API tools faq
paste
paladin316

HawkEye_8e18a1f99019327b8e1b519c00f93d9d_exe_2019-06-26_17_30.json

paladin316
Jun 26th, 2019
2,198
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 38.73 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: ""
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "HawkEye_8e18a1f99019327b8e1b519c00f93d9d.exe"
  7. [*] File Size: 541184
  8. [*] File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
  9. [*] SHA256: "ca3cca4a8fcc613f3b289dbaebf2df790bdd71d712121dd263e460e9763f2a2d"
  10. [*] MD5: "8e18a1f99019327b8e1b519c00f93d9d"
  11. [*] SHA1: "4c54c2c2e7c062683b6f1713f9fdcc2b9554c037"
  12. [*] SHA512: "995dd97c9f824c758f0738130fc873c02b95ed5d1bebfe51fb39b32ef58cae00485cca6b14481706b153f71decd2dd13bf943fa5dce9378427c75849a980cb9f"
  13. [*] CRC32: "57F6A8CB"
  14. [*] SSDEEP: "12288:3fcvy6esKEwer296dFMX7vo6MU+RxciaQczbBZE:3fcOz9zM3P2"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: [
  19. {
  20. "Description": "The binary likely contains encrypted or compressed data.",
  21. "Details": [
  22. {
  23. "section": "name: .text, entropy: 7.97, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x00083800, virtual_size: 0x00083644"
  24. }
  25. ]
  26. },
  27. {
  28. "Description": "File has been identified by 42 Antiviruses on VirusTotal as malicious",
  29. "Details": [
  30. {
  31. "MicroWorld-eScan": "Gen:Variant.Ser.MSILPerseus.1032"
  32. },
  33. {
  34. "McAfee": "RDN/Generic.dx"
  35. },
  36. {
  37. "Cylance": "Unsafe"
  38. },
  39. {
  40. "BitDefender": "Gen:Variant.Ser.MSILPerseus.1032"
  41. },
  42. {
  43. "Invincea": "heuristic"
  44. },
  45. {
  46. "Symantec": "Trojan.Gen.MBT"
  47. },
  48. {
  49. "APEX": "Malicious"
  50. },
  51. {
  52. "Avast": "Win32:TrojanX-gen [Trj]"
  53. },
  54. {
  55. "Kaspersky": "HEUR:Trojan.MSIL.APosT.gen"
  56. },
  57. {
  58. "Alibaba": "Trojan:Win32/Starter.ali2000005"
  59. },
  60. {
  61. "AegisLab": "Trojan.MSIL.APosT.4!c"
  62. },
  63. {
  64. "Rising": "Trojan.Kryptik!8.8 (CLOUD)"
  65. },
  66. {
  67. "Emsisoft": "Gen:Variant.Ser.MSILPerseus.1032 (B)"
  68. },
  69. {
  70. "DrWeb": "Trojan.Packed2.41525"
  71. },
  72. {
  73. "VIPRE": "Trojan.Win32.Generic!BT"
  74. },
  75. {
  76. "TrendMicro": "TROJ_GEN.R020C0WFJ19"
  77. },
  78. {
  79. "McAfee-GW-Edition": "BehavesLike.Win32.Generic.hc"
  80. },
  81. {
  82. "Fortinet": "MSIL/Kryptik.QME!tr"
  83. },
  84. {
  85. "FireEye": "Generic.mg.8e18a1f99019327b"
  86. },
  87. {
  88. "Sophos": "Mal/Generic-S"
  89. },
  90. {
  91. "Ikarus": "Trojan.MSIL.Crypt"
  92. },
  93. {
  94. "Avira": "HEUR/AGEN.1035809"
  95. },
  96. {
  97. "MAX": "malware (ai score=100)"
  98. },
  99. {
  100. "Arcabit": "Trojan.Ser.MSILPerseus.D408"
  101. },
  102. {
  103. "ZoneAlarm": "HEUR:Trojan.MSIL.APosT.gen"
  104. },
  105. {
  106. "Microsoft": "Trojan:Win32/Tiggre!rfn"
  107. },
  108. {
  109. "AhnLab-V3": "Trojan/Win32.Kryptik.C3296235"
  110. },
  111. {
  112. "Acronis": "suspicious"
  113. },
  114. {
  115. "ALYac": "Gen:Variant.Ser.MSILPerseus.1032"
  116. },
  117. {
  118. "Ad-Aware": "Gen:Variant.Ser.MSILPerseus.1032"
  119. },
  120. {
  121. "Malwarebytes": "Backdoor.AveMaria.Generic"
  122. },
  123. {
  124. "Panda": "Trj/GdSda.A"
  125. },
  126. {
  127. "ESET-NOD32": "a variant of MSIL/Kryptik.QME"
  128. },
  129. {
  130. "TrendMicro-HouseCall": "TROJ_GEN.R020C0WFJ19"
  131. },
  132. {
  133. "Tencent": "Win32.Trojan.Inject.Auto"
  134. },
  135. {
  136. "SentinelOne": "DFI - Malicious PE"
  137. },
  138. {
  139. "GData": "Win32.Trojan-Spy.Heye.8YXCJH"
  140. },
  141. {
  142. "AVG": "Win32:TrojanX-gen [Trj]"
  143. },
  144. {
  145. "Cybereason": "malicious.2e7c06"
  146. },
  147. {
  148. "Paloalto": "generic.ml"
  149. },
  150. {
  151. "CrowdStrike": "win/malicious_confidence_90% (W)"
  152. },
  153. {
  154. "Qihoo-360": "HEUR/QVM03.0.03EB.Malware.Gen"
  155. }
  156. ]
  157. }
  158. ]
  159.  
