API tools faq
paste
paladin316

Exes_b5687586677a0dc974e4467598af8e30_jpg_2019-07-02_13_30.json

paladin316
Jul 2nd, 2019
2,109
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 57.07 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: "Banload"
  3.  
  4. [*] MalScore: 3.25
  5.  
  6. [*] File Name: "Exes_b5687586677a0dc974e4467598af8e30.jpg"
  7. [*] File Size: 546304
  8. [*] File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
  9. [*] SHA256: "d67f41a6410824fa603d3b6d61d3e5b0da86bf1d1651fab5fd8174f088a978cf"
  10. [*] MD5: "b5687586677a0dc974e4467598af8e30"
  11. [*] SHA1: "0c4b9875d7f75d87c4c6ff0e246d1aa9ef44297c"
  12. [*] SHA512: "0a523bdba45f818df5a063c9333e0ba6438bc5e3ff733623e9e3b0f1827fed2df91ec3f8a88f43e43dc3fe1c23dd31c77a6a49e5f1109f8a33168f2b75678c20"
  13. [*] CRC32: "455B8F97"
  14. [*] SSDEEP: "6144:WchU5XZQdQWX5XCZNRCT0/ljxHgx4XTgYXJDuFLeT/5IqlxhGiuvVSxw2nzb81rn:HuID5ONRSidg2zXkFLwhl7GvzhZM"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: [
  19. {
  20. "Description": "File has been identified by 7 Antiviruses on VirusTotal as malicious",
  21. "Details": [
  22. {
  23. "Kaspersky": "UDS:DangerousObject.Multi.Generic"
  24. },
  25. {
  26. "Microsoft": "TrojanSpy:Win32/Banload.AAA!bit"
  27. },
  28. {
  29. "ZoneAlarm": "UDS:DangerousObject.Multi.Generic"
  30. },
  31. {
  32. "ESET-NOD32": "a variant of Generik.JYHCWGY"
  33. },
  34. {
  35. "SentinelOne": "DFI - Malicious PE"
  36. },
  37. {
  38. "MaxSecure": "Trojan.Malware.300983.susgen"
  39. },
  40. {
  41. "AVG": "FileRepMetagen [Malware]"
  42. }
  43. ]
  44. },
  45. {
  46. "Description": "The binary likely contains encrypted or compressed data.",
  47. "Details": [
  48. {
  49. "section": "name: .text, entropy: 6.90, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x00084c00, virtual_size: 0x00084aa4"
  50. }
  51. ]
  52. }
  53. ]
  54.  
  55. [*] Started Service: []
  56.  
  57. [*] Executed Commands: []
  58.  
  59. [*] Mutexes: []
  60.  
  61. [*] Modified Files: []
  62.  
  63. [*] Deleted Files: []
  64.  
  65. [*] Modified Registry Keys: []
  66.  
  67. [*] Deleted Registry Keys: []
  68.  
  69. [*] DNS Communications: []
  70.  
  71. [*] Domains: []
  72.  
  73. [*] Network Communication - ICMP: []
  74.  
  75. [*] Network Communication - HTTP: []
  76.  
  77. [*] Network Communication - SMTP: []
  78.  
  79. [*] Network Communication - Hosts: []
  80.  
  81. [*] Network Communication - IRC: []
  82.  
  83. [*] Static Analysis: {
  84. "dotnet": {
  85. "customattrs": [
  86. {
  87. "type": "Assembly",
  88. "name": "[mscorlib]System.Reflection.AssemblyTitleAttribute",
  89. "value": "SmartHelp"
  90. },
  91. {
  92. "type": "Assembly",
  93. "name": "[mscorlib]System.Reflection.AssemblyProductAttribute",
  94. "value": "SmartHelp"
  95. },
  96. {
  97. "type": "Assembly",
  98. "name": "[mscorlib]System.Reflection.AssemblyCopyrightAttribute",
  99. "value": "Copyright \\xc2\\xa9 20"
  100. },
  101. {
  102. "type": "Assembly",
  103. "name": "[mscorlib]System.Runtime.InteropServices.GuidAttribute",
  104. "value": "c4c13ab3-944c-4290-91e1-ceeaa6c9f8"
  105. },
  106. {
  107. "type": "Assembly",
  108. "name": "[mscorlib]System.Reflection.AssemblyFileVersionAttribute",
  109. "value": "1.0.0"
  110. }
  111. ],
  112. "assemblyinfo": {
  113. "version": "1.0.0.0",
  114. "name": "SmartHelper"
  115. },
  116. "assemblyrefs": [
  117. {
  118. "version": "4.0.0.0",
  119. "name": "mscorlib"
  120. },
  121. {
  122. "version": "4.0.0.0",
  123. "name": "System.Windows.Forms"
  124. },
  125. {
  126. "version": "4.0.0.0",
  127. "name": "System.Drawing"
  128. },
  129. {
  130. "version": "4.0.0.0",
  131. "name": "System"
  132. },
  133. {
  134. "version": "4.0.0.0",
  135. "name": "System.Core"
  136. },
  137. {
  138. "version": "4.0.0.0",
  139. "name": "UIAutomationClient"
  140. },
  141. {
  142. "version": "4.0.0.0",
  143. "name": "UIAutomationTypes"
  144. },
  145. {
  146. "version": "1.0.0.0",
  147. "name": "uhJqOlpFGUqcczqQfygKGUD"
  148. }
  149. ],
  150. "typerefs": [
  151. {
  152. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  153. "assembly": "System"
  154. },
  155. {
  156. "typename": "System.ComponentModel.Component",
  157. "assembly": "System"
  158. },
  159. {
  160. "typename": "System.ComponentModel.ComponentResourceManager",
  161. "assembly": "System"
  162. },
  163. {
  164. "typename": "System.ComponentModel.Container",
  165. "assembly": "System"
  166. },
  167. {
  168. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  169. "assembly": "System"
  170. },
  171. {
  172. "typename": "System.ComponentModel.EditorBrowsableState",
  173. "assembly": "System"
  174. },
  175. {
  176. "typename": "System.ComponentModel.IContainer",
  177. "assembly": "System"
  178. },
  179. {
  180. "typename": "System.ComponentModel.ISupportInitialize",
  181. "assembly": "System"
  182. },
  183. {
  184. "typename": "System.Configuration.ApplicationSettingsBase",
  185. "assembly": "System"
  186. },
  187. {
  188. "typename": "System.Configuration.SettingsBase",
  189. "assembly": "System"
  190. },
  191. {
  192. "typename": "System.Diagnostics.FileVersionInfo",
  193. "assembly": "System"
  194. },
  195. {
  196. "typename": "System.Diagnostics.Process",
  197. "assembly": "System"
  198. },
  199. {
  200. "typename": "System.Diagnostics.ProcessModule",
  201. "assembly": "System"
  202. },
  203. {
  204. "typename": "System.Text.RegularExpressions.Regex",
  205. "assembly": "System"
  206. },
  207. {
  208. "typename": "System.Linq.Enumerable",
  209. "assembly": "System.Core"
  210. },
  211. {
  212. "typename": "System.Linq.IOrderedEnumerable`1",
  213. "assembly": "System.Core"
  214. },
  215. {
  216. "typename": "System.Drawing.Bitmap",
  217. "assembly": "System.Drawing"
  218. },
  219. {
  220. "typename": "System.Drawing.Brush",
  221. "assembly": "System.Drawing"
  222. },
  223. {
  224. "typename": "System.Drawing.Color",
  225. "assembly": "System.Drawing"
  226. },
  227. {
  228. "typename": "System.Drawing.ContentAlignment",
  229. "assembly": "System.Drawing"
  230. },
  231. {
