API tools faq
paste
paladin316

Exes_d95e742c460b3ae2f17142916c4b38cd_exe_2019-07-03_05_30.json

paladin316
Jul 3rd, 2019
2,163
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 37.68 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: ""
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_d95e742c460b3ae2f17142916c4b38cd.exe"
  7. [*] File Size: 576000
  8. [*] File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
  9. [*] SHA256: "45f9131d6419a4c39443f2abb91e8ba2b476b4df2ba216cc517b92b706240539"
  10. [*] MD5: "d95e742c460b3ae2f17142916c4b38cd"
  11. [*] SHA1: "f6ca18f19b578866e5990c160c98b5c9a1e74260"
  12. [*] SHA512: "36f86b93b9e953c24ecaeaeaab9b477fca65b4f6a5b62741b3ed658b21c5b575449b7f452b61ec21674f0e8ff170654b2a28a0269281c5b504f03ed6469ad92a"
  13. [*] CRC32: "20F4F940"
  14. [*] SSDEEP: "12288:CHGX0us7l8iEX3RVqHH02PgxXcbAyoWpqK0+2YPKxUzht:rX0u1X3TqHxP6zyo1+hKx"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: [
  19. {
  20. "Description": "The binary likely contains encrypted or compressed data.",
  21. "Details": [
  22. {
  23. "section": "name: .text, entropy: 7.99, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x0008c000, virtual_size: 0x0008bf74"
  24. }
  25. ]
  26. },
  27. {
  28. "Description": "File has been identified by 25 Antiviruses on VirusTotal as malicious",
  29. "Details": [
  30. {
  31. "FireEye": "Generic.mg.d95e742c460b3ae2"
  32. },
  33. {
  34. "McAfee": "Artemis!D95E742C460B"
  35. },
  36. {
  37. "Alibaba": "Backdoor:MSIL/Kryptik.b112223e"
  38. },
  39. {
  40. "Symantec": "ML.Attribute.HighConfidence"
  41. },
  42. {
  43. "ESET-NOD32": "a variant of MSIL/Kryptik.QME"
  44. },
  45. {
  46. "APEX": "Malicious"
  47. },
  48. {
  49. "Paloalto": "generic.ml"
  50. },
  51. {
  52. "Kaspersky": "HEUR:Backdoor.MSIL.Androm.gen"
  53. },
  54. {
  55. "Tencent": "Win32.Trojan.Inject.Auto"
  56. },
  57. {
  58. "F-Secure": "Heuristic.HEUR/AGEN.1035809"
  59. },
  60. {
  61. "Invincea": "heuristic"
  62. },
  63. {
  64. "McAfee-GW-Edition": "BehavesLike.Win32.Generic.hc"
  65. },
  66. {
  67. "Trapmine": "malicious.moderate.ml.score"
  68. },
  69. {
  70. "SentinelOne": "DFI - Malicious PE"
  71. },
  72. {
  73. "Avira": "HEUR/AGEN.1035809"
  74. },
  75. {
  76. "Endgame": "malicious (high confidence)"
  77. },
  78. {
  79. "Microsoft": "Trojan:Win32/Fuerboos.C!cl"
  80. },
  81. {
  82. "AegisLab": "Trojan.MSIL.Androm.4!c"
  83. },
  84. {
  85. "ZoneAlarm": "HEUR:Backdoor.MSIL.Androm.gen"
  86. },
  87. {
  88. "Acronis": "suspicious"
  89. },
  90. {
  91. "Rising": "Backdoor.Androm!8.113 (CLOUD)"
  92. },
  93. {
  94. "AVG": "Win32:CrypterX-gen [Trj]"
  95. },
  96. {
  97. "Cybereason": "malicious.19b578"
  98. },
  99. {
  100. "CrowdStrike": "win/malicious_confidence_90% (W)"
  101. },
  102. {
  103. "Qihoo-360": "Win32/Backdoor.9cf"
  104. }
  105. ]
  106. }
  107. ]
  108.  
  109. [*] Started Service: []
  110.  
  111. [*] Executed Commands: []
  112.  
  113. [*] Mutexes: []
  114.  
  115. [*] Modified Files: []
  116.  
  117. [*] Deleted Files: []
  118.  
  119. [*] Modified Registry Keys: []
  120.  
  121. [*] Deleted Registry Keys: []
  122.  
  123. [*] DNS Communications: []
  124.  
  125. [*] Domains: []
  126.  