  160. [*] Started Service: []
  161.  
  162. [*] Executed Commands: []
  163.  
  164. [*] Mutexes: []
  165.  
  166. [*] Modified Files: []
  167.  
  168. [*] Deleted Files: []
  169.  
  170. [*] Modified Registry Keys: []
  171.  
  172. [*] Deleted Registry Keys: []
  173.  
  174. [*] DNS Communications: []
  175.  
  176. [*] Domains: []
  177.  
  178. [*] Network Communication - ICMP: []
  179.  
  180. [*] Network Communication - HTTP: []
  181.  
  182. [*] Network Communication - SMTP: []
  183.  
  184. [*] Network Communication - Hosts: []
  185.  
  186. [*] Network Communication - IRC: []
  187.  
  188. [*] Static Analysis: {
  189. "dotnet": {
  190. "customattrs": null,
  191. "assemblyinfo": {
  192. "version": "1.0.0.0",
  193. "name": "TreskRunner"
  194. },
  195. "assemblyrefs": [
  196. {
  197. "version": "2.0.0.0",
  198. "name": "mscorlib"
  199. },
  200. {
  201. "version": "2.0.0.0",
  202. "name": "System.Windows.Forms"
  203. },
  204. {
  205. "version": "2.0.0.0",
  206. "name": "System"
  207. },
  208. {
  209. "version": "2.0.0.0",
  210. "name": "System.Drawing"
  211. }
  212. ],
  213. "typerefs": [
  214. {
  215. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  216. "assembly": "System"
  217. },
  218. {
  219. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  220. "assembly": "System"
  221. },
  222. {
  223. "typename": "System.ComponentModel.EditorBrowsableState",
  224. "assembly": "System"
  225. },
  226. {
  227. "typename": "System.ComponentModel.IContainer",
  228. "assembly": "System"
  229. },
  230. {
  231. "typename": "System.Configuration.ApplicationSettingsBase",
  232. "assembly": "System"
  233. },
  234. {
  235. "typename": "System.Configuration.SettingsBase",
  236. "assembly": "System"
  237. },
  238. {
  239. "typename": "System.Drawing.Point",
  240. "assembly": "System.Drawing"
  241. },
  242. {
  243. "typename": "System.Drawing.Size",
  244. "assembly": "System.Drawing"
  245. },
  246. {
  247. "typename": "System.Drawing.SizeF",
  248. "assembly": "System.Drawing"
  249. },
  250. {
  251. "typename": "System.Windows.Forms.Application",
  252. "assembly": "System.Windows.Forms"
  253. },
  254. {
  255. "typename": "System.Windows.Forms.AutoScaleMode",
  256. "assembly": "System.Windows.Forms"
  257. },
  258. {
  259. "typename": "System.Windows.Forms.Button",
  260. "assembly": "System.Windows.Forms"
  261. },
  262. {
  263. "typename": "System.Windows.Forms.ButtonBase",
  264. "assembly": "System.Windows.Forms"
  265. },
  266. {
  267. "typename": "System.Windows.Forms.CommonDialog",
  268. "assembly": "System.Windows.Forms"
  269. },
  270. {
  271. "typename": "System.Windows.Forms.ContainerControl",
  272. "assembly": "System.Windows.Forms"
  273. },
  274. {
  275. "typename": "System.Windows.Forms.Control",
  276. "assembly": "System.Windows.Forms"
  277. },
  278. {
  279. "typename": "System.Windows.Forms.Control/ControlCollection",
  280. "assembly": "System.Windows.Forms"
  281. },
  282. {
  283. "typename": "System.Windows.Forms.DialogResult",
  284. "assembly": "System.Windows.Forms"
  285. },
  286. {
  287. "typename": "System.Windows.Forms.FileDialog",
  288. "assembly": "System.Windows.Forms"
  289. },
  290. {
  291. "typename": "System.Windows.Forms.Form",
  292. "assembly": "System.Windows.Forms"
  293. },
  294. {
  295. "typename": "System.Windows.Forms.GroupBox",
  296. "assembly": "System.Windows.Forms"
  297. },
  298. {
  299. "typename": "System.Windows.Forms.ListView",
  300. "assembly": "System.Windows.Forms"
  301. },
  302. {
  303. "typename": "System.Windows.Forms.ListView/ListViewItemCollection",
  304. "assembly": "System.Windows.Forms"
  305. },
  306. {
  307. "typename": "System.Windows.Forms.ListViewItem",
  308. "assembly": "System.Windows.Forms"
  309. },
  310. {
  311. "typename": "System.Windows.Forms.OpenFileDialog",
  312. "assembly": "System.Windows.Forms"
  313. },
  314. {
  315. "typename": "System.Windows.Forms.TextBox",
  316. "assembly": "System.Windows.Forms"