  232. "typename": "System.Drawing.Drawing2D.GraphicsPath",
  233. "assembly": "System.Drawing"
  234. },
  235. {
  236. "typename": "System.Drawing.Drawing2D.SmoothingMode",
  237. "assembly": "System.Drawing"
  238. },
  239. {
  240. "typename": "System.Drawing.Font",
  241. "assembly": "System.Drawing"
  242. },
  243. {
  244. "typename": "System.Drawing.FontStyle",
  245. "assembly": "System.Drawing"
  246. },
  247. {
  248. "typename": "System.Drawing.Graphics",
  249. "assembly": "System.Drawing"
  250. },
  251. {
  252. "typename": "System.Drawing.GraphicsUnit",
  253. "assembly": "System.Drawing"
  254. },
  255. {
  256. "typename": "System.Drawing.Icon",
  257. "assembly": "System.Drawing"
  258. },
  259. {
  260. "typename": "System.Drawing.Image",
  261. "assembly": "System.Drawing"
  262. },
  263. {
  264. "typename": "System.Drawing.Pen",
  265. "assembly": "System.Drawing"
  266. },
  267. {
  268. "typename": "System.Drawing.Point",
  269. "assembly": "System.Drawing"
  270. },
  271. {
  272. "typename": "System.Drawing.Size",
  273. "assembly": "System.Drawing"
  274. },
  275. {
  276. "typename": "System.Drawing.SizeF",
  277. "assembly": "System.Drawing"
  278. },
  279. {
  280. "typename": "System.Drawing.SolidBrush",
  281. "assembly": "System.Drawing"
  282. },
  283. {
  284. "typename": "System.Windows.Forms.Application",
  285. "assembly": "System.Windows.Forms"
  286. },
  287. {
  288. "typename": "System.Windows.Forms.AutoScaleMode",
  289. "assembly": "System.Windows.Forms"
  290. },
  291. {
  292. "typename": "System.Windows.Forms.AutoSizeMode",
  293. "assembly": "System.Windows.Forms"
  294. },
  295. {
  296. "typename": "System.Windows.Forms.BorderStyle",
  297. "assembly": "System.Windows.Forms"
  298. },
  299. {
  300. "typename": "System.Windows.Forms.Button",
  301. "assembly": "System.Windows.Forms"
  302. },
  303. {
  304. "typename": "System.Windows.Forms.ButtonBase",
  305. "assembly": "System.Windows.Forms"
  306. },
  307. {
  308. "typename": "System.Windows.Forms.CheckBox",
  309. "assembly": "System.Windows.Forms"
  310. },
  311. {
  312. "typename": "System.Windows.Forms.CheckedListBox",
  313. "assembly": "System.Windows.Forms"
  314. },
  315. {
  316. "typename": "System.Windows.Forms.ComboBox",
  317. "assembly": "System.Windows.Forms"
  318. },
  319. {
  320. "typename": "System.Windows.Forms.ContainerControl",
  321. "assembly": "System.Windows.Forms"
  322. },
  323. {
  324. "typename": "System.Windows.Forms.ContextMenuStrip",
  325. "assembly": "System.Windows.Forms"
  326. },
  327. {
  328. "typename": "System.Windows.Forms.Control",
  329. "assembly": "System.Windows.Forms"
  330. },
  331. {
  332. "typename": "System.Windows.Forms.Control/ControlCollection",
  333. "assembly": "System.Windows.Forms"
  334. },
  335. {
  336. "typename": "System.Windows.Forms.Cursor",
  337. "assembly": "System.Windows.Forms"
  338. },
  339. {
  340. "typename": "System.Windows.Forms.Cursors",
  341. "assembly": "System.Windows.Forms"
  342. },
  343. {
  344. "typename": "System.Windows.Forms.DateTimePicker",
  345. "assembly": "System.Windows.Forms"
  346. },
  347. {
  348. "typename": "System.Windows.Forms.DockStyle",
  349. "assembly": "System.Windows.Forms"
  350. },
  351. {
  352. "typename": "System.Windows.Forms.DomainUpDown",
  353. "assembly": "System.Windows.Forms"
  354. },
  355. {
  356. "typename": "System.Windows.Forms.FlatButtonAppearance",
  357. "assembly": "System.Windows.Forms"
  358. },
  359. {
  360. "typename": "System.Windows.Forms.FlatStyle",
  361. "assembly": "System.Windows.Forms"
  362. },
  363. {
  364. "typename": "System.Windows.Forms.Form",
  365. "assembly": "System.Windows.Forms"
  366. },
  367. {
  368. "typename": "System.Windows.Forms.FormBorderStyle",
  369. "assembly": "System.Windows.Forms"
  370. },
  371. {
  372. "typename": "System.Windows.Forms.GroupBox",
  373. "assembly": "System.Windows.Forms"
  374. },
  375. {
  376. "typename": "System.Windows.Forms.HScrollBar",
  377. "assembly": "System.Windows.Forms"
  378. },
  379. {
  380. "typename": "System.Windows.Forms.ImageLayout",
  381. "assembly": "System.Windows.Forms"
  382. },
  383. {
  384. "typename": "System.Windows.Forms.Label",
  385. "assembly": "System.Windows.Forms"
  386. },
  387. {
  388. "typename": "System.Windows.Forms.ListBox",
  389. "assembly": "System.Windows.Forms"
  390. },
  391. {
  392. "typename": "System.Windows.Forms.ListControl",
  393. "assembly": "System.Windows.Forms"
  394. },
  395. {
  396. "typename": "System.Windows.Forms.ListView",
  397. "assembly": "System.Windows.Forms"
  398. },
  399. {
  400. "typename": "System.Windows.Forms.MenuStrip",
  401. "assembly": "System.Windows.Forms"
  402. },
  403. {
  404. "typename": "System.Windows.Forms.MouseButtons",
  405. "assembly": "System.Windows.Forms"
  406. },
  407. {
  408. "typename": "System.Windows.Forms.MouseEventArgs",
  409. "assembly": "System.Windows.Forms"
  410. },
  411. {
  412. "typename": "System.Windows.Forms.MouseEventHandler",
  413. "assembly": "System.Windows.Forms"
  414. },
  415. {
  416. "typename": "System.Windows.Forms.NotifyIcon",
  417. "assembly": "System.Windows.Forms"
  418. },
  419. {
  420. "typename": "System.Windows.Forms.PaintEventArgs",
  421. "assembly": "System.Windows.Forms"
  422. },
  423. {
  424. "typename": "System.Windows.Forms.PaintEventHandler",
  425. "assembly": "System.Windows.Forms"
  426. },
  427. {
  428. "typename": "System.Windows.Forms.Panel",
  429. "assembly": "System.Windows.Forms"
  430. },
  431. {
  432. "typename": "System.Windows.Forms.PictureBox",
  433. "assembly": "System.Windows.Forms"
  434. },
  435. {
  436. "typename": "System.Windows.Forms.ProgressBar",
  437. "assembly": "System.Windows.Forms"
  438. },
  439. {
  440. "typename": "System.Windows.Forms.RichTextBox",
  441. "assembly": "System.Windows.Forms"
  442. },
  443. {
  444. "typename": "System.Windows.Forms.ScrollableControl",
  445. "assembly": "System.Windows.Forms"
  446. },
  447. {
  448. "typename": "System.Windows.Forms.Splitter",
  449. "assembly": "System.Windows.Forms"
  450. },
  451. {
  452. "typename": "System.Windows.Forms.TextBox",
