[*] MalFamily: ""

[*] MalScore: 10.0

[*] File Name: "Exes_0beb47fb8d046a51f181b5979f08d960.exe"
[*] File Size: 570368
[*] File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
[*] SHA256: "bc88ce71668c818fda4b7afaac7cf38959d7316e81e0e8359984bc9dbb69b30d"
[*] MD5: "0beb47fb8d046a51f181b5979f08d960"
[*] SHA1: "1efcb649b88f5501df5aca47c1a225cc3a0084f6"
[*] SHA512: "0c3210a2d1d4b5f8e683a911e7dc4096e0e0e6eb9573a11cdd3f063a6660767bccaf1c4aafdb2de818f7f89d7c5bb1abf55194f2e29250a52d9f90d8905571b2"
[*] CRC32: "17C1EE79"
[*] SSDEEP: "6144:j6ny90TKxLIqB7yqLTRN+BjgGC59b/XJt7IIbo1Otgo8A:GnyyKLYqLTL+lgGsx/XF8OGoj"

[*] Process Execution: [
    "Exes_0beb47fb8d046a51f181b5979f08d960.exe"
]

[*] Signatures Detected: [
    {
        "Description": "Anomalous .NET characteristics",
        "Details": [
            {
                "anomalous_version": "Assembly version is set to 0"
            }
        ]
    },
    {
        "Description": "File has been identified by 35 Antiviruses on VirusTotal as malicious",
        "Details": [
            {
                "MicroWorld-eScan": "Gen:Variant.Razy.520223"
            },
            {
                "FireEye": "Gen:Variant.Razy.520223"
            },
            {
                "McAfee": "RDN/Generic BackDoor"
            },
            {
                "Cylance": "Unsafe"
            },
            {
                "BitDefender": "Gen:Variant.Razy.520223"
            },
            {
                "K7GW": "Trojan ( 0054fd2d1 )"
            },
            {
                "K7AntiVirus": "Trojan ( 0054fd2d1 )"
            },
            {
                "TrendMicro": "TROJ_GEN.R03BC0PFC19"
            },
            {
                "Symantec": "Trojan.Gen.2"
            },
            {
                "APEX": "Malicious"
            },
            {
                "Kaspersky": "HEUR:Backdoor.MSIL.NanoBot.gen"
            },
            {
                "Alibaba": "Backdoor:MSIL/Injector.2d4e8eca"
            },
            {
                "AegisLab": "Trojan.MSIL.NanoBot.4!c"
            },
            {
                "Rising": "Backdoor.NanoBot!8.28C (CLOUD)"
            },
            {
                "Ad-Aware": "Gen:Variant.Razy.520223"
            },
            {
                "Sophos": "Mal/Generic-S"
            },
            {
                "F-Secure": "Trojan.TR/Injector.uuoue"
            },
            {
                "McAfee-GW-Edition": "RDN/Generic BackDoor"
            },
            {
                "Fortinet": "MSIL/Kryptik.RWW!tr"
            },
            {
                "Emsisoft": "Gen:Variant.Razy.520223 (B)"
            },
            {
                "Ikarus": "Trojan.MSIL.Injector"
            },
            {
                "Cyren": "W32/Trojan.XUOO-7867"
            },
            {
                "Endgame": "malicious (high confidence)"
            },
            {
                "Avira": "TR/Injector.uuoue"
            },
            {
                "ZoneAlarm": "HEUR:Backdoor.MSIL.NanoBot.gen"
            },
            {
                "Microsoft": "VirTool:MSIL/Subti.U!bit"
            },
            {
                "ESET-NOD32": "a variant of MSIL/Injector.UKR"
            },
            {
                "Acronis": "suspicious"
            },
            {
                "TrendMicro-HouseCall": "TROJ_GEN.R03BC0PFC19"
            },
            {
                "SentinelOne": "DFI - Malicious PE"
            },
            {
                "GData": "Gen:Variant.Razy.520223"
            },
            {
                "AVG": "FileRepMalware"
            },
            {
                "Panda": "Trj/GdSda.A"
            },
            {
                "CrowdStrike": "win/malicious_confidence_100% (W)"
            },
            {
                "Qihoo-360": "Win32/Backdoor.BO.5c9"
            }
        ]
    },
    {
        "Description": "Anomalous binary characteristics",
        "Details": [
            {
                "anomaly": "Actual checksum does not match that reported in PE header"
            }
        ]
    }
]

[*] Started Service: []

[*] Executed Commands: []

[*] Mutexes: []

[*] Modified Files: []

[*] Deleted Files: []

[*] Modified Registry Keys: []

[*] Deleted Registry Keys: []

[*] DNS Communications: []

[*] Domains: []

[*] Network Communication - ICMP: []

[*] Network Communication - HTTP: []

[*] Network Communication - SMTP: []

[*] Network Communication - Hosts: []

[*] Network Communication - IRC: []