  127. [*] Network Communication - ICMP: []
  128.  
  129. [*] Network Communication - HTTP: []
  130.  
  131. [*] Network Communication - SMTP: []
  132.  
  133. [*] Network Communication - Hosts: []
  134.  
  135. [*] Network Communication - IRC: []
  136.  
  137. [*] Static Analysis: {
  138. "dotnet": {
  139. "customattrs": null,
  140. "assemblyinfo": {
  141. "version": "1.0.0.0",
  142. "name": "DarkTableSched"
  143. },
  144. "assemblyrefs": [
  145. {
  146. "version": "2.0.0.0",
  147. "name": "mscorlib"
  148. },
  149. {
  150. "version": "2.0.0.0",
  151. "name": "System.Windows.Forms"
  152. },
  153. {
  154. "version": "2.0.0.0",
  155. "name": "System"
  156. },
  157. {
  158. "version": "2.0.0.0",
  159. "name": "System.Drawing"
  160. }
  161. ],
  162. "typerefs": [
  163. {
  164. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  165. "assembly": "System"
  166. },
  167. {
  168. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  169. "assembly": "System"
  170. },
  171. {
  172. "typename": "System.ComponentModel.EditorBrowsableState",
  173. "assembly": "System"
  174. },
  175. {
  176. "typename": "System.ComponentModel.IContainer",
  177. "assembly": "System"
  178. },
  179. {
  180. "typename": "System.Configuration.ApplicationSettingsBase",
  181. "assembly": "System"
  182. },
  183. {
  184. "typename": "System.Configuration.SettingsBase",
  185. "assembly": "System"
  186. },
  187. {
  188. "typename": "System.Drawing.Point",
  189. "assembly": "System.Drawing"
  190. },
  191. {
  192. "typename": "System.Drawing.Size",
  193. "assembly": "System.Drawing"
  194. },
  195. {
  196. "typename": "System.Drawing.SizeF",
  197. "assembly": "System.Drawing"
  198. },
  199. {
  200. "typename": "System.Windows.Forms.Application",
  201. "assembly": "System.Windows.Forms"
  202. },
  203. {
  204. "typename": "System.Windows.Forms.AutoScaleMode",
  205. "assembly": "System.Windows.Forms"
  206. },
  207. {
  208. "typename": "System.Windows.Forms.Button",
  209. "assembly": "System.Windows.Forms"
  210. },
  211. {
  212. "typename": "System.Windows.Forms.ButtonBase",
  213. "assembly": "System.Windows.Forms"
  214. },
  215. {
  216. "typename": "System.Windows.Forms.CommonDialog",
  217. "assembly": "System.Windows.Forms"
  218. },
  219. {
  220. "typename": "System.Windows.Forms.ContainerControl",
  221. "assembly": "System.Windows.Forms"
  222. },
  223. {
  224. "typename": "System.Windows.Forms.Control",
  225. "assembly": "System.Windows.Forms"
  226. },
  227. {
  228. "typename": "System.Windows.Forms.Control/ControlCollection",
  229. "assembly": "System.Windows.Forms"
  230. },
  231. {
  232. "typename": "System.Windows.Forms.DialogResult",
  233. "assembly": "System.Windows.Forms"
  234. },
  235. {
  236. "typename": "System.Windows.Forms.FileDialog",
  237. "assembly": "System.Windows.Forms"
  238. },
  239. {
  240. "typename": "System.Windows.Forms.Form",
  241. "assembly": "System.Windows.Forms"
  242. },
  243. {
  244. "typename": "System.Windows.Forms.GroupBox",
  245. "assembly": "System.Windows.Forms"
  246. },
  247. {
  248. "typename": "System.Windows.Forms.ListView",
  249. "assembly": "System.Windows.Forms"
  250. },
  251. {
  252. "typename": "System.Windows.Forms.ListView/ListViewItemCollection",
  253. "assembly": "System.Windows.Forms"
  254. },
  255. {
  256. "typename": "System.Windows.Forms.ListViewItem",
  257. "assembly": "System.Windows.Forms"
  258. },
  259. {
  260. "typename": "System.Windows.Forms.OpenFileDialog",
  261. "assembly": "System.Windows.Forms"
  262. },
  263. {
  264. "typename": "System.Windows.Forms.TextBox",
  265. "assembly": "System.Windows.Forms"
  266. },
  267. {
  268. "typename": "System.Windows.Forms.TextBoxBase",
  269. "assembly": "System.Windows.Forms"
  270. },
  271. {
  272. "typename": "System.Action`1",
  273. "assembly": "mscorlib"
  274. },
  275. {
  276. "typename": "System.Activator",
  277. "assembly": "mscorlib"
  278. },
  279. {