  453. "assembly": "System.Windows.Forms"
  454. },
  455. {
  456. "typename": "System.Windows.Forms.Timer",
  457. "assembly": "System.Windows.Forms"
  458. },
  459. {
  460. "typename": "System.Windows.Forms.ToolStrip",
  461. "assembly": "System.Windows.Forms"
  462. },
  463. {
  464. "typename": "System.Windows.Forms.ToolStripItem",
  465. "assembly": "System.Windows.Forms"
  466. },
  467. {
  468. "typename": "System.Windows.Forms.ToolStripItemCollection",
  469. "assembly": "System.Windows.Forms"
  470. },
  471. {
  472. "typename": "System.Windows.Forms.ToolStripMenuItem",
  473. "assembly": "System.Windows.Forms"
  474. },
  475. {
  476. "typename": "System.Windows.Forms.UserControl",
  477. "assembly": "System.Windows.Forms"
  478. },
  479. {
  480. "typename": "System.Windows.Automation.AndCondition",
  481. "assembly": "UIAutomationClient"
  482. },
  483. {
  484. "typename": "System.Windows.Automation.AutomationElement",
  485. "assembly": "UIAutomationClient"
  486. },
  487. {
  488. "typename": "System.Windows.Automation.Condition",
  489. "assembly": "UIAutomationClient"
  490. },
  491. {
  492. "typename": "System.Windows.Automation.PropertyCondition",
  493. "assembly": "UIAutomationClient"
  494. },
  495. {
  496. "typename": "System.Windows.Automation.ValuePattern",
  497. "assembly": "UIAutomationClient"
  498. },
  499. {
  500. "typename": "System.Windows.Automation.ValuePattern/ValuePatternInformation",
  501. "assembly": "UIAutomationClient"
  502. },
  503. {
  504. "typename": "System.Windows.Automation.AutomationPattern",
  505. "assembly": "UIAutomationTypes"
  506. },
  507. {
  508. "typename": "System.Windows.Automation.AutomationProperty",
  509. "assembly": "UIAutomationTypes"
  510. },
  511. {
  512. "typename": "System.Windows.Automation.ControlType",
  513. "assembly": "UIAutomationTypes"
  514. },
  515. {
  516. "typename": "System.Windows.Automation.TreeScope",
  517. "assembly": "UIAutomationTypes"
  518. },
  519. {
  520. "typename": "System.AppDomain",
  521. "assembly": "mscorlib"
  522. },
  523. {
  524. "typename": "System.Array",
  525. "assembly": "mscorlib"
  526. },
  527. {
  528. "typename": "System.Boolean",
  529. "assembly": "mscorlib"
  530. },
  531. {
  532. "typename": "System.Byte",
  533. "assembly": "mscorlib"
  534. },
  535. {
  536. "typename": "System.Collections.Generic.IEnumerable`1",
  537. "assembly": "mscorlib"
  538. },
  539. {
  540. "typename": "System.Collections.Generic.IEnumerator`1",
  541. "assembly": "mscorlib"
  542. },
  543. {
  544. "typename": "System.Collections.Generic.List`1",
  545. "assembly": "mscorlib"
  546. },
  547. {
  548. "typename": "System.Collections.IEnumerator",
  549. "assembly": "mscorlib"
  550. },
  551. {
  552. "typename": "System.Console",
  553. "assembly": "mscorlib"
  554. },
  555. {
  556. "typename": "System.DateTime",
  557. "assembly": "mscorlib"
  558. },
  559. {
  560. "typename": "System.Diagnostics.DebuggableAttribute",
  561. "assembly": "mscorlib"
  562. },
  563. {
  564. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  565. "assembly": "mscorlib"
  566. },
  567. {
  568. "typename": "System.Diagnostics.DebuggerBrowsableAttribute",
  569. "assembly": "mscorlib"
  570. },
  571. {
  572. "typename": "System.Diagnostics.DebuggerBrowsableState",
  573. "assembly": "mscorlib"
  574. },
  575. {
  576. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  577. "assembly": "mscorlib"
  578. },
  579. {
  580. "typename": "System.Environment",
  581. "assembly": "mscorlib"
  582. },
  583. {
  584. "typename": "System.EventArgs",
  585. "assembly": "mscorlib"
  586. },
  587. {
  588. "typename": "System.EventHandler",
  589. "assembly": "mscorlib"
  590. },
  591. {
  592. "typename": "System.Func`2",
  593. "assembly": "mscorlib"
  594. },
  595. {
  596. "typename": "System.Globalization.CultureInfo",
  597. "assembly": "mscorlib"
  598. },
  599. {
  600. "typename": "System.IDisposable",
  601. "assembly": "mscorlib"
  602. },
  603. {
  604. "typename": "System.IO.FileMode",
  605. "assembly": "mscorlib"
  606. },
  607. {
  608. "typename": "System.IO.FileStream",
  609. "assembly": "mscorlib"
  610. },
  611. {
  612. "typename": "System.IO.Stream",
  613. "assembly": "mscorlib"
  614. },
  615. {
  616. "typename": "System.Int32",
  617. "assembly": "mscorlib"
  618. },
  619. {
  620. "typename": "System.IntPtr",
  621. "assembly": "mscorlib"
  622. },
  623. {
  624. "typename": "System.Nullable`1",
  625. "assembly": "mscorlib"
  626. },
  627. {
  628. "typename": "System.Object",
  629. "assembly": "mscorlib"
  630. },
  631. {
  632. "typename": "System.Predicate`1",
  633. "assembly": "mscorlib"
  634. },
  635. {
  636. "typename": "System.Reflection.Assembly",
  637. "assembly": "mscorlib"
  638. },
  639. {
  640. "typename": "System.Reflection.AssemblyCompanyAttribute",
  641. "assembly": "mscorlib"
  642. },
  643. {
  644. "typename": "System.Reflection.AssemblyConfigurationAttribute",
  645. "assembly": "mscorlib"
  646. },
  647. {
  648. "typename": "System.Reflection.AssemblyCopyrightAttribute",
  649. "assembly": "mscorlib"
  650. },
  651. {
  652. "typename": "System.Reflection.AssemblyDescriptionAttribute",
  653. "assembly": "mscorlib"
  654. },
  655. {
  656. "typename": "System.Reflection.AssemblyFileVersionAttribute",
  657. "assembly": "mscorlib"
  658. },
  659. {
  660. "typename": "System.Reflection.AssemblyProductAttribute",
  661. "assembly": "mscorlib"
  662. },
  663. {
  664. "typename": "System.Reflection.AssemblyTitleAttribute",
  665. "assembly": "mscorlib"
  666. },
  667. {
  668. "typename": "System.Reflection.AssemblyTrademarkAttribute",
  669. "assembly": "mscorlib"
  670. },
  671. {
  672. "typename": "System.ResolveEventArgs",
  673. "assembly": "mscorlib"
  674. },
  675. {
  676. "typename": "System.ResolveEventHandler",
  677. "assembly": "mscorlib"
  678. },
  679. {
  680. "typename": "System.Resources.ResourceManager",
  681. "assembly": "mscorlib"
  682. },
  683. {
  684. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  685. "assembly": "mscorlib"
  686. },
  687. {
