{ "statistics": { "processing": [ { "name": "CAPE", "time": 7.995 }, { "name": "AnalysisInfo", "time": 0.01 }, { "name": "BehaviorAnalysis", "time": 0.818 }, { "name": "Debug", "time": 0.002 }, { "name": "NetworkAnalysis", "time": 0.024 }, { "name": "UrlAnalysis", "time": 0.0 }, { "name": "script_log_processing", "time": 0.0 }, { "name": "ProcessMemory", "time": 0.0 } ], "signatures": [ { "name": "packer_themida", "time": 0.0 }, { "name": "stealth_network", "time": 0.0 }, { "name": "disable_driver_via_blocklist", "time": 0.0 }, { "name": "disable_driver_via_hvcidisallowedimages", "time": 0.0 }, { "name": "disable_hypervisor_protected_code_integrity", "time": 0.0 }, { "name": "pendingfilerenameoperations_Operations", "time": 0.0 }, { "name": "anomalous_deletefile", "time": 0.0 }, { "name": "antiav_360_libs", "time": 0.0 }, { "name": "antiav_ahnlab_libs", "time": 0.0 }, { "name": "antiav_avast_libs", "time": 0.0 }, { "name": "antiav_bitdefender_libs", "time": 0.0 }, { "name": "antiav_bullguard_libs", "time": 0.0 }, { "name": "antiav_emsisoft_libs", "time": 0.0 }, { "name": "antiav_qurb_libs", "time": 0.0 }, { "name": "antiav_servicestop", "time": 0.0 }, { "name": "antiav_apioverride_libs", "time": 0.0 }, { "name": "antidebug_guardpages", "time": 0.0 }, { "name": "antidebug_ntcreatethreadex", "time": 0.0 }, { "name": "antiav_nthookengine_libs", "time": 0.0 }, { "name": "antidebug_outputdebugstring", "time": 0.0 }, { "name": "antidebug_setunhandledexceptionfilter", "time": 0.0 }, { "name": "antidebug_windows", "time": 0.0 }, { "name": "antisandbox_cuckoo", "time": 0.0 }, { "name": "antisandbox_cuckoocrash", "time": 0.0 }, { "name": "antisandbox_foregroundwindows", "time": 0.0 }, { "name": "antisandbox_mouse_hook", "time": 0.0 }, { "name": "mouse_movement_detect", "time": 0.0 }, { "name": "antisandbox_sboxie_libs", "time": 0.0 }, { "name": "antisandbox_sboxie_objects", "time": 0.0 }, { "name": "antisandbox_script_timer", "time": 0.0 }, { "name": "antisandbox_sleep", "time": 0.0 }, { "name": "antisandbox_sunbelt_libs", "time": 0.0 }, { "name": "antisandbox_unhook", "time": 0.0 }, { "name": "hardware_id_profiling", "time": 0.0 }, { "name": "antivm_directory_objects", "time": 0.0 }, { "name": "antivm_display", "time": 0.0 }, { "name": "antivm_generic_disk", "time": 0.0 }, { "name": "antivm_generic_scsi", "time": 0.0 }, { "name": "antivm_generic_services", "time": 0.0 }, { "name": "antivm_generic_system", "time": 0.0 }, { "name": "antivm_checks_available_memory", "time": 0.0 }, { "name": "detect_virtualization_via_recent_files", "time": 0.0 }, { "name": "antivm_vbox_libs", "time": 0.0 }, { "name": "antivm_vbox_window", "time": 0.0 }, { "name": "antivm_vmware_events", "time": 0.0 }, { "name": "antivm_vmware_libs", "time": 0.0 }, { "name": "antivm_wmi", "time": 0.0 }, { "name": "api_spamming", "time": 0.0 }, { "name": "api_uuidfromstringa", "time": 0.0 }, { "name": "bcdedit_command", "time": 0.0 }, { "name": "bootkit", "time": 0.0 }, { "name": "direct_hdd_access", "time": 0.0 }, { "name": "physical_drive_access", "time": 0.0 }, { "name": "potential_overwrite_mbr", "time": 0.0 }, { "name": "read_file_raw_disk_access", "time": 0.0 }, { "name": "suspicious_iocontrol_codes", "time": 0.0 }, { "name": "browser_needed", "time": 0.0 }, { "name": "amsi_enumeration", "time": 0.0 }, { "name": "regsvr32_squiblydoo_dll_load", "time": 0.0 }, { "name": "suspicious_ntdll_disk_load", "time": 0.0 }, { "name": "direct_syscall_evasion", "time": 0.0 }, { "name": "unbacked_syscall_execution", "time": 0.0 }, { "name": "uac_bypass_cmstp", "time": 0.0 }, { "name": "uac_bypass_eventvwr", "time": 0.0 }, { "name": "uac_bypass_windows_Backup", "time": 0.0 }, { "name": "privilege_elevation_check", "time": 0.0 }, { "name": "dotnet_code_compile", "time": 0.0 }, { "name": "queries_computer_name", "time": 0.0 }, { "name": "queries_user_name", "time": 0.0 }, { "name": "creates_largekey", "time": 0.0 }, { "name": "creates_nullvalue", "time": 0.0 }, { "name": "access_windows_passwords_vault", "time": 0.0 }, { "name": "dump_lsa_via_windows_error_reporting", "time": 0.0 }, { "name": "lsass_credential_dumping", "time": 0.0 }, { "name": "critical_process", "time": 0.0 }, { "name": "query_fips_reconnaissance", "time": 0.0 }, { "name": "cryptopool_domains", "time": 0.0 }, { "name": "dead_connect", "time": 0.0 }, { "name": "dead_link", "time": 0.0 }, { "name": "decoy_document", "time": 0.0 }, { "name": "decoy_image", "time": 0.0 }, { "name": "deletes_consolehost_history", "time": 0.0 }, { "name": "dep_bypass", "time": 0.0 }, { "name": "dep_disable", "time": 0.0 }, { "name": "disables_wfp", "time": 0.0 }, { "name": "add_windows_defender_exclusions", "time": 0.0 }, { "name": "mountpoints_volume_discovery", "time": 0.0 }, { "name": "dll_load_uncommon_file_types", "time": 0.0 }, { "name": "dllload_suspicious_directory", "time": 0.0 }, { "name": "document_script_exe_drop", "time": 0.0 }, { "name": "driver_load", "time": 0.0 }, { "name": "install_kernel_driver_service", "time": 0.0 }, { "name": "malformed_dll_loading", "time": 0.0 }, { "name": "dynamic_function_loading", "time": 0.0 }, { "name": "encrypted_ioc", "time": 0.0 }, { "name": "registers_vectored_exception_handler", "time": 0.0 }, { "name": "exec_crash", "time": 0.0 }, { "name": "process_creation_suspicious_location", "time": 0.0 }, { "name": "exploit_getbasekerneladdress", "time": 0.0 }, { "name": "exploit_gethaldispatchtable", "time": 0.0 }, { "name": "exploit_heapspray", "time": 0.0 }, { "name": "downloads_from_filehosting", "time": 0.0 }, { "name": "generic_phish", "time": 0.0 }, { "name": "http_request", "time": 0.0 }, { "name": "infostealer_browser", "time": 0.0 }, { "name": "infostealer_browser_password", "time": 0.0 }, { "name": "infostealer_cookies", "time": 0.0 }, { "name": "infostealer_keylog", "time": 0.0 }, { "name": "captures_screenshot", "time": 0.0 }, { "name": "injection_createremotethread", "time": 0.0 }, { "name": "creates_suspended_process", "time": 0.0 }, { "name": "injection_explorer", "time": 0.0 }, { "name": "injection_module_stomping_probing", "time": 0.0 }, { "name": "injection_network_traffic", "time": 0.0 }, { "name": "injection_runpe", "time": 0.0 }, { "name": "injection_rwx", "time": 0.0 }, { "name": "section_mapping_injection", "time": 0.0 }, { "name": "injection_themeinitapihook", "time": 0.0 }, { "name": "apc_injection", "time": 0.0 }, { "name": "resumethread_remote_process", "time": 0.0 }, { "name": "injection_write_exe_process", "time": 