  280. "typename": "System.ArgumentNullException",
  281. "assembly": "mscorlib"
  282. },
  283. {
  284. "typename": "System.Array",
  285. "assembly": "mscorlib"
  286. },
  287. {
  288. "typename": "System.Attribute",
  289. "assembly": "mscorlib"
  290. },
  291. {
  292. "typename": "System.BadImageFormatException",
  293. "assembly": "mscorlib"
  294. },
  295. {
  296. "typename": "System.Byte",
  297. "assembly": "mscorlib"
  298. },
  299. {
  300. "typename": "System.Collections.DictionaryEntry",
  301. "assembly": "mscorlib"
  302. },
  303. {
  304. "typename": "System.Collections.Generic.Dictionary`2",
  305. "assembly": "mscorlib"
  306. },
  307. {
  308. "typename": "System.Collections.Generic.IEnumerable`1",
  309. "assembly": "mscorlib"
  310. },
  311. {
  312. "typename": "System.Collections.Generic.IEnumerator`1",
  313. "assembly": "mscorlib"
  314. },
  315. {
  316. "typename": "System.Collections.Generic.List`1",
  317. "assembly": "mscorlib"
  318. },
  319. {
  320. "typename": "System.Collections.Generic.List`1/Enumerator",
  321. "assembly": "mscorlib"
  322. },
  323. {
  324. "typename": "System.Collections.ICollection",
  325. "assembly": "mscorlib"
  326. },
  327. {
  328. "typename": "System.Collections.IDictionaryEnumerator",
  329. "assembly": "mscorlib"
  330. },
  331. {
  332. "typename": "System.Collections.IEnumerable",
  333. "assembly": "mscorlib"
  334. },
  335. {
  336. "typename": "System.Collections.IEnumerator",
  337. "assembly": "mscorlib"
  338. },
  339. {
  340. "typename": "System.Collections.IList",
  341. "assembly": "mscorlib"
  342. },
  343. {
  344. "typename": "System.Delegate",
  345. "assembly": "mscorlib"
  346. },
  347. {
  348. "typename": "System.Diagnostics.DebuggableAttribute",
  349. "assembly": "mscorlib"
  350. },
  351. {
  352. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  353. "assembly": "mscorlib"
  354. },
  355. {
  356. "typename": "System.Diagnostics.DebuggerHiddenAttribute",
  357. "assembly": "mscorlib"
  358. },
  359. {
  360. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  361. "assembly": "mscorlib"
  362. },
  363. {
  364. "typename": "System.Environment",
  365. "assembly": "mscorlib"
  366. },
  367. {
  368. "typename": "System.EventArgs",
  369. "assembly": "mscorlib"
  370. },
  371. {
  372. "typename": "System.EventHandler",
  373. "assembly": "mscorlib"
  374. },
  375. {
  376. "typename": "System.Globalization.CultureInfo",
  377. "assembly": "mscorlib"
  378. },
  379. {
  380. "typename": "System.IDisposable",
  381. "assembly": "mscorlib"
  382. },
  383. {
  384. "typename": "System.IO.MemoryStream",
  385. "assembly": "mscorlib"
  386. },
  387. {
  388. "typename": "System.IO.SeekOrigin",
  389. "assembly": "mscorlib"
  390. },
  391. {
  392. "typename": "System.IO.Stream",
  393. "assembly": "mscorlib"
  394. },
  395. {
  396. "typename": "System.IO.StreamReader",
  397. "assembly": "mscorlib"
  398. },
  399. {
  400. "typename": "System.IO.TextReader",
  401. "assembly": "mscorlib"
  402. },
  403. {
  404. "typename": "System.NotSupportedException",
  405. "assembly": "mscorlib"
  406. },
  407. {
  408. "typename": "System.Object",
  409. "assembly": "mscorlib"
  410. },
  411. {
  412. "typename": "System.Predicate`1",
  413. "assembly": "mscorlib"
  414. },
  415. {
  416. "typename": "System.Random",
  417. "assembly": "mscorlib"
  418. },
  419. {
  420. "typename": "System.Reflection.Assembly",
  421. "assembly": "mscorlib"
  422. },
  423. {
  424. "typename": "System.Reflection.AssemblyCompanyAttribute",
  425. "assembly": "mscorlib"
  426. },
  427. {
  428. "typename": "System.Reflection.AssemblyConfigurationAttribute",
  429. "assembly": "mscorlib"
  430. },
  431. {
  432. "typename": "System.Reflection.AssemblyCopyrightAttribute",
  433. "assembly": "mscorlib"
  434. },
  435. {
  436. "typename": "System.Reflection.AssemblyDescriptionAttribute",
  437. "assembly": "mscorlib"
  438. },
  439. {
  440. "typename": "System.Reflection.AssemblyFileVersionAttribute",