  688. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  689. "assembly": "mscorlib"
  690. },
  691. {
  692. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  693. "assembly": "mscorlib"
  694. },
  695. {
  696. "typename": "System.Runtime.CompilerServices.RuntimeHelpers",
  697. "assembly": "mscorlib"
  698. },
  699. {
  700. "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
  701. "assembly": "mscorlib"
  702. },
  703. {
  704. "typename": "System.Runtime.InteropServices.GuidAttribute",
  705. "assembly": "mscorlib"
  706. },
  707. {
  708. "typename": "System.Runtime.Serialization.Formatters.Binary.BinaryFormatter",
  709. "assembly": "mscorlib"
  710. },
  711. {
  712. "typename": "System.Runtime.Versioning.TargetFrameworkAttribute",
  713. "assembly": "mscorlib"
  714. },
  715. {
  716. "typename": "System.RuntimeFieldHandle",
  717. "assembly": "mscorlib"
  718. },
  719. {
  720. "typename": "System.RuntimeTypeHandle",
  721. "assembly": "mscorlib"
  722. },
  723. {
  724. "typename": "System.STAThreadAttribute",
  725. "assembly": "mscorlib"
  726. },
  727. {
  728. "typename": "System.String",
  729. "assembly": "mscorlib"
  730. },
  731. {
  732. "typename": "System.Text.Encoding",
  733. "assembly": "mscorlib"
  734. },
  735. {
  736. "typename": "System.Threading.Thread",
  737. "assembly": "mscorlib"
  738. },
  739. {
  740. "typename": "System.Threading.ThreadStart",
  741. "assembly": "mscorlib"
  742. },
  743. {
  744. "typename": "System.TimeSpan",
  745. "assembly": "mscorlib"
  746. },
  747. {
  748. "typename": "System.Type",
  749. "assembly": "mscorlib"
  750. },
  751. {
  752. "typename": "System.ValueType",
  753. "assembly": "mscorlib"
  754. },
  755. {
  756. "typename": "QMujRbbqOZQGhsrGJHNvSnXD",
  757. "assembly": "uhJqOlpFGUqcczqQfygKGUD"
  758. }
  759. ]
  760. },
  761. "pe": {
  762. "peid_signatures": null,
  763. "imports": [
  764. {
  765. "imports": [
  766. {
  767. "name": "_CorExeMain",
  768. "address": "0x402000"
  769. }
  770. ],
  771. "dll": "mscoree.dll"
  772. }
  773. ],
  774. "digital_signers": null,
  775. "exported_dll_name": null,
  776. "actual_checksum": "0x000871b6",
  777. "overlay": null,
  778. "imagebase": "0x00400000",
  779. "reported_checksum": "0x00000000",
  780. "icon_hash": null,
  781. "entrypoint": "0x00486a9e",
  782. "timestamp": "2019-07-01 19:21:22",
  783. "osversion": "4.0",
  784. "sections": [
  785. {
  786. "name": ".text",
  787. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  788. "virtual_address": "0x00002000",
  789. "size_of_data": "0x00084c00",
  790. "entropy": "6.90",
  791. "raw_address": "0x00000200",
  792. "virtual_size": "0x00084aa4",
  793. "characteristics_raw": "0x60000020"
  794. },
  795. {
  796. "name": ".rsrc",
  797. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  798. "virtual_address": "0x00088000",
  799. "size_of_data": "0x00000600",
  800. "entropy": "4.10",
  801. "raw_address": "0x00084e00",
  802. "virtual_size": "0x000005b6",
  803. "characteristics_raw": "0x40000040"
  804. },
  805. {
  806. "name": ".reloc",
  807. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  808. "virtual_address": "0x0008a000",
  809. "size_of_data": "0x00000200",
  810. "entropy": "0.10",
  811. "raw_address": "0x00085400",
  812. "virtual_size": "0x0000000c",
  813. "characteristics_raw": "0x42000040"
  814. }
  815. ],
  816. "resources": [],
  817. "dirents": [
  818. {
  819. "virtual_address": "0x00000000",
  820. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  821. "size": "0x00000000"
  822. },
  823. {
  824. "virtual_address": "0x00086a4c",
  825. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  826. "size": "0x0000004f"
  827. },
  828. {
  829. "virtual_address": "0x00088000",
  830. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  831. "size": "0x000005b6"
  832. },
  833. {
  834. "virtual_address": "0x00000000",
  835. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  836. "size": "0x00000000"
  837. },
  838. {
  839. "virtual_address": "0x00000000",
  840. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  841. "size": "0x00000000"
  842. },
  843. {
  844. "virtual_address": "0x0008a000",
  845. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  846. "size": "0x0000000c"
  847. },
  848. {
  849. "virtual_address": "0x000869dc",
  850. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  851. "size": "0x0000001c"
  852. },
  853. {
  854. "virtual_address": "0x00000000",
  855. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  856. "size": "0x00000000"
  857. },
  858. {
  859. "virtual_address": "0x00000000",
  860. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  861. "size": "0x00000000"
  862. },
  863. {
  864. "virtual_address": "0x00000000",
  865. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  866. "size": "0x00000000"
  867. },
  868. {
  869. "virtual_address": "0x00000000",
  870. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  871. "size": "0x00000000"
  872. },
  873. {
  874. "virtual_address": "0x00000000",
  875. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  876. "size": "0x00000000"
  877. },
  878. {
  879. "virtual_address": "0x00002000",
  880. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  881. "size": "0x00000008"
  882. },
  883. {
  884. "virtual_address": "0x00000000",
  885. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  886. "size": "0x00000000"
  887. },
  888. {
  889. "virtual_address": "0x00002008",
  890. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  891. "size": "0x00000048"
  892. },
  893. {
  894. "virtual_address": "0x00000000",
  895. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  896. "size": "0x00000000"
  897. }
  898. ],
  899. "exports": [],
  900. "guest_signers": {},
  901. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  902. "icon_fuzzy": null,
  903. "icon": null,
  904. "pdbpath": "C:\\Users\\\\xd0\\x90\\xd0\\xb4\\xd0\\xbc\\xd0\\xb8\\xd0\\xbd\\xd0\\xb8\\xd1\\x81\\xd1\\x82\\xd1\\x80\\xd0\\xb0\\xd1\\x82\\xd0\\xbe\\xd1\\x80\\Desktop\\SmartHelper.pdb",
  905. "imported_dll_count": 1,
  906. "versioninfo": []
  907. }
  908. }
  909.  