[*] Static Analysis: {
    "dotnet": {
        "customattrs": [],
        "assemblyinfo": {
            "version": "0.0.0.0",
            "name": "oZyhvPuWiBLzanKIma"
        },
        "assemblyrefs": [
            {
                "version": "4.0.0.0",
                "name": "mscorlib"
            },
            {
                "version": "4.0.0.0",
                "name": "System"
            },
            {
                "version": "4.0.0.0",
                "name": "System.Windows.Forms"
            },
            {
                "version": "4.0.0.0",
                "name": "System.Drawing"
            },
            {
                "version": "4.0.0.0",
                "name": "System.Core"
            },
            {
                "version": "6.0.0.0",
                "name": "EntityFramework"
            }
        ],
        "typerefs": [
            {
                "typename": "System.Data.Entity.Core.Objects.ObjectContext",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.Data.Entity.Core.Objects.ObjectParameter",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.Data.Entity.DbContext",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.Data.Entity.DbModelBuilder",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.Data.Entity.DbSet`1",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.Data.Entity.Infrastructure.IObjectContextAdapter",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.Data.Entity.Infrastructure.UnintentionalCodeFirstException",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.ComponentModel.IContainer",
                "assembly": "System"
            },
            {
                "typename": "System.Net.Cookie",
                "assembly": "System"
            },
            {
                "typename": "System.Collections.Generic.HashSet`1",
                "assembly": "System.Core"
            },
            {
                "typename": "System.Drawing.Size",
                "assembly": "System.Drawing"
            },
            {
                "typename": "System.Drawing.SizeF",
                "assembly": "System.Drawing"
            },
            {
                "typename": "System.Windows.Forms.Application",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Windows.Forms.AutoScaleMode",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Windows.Forms.ContainerControl",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Windows.Forms.Control",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Windows.Forms.Form",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Windows.Forms.FormStartPosition",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Windows.Forms.FormWindowState",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Boolean",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Byte",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Collections.Generic.ICollection`1",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.DateTime",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Diagnostics.DebuggableAttribute",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Environment",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.EventArgs",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.EventHandler",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Guid",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.IDisposable",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.IO.BinaryReader",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.IO.Stream",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Int32",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Nullable`1",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Object",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Reflection.Assembly",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Reflection.MethodBase",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Reflection.MethodInfo",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.RuntimeTypeHandle",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.STAThreadAttribute",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.String",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Text.Encoding",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Type",
                "assembly": "mscorlib"
            }
        ]
    },
    "pe": {
        "peid_signatures": null,
        "imports": [
            {
                "imports": [
                    {
                        "name": "_CorExeMain",
                        "address": "0x402000"
                    }
                ],
                "dll": "mscoree.dll"
            }
        ],
        "digital_signers": null,
        "exported_dll_name": null,
        "actual_checksum": "0x00090b9e",
        "overlay": {
            "size": "0x00019000",
            "offset": "0x00072400"
        },
        "imagebase": "0x00400000",
        "reported_checksum": "0x0007b2d5",
        "icon_hash": null,
        "entrypoint": "0x00473cfe",
        "timestamp": "2019-05-02 13:38:01",
        "osversion": "4.0",
        "sections": [
            {
                "name": ".text",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00002000",
                "size_of_data": "0x00071e00",
                "entropy": "6.52",
                "raw_address": "0x00000200",
                "virtual_size": "0x00071d04",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": ".rsrc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00074000",
                "size_of_data": "0x00000200",
                "entropy": "0.00",
                "raw_address": "0x00072000",
                "virtual_size": "0x00000010",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".reloc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00076000",
                "size_of_data": "0x00000200",
                "entropy": "0.08",
                "raw_address": "0x00072200",
                "virtual_size": "0x0000000c",
                "characteristics_raw": "0x42000040"
            }
        ],
        "resources": [],
        "dirents": [
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00073cac",
                "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
                "size": "0x0000004f"
            },
            {
                "virtual_address": "0x00074000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
                "size": "0x00000010"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00076000",
                "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
                "size": "0x0000000c"
            },
            {
                "virtual_address": "0x00073c28",
                "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
                "size": "0x0000001c"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_TLS",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00002000",
                "name": "IMAGE_DIRECTORY_ENTRY_IAT",
                "size": "0x00000008"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00002008",
                "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
                "size": "0x00000048"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
                "size": "0x00000000"
            }
        ],
        "exports": [],
        "guest_signers": {},
        "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
        "icon_fuzzy": null,
        "icon": null,
        "pdbpath": "C:\\xampp\\htdocs\\Aspire\\files\\Error040_oZyhvPuWiBLzanKI\\oZyhvPuWiBLzanKIma.pdb",
        "imported_dll_count": 1,
        "versioninfo": []
    }
}

[*] Resolved APIs: [
    "advapi32.dll.RegOpenKeyExW",
    "advapi32.dll.RegQueryInfoKeyW",
    "advapi32.dll.RegEnumKeyExW",
    "advapi32.dll.RegEnumValueW",
    "advapi32.dll.RegCloseKey",
    "advapi32.dll.RegQueryValueExW",
    "kernel32.dll.QueryActCtxW",
    "shlwapi.dll.UrlIsW"
]