  317. },
  318. {
  319. "typename": "System.Action`1",
  320. "assembly": "mscorlib"
  321. },
  322. {
  323. "typename": "System.Activator",
  324. "assembly": "mscorlib"
  325. },
  326. {
  327. "typename": "System.ArgumentNullException",
  328. "assembly": "mscorlib"
  329. },
  330. {
  331. "typename": "System.Array",
  332. "assembly": "mscorlib"
  333. },
  334. {
  335. "typename": "System.Attribute",
  336. "assembly": "mscorlib"
  337. },
  338. {
  339. "typename": "System.BadImageFormatException",
  340. "assembly": "mscorlib"
  341. },
  342. {
  343. "typename": "System.Byte",
  344. "assembly": "mscorlib"
  345. },
  346. {
  347. "typename": "System.Collections.DictionaryEntry",
  348. "assembly": "mscorlib"
  349. },
  350. {
  351. "typename": "System.Collections.Generic.Dictionary`2",
  352. "assembly": "mscorlib"
  353. },
  354. {
  355. "typename": "System.Collections.Generic.IEnumerable`1",
  356. "assembly": "mscorlib"
  357. },
  358. {
  359. "typename": "System.Collections.Generic.IEnumerator`1",
  360. "assembly": "mscorlib"
  361. },
  362. {
  363. "typename": "System.Collections.Generic.List`1",
  364. "assembly": "mscorlib"
  365. },
  366. {
  367. "typename": "System.Collections.Generic.List`1/Enumerator",
  368. "assembly": "mscorlib"
  369. },
  370. {
  371. "typename": "System.Collections.ICollection",
  372. "assembly": "mscorlib"
  373. },
  374. {
  375. "typename": "System.Collections.IDictionaryEnumerator",
  376. "assembly": "mscorlib"
  377. },
  378. {
  379. "typename": "System.Collections.IEnumerable",
  380. "assembly": "mscorlib"
  381. },
  382. {
  383. "typename": "System.Collections.IEnumerator",
  384. "assembly": "mscorlib"
  385. },
  386. {
  387. "typename": "System.Collections.IList",
  388. "assembly": "mscorlib"
  389. },
  390. {
  391. "typename": "System.Delegate",
  392. "assembly": "mscorlib"
  393. },
  394. {
  395. "typename": "System.Diagnostics.DebuggableAttribute",
  396. "assembly": "mscorlib"
  397. },
  398. {
  399. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  400. "assembly": "mscorlib"
  401. },
  402. {
  403. "typename": "System.Diagnostics.DebuggerHiddenAttribute",
  404. "assembly": "mscorlib"
  405. },
  406. {
  407. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  408. "assembly": "mscorlib"
  409. },
  410. {
  411. "typename": "System.Environment",
  412. "assembly": "mscorlib"
  413. },
  414. {
  415. "typename": "System.EventArgs",
  416. "assembly": "mscorlib"
  417. },
  418. {
  419. "typename": "System.EventHandler",
  420. "assembly": "mscorlib"
  421. },
  422. {
  423. "typename": "System.Globalization.CultureInfo",
  424. "assembly": "mscorlib"
  425. },
  426. {
  427. "typename": "System.IDisposable",
  428. "assembly": "mscorlib"
  429. },
  430. {
  431. "typename": "System.IO.MemoryStream",
  432. "assembly": "mscorlib"
  433. },
  434. {
  435. "typename": "System.IO.SeekOrigin",
  436. "assembly": "mscorlib"
  437. },
  438. {
  439. "typename": "System.IO.Stream",
  440. "assembly": "mscorlib"
  441. },
  442. {
  443. "typename": "System.IO.StreamReader",
  444. "assembly": "mscorlib"
  445. },
  446. {
  447. "typename": "System.IO.TextReader",
  448. "assembly": "mscorlib"
  449. },
  450. {
  451. "typename": "System.NotSupportedException",
  452. "assembly": "mscorlib"
  453. },
  454. {
  455. "typename": "System.Object",
  456. "assembly": "mscorlib"
  457. },
  458. {
  459. "typename": "System.Predicate`1",
  460. "assembly": "mscorlib"
  461. },
  462. {
  463. "typename": "System.Random",
  464. "assembly": "mscorlib"
  465. },
  466. {
  467. "typename": "System.Reflection.Assembly",
  468. "assembly": "mscorlib"
  469. },
  470. {
  471. "typename": "System.Reflection.AssemblyCompanyAttribute",
  472. "assembly": "mscorlib"
  473. },
  474. {
  475. "typename": "System.Reflection.AssemblyConfigurationAttribute",
  476. "assembly": "mscorlib"
  477. },
  478. {
  479. "typename": "System.Reflection.AssemblyCopyrightAttribute",
  480. "assembly": "mscorlib"