  910. [*] Resolved APIs: []
  911.  
  912. [*] Static Analysis: {
  913. "dotnet": {
  914. "customattrs": [
  915. {
  916. "type": "Assembly",
  917. "name": "[mscorlib]System.Reflection.AssemblyTitleAttribute",
  918. "value": "SmartHelp"
  919. },
  920. {
  921. "type": "Assembly",
  922. "name": "[mscorlib]System.Reflection.AssemblyProductAttribute",
  923. "value": "SmartHelp"
  924. },
  925. {
  926. "type": "Assembly",
  927. "name": "[mscorlib]System.Reflection.AssemblyCopyrightAttribute",
  928. "value": "Copyright \\xc2\\xa9 20"
  929. },
  930. {
  931. "type": "Assembly",
  932. "name": "[mscorlib]System.Runtime.InteropServices.GuidAttribute",
  933. "value": "c4c13ab3-944c-4290-91e1-ceeaa6c9f8"
  934. },
  935. {
  936. "type": "Assembly",
  937. "name": "[mscorlib]System.Reflection.AssemblyFileVersionAttribute",
  938. "value": "1.0.0"
  939. }
  940. ],
  941. "assemblyinfo": {
  942. "version": "1.0.0.0",
  943. "name": "SmartHelper"
  944. },
  945. "assemblyrefs": [
  946. {
  947. "version": "4.0.0.0",
  948. "name": "mscorlib"
  949. },
  950. {
  951. "version": "4.0.0.0",
  952. "name": "System.Windows.Forms"
  953. },
  954. {
  955. "version": "4.0.0.0",
  956. "name": "System.Drawing"
  957. },
  958. {
  959. "version": "4.0.0.0",
  960. "name": "System"
  961. },
  962. {
  963. "version": "4.0.0.0",
  964. "name": "System.Core"
  965. },
  966. {
  967. "version": "4.0.0.0",
  968. "name": "UIAutomationClient"
  969. },
  970. {
  971. "version": "4.0.0.0",
  972. "name": "UIAutomationTypes"
  973. },
  974. {
  975. "version": "1.0.0.0",
  976. "name": "uhJqOlpFGUqcczqQfygKGUD"
  977. }
  978. ],
  979. "typerefs": [
  980. {
  981. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  982. "assembly": "System"
  983. },
  984. {
  985. "typename": "System.ComponentModel.Component",
  986. "assembly": "System"
  987. },
  988. {
  989. "typename": "System.ComponentModel.ComponentResourceManager",
  990. "assembly": "System"
  991. },
  992. {
  993. "typename": "System.ComponentModel.Container",
  994. "assembly": "System"
  995. },
  996. {
  997. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  998. "assembly": "System"
  999. },
  1000. {
  1001. "typename": "System.ComponentModel.EditorBrowsableState",
  1002. "assembly": "System"
  1003. },
  1004. {
  1005. "typename": "System.ComponentModel.IContainer",
  1006. "assembly": "System"
  1007. },
  1008. {
  1009. "typename": "System.ComponentModel.ISupportInitialize",
  1010. "assembly": "System"
  1011. },
  1012. {
  1013. "typename": "System.Configuration.ApplicationSettingsBase",
  1014. "assembly": "System"
  1015. },
  1016. {
  1017. "typename": "System.Configuration.SettingsBase",
  1018. "assembly": "System"
  1019. },
  1020. {
  1021. "typename": "System.Diagnostics.FileVersionInfo",
  1022. "assembly": "System"
  1023. },
  1024. {
  1025. "typename": "System.Diagnostics.Process",
  1026. "assembly": "System"
  1027. },
  1028. {
  1029. "typename": "System.Diagnostics.ProcessModule",
  1030. "assembly": "System"
  1031. },
  1032. {
  1033. "typename": "System.Text.RegularExpressions.Regex",
  1034. "assembly": "System"
  1035. },
  1036. {
  1037. "typename": "System.Linq.Enumerable",
  1038. "assembly": "System.Core"
  1039. },
  1040. {
  1041. "typename": "System.Linq.IOrderedEnumerable`1",
  1042. "assembly": "System.Core"
  1043. },
  1044. {
  1045. "typename": "System.Drawing.Bitmap",
  1046. "assembly": "System.Drawing"
  1047. },
  1048. {
  1049. "typename": "System.Drawing.Brush",
  1050. "assembly": "System.Drawing"
  1051. },
  1052. {
  1053. "typename": "System.Drawing.Color",
  1054. "assembly": "System.Drawing"
  1055. },
  1056. {
  1057. "typename": "System.Drawing.ContentAlignment",
  1058. "assembly": "System.Drawing"
  1059. },
  1060. {
  1061. "typename": "System.Drawing.Drawing2D.GraphicsPath",
  1062. "assembly": "System.Drawing"
  1063. },
  1064. {
  1065. "typename": "System.Drawing.Drawing2D.SmoothingMode",
  1066. "assembly": "System.Drawing"
  1067. },
  1068. {
  1069. "typename": "System.Drawing.Font",
  1070. "assembly": "System.Drawing"
  1071. },
  1072. {
  1073. "typename": "System.Drawing.FontStyle",
  1074. "assembly": "System.Drawing"
  1075. },
  1076. {
  1077. "typename": "System.Drawing.Graphics",
  1078. "assembly": "System.Drawing"
  1079. },
  1080. {
  1081. "typename": "System.Drawing.GraphicsUnit",
  1082. "assembly": "System.Drawing"
  1083. },
  1084. {
  1085. "typename": "System.Drawing.Icon",
  1086. "assembly": "System.Drawing"
  1087. },
  1088. {
  1089. "typename": "System.Drawing.Image",
  1090. "assembly": "System.Drawing"
  1091. },
  1092. {
  1093. "typename": "System.Drawing.Pen",
  1094. "assembly": "System.Drawing"
  1095. },
  1096. {
  1097. "typename": "System.Drawing.Point",
  1098. "assembly": "System.Drawing"
  1099. },
  1100. {
  1101. "typename": "System.Drawing.Size",
  1102. "assembly": "System.Drawing"
  1103. },
  1104. {
  1105. "typename": "System.Drawing.SizeF",
  1106. "assembly": "System.Drawing"
  1107. },
  1108. {
  1109. "typename": "System.Drawing.SolidBrush",
  1110. "assembly": "System.Drawing"
  1111. },
  1112. {
  1113. "typename": "System.Windows.Forms.Application",
  1114. "assembly": "System.Windows.Forms"
  1115. },
  1116. {
  1117. "typename": "System.Windows.Forms.AutoScaleMode",
  1118. "assembly": "System.Windows.Forms"
  1119. },
  1120. {
  1121. "typename": "System.Windows.Forms.AutoSizeMode",
  1122. "assembly": "System.Windows.Forms"
  1123. },
  1124. {
  1125. "typename": "System.Windows.Forms.BorderStyle",
  1126. "assembly": "System.Windows.Forms"
  1127. },
  1128. {
  1129. "typename": "System.Windows.Forms.Button",
  1130. "assembly": "System.Windows.Forms"
  1131. },
  1132. {