  441. "assembly": "mscorlib"
  442. },
  443. {
  444. "typename": "System.Reflection.AssemblyProductAttribute",
  445. "assembly": "mscorlib"
  446. },
  447. {
  448. "typename": "System.Reflection.AssemblyTitleAttribute",
  449. "assembly": "mscorlib"
  450. },
  451. {
  452. "typename": "System.Reflection.AssemblyTrademarkAttribute",
  453. "assembly": "mscorlib"
  454. },
  455. {
  456. "typename": "System.Resources.ResourceManager",
  457. "assembly": "mscorlib"
  458. },
  459. {
  460. "typename": "System.Resources.ResourceSet",
  461. "assembly": "mscorlib"
  462. },
  463. {
  464. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  465. "assembly": "mscorlib"
  466. },
  467. {
  468. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  469. "assembly": "mscorlib"
  470. },
  471. {
  472. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  473. "assembly": "mscorlib"
  474. },
  475. {
  476. "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
  477. "assembly": "mscorlib"
  478. },
  479. {
  480. "typename": "System.Runtime.InteropServices.GuidAttribute",
  481. "assembly": "mscorlib"
  482. },
  483. {
  484. "typename": "System.RuntimeTypeHandle",
  485. "assembly": "mscorlib"
  486. },
  487. {
  488. "typename": "System.STAThreadAttribute",
  489. "assembly": "mscorlib"
  490. },
  491. {
  492. "typename": "System.Security.UnverifiableCodeAttribute",
  493. "assembly": "mscorlib"
  494. },
  495. {
  496. "typename": "System.Threading.Monitor",
  497. "assembly": "mscorlib"
  498. },
  499. {
  500. "typename": "System.Threading.Thread",
  501. "assembly": "mscorlib"
  502. },
  503. {
  504. "typename": "System.Threading.ThreadStart",
  505. "assembly": "mscorlib"
  506. },
  507. {
  508. "typename": "System.Type",
  509. "assembly": "mscorlib"
  510. }
  511. ]
  512. },
  513. "pe": {
  514. "peid_signatures": null,
  515. "imports": [
  516. {
  517. "imports": [
  518. {
  519. "name": "_CorExeMain",
  520. "address": "0x402000"
  521. }
  522. ],
  523. "dll": "mscoree.dll"
  524. }
  525. ],
  526. "digital_signers": null,
  527. "exported_dll_name": null,
  528. "actual_checksum": "0x0008ed47",
  529. "overlay": null,
  530. "imagebase": "0x00400000",
  531. "reported_checksum": "0x0008ed47",
  532. "icon_hash": null,
  533. "entrypoint": "0x0048df6e",
  534. "timestamp": "2019-06-23 14:05:52",
  535. "osversion": "4.0",
  536. "sections": [
  537. {
  538. "name": ".text",
  539. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  540. "virtual_address": "0x00002000",
  541. "size_of_data": "0x0008c000",
  542. "entropy": "7.99",
  543. "raw_address": "0x00000200",
  544. "virtual_size": "0x0008bf74",
  545. "characteristics_raw": "0x60000020"
  546. },
  547. {
  548. "name": ".rsrc",
  549. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  550. "virtual_address": "0x0008e000",
  551. "size_of_data": "0x00000600",
  552. "entropy": "4.19",
  553. "raw_address": "0x0008c200",
  554. "virtual_size": "0x000005f0",
  555. "characteristics_raw": "0x40000040"
  556. },
  557. {
  558. "name": ".reloc",
  559. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  560. "virtual_address": "0x00090000",
  561. "size_of_data": "0x00000200",
  562. "entropy": "0.10",
  563. "raw_address": "0x0008c800",
  564. "virtual_size": "0x0000000c",
  565. "characteristics_raw": "0x42000040"
  566. }
  567. ],
  568. "resources": [],
  569. "dirents": [
  570. {
  571. "virtual_address": "0x00000000",
  572. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  573. "size": "0x00000000"
  574. },
  575. {
  576. "virtual_address": "0x0008df18",
  577. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  578. "size": "0x00000053"
  579. },
  580. {
  581. "virtual_address": "0x0008e000",
  582. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  583. "size": "0x000005f0"
  584. },
  585. {
  586. "virtual_address": "0x00000000",
  587. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  588. "size": "0x00000000"
  589. },