  481. },
  482. {
  483. "typename": "System.Reflection.AssemblyDescriptionAttribute",
  484. "assembly": "mscorlib"
  485. },
  486. {
  487. "typename": "System.Reflection.AssemblyFileVersionAttribute",
  488. "assembly": "mscorlib"
  489. },
  490. {
  491. "typename": "System.Reflection.AssemblyProductAttribute",
  492. "assembly": "mscorlib"
  493. },
  494. {
  495. "typename": "System.Reflection.AssemblyTitleAttribute",
  496. "assembly": "mscorlib"
  497. },
  498. {
  499. "typename": "System.Reflection.AssemblyTrademarkAttribute",
  500. "assembly": "mscorlib"
  501. },
  502. {
  503. "typename": "System.Resources.ResourceManager",
  504. "assembly": "mscorlib"
  505. },
  506. {
  507. "typename": "System.Resources.ResourceSet",
  508. "assembly": "mscorlib"
  509. },
  510. {
  511. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  512. "assembly": "mscorlib"
  513. },
  514. {
  515. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  516. "assembly": "mscorlib"
  517. },
  518. {
  519. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  520. "assembly": "mscorlib"
  521. },
  522. {
  523. "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
  524. "assembly": "mscorlib"
  525. },
  526. {
  527. "typename": "System.Runtime.InteropServices.GuidAttribute",
  528. "assembly": "mscorlib"
  529. },
  530. {
  531. "typename": "System.RuntimeTypeHandle",
  532. "assembly": "mscorlib"
  533. },
  534. {
  535. "typename": "System.STAThreadAttribute",
  536. "assembly": "mscorlib"
  537. },
  538. {
  539. "typename": "System.Security.UnverifiableCodeAttribute",
  540. "assembly": "mscorlib"
  541. },
  542. {
  543. "typename": "System.Threading.Monitor",
  544. "assembly": "mscorlib"
  545. },
  546. {
  547. "typename": "System.Threading.Thread",
  548. "assembly": "mscorlib"
  549. },
  550. {
  551. "typename": "System.Threading.ThreadStart",
  552. "assembly": "mscorlib"
  553. },
  554. {
  555. "typename": "System.Type",
  556. "assembly": "mscorlib"
  557. }
  558. ]
  559. },
  560. "pe": {
  561. "peid_signatures": null,
  562. "imports": [
  563. {
  564. "imports": [
  565. {
  566. "name": "_CorExeMain",
  567. "address": "0x402000"
  568. }
  569. ],
  570. "dll": "mscoree.dll"
  571. }
  572. ],
  573. "digital_signers": null,
  574. "exported_dll_name": null,
  575. "actual_checksum": "0x0009025a",
  576. "overlay": null,
  577. "imagebase": "0x00400000",
  578. "reported_checksum": "0x0009025a",
  579. "icon_hash": null,
  580. "entrypoint": "0x0048563e",
  581. "timestamp": "2019-06-09 13:25:33",
  582. "osversion": "4.0",
  583. "sections": [
  584. {
  585. "name": ".text",
  586. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  587. "virtual_address": "0x00002000",
  588. "size_of_data": "0x00083800",
  589. "entropy": "7.97",
  590. "raw_address": "0x00000200",
  591. "virtual_size": "0x00083644",
  592. "characteristics_raw": "0x60000020"
  593. },
  594. {
  595. "name": ".rsrc",
  596. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  597. "virtual_address": "0x00086000",
  598. "size_of_data": "0x00000600",
  599. "entropy": "4.13",
  600. "raw_address": "0x00083a00",
  601. "virtual_size": "0x000005d0",
  602. "characteristics_raw": "0x40000040"
  603. },
  604. {
  605. "name": ".reloc",
  606. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  607. "virtual_address": "0x00088000",
  608. "size_of_data": "0x00000200",
  609. "entropy": "0.10",
  610. "raw_address": "0x00084000",
  611. "virtual_size": "0x0000000c",
  612. "characteristics_raw": "0x42000040"
  613. }
  614. ],
  615. "resources": [],
  616. "dirents": [
  617. {
  618. "virtual_address": "0x00000000",
  619. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  620. "size": "0x00000000"
  621. },
  622. {
  623. "virtual_address": "0x000855f0",
  624. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  625. "size": "0x0000004b"
  626. },
  627. {
  628. "virtual_address": "0x00086000",
  629. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  630. "size": "0x000005d0"
