000005f0",
  1076. "characteristics_raw": "0x40000040"
  1077. },
  1078. {
  1079. "name": ".reloc",
  1080. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  1081. "virtual_address": "0x00080000",
  1082. "size_of_data": "0x00000200",
  1083. "entropy": "0.10",
  1084. "raw_address": "0x0007b000",
  1085. "virtual_size": "0x0000000c",
  1086. "characteristics_raw": "0x42000040"
  1087. }
  1088. ],
  1089. "resources": [],
  1090. "dirents": [
  1091. {
  1092. "virtual_address": "0x00000000",
  1093. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  1094. "size": "0x00000000"
  1095. },
  1096. {
  1097. "virtual_address": "0x0007c648",
  1098. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  1099. "size": "0x00000053"
  1100. },
  1101. {
  1102. "virtual_address": "0x0007e000",
  1103. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  1104. "size": "0x000005f0"
  1105. },
  1106. {
  1107. "virtual_address": "0x00000000",
  1108. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  1109. "size": "0x00000000"
  1110. },
  1111. {
  1112. "virtual_address": "0x00000000",
  1113. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  1114. "size": "0x00000000"
  1115. },
  1116. {
  1117. "virtual_address": "0x00080000",
  1118. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  1119. "size": "0x0000000c"
  1120. },
  1121. {
  1122. "virtual_address": "0x00000000",
  1123. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  1124. "size": "0x00000000"
  1125. },
  1126. {
  1127. "virtual_address": "0x00000000",
  1128. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  1129. "size": "0x00000000"
  1130. },
  1131. {
  1132. "virtual_address": "0x00000000",
  1133. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  1134. "size": "0x00000000"
  1135. },
  1136. {
  1137. "virtual_address": "0x00000000",
  1138. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  1139. "size": "0x00000000"
  1140. },
  1141. {
  1142. "virtual_address": "0x00000000",
  1143. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  1144. "size": "0x00000000"
  1145. },
  1146. {
  1147. "virtual_address": "0x00000000",
  1148. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  1149. "size": "0x00000000"
  1150. },
  1151. {
  1152. "virtual_address": "0x00002000",
  1153. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  1154. "size": "0x00000008"
  1155. },
  1156. {
  1157. "virtual_address": "0x00000000",
  1158. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  1159. "size": "0x00000000"
  1160. },
  1161. {
  1162. "virtual_address": "0x00002008",
  1163. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  1164. "size": "0x00000048"
  1165. },
  1166. {
  1167. "virtual_address": "0x00000000",
  1168. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  1169. "size": "0x00000000"
  1170. }
  1171. ],
  1172. "exports": [],
  1173. "guest_signers": {},
  1174. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  1175. "icon_fuzzy": null,
  1176. "icon": null,
  1177. "pdbpath": null,
  1178. "imported_dll_count": 1,
  1179. "versioninfo": []
  1180. }
  1181. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!