  590. {
  591. "virtual_address": "0x00000000",
  592. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  593. "size": "0x00000000"
  594. },
  595. {
  596. "virtual_address": "0x00090000",
  597. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  598. "size": "0x0000000c"
  599. },
  600. {
  601. "virtual_address": "0x00000000",
  602. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  603. "size": "0x00000000"
  604. },
  605. {
  606. "virtual_address": "0x00000000",
  607. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  608. "size": "0x00000000"
  609. },
  610. {
  611. "virtual_address": "0x00000000",
  612. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  613. "size": "0x00000000"
  614. },
  615. {
  616. "virtual_address": "0x00000000",
  617. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  618. "size": "0x00000000"
  619. },
  620. {
  621. "virtual_address": "0x00000000",
  622. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  623. "size": "0x00000000"
  624. },
  625. {
  626. "virtual_address": "0x00000000",
  627. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  628. "size": "0x00000000"
  629. },
  630. {
  631. "virtual_address": "0x00002000",
  632. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  633. "size": "0x00000008"
  634. },
  635. {
  636. "virtual_address": "0x00000000",
  637. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  638. "size": "0x00000000"
  639. },
  640. {
  641. "virtual_address": "0x00002008",
  642. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  643. "size": "0x00000048"
  644. },
  645. {
  646. "virtual_address": "0x00000000",
  647. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  648. "size": "0x00000000"
  649. }
  650. ],
  651. "exports": [],
  652. "guest_signers": {},
  653. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  654. "icon_fuzzy": null,
  655. "icon": null,
  656. "pdbpath": null,
  657. "imported_dll_count": 1,
  658. "versioninfo": []
  659. }
  660. }
  661.  
  662. [*] Resolved APIs: []
  663.  
  664. [*] Static Analysis: {
  665. "dotnet": {
  666. "customattrs": null,
  667. "assemblyinfo": {
  668. "version": "1.0.0.0",
  669. "name": "DarkTableSched"
  670. },
  671. "assemblyrefs": [
  672. {
  673. "version": "2.0.0.0",
  674. "name": "mscorlib"
  675. },
  676. {
  677. "version": "2.0.0.0",
  678. "name": "System.Windows.Forms"
  679. },
  680. {
  681. "version": "2.0.0.0",
  682. "name": "System"
  683. },
  684. {
  685. "version": "2.0.0.0",
  686. "name": "System.Drawing"
  687. }
  688. ],
  689. "typerefs": [
  690. {
  691. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  692. "assembly": "System"
  693. },
  694. {
  695. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  696. "assembly": "System"
  697. },
  698. {
  699. "typename": "System.ComponentModel.EditorBrowsableState",
  700. "assembly": "System"
  701. },
  702. {
  703. "typename": "System.ComponentModel.IContainer",
  704. "assembly": "System"
  705. },
  706. {
  707. "typename": "System.Configuration.ApplicationSettingsBase",
  708. "assembly": "System"
  709. },
  710. {
  711. "typename": "System.Configuration.SettingsBase",
  712. "assembly": "System"
  713. },
  714. {
  715. "typename": "System.Drawing.Point",
  716. "assembly": "System.Drawing"
  717. },
  718. {
  719. "typename": "System.Drawing.Size",
  720. "assembly": "System.Drawing"
  721. },
  722. {
  723. "typename": "System.Drawing.SizeF",
  724. "assembly": "System.Drawing"
  725. },
  726. {
  727. "typename": "System.Windows.Forms.Application",
  728. "assembly": "System.Windows.Forms"
  729. },
  730. {
  731. "typename": "System.Windows.Forms.AutoScaleMode",
  732. "assembly": "System.Windows.Forms"
  733. },
  734. {
  735. "typename": "System.Windows.Forms.Button",
  736. "assembly": "System.Windows.Forms"
  737. },
  738. {
  739. "typename": "System.Windows.Forms.ButtonBase",
  740. "assembly": "System.Windows.Forms"
  741. },
  742. {
  743. "typename": "System.Windows.Forms.CommonDialog",