  631. },
  632. {
  633. "virtual_address": "0x00000000",
  634. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  635. "size": "0x00000000"
  636. },
  637. {
  638. "virtual_address": "0x00000000",
  639. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  640. "size": "0x00000000"
  641. },
  642. {
  643. "virtual_address": "0x00088000",
  644. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  645. "size": "0x0000000c"
  646. },
  647. {
  648. "virtual_address": "0x00000000",
  649. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  650. "size": "0x00000000"
  651. },
  652. {
  653. "virtual_address": "0x00000000",
  654. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  655. "size": "0x00000000"
  656. },
  657. {
  658. "virtual_address": "0x00000000",
  659. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  660. "size": "0x00000000"
  661. },
  662. {
  663. "virtual_address": "0x00000000",
  664. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  665. "size": "0x00000000"
  666. },
  667. {
  668. "virtual_address": "0x00000000",
  669. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  670. "size": "0x00000000"
  671. },
  672. {
  673. "virtual_address": "0x00000000",
  674. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  675. "size": "0x00000000"
  676. },
  677. {
  678. "virtual_address": "0x00002000",
  679. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  680. "size": "0x00000008"
  681. },
  682. {
  683. "virtual_address": "0x00000000",
  684. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  685. "size": "0x00000000"
  686. },
  687. {
  688. "virtual_address": "0x00002008",
  689. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  690. "size": "0x00000048"
  691. },
  692. {
  693. "virtual_address": "0x00000000",
  694. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  695. "size": "0x00000000"
  696. }
  697. ],
  698. "exports": [],
  699. "guest_signers": {},
  700. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  701. "icon_fuzzy": null,
  702. "icon": null,
  703. "pdbpath": null,
  704. "imported_dll_count": 1,
  705. "versioninfo": []
  706. }
  707. }
  708.  
  709. [*] Resolved APIs: []
  710.  
  711. [*] Static Analysis: {
  712. "dotnet": {
  713. "customattrs": null,
  714. "assemblyinfo": {
  715. "version": "1.0.0.0",
  716. "name": "TreskRunner"
  717. },
  718. "assemblyrefs": [
  719. {
  720. "version": "2.0.0.0",
  721. "name": "mscorlib"
  722. },
  723. {
  724. "version": "2.0.0.0",
  725. "name": "System.Windows.Forms"
  726. },
  727. {
  728. "version": "2.0.0.0",
  729. "name": "System"
  730. },
  731. {
  732. "version": "2.0.0.0",
  733. "name": "System.Drawing"
  734. }
  735. ],
  736. "typerefs": [
  737. {
  738. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  739. "assembly": "System"
  740. },
  741. {
  742. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  743. "assembly": "System"
  744. },
  745. {
  746. "typename": "System.ComponentModel.EditorBrowsableState",
  747. "assembly": "System"
  748. },
  749. {
  750. "typename": "System.ComponentModel.IContainer",
  751. "assembly": "System"
  752. },
  753. {
  754. "typename": "System.Configuration.ApplicationSettingsBase",
  755. "assembly": "System"
  756. },
  757. {
  758. "typename": "System.Configuration.SettingsBase",
  759. "assembly": "System"
  760. },
  761. {
  762. "typename": "System.Drawing.Point",
  763. "assembly": "System.Drawing"
  764. },
  765. {
  766. "typename": "System.Drawing.Size",
  767. "assembly": "System.Drawing"
  768. },
  769. {
  770. "typename": "System.Drawing.SizeF",
  771. "assembly": "System.Drawing"
  772. },
  773. {
  774. "typename": "System.Windows.Forms.Application",
  775. "assembly": "System.Windows.Forms"
  776. },
  777. {
  778. "typename": "System.Windows.Forms.AutoScaleMode",
  779. "assembly": "System.Windows.Forms"
  780. },
  781. {
  782. "typename": "System.Windows.Forms.Button",
  783. "assembly": "System.Windows.Forms"
  784. },
  785. {