[*] Static Analysis: {
    "dotnet": {
        "customattrs": [],
        "assemblyinfo": {
            "version": "0.0.0.0",
            "name": "oZyhvPuWiBLzanKIma"
        },
        "assemblyrefs": [
            {
                "version": "4.0.0.0",
                "name": "mscorlib"
            },
            {
                "version": "4.0.0.0",
                "name": "System"
            },
            {
                "version": "4.0.0.0",
                "name": "System.Windows.Forms"
            },
            {
                "version": "4.0.0.0",
                "name": "System.Drawing"
            },
            {
                "version": "4.0.0.0",
                "name": "System.Core"
            },
            {
                "version": "6.0.0.0",
                "name": "EntityFramework"
            }
        ],
        "typerefs": [
            {
                "typename": "System.Data.Entity.Core.Objects.ObjectContext",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.Data.Entity.Core.Objects.ObjectParameter",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.Data.Entity.DbContext",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.Data.Entity.DbModelBuilder",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.Data.Entity.DbSet`1",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.Data.Entity.Infrastructure.IObjectContextAdapter",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.Data.Entity.Infrastructure.UnintentionalCodeFirstException",
                "assembly": "EntityFramework"
            },
            {
                "typename": "System.ComponentModel.IContainer",
                "assembly": "System"
            },
            {
                "typename": "System.Net.Cookie",
                "assembly": "System"
            },
            {
                "typename": "System.Collections.Generic.HashSet`1",
                "assembly": "System.Core"
            },
            {
                "typename": "System.Drawing.Size",
                "assembly": "System.Drawing"
            },
            {
                "typename": "System.Drawing.SizeF",
                "assembly": "System.Drawing"
            },
            {
                "typename": "System.Windows.Forms.Application",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Windows.Forms.AutoScaleMode",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Windows.Forms.ContainerControl",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Windows.Forms.Control",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Windows.Forms.Form",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Windows.Forms.FormStartPosition",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Windows.Forms.FormWindowState",
                "assembly": "System.Windows.Forms"
            },
            {
                "typename": "System.Boolean",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Byte",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Collections.Generic.ICollection`1",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.DateTime",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Diagnostics.DebuggableAttribute",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Environment",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.EventArgs",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.EventHandler",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Guid",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.IDisposable",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.IO.BinaryReader",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.IO.Stream",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Int32",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Nullable`1",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Object",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Reflection.Assembly",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Reflection.MethodBase",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Reflection.MethodInfo",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.RuntimeTypeHandle",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.STAThreadAttribute",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.String",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Text.Encoding",
                "assembly": "mscorlib"
            },
            {
                "typename": "System.Type",
                "assembly": "mscorlib"
            }
        ]
    },
    "pe": {
        "peid_signatures": null,
        "imports": [
            {
                "imports": [
                    {
                        "name": "_CorExeMain",
                        "address": "0x402000"
                    }
                ],
                "dll": "mscoree.dll"
            }
        ],
        "digital_signers": null,
        "exported_dll_name": null,
        "actual_checksum": "0x00090b9e",
        "overlay": {
            "size": "0x00019000",
            "offset": "0x00072400"
        },
        "imagebase": "0x00400000",
        "reported_checksum": "0x0007b2d5",
        "icon_hash": null,
        "entrypoint": "0x00473cfe",
        "timestamp": "2019-05-02 13:38:01",
        "osversion": "4.0",
        "sections": [
            {
                "name": ".text",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00002000",
                "size_of_data": "0x00071e00",
                "entropy": "6.52",
                "raw_address": "0x00000200",
                "virtual_size": "0x00071d04",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": ".rsrc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00074000",
                "size_of_data": "0x00000200",
                "entropy": "0.00",
                "raw_address": "0x00072000",
                "virtual_size": "0x00000010",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".reloc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00076000",
                "size_of_data": "0x00000200",
                "entropy": "0.08",
                "raw_address": "0x00072200",
                "virtual_size": "0x0000000c",
                "characteristics_raw": "0x42000040"
            }
        ],
        "resources": [],
        "dirents": [
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00073cac",
                "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
                "size": "0x0000004f"
            },
            {
                "virtual_address": "0x00074000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
                "size": "0x00000010"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00076000",
                "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
                "size": "0x0000000c"
            },
            {
                "virtual_address": "0x00073c28",
                "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
                "size": "0x0000001c"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_TLS",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00002000",
                "name": "IMAGE_DIRECTORY_ENTRY_IAT",
                "size": "0x00000008"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00002008",
                "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
                "size": "0x00000048"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
                "size": "0x00000000"
            }
        ],
        "exports": [],
        "guest_signers": {},
        "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
        "icon_fuzzy": null,
        "icon": null,
        "pdbpath": "C:\\xampp\\htdocs\\Aspire\\files\\Error040_oZyhvPuWiBLzanKI\\oZyhvPuWiBLzanKIma.pdb",
        "imported_dll_count": 1,
        "versioninfo": []
    }
}