  744. "assembly": "System.Windows.Forms"
  745. },
  746. {
  747. "typename": "System.Windows.Forms.ContainerControl",
  748. "assembly": "System.Windows.Forms"
  749. },
  750. {
  751. "typename": "System.Windows.Forms.Control",
  752. "assembly": "System.Windows.Forms"
  753. },
  754. {
  755. "typename": "System.Windows.Forms.Control/ControlCollection",
  756. "assembly": "System.Windows.Forms"
  757. },
  758. {
  759. "typename": "System.Windows.Forms.DialogResult",
  760. "assembly": "System.Windows.Forms"
  761. },
  762. {
  763. "typename": "System.Windows.Forms.FileDialog",
  764. "assembly": "System.Windows.Forms"
  765. },
  766. {
  767. "typename": "System.Windows.Forms.Form",
  768. "assembly": "System.Windows.Forms"
  769. },
  770. {
  771. "typename": "System.Windows.Forms.GroupBox",
  772. "assembly": "System.Windows.Forms"
  773. },
  774. {
  775. "typename": "System.Windows.Forms.ListView",
  776. "assembly": "System.Windows.Forms"
  777. },
  778. {
  779. "typename": "System.Windows.Forms.ListView/ListViewItemCollection",
  780. "assembly": "System.Windows.Forms"
  781. },
  782. {
  783. "typename": "System.Windows.Forms.ListViewItem",
  784. "assembly": "System.Windows.Forms"
  785. },
  786. {
  787. "typename": "System.Windows.Forms.OpenFileDialog",
  788. "assembly": "System.Windows.Forms"
  789. },
  790. {
  791. "typename": "System.Windows.Forms.TextBox",
  792. "assembly": "System.Windows.Forms"
  793. },
  794. {
  795. "typename": "System.Windows.Forms.TextBoxBase",
  796. "assembly": "System.Windows.Forms"
  797. },
  798. {
  799. "typename": "System.Action`1",
  800. "assembly": "mscorlib"
  801. },
  802. {
  803. "typename": "System.Activator",
  804. "assembly": "mscorlib"
  805. },
  806. {
  807. "typename": "System.ArgumentNullException",
  808. "assembly": "mscorlib"
  809. },
  810. {
  811. "typename": "System.Array",
  812. "assembly": "mscorlib"
  813. },
  814. {
  815. "typename": "System.Attribute",
  816. "assembly": "mscorlib"
  817. },
  818. {
  819. "typename": "System.BadImageFormatException",
  820. "assembly": "mscorlib"
  821. },
  822. {
  823. "typename": "System.Byte",
  824. "assembly": "mscorlib"
  825. },
  826. {
  827. "typename": "System.Collections.DictionaryEntry",
  828. "assembly": "mscorlib"
  829. },
  830. {
  831. "typename": "System.Collections.Generic.Dictionary`2",
  832. "assembly": "mscorlib"
  833. },
  834. {
  835. "typename": "System.Collections.Generic.IEnumerable`1",
  836. "assembly": "mscorlib"
  837. },
  838. {
  839. "typename": "System.Collections.Generic.IEnumerator`1",
  840. "assembly": "mscorlib"
  841. },
  842. {
  843. "typename": "System.Collections.Generic.List`1",
  844. "assembly": "mscorlib"
  845. },
  846. {
  847. "typename": "System.Collections.Generic.List`1/Enumerator",
  848. "assembly": "mscorlib"
  849. },
  850. {
  851. "typename": "System.Collections.ICollection",
  852. "assembly": "mscorlib"
  853. },
  854. {
  855. "typename": "System.Collections.IDictionaryEnumerator",
  856. "assembly": "mscorlib"
  857. },
  858. {
  859. "typename": "System.Collections.IEnumerable",
  860. "assembly": "mscorlib"
  861. },
  862. {
  863. "typename": "System.Collections.IEnumerator",
  864. "assembly": "mscorlib"
  865. },
  866. {
  867. "typename": "System.Collections.IList",
  868. "assembly": "mscorlib"
  869. },
  870. {
  871. "typename": "System.Delegate",
  872. "assembly": "mscorlib"
  873. },
  874. {
  875. "typename": "System.Diagnostics.DebuggableAttribute",
  876. "assembly": "mscorlib"
  877. },
  878. {
  879. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  880. "assembly": "mscorlib"
  881. },
  882. {
  883. "typename": "System.Diagnostics.DebuggerHiddenAttribute",
  884. "assembly": "mscorlib"
  885. },
  886. {
  887. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  888. "assembly": "mscorlib"
  889. },
  890. {
  891. "typename": "System.Environment",
  892. "assembly": "mscorlib"
  893. },
  894. {