  786. "typename": "System.Windows.Forms.ButtonBase",
  787. "assembly": "System.Windows.Forms"
  788. },
  789. {
  790. "typename": "System.Windows.Forms.CommonDialog",
  791. "assembly": "System.Windows.Forms"
  792. },
  793. {
  794. "typename": "System.Windows.Forms.ContainerControl",
  795. "assembly": "System.Windows.Forms"
  796. },
  797. {
  798. "typename": "System.Windows.Forms.Control",
  799. "assembly": "System.Windows.Forms"
  800. },
  801. {
  802. "typename": "System.Windows.Forms.Control/ControlCollection",
  803. "assembly": "System.Windows.Forms"
  804. },
  805. {
  806. "typename": "System.Windows.Forms.DialogResult",
  807. "assembly": "System.Windows.Forms"
  808. },
  809. {
  810. "typename": "System.Windows.Forms.FileDialog",
  811. "assembly": "System.Windows.Forms"
  812. },
  813. {
  814. "typename": "System.Windows.Forms.Form",
  815. "assembly": "System.Windows.Forms"
  816. },
  817. {
  818. "typename": "System.Windows.Forms.GroupBox",
  819. "assembly": "System.Windows.Forms"
  820. },
  821. {
  822. "typename": "System.Windows.Forms.ListView",
  823. "assembly": "System.Windows.Forms"
  824. },
  825. {
  826. "typename": "System.Windows.Forms.ListView/ListViewItemCollection",
  827. "assembly": "System.Windows.Forms"
  828. },
  829. {
  830. "typename": "System.Windows.Forms.ListViewItem",
  831. "assembly": "System.Windows.Forms"
  832. },
  833. {
  834. "typename": "System.Windows.Forms.OpenFileDialog",
  835. "assembly": "System.Windows.Forms"
  836. },
  837. {
  838. "typename": "System.Windows.Forms.TextBox",
  839. "assembly": "System.Windows.Forms"
  840. },
  841. {
  842. "typename": "System.Action`1",
  843. "assembly": "mscorlib"
  844. },
  845. {
  846. "typename": "System.Activator",
  847. "assembly": "mscorlib"
  848. },
  849. {
  850. "typename": "System.ArgumentNullException",
  851. "assembly": "mscorlib"
  852. },
  853. {
  854. "typename": "System.Array",
  855. "assembly": "mscorlib"
  856. },
  857. {
  858. "typename": "System.Attribute",
  859. "assembly": "mscorlib"
  860. },
  861. {
  862. "typename": "System.BadImageFormatException",
  863. "assembly": "mscorlib"
  864. },
  865. {
  866. "typename": "System.Byte",
  867. "assembly": "mscorlib"
  868. },
  869. {
  870. "typename": "System.Collections.DictionaryEntry",
  871. "assembly": "mscorlib"
  872. },
  873. {
  874. "typename": "System.Collections.Generic.Dictionary`2",
  875. "assembly": "mscorlib"
  876. },
  877. {
  878. "typename": "System.Collections.Generic.IEnumerable`1",
  879. "assembly": "mscorlib"
  880. },
  881. {
  882. "typename": "System.Collections.Generic.IEnumerator`1",
  883. "assembly": "mscorlib"
  884. },
  885. {
  886. "typename": "System.Collections.Generic.List`1",
  887. "assembly": "mscorlib"
  888. },
  889. {
  890. "typename": "System.Collections.Generic.List`1/Enumerator",
  891. "assembly": "mscorlib"
  892. },
  893. {
  894. "typename": "System.Collections.ICollection",
  895. "assembly": "mscorlib"
  896. },
  897. {
  898. "typename": "System.Collections.IDictionaryEnumerator",
  899. "assembly": "mscorlib"
  900. },
  901. {
  902. "typename": "System.Collections.IEnumerable",
  903. "assembly": "mscorlib"
  904. },
  905. {
  906. "typename": "System.Collections.IEnumerator",
  907. "assembly": "mscorlib"
  908. },
  909. {
  910. "typename": "System.Collections.IList",
  911. "assembly": "mscorlib"
  912. },
  913. {
  914. "typename": "System.Delegate",
  915. "assembly": "mscorlib"
  916. },
  917. {
  918. "typename": "System.Diagnostics.DebuggableAttribute",
  919. "assembly": "mscorlib"
  920. },
  921. {
  922. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  923. "assembly": "mscorlib"
  924. },
  925. {
  926. "typename": "System.Diagnostics.DebuggerHiddenAttribute",
  927. "assembly": "mscorlib"
  928. },
  929. {
  930. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  931. "assembly": "mscorlib"
  932. },
  933. {
  934. "typename": "System.Environment",
  935. "assembly": "mscorlib"
  936. },
  937. {