  1133. "typename": "System.Windows.Forms.ButtonBase",
  1134. "assembly": "System.Windows.Forms"
  1135. },
  1136. {
  1137. "typename": "System.Windows.Forms.CheckBox",
  1138. "assembly": "System.Windows.Forms"
  1139. },
  1140. {
  1141. "typename": "System.Windows.Forms.CheckedListBox",
  1142. "assembly": "System.Windows.Forms"
  1143. },
  1144. {
  1145. "typename": "System.Windows.Forms.ComboBox",
  1146. "assembly": "System.Windows.Forms"
  1147. },
  1148. {
  1149. "typename": "System.Windows.Forms.ContainerControl",
  1150. "assembly": "System.Windows.Forms"
  1151. },
  1152. {
  1153. "typename": "System.Windows.Forms.ContextMenuStrip",
  1154. "assembly": "System.Windows.Forms"
  1155. },
  1156. {
  1157. "typename": "System.Windows.Forms.Control",
  1158. "assembly": "System.Windows.Forms"
  1159. },
  1160. {
  1161. "typename": "System.Windows.Forms.Control/ControlCollection",
  1162. "assembly": "System.Windows.Forms"
  1163. },
  1164. {
  1165. "typename": "System.Windows.Forms.Cursor",
  1166. "assembly": "System.Windows.Forms"
  1167. },
  1168. {
  1169. "typename": "System.Windows.Forms.Cursors",
  1170. "assembly": "System.Windows.Forms"
  1171. },
  1172. {
  1173. "typename": "System.Windows.Forms.DateTimePicker",
  1174. "assembly": "System.Windows.Forms"
  1175. },
  1176. {
  1177. "typename": "System.Windows.Forms.DockStyle",
  1178. "assembly": "System.Windows.Forms"
  1179. },
  1180. {
  1181. "typename": "System.Windows.Forms.DomainUpDown",
  1182. "assembly": "System.Windows.Forms"
  1183. },
  1184. {
  1185. "typename": "System.Windows.Forms.FlatButtonAppearance",
  1186. "assembly": "System.Windows.Forms"
  1187. },
  1188. {
  1189. "typename": "System.Windows.Forms.FlatStyle",
  1190. "assembly": "System.Windows.Forms"
  1191. },
  1192. {
  1193. "typename": "System.Windows.Forms.Form",
  1194. "assembly": "System.Windows.Forms"
  1195. },
  1196. {
  1197. "typename": "System.Windows.Forms.FormBorderStyle",
  1198. "assembly": "System.Windows.Forms"
  1199. },
  1200. {
  1201. "typename": "System.Windows.Forms.GroupBox",
  1202. "assembly": "System.Windows.Forms"
  1203. },
  1204. {
  1205. "typename": "System.Windows.Forms.HScrollBar",
  1206. "assembly": "System.Windows.Forms"
  1207. },
  1208. {
  1209. "typename": "System.Windows.Forms.ImageLayout",
  1210. "assembly": "System.Windows.Forms"
  1211. },
  1212. {
  1213. "typename": "System.Windows.Forms.Label",
  1214. "assembly": "System.Windows.Forms"
  1215. },
  1216. {
  1217. "typename": "System.Windows.Forms.ListBox",
  1218. "assembly": "System.Windows.Forms"
  1219. },
  1220. {
  1221. "typename": "System.Windows.Forms.ListControl",
  1222. "assembly": "System.Windows.Forms"
  1223. },
  1224. {
  1225. "typename": "System.Windows.Forms.ListView",
  1226. "assembly": "System.Windows.Forms"
  1227. },
  1228. {
  1229. "typename": "System.Windows.Forms.MenuStrip",
  1230. "assembly": "System.Windows.Forms"
  1231. },
  1232. {
  1233. "typename": "System.Windows.Forms.MouseButtons",
  1234. "assembly": "System.Windows.Forms"
  1235. },
  1236. {
  1237. "typename": "System.Windows.Forms.MouseEventArgs",
  1238. "assembly": "System.Windows.Forms"
  1239. },
  1240. {
  1241. "typename": "System.Windows.Forms.MouseEventHandler",
  1242. "assembly": "System.Windows.Forms"
  1243. },
  1244. {
  1245. "typename": "System.Windows.Forms.NotifyIcon",
  1246. "assembly": "System.Windows.Forms"
  1247. },
  1248. {
  1249. "typename": "System.Windows.Forms.PaintEventArgs",
  1250. "assembly": "System.Windows.Forms"
  1251. },
  1252. {
  1253. "typename": "System.Windows.Forms.PaintEventHandler",
  1254. "assembly": "System.Windows.Forms"
  1255. },
  1256. {
  1257. "typename": "System.Windows.Forms.Panel",
  1258. "assembly": "System.Windows.Forms"
  1259. },
  1260. {
  1261. "typename": "System.Windows.Forms.PictureBox",
  1262. "assembly": "System.Windows.Forms"
  1263. },
  1264. {
  1265. "typename": "System.Windows.Forms.ProgressBar",
  1266. "assembly": "System.Windows.Forms"
  1267. },
  1268. {
  1269. "typename": "System.Windows.Forms.RichTextBox",
  1270. "assembly": "System.Windows.Forms"
  1271. },
  1272. {
  1273. "typename": "System.Windows.Forms.ScrollableControl",
  1274. "assembly": "System.Windows.Forms"
  1275. },
  1276. {
  1277. "typename": "System.Windows.Forms.Splitter",
  1278. "assembly": "System.Windows.Forms"
  1279. },
  1280. {
  1281. "typename": "System.Windows.Forms.TextBox",
  1282. "assembly": "System.Windows.Forms"
  1283. },
  1284. {
  1285. "typename": "System.Windows.Forms.Timer",
  1286. "assembly": "System.Windows.Forms"
  1287. },
  1288. {
  1289. "typename": "System.Windows.Forms.ToolStrip",
  1290. "assembly": "System.Windows.Forms"
  1291. },
  1292. {
  1293. "typename": "System.Windows.Forms.ToolStripItem",
  1294. "assembly": "System.Windows.Forms"
  1295. },
  1296. {
  1297. "typename": "System.Windows.Forms.ToolStripItemCollection",
  1298. "assembly": "System.Windows.Forms"
  1299. },
  1300. {
  1301. "typename": "System.Windows.Forms.ToolStripMenuItem",
  1302. "assembly": "System.Windows.Forms"
  1303. },
  1304. {
  1305. "typename": "System.Windows.Forms.UserControl",
  1306. "assembly": "System.Windows.Forms"
  1307. },
  1308. {
  1309. "typename": "System.Windows.Automation.AndCondition",
  1310. "assembly": "UIAutomationClient"
  1311. },
  1312. {
  1313. "typename": "System.Windows.Automation.AutomationElement",
  1314. "assembly": "UIAutomationClient"
  1315. },
  1316. {
  1317. "typename": "System.Windows.Automation.Condition",
  1318. "assembly": "UIAutomationClient"
  1319. },
  1320. {
  1321. "typename": "System.Windows.Automation.PropertyCondition",
  1322. "assembly": "UIAutomationClient"
  1323. },
  1324. {