  895. "typename": "System.EventArgs",
  896. "assembly": "mscorlib"
  897. },
  898. {
  899. "typename": "System.EventHandler",
  900. "assembly": "mscorlib"
  901. },
  902. {
  903. "typename": "System.Globalization.CultureInfo",
  904. "assembly": "mscorlib"
  905. },
  906. {
  907. "typename": "System.IDisposable",
  908. "assembly": "mscorlib"
  909. },
  910. {
  911. "typename": "System.IO.MemoryStream",
  912. "assembly": "mscorlib"
  913. },
  914. {
  915. "typename": "System.IO.SeekOrigin",
  916. "assembly": "mscorlib"
  917. },
  918. {
  919. "typename": "System.IO.Stream",
  920. "assembly": "mscorlib"
  921. },
  922. {
  923. "typename": "System.IO.StreamReader",
  924. "assembly": "mscorlib"
  925. },
  926. {
  927. "typename": "System.IO.TextReader",
  928. "assembly": "mscorlib"
  929. },
  930. {
  931. "typename": "System.NotSupportedException",
  932. "assembly": "mscorlib"
  933. },
  934. {
  935. "typename": "System.Object",
  936. "assembly": "mscorlib"
  937. },
  938. {
  939. "typename": "System.Predicate`1",
  940. "assembly": "mscorlib"
  941. },
  942. {
  943. "typename": "System.Random",
  944. "assembly": "mscorlib"
  945. },
  946. {
  947. "typename": "System.Reflection.Assembly",
  948. "assembly": "mscorlib"
  949. },
  950. {
  951. "typename": "System.Reflection.AssemblyCompanyAttribute",
  952. "assembly": "mscorlib"
  953. },
  954. {
  955. "typename": "System.Reflection.AssemblyConfigurationAttribute",
  956. "assembly": "mscorlib"
  957. },
  958. {
  959. "typename": "System.Reflection.AssemblyCopyrightAttribute",
  960. "assembly": "mscorlib"
  961. },
  962. {
  963. "typename": "System.Reflection.AssemblyDescriptionAttribute",
  964. "assembly": "mscorlib"
  965. },
  966. {
  967. "typename": "System.Reflection.AssemblyFileVersionAttribute",
  968. "assembly": "mscorlib"
  969. },
  970. {
  971. "typename": "System.Reflection.AssemblyProductAttribute",
  972. "assembly": "mscorlib"
  973. },
  974. {
  975. "typename": "System.Reflection.AssemblyTitleAttribute",
  976. "assembly": "mscorlib"
  977. },
  978. {
  979. "typename": "System.Reflection.AssemblyTrademarkAttribute",
  980. "assembly": "mscorlib"
  981. },
  982. {
  983. "typename": "System.Resources.ResourceManager",
  984. "assembly": "mscorlib"
  985. },
  986. {
  987. "typename": "System.Resources.ResourceSet",
  988. "assembly": "mscorlib"
  989. },
  990. {
  991. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  992. "assembly": "mscorlib"
  993. },
  994. {
  995. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  996. "assembly": "mscorlib"
  997. },
  998. {
  999. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  1000. "assembly": "mscorlib"
  1001. },
  1002. {
  1003. "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
  1004. "assembly": "mscorlib"
  1005. },
  1006. {
  1007. "typename": "System.Runtime.InteropServices.GuidAttribute",
  1008. "assembly": "mscorlib"
  1009. },
  1010. {
  1011. "typename": "System.RuntimeTypeHandle",
  1012. "assembly": "mscorlib"
  1013. },
  1014. {
  1015. "typename": "System.STAThreadAttribute",
  1016. "assembly": "mscorlib"
  1017. },
  1018. {
  1019. "typename": "System.Security.UnverifiableCodeAttribute",
  1020. "assembly": "mscorlib"
  1021. },
  1022. {
  1023. "typename": "System.Threading.Monitor",
  1024. "assembly": "mscorlib"
  1025. },
  1026. {
  1027. "typename": "System.Threading.Thread",
  1028. "assembly": "mscorlib"
  1029. },
  1030. {
  1031. "typename": "System.Threading.ThreadStart",
  1032. "assembly": "mscorlib"
  1033. },
  1034. {
  1035. "typename": "System.Type",
  1036. "assembly": "mscorlib"
  1037. }
  1038. ]
  1039. },
  1040. "pe": {
  1041. "peid_signatures": null,
  1042. "imports": [
  1043. {
  1044. "imports": [
  1045. {
  1046. "name": "_CorExeMain",
  1047. "address": "0x402000"
  1048. }
  1049. ],
  1050. "dll": "mscoree.dll"
  1051. }
  1052. ],
  1053. "digital_signers": null,
  1054. "exported_dll_name": null,
  1055. "actual_checksum": "0x0008ed47",