  938. "typename": "System.EventArgs",
  939. "assembly": "mscorlib"
  940. },
  941. {
  942. "typename": "System.EventHandler",
  943. "assembly": "mscorlib"
  944. },
  945. {
  946. "typename": "System.Globalization.CultureInfo",
  947. "assembly": "mscorlib"
  948. },
  949. {
  950. "typename": "System.IDisposable",
  951. "assembly": "mscorlib"
  952. },
  953. {
  954. "typename": "System.IO.MemoryStream",
  955. "assembly": "mscorlib"
  956. },
  957. {
  958. "typename": "System.IO.SeekOrigin",
  959. "assembly": "mscorlib"
  960. },
  961. {
  962. "typename": "System.IO.Stream",
  963. "assembly": "mscorlib"
  964. },
  965. {
  966. "typename": "System.IO.StreamReader",
  967. "assembly": "mscorlib"
  968. },
  969. {
  970. "typename": "System.IO.TextReader",
  971. "assembly": "mscorlib"
  972. },
  973. {
  974. "typename": "System.NotSupportedException",
  975. "assembly": "mscorlib"
  976. },
  977. {
  978. "typename": "System.Object",
  979. "assembly": "mscorlib"
  980. },
  981. {
  982. "typename": "System.Predicate`1",
  983. "assembly": "mscorlib"
  984. },
  985. {
  986. "typename": "System.Random",
  987. "assembly": "mscorlib"
  988. },
  989. {
  990. "typename": "System.Reflection.Assembly",
  991. "assembly": "mscorlib"
  992. },
  993. {
  994. "typename": "System.Reflection.AssemblyCompanyAttribute",
  995. "assembly": "mscorlib"
  996. },
  997. {
  998. "typename": "System.Reflection.AssemblyConfigurationAttribute",
  999. "assembly": "mscorlib"
  1000. },
  1001. {
  1002. "typename": "System.Reflection.AssemblyCopyrightAttribute",
  1003. "assembly": "mscorlib"
  1004. },
  1005. {
  1006. "typename": "System.Reflection.AssemblyDescriptionAttribute",
  1007. "assembly": "mscorlib"
  1008. },
  1009. {
  1010. "typename": "System.Reflection.AssemblyFileVersionAttribute",
  1011. "assembly": "mscorlib"
  1012. },
  1013. {
  1014. "typename": "System.Reflection.AssemblyProductAttribute",
  1015. "assembly": "mscorlib"
  1016. },
  1017. {
  1018. "typename": "System.Reflection.AssemblyTitleAttribute",
  1019. "assembly": "mscorlib"
  1020. },
  1021. {
  1022. "typename": "System.Reflection.AssemblyTrademarkAttribute",
  1023. "assembly": "mscorlib"
  1024. },
  1025. {
  1026. "typename": "System.Resources.ResourceManager",
  1027. "assembly": "mscorlib"
  1028. },
  1029. {
  1030. "typename": "System.Resources.ResourceSet",
  1031. "assembly": "mscorlib"
  1032. },
  1033. {
  1034. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  1035. "assembly": "mscorlib"
  1036. },
  1037. {
  1038. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  1039. "assembly": "mscorlib"
  1040. },
  1041. {
  1042. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  1043. "assembly": "mscorlib"
  1044. },
  1045. {
  1046. "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
  1047. "assembly": "mscorlib"
  1048. },
  1049. {
  1050. "typename": "System.Runtime.InteropServices.GuidAttribute",
  1051. "assembly": "mscorlib"
  1052. },
  1053. {
  1054. "typename": "System.RuntimeTypeHandle",
  1055. "assembly": "mscorlib"
  1056. },
  1057. {
  1058. "typename": "System.STAThreadAttribute",
  1059. "assembly": "mscorlib"
  1060. },
  1061. {
  1062. "typename": "System.Security.UnverifiableCodeAttribute",
  1063. "assembly": "mscorlib"
  1064. },
  1065. {
  1066. "typename": "System.Threading.Monitor",
  1067. "assembly": "mscorlib"
  1068. },
  1069. {
  1070. "typename": "System.Threading.Thread",
  1071. "assembly": "mscorlib"
  1072. },
  1073. {
  1074. "typename": "System.Threading.ThreadStart",
  1075. "assembly": "mscorlib"
  1076. },
  1077. {
  1078. "typename": "System.Type",
  1079. "assembly": "mscorlib"
  1080. }
  1081. ]
  1082. },
  1083. "pe": {
  1084. "peid_signatures": null,
  1085. "imports": [
  1086. {
  1087. "imports": [
  1088. {
  1089. "name": "_CorExeMain",
  1090. "address": "0x402000"
  1091. }
  1092. ],
  1093. "dll": "mscoree.dll"
  1094. }
  1095. ],
  1096. "digital_signers": null,
  1097. "exported_dll_name": null,
  1098. "actual_checksum": "0x0009025a",