  1325. "typename": "System.Windows.Automation.ValuePattern",
  1326. "assembly": "UIAutomationClient"
  1327. },
  1328. {
  1329. "typename": "System.Windows.Automation.ValuePattern/ValuePatternInformation",
  1330. "assembly": "UIAutomationClient"
  1331. },
  1332. {
  1333. "typename": "System.Windows.Automation.AutomationPattern",
  1334. "assembly": "UIAutomationTypes"
  1335. },
  1336. {
  1337. "typename": "System.Windows.Automation.AutomationProperty",
  1338. "assembly": "UIAutomationTypes"
  1339. },
  1340. {
  1341. "typename": "System.Windows.Automation.ControlType",
  1342. "assembly": "UIAutomationTypes"
  1343. },
  1344. {
  1345. "typename": "System.Windows.Automation.TreeScope",
  1346. "assembly": "UIAutomationTypes"
  1347. },
  1348. {
  1349. "typename": "System.AppDomain",
  1350. "assembly": "mscorlib"
  1351. },
  1352. {
  1353. "typename": "System.Array",
  1354. "assembly": "mscorlib"
  1355. },
  1356. {
  1357. "typename": "System.Boolean",
  1358. "assembly": "mscorlib"
  1359. },
  1360. {
  1361. "typename": "System.Byte",
  1362. "assembly": "mscorlib"
  1363. },
  1364. {
  1365. "typename": "System.Collections.Generic.IEnumerable`1",
  1366. "assembly": "mscorlib"
  1367. },
  1368. {
  1369. "typename": "System.Collections.Generic.IEnumerator`1",
  1370. "assembly": "mscorlib"
  1371. },
  1372. {
  1373. "typename": "System.Collections.Generic.List`1",
  1374. "assembly": "mscorlib"
  1375. },
  1376. {
  1377. "typename": "System.Collections.IEnumerator",
  1378. "assembly": "mscorlib"
  1379. },
  1380. {
  1381. "typename": "System.Console",
  1382. "assembly": "mscorlib"
  1383. },
  1384. {
  1385. "typename": "System.DateTime",
  1386. "assembly": "mscorlib"
  1387. },
  1388. {
  1389. "typename": "System.Diagnostics.DebuggableAttribute",
  1390. "assembly": "mscorlib"
  1391. },
  1392. {
  1393. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  1394. "assembly": "mscorlib"
  1395. },
  1396. {
  1397. "typename": "System.Diagnostics.DebuggerBrowsableAttribute",
  1398. "assembly": "mscorlib"
  1399. },
  1400. {
  1401. "typename": "System.Diagnostics.DebuggerBrowsableState",
  1402. "assembly": "mscorlib"
  1403. },
  1404. {
  1405. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  1406. "assembly": "mscorlib"
  1407. },
  1408. {
  1409. "typename": "System.Environment",
  1410. "assembly": "mscorlib"
  1411. },
  1412. {
  1413. "typename": "System.EventArgs",
  1414. "assembly": "mscorlib"
  1415. },
  1416. {
  1417. "typename": "System.EventHandler",
  1418. "assembly": "mscorlib"
  1419. },
  1420. {
  1421. "typename": "System.Func`2",
  1422. "assembly": "mscorlib"
  1423. },
  1424. {
  1425. "typename": "System.Globalization.CultureInfo",
  1426. "assembly": "mscorlib"
  1427. },
  1428. {
  1429. "typename": "System.IDisposable",
  1430. "assembly": "mscorlib"
  1431. },
  1432. {
  1433. "typename": "System.IO.FileMode",
  1434. "assembly": "mscorlib"
  1435. },
  1436. {
  1437. "typename": "System.IO.FileStream",
  1438. "assembly": "mscorlib"
  1439. },
  1440. {
  1441. "typename": "System.IO.Stream",
  1442. "assembly": "mscorlib"
  1443. },
  1444. {
  1445. "typename": "System.Int32",
  1446. "assembly": "mscorlib"
  1447. },
  1448. {
  1449. "typename": "System.IntPtr",
  1450. "assembly": "mscorlib"
  1451. },
  1452. {
  1453. "typename": "System.Nullable`1",
  1454. "assembly": "mscorlib"
  1455. },
  1456. {
  1457. "typename": "System.Object",
  1458. "assembly": "mscorlib"
  1459. },
  1460. {
  1461. "typename": "System.Predicate`1",
  1462. "assembly": "mscorlib"
  1463. },
  1464. {
  1465. "typename": "System.Reflection.Assembly",
  1466. "assembly": "mscorlib"
  1467. },
  1468. {
  1469. "typename": "System.Reflection.AssemblyCompanyAttribute",
  1470. "assembly": "mscorlib"
  1471. },
  1472. {
  1473. "typename": "System.Reflection.AssemblyConfigurationAttribute",
  1474. "assembly": "mscorlib"
  1475. },
  1476. {
  1477. "typename": "System.Reflection.AssemblyCopyrightAttribute",
  1478. "assembly": "mscorlib"
  1479. },
  1480. {
  1481. "typename": "System.Reflection.AssemblyDescriptionAttribute",
  1482. "assembly": "mscorlib"
  1483. },
  1484. {
  1485. "typename": "System.Reflection.AssemblyFileVersionAttribute",
  1486. "assembly": "mscorlib"
  1487. },
  1488. {
  1489. "typename": "System.Reflection.AssemblyProductAttribute",
  1490. "assembly": "mscorlib"
  1491. },
  1492. {
  1493. "typename": "System.Reflection.AssemblyTitleAttribute",
  1494. "assembly": "mscorlib"
  1495. },
  1496. {
  1497. "typename": "System.Reflection.AssemblyTrademarkAttribute",
  1498. "assembly": "mscorlib"
  1499. },
  1500. {
  1501. "typename": "System.ResolveEventArgs",
  1502. "assembly": "mscorlib"
  1503. },
  1504. {
  1505. "typename": "System.ResolveEventHandler",
  1506. "assembly": "mscorlib"
  1507. },
  1508. {
  1509. "typename": "System.Resources.ResourceManager",
  1510. "assembly": "mscorlib"
  1511. },
  1512. {
  1513. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  1514. "assembly": "mscorlib"
  1515. },
  1516. {
  1517. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  1518. "assembly": "mscorlib"
  1519. },
  1520. {
  1521. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  1522. "assembly": "mscorlib"
  1523. },
  1524. {
  1525. "typename": "System.Runtime.CompilerServices.RuntimeHelpers",
  1526. "assembly": "mscorlib"
  1527. },
  1528. {
  1529. "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
  1530. "assembly": "mscorlib"
  1531. },
  1532. {
  1533. "typename": "System.Runtime.InteropServices.GuidAttribute",
  1534. "assembly": "mscorlib"
  1535. },
  1536. {
  1537. "typename": "System.Runtime.Serialization.Formatters.Binary.BinaryFormatter",
  1538. "assembly": "mscorlib"