  1056. "overlay": null,
  1057. "imagebase": "0x00400000",
  1058. "reported_checksum": "0x0008ed47",
  1059. "icon_hash": null,
  1060. "entrypoint": "0x0048df6e",
  1061. "timestamp": "2019-06-23 14:05:52",
  1062. "osversion": "4.0",
  1063. "sections": [
  1064. {
  1065. "name": ".text",
  1066. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  1067. "virtual_address": "0x00002000",
  1068. "size_of_data": "0x0008c000",
  1069. "entropy": "7.99",
  1070. "raw_address": "0x00000200",
  1071. "virtual_size": "0x0008bf74",
  1072. "characteristics_raw": "0x60000020"
  1073. },
  1074. {
  1075. "name": ".rsrc",
  1076. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  1077. "virtual_address": "0x0008e000",
  1078. "size_of_data": "0x00000600",
  1079. "entropy": "4.19",
  1080. "raw_address": "0x0008c200",
  1081. "virtual_size": "0x000005f0",
  1082. "characteristics_raw": "0x40000040"
  1083. },
  1084. {
  1085. "name": ".reloc",
  1086. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  1087. "virtual_address": "0x00090000",
  1088. "size_of_data": "0x00000200",
  1089. "entropy": "0.10",
  1090. "raw_address": "0x0008c800",
  1091. "virtual_size": "0x0000000c",
  1092. "characteristics_raw": "0x42000040"
  1093. }
  1094. ],
  1095. "resources": [],
  1096. "dirents": [
  1097. {
  1098. "virtual_address": "0x00000000",
  1099. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  1100. "size": "0x00000000"
  1101. },
  1102. {
  1103. "virtual_address": "0x0008df18",
  1104. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  1105. "size": "0x00000053"
  1106. },
  1107. {
  1108. "virtual_address": "0x0008e000",
  1109. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  1110. "size": "0x000005f0"
  1111. },
  1112. {
  1113. "virtual_address": "0x00000000",
  1114. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  1115. "size": "0x00000000"
  1116. },
  1117. {
  1118. "virtual_address": "0x00000000",
  1119. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  1120. "size": "0x00000000"
  1121. },
  1122. {
  1123. "virtual_address": "0x00090000",
  1124. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  1125. "size": "0x0000000c"
  1126. },
  1127. {
  1128. "virtual_address": "0x00000000",
  1129. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  1130. "size": "0x00000000"
  1131. },
  1132. {
  1133. "virtual_address": "0x00000000",
  1134. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  1135. "size": "0x00000000"
  1136. },
  1137. {
  1138. "virtual_address": "0x00000000",
  1139. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  1140. "size": "0x00000000"
  1141. },
  1142. {
  1143. "virtual_address": "0x00000000",
  1144. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  1145. "size": "0x00000000"
  1146. },
  1147. {
  1148. "virtual_address": "0x00000000",
  1149. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  1150. "size": "0x00000000"
  1151. },
  1152. {
  1153. "virtual_address": "0x00000000",
  1154. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  1155. "size": "0x00000000"
  1156. },
  1157. {
  1158. "virtual_address": "0x00002000",
  1159. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  1160. "size": "0x00000008"
  1161. },
  1162. {
  1163. "virtual_address": "0x00000000",
  1164. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  1165. "size": "0x00000000"
  1166. },
  1167. {
  1168. "virtual_address": "0x00002008",
  1169. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  1170. "size": "0x00000048"
  1171. },
  1172. {
  1173. "virtual_address": "0x00000000",
  1174. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  1175. "size": "0x00000000"
  1176. }
  1177. ],
  1178. "exports": [],
  1179. "guest_signers": {},
  1180. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  1181. "icon_fuzzy": null,
  1182. "icon": null,
  1183. "pdbpath": null,
  1184. "imported_dll_count": 1,
  1185. "versioninfo": []
  1186. }
  1187. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!