0.0 }, { "name": "injection_write_process", "time": 0.0 }, { "name": "internet_dropper", "time": 0.0 }, { "name": "interprocess_comms_mutex", "time": 0.0 }, { "name": "interprocess_comms_named_pipe", "time": 0.0 }, { "name": "interprocess_comms_shared_memory", "time": 0.0 }, { "name": "escalate_privilege_via_named_pipe", "time": 0.0 }, { "name": "ipc_namedpipe", "time": 0.0 }, { "name": "js_phish", "time": 0.0 }, { "name": "js_suspicious_redirect", "time": 0.0 }, { "name": "execute_binary_via_internet_explorer_exporter", "time": 0.0 }, { "name": "execute_binary_via_run_exe_helper_utility", "time": 0.0 }, { "name": "execute_ps_via_syncappvpublishingserver", "time": 0.0 }, { "name": "malicious_dynamic_function_loading", "time": 0.0 }, { "name": "reads_memory_remote_process", "time": 0.0 }, { "name": "unbacked_exception_filter", "time": 0.0 }, { "name": "unbacked_process_mitigation_alteration", "time": 0.0 }, { "name": "thread_unbacked_memory", "time": 0.0 }, { "name": "unbacked_api_resolution", "time": 0.0 }, { "name": "unbacked_dotnet_execution", "time": 0.0 }, { "name": "unbacked_library_load", "time": 0.0 }, { "name": "unbacked_memory_apc_execution", "time": 0.0 }, { "name": "unbacked_memory_protection_alteration", "time": 0.0 }, { "name": "unbacked_mutex_creation", "time": 0.0 }, { "name": "unbacked_process_creation", "time": 0.0 }, { "name": "unbacked_veh_registration", "time": 0.0 }, { "name": "unbacked_com_instantiation", "time": 0.0 }, { "name": "unbacked_crypto_operations", "time": 0.0 }, { "name": "unbacked_delay_execution", "time": 0.0 }, { "name": "unbacked_file_dropping", "time": 0.0 }, { "name": "unbacked_process_enumeration", "time": 0.0 }, { "name": "unbacked_registry_modification", "time": 0.0 }, { "name": "unbacked_service_manipulation", "time": 0.0 }, { "name": "unbacked_token_manipulation", "time": 0.0 }, { "name": "unbacked_wmi_execution", "time": 0.0 }, { "name": "unbacked_bind_shell", "time": 0.0 }, { "name": "unbacked_dns_resolution", "time": 0.0 }, { "name": "unbacked_memory_network_connection", "time": 0.0 }, { "name": "unbacked_named_pipe_creation", "time": 0.0 }, { "name": "unbacked_useragent_retrieval", "time": 0.0 }, { "name": "mimics_filetime", "time": 0.0 }, { "name": "amsi_bypass_via_com_registry", "time": 0.0 }, { "name": "access_auto_logons_via_registry", "time": 0.0 }, { "name": "access_boot_key_via_registry", "time": 0.0 }, { "name": "create_suspicious_lnk_files", "time": 0.0 }, { "name": "credential_access_via_windows_credential_history", "time": 0.0 }, { "name": "dll_hijacking_via_microsoft_exchange", "time": 0.0 }, { "name": "dll_hijacking_via_waas_medic_svc_com_typelib", "time": 0.0 }, { "name": "execute_file_downloaded_via_openssh", "time": 0.0 }, { "name": "execute_safe_mode_from_suspicious_process", "time": 0.0 }, { "name": "execute_scripts_via_microsoft_management_console", "time": 0.0 }, { "name": "execute_suspicious_processes_via_windows_mssql_service", "time": 0.0 }, { "name": "execution_from_self_extracting_archive", "time": 0.0 }, { "name": "ip_address_discovery_via_trusted_program", "time": 0.0 }, { "name": "load_dll_via_control_panel", "time": 0.0 }, { "name": "network_connection_via_suspicious_process", "time": 0.0 }, { "name": "potential_location_discovery_via_unusual_process", "time": 0.0 }, { "name": "store_executable_registry", "time": 0.0 }, { "name": "Suspicious_Execution_Via_MicrosoftExchangeTransportAgent", "time": 0.0 }, { "name": "suspicious_java_execution_via_win_scripts", "time": 0.0 }, { "name": "Suspicious_Scheduled_Task_Creation_Via_Masqueraded_XML_File", "time": 0.0 }, { "name": "uses_restart_manager_for_suspicious_activities", "time": 0.0 }, { "name": "modify_desktop_wallpaper", "time": 0.0 }, { "name": "modify_zoneid_ads", "time": 0.0 }, { "name": "move_file_on_reboot", "time": 0.0 }, { "name": "multiple_useragents", "time": 0.0 }, { "name": "network_anomaly", "time": 0.0 }, { "name": "network_bind", "time": 0.0 }, { "name": "etherhiding_smart_contract_call", "time": 0.0 }, { "name": "network_cnc_https_archive", "time": 0.0 }, { "name": "network_cnc_https_free_webhosting", "time": 0.0 }, { "name": "network_cnc_https_generic", "time": 0.0 }, { "name": "network_cnc_https_interactsh", "time": 0.0 }, { "name": "network_cnc_https_opensource", "time": 0.0 }, { "name": "network_cnc_https_pastesite", "time": 0.0 }, { "name": "network_cnc_https_payload", "time": 0.0 }, { "name": "network_cnc_https_serviceinterface", "time": 0.0 }, { "name": "network_cnc_https_socialmedia", "time": 0.0 }, { "name": "network_cnc_https_telegram", "time": 0.0 }, { "name": "network_cnc_https_tempstorage", "time": 0.0 }, { "name": "network_cnc_https_temp_urldns", "time": 0.0 }, { "name": "network_cnc_https_urlshortener", "time": 0.0 }, { "name": "network_cnc_https_useragent", "time": 0.0 }, { "name": "network_cnc_smtps_exfil", "time": 0.0 }, { "name": "network_cnc_smtps_generic", "time": 0.0 }, { "name": "network_dns_idn", "time": 0.0 }, { "name": "network_dns_suspicious_querytype", "time": 0.0 }, { "name": "network_dns_tunneling_request", "time": 0.0 }, { "name": "network_document_http", "time": 0.0 }, { "name": "explorer_http", "time": 0.0 }, { "name": "network_fake_useragent", "time": 0.0 }, { "name": "legitimate_domain_abuse", "time": 0.0 }, { "name": "suspicious_communication_trusted_site", "time": 0.0 }, { "name": "network_tor", "time": 0.0 }, { "name": "office_com_load", "time": 0.0 }, { "name": "office_dotnet_load", "time": 0.0 }, { "name": "office_mshtml_load", "time": 0.0 }, { "name": "office_vb_load", "time": 0.0 }, { "name": "office_wmi_load", "time": 0.0 }, { "name": "office_cve2017_11882", "time": 0.0 }, { "name": "office_cve2017_11882_network", "time": 0.0 }, { "name": "office_cve_2021_40444", "time": 0.0 }, { "name": "office_cve_2021_40444_m2", "time": 0.0 }, { "name": "office_flash_load", "time": 0.0 }, { "name": "office_postscript", "time": 0.0 }, { "name": "office_suspicious_processes", "time": 0.0 }, { "name": "office_write_exe", "time": 0.0 }, { "name": "decompress_exe", "time": 0.0 }, { "name": "persistence_via_autodial_dll_registry", "time": 0.0 }, { "name": "persistence_autorun", "time": 0.0 }, { "name": "persistence_autorun_tasks", "time": 0.0 }, { "name": "persistence_bootexecute", "time": 0.0 }, { "name": "persistence_registry_script", "time": 0.0 }, { "name": "powershell_network_connection", "time": 0.0 }, { "name": "powershell_download", "time": 0.0 }, { "name": "powershell_request", "time": 0.0 }, { "name": "createtoolhelp32snapshot_module_enumeration", "time": 0.0 }, { "name": "enumerates_running_processes", "time": 0.0 }, { "name": "process_interest", "time": 0.0 }, { "name": "process_needed", "time": 0.0 }, { "name": "ransomware_iocp_asynchronous_encryption", "time": 0.0 }, { "name": "kernel_crypto_driver_abuse", "time": 0.0 }, { "name": "mass_data_encryption", "time": 0.0 }, { "name": "ransomware_extension_hijack", "time": 0.0 }, { "name": "mass_file_modification_access", "time": 0.0 }, { "name": "ransomware_attribute_stripping", "time": 0.0 }, { "name": "ransomware_file_modifications", "time": 0.0 }, { "name": "mass_ransom_note_drop", "time": 0.0 }, { "name": "ransomware_message", "time": 0.0 }, { "name": "reads_self", "time": 0.0 }, { "name": "recon_beacon", "time": 0.0 }, { "name": "recon_programs", "time": 0.0 }, { "name": "recon_systeminfo", "time": 0.0 }, { "name": "accesses_recyclebin", "time": 0.0 }, { "name": "script_created_process", "time": 0.0 }, { "name": "script_network_activity", "time": 0.0 }, { "name": "suspicious_js_script", "time": 0.0 }, { "name": "javascript_timer", "time": 0.0 }, { "name": "secure_login_phishing", "time": 0.0 }, { "name": "securityxploded_modules", "time": 0.0 }, { "name": "get_clipboard_data", "time": 0.0 }, { "name": "sets_autoconfig_url", "time": 0.0 }, { "name": "spoofs_procname", "time": 0.0 }, { "name": "stack_pivot", "time": 0.0 }, { "name": "stack_pivot_file_created", "time": 0.0 }, { "name": "stack_pivot_process_create", "time": 0.0 }, { "name": "set_clipboard_data", "time": 0.0 }, { "name": "stealth_childproc", "time": 0.0 }, { "name": "stealth_file", "time": 0.0 }, { "name": "stealth_timeout", "time": 0.0 }, { "name": "stealth_window", "time": 0.0 }, { "name": "queries_keyboard_layout", "time": 0.0 }, { "name": "queries_locale_api", "time": 0.0 }, { "name": "terminates_remote_process", "time": 0.0 }, { "name": "uiautomationcore_load", "time": 0.0 }, { "name": "user_enum", "time": 0.0 }, { "name": "mmc_dll_script_load", "time": 0.0 }, { "name": "mmc_dotnet_load", "time": 0.0 }, { "name": "virus", "time": 0.0 }, { "name": "webmail_phish", "time": 0.0 }, { "name": "persists_dev_util", "time": 0.0 }, { "name": "spawns_dev_util", "time": 0.0 }, { "name": "alters_windows_utility", "time": 0.0 }, { "name": "overwrites_accessibility_utility", "time": 0.0 }, { "name": "Potential_Lateral_Movement_Via_SMBEXEC", "time": 0.0 }, { "name": "potential_WebShell_Via_ScreenConnectServer", "time": 0.0 }, { "name": "uses_Microsoft_HTML_Help_Executable", "time": 0.0 }, { "name": "wiper_zeroedbytes", "time": 0.0 }, { "name": "wmi_create_process", "time": 0.0 }, { "name": "wmi_script_process", "time": 0.0 }, { "name": "antianalysis_tls_section", "time": 0.0 }, { "name": "antivirus_clamav", "time": 0.0 }, { "name": "antivirus_virustotal", "time": 0.0 }, { "name": "bad_certs", "time": 0.0 }, { "name": "bad_ssl_certs", "time": 0.0 }, { "name": "banker_zeus_p2p", "time": 0.0 }, { "name": "banker_zeus_url", "time": 0.0 }, { "name": "binary_yara", "time": 0.0 }, { "name": "bot_athenahttp", "time": 0.0 }, { "name": "bot_dirtjumper", "time": 0.0 }, { "name": "bot_drive", "time": 0.0 }, { "name": "bot_drive2", "time": 0.0 }, { "name": "bot_madness", "time": 