  1539. },
  1540. {
  1541. "typename": "System.Runtime.Versioning.TargetFrameworkAttribute",
  1542. "assembly": "mscorlib"
  1543. },
  1544. {
  1545. "typename": "System.RuntimeFieldHandle",
  1546. "assembly": "mscorlib"
  1547. },
  1548. {
  1549. "typename": "System.RuntimeTypeHandle",
  1550. "assembly": "mscorlib"
  1551. },
  1552. {
  1553. "typename": "System.STAThreadAttribute",
  1554. "assembly": "mscorlib"
  1555. },
  1556. {
  1557. "typename": "System.String",
  1558. "assembly": "mscorlib"
  1559. },
  1560. {
  1561. "typename": "System.Text.Encoding",
  1562. "assembly": "mscorlib"
  1563. },
  1564. {
  1565. "typename": "System.Threading.Thread",
  1566. "assembly": "mscorlib"
  1567. },
  1568. {
  1569. "typename": "System.Threading.ThreadStart",
  1570. "assembly": "mscorlib"
  1571. },
  1572. {
  1573. "typename": "System.TimeSpan",
  1574. "assembly": "mscorlib"
  1575. },
  1576. {
  1577. "typename": "System.Type",
  1578. "assembly": "mscorlib"
  1579. },
  1580. {
  1581. "typename": "System.ValueType",
  1582. "assembly": "mscorlib"
  1583. },
  1584. {
  1585. "typename": "QMujRbbqOZQGhsrGJHNvSnXD",
  1586. "assembly": "uhJqOlpFGUqcczqQfygKGUD"
  1587. }
  1588. ]
  1589. },
  1590. "pe": {
  1591. "peid_signatures": null,
  1592. "imports": [
  1593. {
  1594. "imports": [
  1595. {
  1596. "name": "_CorExeMain",
  1597. "address": "0x402000"
  1598. }
  1599. ],
  1600. "dll": "mscoree.dll"
  1601. }
  1602. ],
  1603. "digital_signers": null,
  1604. "exported_dll_name": null,
  1605. "actual_checksum": "0x000871b6",
  1606. "overlay": null,
  1607. "imagebase": "0x00400000",
  1608. "reported_checksum": "0x00000000",
  1609. "icon_hash": null,
  1610. "entrypoint": "0x00486a9e",
  1611. "timestamp": "2019-07-01 19:21:22",
  1612. "osversion": "4.0",
  1613. "sections": [
  1614. {
  1615. "name": ".text",
  1616. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  1617. "virtual_address": "0x00002000",
  1618. "size_of_data": "0x00084c00",
  1619. "entropy": "6.90",
  1620. "raw_address": "0x00000200",
  1621. "virtual_size": "0x00084aa4",
  1622. "characteristics_raw": "0x60000020"
  1623. },
  1624. {
  1625. "name": ".rsrc",
  1626. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  1627. "virtual_address": "0x00088000",
  1628. "size_of_data": "0x00000600",
  1629. "entropy": "4.10",
  1630. "raw_address": "0x00084e00",
  1631. "virtual_size": "0x000005b6",
  1632. "characteristics_raw": "0x40000040"
  1633. },
  1634. {
  1635. "name": ".reloc",
  1636. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  1637. "virtual_address": "0x0008a000",
  1638. "size_of_data": "0x00000200",
  1639. "entropy": "0.10",
  1640. "raw_address": "0x00085400",
  1641. "virtual_size": "0x0000000c",
  1642. "characteristics_raw": "0x42000040"
  1643. }
  1644. ],
  1645. "resources": [],
  1646. "dirents": [
  1647. {
  1648. "virtual_address": "0x00000000",
  1649. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  1650. "size": "0x00000000"
  1651. },
  1652. {
  1653. "virtual_address": "0x00086a4c",
  1654. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  1655. "size": "0x0000004f"
  1656. },
  1657. {
  1658. "virtual_address": "0x00088000",
  1659. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  1660. "size": "0x000005b6"
  1661. },
  1662. {
  1663. "virtual_address": "0x00000000",
  1664. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  1665. "size": "0x00000000"
  1666. },
  1667. {
  1668. "virtual_address": "0x00000000",
  1669. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  1670. "size": "0x00000000"
  1671. },
  1672. {
  1673. "virtual_address": "0x0008a000",
  1674. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  1675. "size": "0x0000000c"
  1676. },
  1677. {
  1678. "virtual_address": "0x000869dc",
  1679. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  1680. "size": "0x0000001c"
  1681. },
  1682. {
  1683. "virtual_address": "0x00000000",
  1684. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  1685. "size": "0x00000000"
  1686. },
  1687. {
  1688. "virtual_address": "0x00000000",
  1689. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  1690. "size": "0x00000000"
  1691. },
  1692. {
  1693. "virtual_address": "0x00000000",
  1694. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  1695. "size": "0x00000000"
  1696. },
  1697. {
  1698. "virtual_address": "0x00000000",
  1699. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  1700. "size": "0x00000000"
  1701. },
  1702. {
  1703. "virtual_address": "0x00000000",
  1704. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  1705. "size": "0x00000000"
  1706. },
  1707. {
  1708. "virtual_address": "0x00002000",
  1709. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  1710. "size": "0x00000008"
  1711. },
  1712. {
  1713. "virtual_address": "0x00000000",
  1714. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  1715. "size": "0x00000000"
  1716. },
  1717. {
  1718. "virtual_address": "0x00002008",
  1719. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  1720. "size": "0x00000048"
  1721. },
  1722. {
  1723. "virtual_address": "0x00000000",
  1724. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  1725. "size": "0x00000000"
  1726. }
  1727. ],
  1728. "exports": [],
  1729. "guest_signers": {},
  1730. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  1731. "icon_fuzzy": null,
  1732. "icon": null,
  1733. "pdbpath": "C:\\Users\\\\xd0\\x90\\xd0\\xb4\\xd0\\xbc\\xd0\\xb8\\xd0\\xbd\\xd0\\xb8\\xd1\\x81\\xd1\\x82\\xd1\\x80\\xd0\\xb0\\xd1\\x82\\xd0\\xbe\\xd1\\x80\\Desktop\\SmartHelper.pdb",
  1734. "imported_dll_count": 1,
  1735. "versioninfo": []
  1736. }
  1737. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!