  1099. "overlay": null,
  1100. "imagebase": "0x00400000",
  1101. "reported_checksum": "0x0009025a",
  1102. "icon_hash": null,
  1103. "entrypoint": "0x0048563e",
  1104. "timestamp": "2019-06-09 13:25:33",
  1105. "osversion": "4.0",
  1106. "sections": [
  1107. {
  1108. "name": ".text",
  1109. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  1110. "virtual_address": "0x00002000",
  1111. "size_of_data": "0x00083800",
  1112. "entropy": "7.97",
  1113. "raw_address": "0x00000200",
  1114. "virtual_size": "0x00083644",
  1115. "characteristics_raw": "0x60000020"
  1116. },
  1117. {
  1118. "name": ".rsrc",
  1119. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  1120. "virtual_address": "0x00086000",
  1121. "size_of_data": "0x00000600",
  1122. "entropy": "4.13",
  1123. "raw_address": "0x00083a00",
  1124. "virtual_size": "0x000005d0",
  1125. "characteristics_raw": "0x40000040"
  1126. },
  1127. {
  1128. "name": ".reloc",
  1129. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  1130. "virtual_address": "0x00088000",
  1131. "size_of_data": "0x00000200",
  1132. "entropy": "0.10",
  1133. "raw_address": "0x00084000",
  1134. "virtual_size": "0x0000000c",
  1135. "characteristics_raw": "0x42000040"
  1136. }
  1137. ],
  1138. "resources": [],
  1139. "dirents": [
  1140. {
  1141. "virtual_address": "0x00000000",
  1142. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  1143. "size": "0x00000000"
  1144. },
  1145. {
  1146. "virtual_address": "0x000855f0",
  1147. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  1148. "size": "0x0000004b"
  1149. },
  1150. {
  1151. "virtual_address": "0x00086000",
  1152. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  1153. "size": "0x000005d0"
  1154. },
  1155. {
  1156. "virtual_address": "0x00000000",
  1157. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  1158. "size": "0x00000000"
  1159. },
  1160. {
  1161. "virtual_address": "0x00000000",
  1162. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  1163. "size": "0x00000000"
  1164. },
  1165. {
  1166. "virtual_address": "0x00088000",
  1167. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  1168. "size": "0x0000000c"
  1169. },
  1170. {
  1171. "virtual_address": "0x00000000",
  1172. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  1173. "size": "0x00000000"
  1174. },
  1175. {
  1176. "virtual_address": "0x00000000",
  1177. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  1178. "size": "0x00000000"
  1179. },
  1180. {
  1181. "virtual_address": "0x00000000",
  1182. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  1183. "size": "0x00000000"
  1184. },
  1185. {
  1186. "virtual_address": "0x00000000",
  1187. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  1188. "size": "0x00000000"
  1189. },
  1190. {
  1191. "virtual_address": "0x00000000",
  1192. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  1193. "size": "0x00000000"
  1194. },
  1195. {
  1196. "virtual_address": "0x00000000",
  1197. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  1198. "size": "0x00000000"
  1199. },
  1200. {
  1201. "virtual_address": "0x00002000",
  1202. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  1203. "size": "0x00000008"
  1204. },
  1205. {
  1206. "virtual_address": "0x00000000",
  1207. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  1208. "size": "0x00000000"
  1209. },
  1210. {
  1211. "virtual_address": "0x00002008",
  1212. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  1213. "size": "0x00000048"
  1214. },
  1215. {
  1216. "virtual_address": "0x00000000",
  1217. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  1218. "size": "0x00000000"
  1219. }
  1220. ],
  1221. "exports": [],
  1222. "guest_signers": {},
  1223. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  1224. "icon_fuzzy": null,
  1225. "icon": null,
  1226. "pdbpath": null,
  1227. "imported_dll_count": 1,
  1228. "versioninfo": []
  1229. }
  1230. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!