0.0 }, { "name": "byod_loldrivers_match", "time": 0.0 }, { "name": "byod_novel_driver", "time": 0.0 }, { "name": "byod_post_load_exploitation", "time": 0.0 }, { "name": "byod_driver_service_install", "time": 0.0 }, { "name": "com_spawned_process", "time": 0.0 }, { "name": "phishing_kit_detected", "time": 0.0 }, { "name": "family_proxyback", "time": 0.0 }, { "name": "flare_capa_antianalysis", "time": 0.0 }, { "name": "flare_capa_collection", "time": 0.0 }, { "name": "flare_capa_communication", "time": 0.0 }, { "name": "flare_capa_compiler", "time": 0.0 }, { "name": "flare_capa_datamanipulation", "time": 0.0 }, { "name": "flare_capa_executable", "time": 0.0 }, { "name": "flare_capa_hostinteraction", "time": 0.0 }, { "name": "flare_capa_impact", "time": 0.0 }, { "name": "flare_capa_lib", "time": 0.0 }, { "name": "flare_capa_linking", "time": 0.0 }, { "name": "flare_capa_loadcode", "time": 0.0 }, { "name": "flare_capa_malwarefamily", "time": 0.0 }, { "name": "flare_capa_nursery", "time": 0.0 }, { "name": "flare_capa_persistence", "time": 0.0 }, { "name": "flare_capa_runtime", "time": 0.0 }, { "name": "flare_capa_targeting", "time": 0.0 }, { "name": "threatfox", "time": 0.0 }, { "name": "log4shell", "time": 0.0 }, { "name": "mimics_extension", "time": 0.0 }, { "name": "network_country_distribution", "time": 0.0 }, { "name": "network_cnc_http", "time": 0.0 }, { "name": "network_ip_exe", "time": 0.0 }, { "name": "network_dga", "time": 0.0 }, { "name": "network_dga_fraunhofer", "time": 0.0 }, { "name": "network_dyndns", "time": 0.0 }, { "name": "network_excessive_udp", "time": 0.0 }, { "name": "network_http", "time": 0.0 }, { "name": "network_icmp", "time": 0.0 }, { "name": "network_irc", "time": 0.0 }, { "name": "network_open_proxy", "time": 0.0 }, { "name": "network_questionable_http_path", "time": 0.0 }, { "name": "network_questionable_https_path", "time": 0.0 }, { "name": "network_smtp", "time": 0.0 }, { "name": "network_torgateway", "time": 0.0 }, { "name": "origin_langid", "time": 0.0 }, { "name": "origin_resource_langid", "time": 0.0 }, { "name": "overlay", "time": 0.0 }, { "name": "pe_deep_entrypoint", "time": 0.0 }, { "name": "packer_unknown_pe_section_name", "time": 0.0 }, { "name": "packer_aspack", "time": 0.0 }, { "name": "packer_aspirecrypt", "time": 0.0 }, { "name": "packer_bedsprotector", "time": 0.0 }, { "name": "packer_confuser", "time": 0.0 }, { "name": "packer_enigma", "time": 0.0 }, { "name": "packer_entropy", "time": 0.0 }, { "name": "packer_mpress", "time": 0.0 }, { "name": "packer_nate", "time": 0.0 }, { "name": "packer_nspack", "time": 0.0 }, { "name": "packer_smartassembly", "time": 0.0 }, { "name": "packer_spices", "time": 0.0 }, { "name": "packer_themida", "time": 0.0 }, { "name": "packer_titan", "time": 0.0 }, { "name": "packer_upx", "time": 0.0 }, { "name": "packer_vmprotect", "time": 0.0 }, { "name": "packer_yoda", "time": 0.0 }, { "name": "pdf_annot_urls_checker", "time": 0.0 }, { "name": "pe_cert_invalid_signature", "time": 0.0 }, { "name": "pe_cert_self_signed", "time": 0.0 }, { "name": "pe_cert_suspicious_issuer", "time": 0.0 }, { "name": "polymorphic", "time": 0.0 }, { "name": "punch_plus_plus_pcres", "time": 0.0 }, { "name": "procmem_yara", "time": 0.0 }, { "name": "recon_checkip", "time": 0.0 }, { "name": "sigma_events", "time": 0.0 }, { "name": "static_authenticode", "time": 0.0 }, { "name": "invalid_authenticode_signature", "time": 0.0 }, { "name": "static_dotnet_anomaly", "time": 0.0 }, { "name": "static_java", "time": 0.0 }, { "name": "static_pdf", "time": 0.0 }, { "name": "contains_pe_overlay", "time": 0.0 }, { "name": "static_pe_anomaly", "time": 0.0 }, { "name": "pe_compile_timestomping", "time": 0.0 }, { "name": "static_pe_pdbpath", "time": 0.0 }, { "name": "static_rat_config", "time": 0.0 }, { "name": "static_versioninfo_anomaly", "time": 0.0 }, { "name": "browser_credential_theft_headless", "time": 0.0 }, { "name": "suricata_alert", "time": 0.0 }, { "name": "suspicious_html_body", "time": 0.0 }, { "name": "suspicious_html_name", "time": 0.0 }, { "name": "suspicious_html_title", "time": 0.0 }, { "name": "volatility_devicetree_1", "time": 0.0 }, { "name": "volatility_handles_1", "time": 0.0 }, { "name": "volatility_ldrmodules_1", "time": 0.0 }, { "name": "volatility_ldrmodules_2", "time": 0.0 }, { "name": "volatility_malfind_1", "time": 0.0 }, { "name": "volatility_malfind_2", "time": 0.0 }, { "name": "volatility_modscan_1", "time": 0.0 }, { "name": "volatility_svcscan_1", "time": 0.0 }, { "name": "volatility_svcscan_2", "time": 0.0 }, { "name": "volatility_svcscan_3", "time": 0.0 }, { "name": "whois_create", "time": 0.0 }, { "name": "accesses_mailslot", "time": 0.0 }, { "name": "accesses_netlogon_regkey", "time": 0.001 }, { "name": "accesses_public_folder", "time": 0.0 }, { "name": "accesses_sysvol", "time": 0.001 }, { "name": "writes_sysvol", "time": 0.0 }, { "name": "adds_admin_user", "time": 0.0 }, { "name": "adds_user", "time": 0.0 }, { "name": "overwrites_admin_password", "time": 0.0 }, { "name": "antianalysis_detectfile", "time": 0.01 }, { "name": "antianalysis_detectreg", "time": 0.047 }, { "name": "modify_attachment_manager", "time": 0.0 }, { "name": "antiav_detectfile", "time": 0.018 }, { "name": "antiav_detectreg", "time": 0.226 }, { "name": "antiav_srp", "time": 0.0 }, { "name": "antiav_whitespace", "time": 0.0 }, { "name": "antidebug_devices", "time": 0.003 }, { "name": "antiemu_windefend", "time": 0.001 }, { "name": "antiemu_wine_reg", "time": 0.0 }, { "name": "antisandbox_cuckoo_files", "time": 0.001 }, { "name": "antisandbox_fortinet_files", "time": 0.001 }, { "name": "antisandbox_joe_anubis_files", "time": 0.001 }, { "name": "antisandbox_sboxie_mutex", "time": 0.0 }, { "name": "antisandbox_sunbelt_files", "time": 0.001 }, { "name": "antisandbox_threattrack_files", "time": 0.001 }, { "name": "antivm_bochs_keys", "time": 0.004 }, { "name": "antivm_generic_bios", "time": 0.002 }, { "name": "antivm_generic_diskreg", "time": 0.008 }, { "name": "antivm_hyperv_keys", "time": 0.004 }, { "name": "antivm_parallels_keys", "time": 0.011 }, { "name": "antivm_recentdocs", "time": 0.0 }, { "name": "antivm_vbox_devices", "time": 0.002 }, { "name": "antivm_vbox_files", "time": 0.007 }, { "name": "antivm_vbox_keys", "time": 0.025 }, { "name": "antivm_vmware_devices", "time": 0.0 }, { "name": "antivm_vmware_files", "time": 0.003 }, { "name": "antivm_vmware_keys", "time": 0.016 }, { "name": "antivm_vmware_mutexes", "time": 0.0 }, { "name": "antivm_vpc_files", "time": 0.001 }, { "name": "antivm_vpc_keys", "time": 0.008 }, { "name": "antivm_vpc_mutex", "time": 0.0 }, { "name": "antivm_xen_keys", "time": 0.011 }, { "name": "ketrican_regkeys", "time": 0.002 }, { "name": "bitcoin_opencl", "time": 0.0 }, { "name": "enumerates_physical_drives", "time": 0.0 }, { "name": "bot_russkill", "time": 0.0 }, { "name": "browser_addon", "time": 0.0 }, { "name": "chromium_browser_extension_directory", "time": 0.0 }, { "name": "browser_helper_object", "time": 0.0 }, { "name": "browser_security", "time": 0.001 }, { "name": "browser_startpage", "time": 0.0 }, { "name": "executes_headless_browser", "time": 0.0 }, { "name": "suspicious_browser_arguments", "time": 0.0 }, { "name": "ie_disables_process_tab", "time": 0.0 }, { "name": "odbcconf_bypass", "time": 0.0 }, { "name": "squiblydoo_bypass", "time": 0.0 }, { "name": "squiblytwo_bypass", "time": 0.0 }, { "name": "bypass_chromium_protection", "time": 0.0 }, { "name": "bypass_firewall", "time": 0.004 }, { "name": "checks_uac_status", "time": 0.001 }, { "name": "uac_bypass_cmstpcom", "time": 0.0 }, { "name": "uac_bypass_delegateexecute_sdclt", "time": 0.0 }, { "name": "uac_bypass_fodhelper", "time": 0.0 }, { "name": "cape_extracted_content", "time": 0.0 }, { "name": "clears_logs", "time": 0.0 }, { "name": "cmdline_obfuscation", "time": 0.0 }, { "name": "cmdline_switches", "time": 0.0 }, { "name": "cmdline_terminate", "time": 0.0 }, { "name": "cmdline_forfiles_wildcard", "time": 0.0 }, { "name": "cmdline_http_link", "time": 0.0 }, { "name": "cmdline_long_string", "time": 0.0 }, { "name": "cmdline_reversed_http_link", "time": 0.0 }, { "name": "long_commandline", "time": 0.0 }, { "name": "powershell_renamed_commandline", "time": 0.0 }, { "name": "copies_self", "time": 0.0 }, { "name": "credwiz_credentialaccess", "time": 0.0 }, { "name": "enables_wdigest", "time": 0.0 }, { "name": "vaultcmd_credentialaccess", "time": 0.0 }, { "name": "file_credential_store_access", "time": 0.001 }, { "name": "file_credential_store_write", "time": 0.0 }, { "name": "kerberos_credential_access_via_rubeus", "time": 0.0 }, { "name": "registry_credential_dumping", "time": 0.0 }, { "name": "registry_credential_store_access", "time": 0.001 }, { "name": "registry_lsa_secrets_access", "time": 0.001 }, { "name": "comsvcs_credentialdump", "time": 0.0 }, { "name": "cryptomining_stratum_command", "time": 0.0 }, { "name": "deepfreeze_mutex", "time": 0.0 }, { "name": "deletes_executed_files", "time": 0.0 }, { "name": "disables_app_launch", "time": 0.0 }, { "name": "disables_auto_app_termination", "time": 0.0 }, { "name": "disables_appv_virtualization", "time": 0.0 }, { "name": "disables_backups", "time": 0.001 }, { "name": "disables_browser_warn", "time": 0.001 }, { "name": "disables_context_menus", "time": 0.0 }, { "name": "disables_cpl_disable", "time": 0.0 }, { "name": "disables_crashdumps", "time": 0.0 }, { "name": "disables_event_logging", "time": 0.0 }, { "name": "disables_folder_options", "time": 0.0 }, { "name": "disables_notificationcenter", "time": 0.0 }, { "name": "disables_power_options", "time": 0.001 }, { "name": "disables_restore_default_state", "time": 0.0 }, { "name": "disables_run_command", "time": 0.0 }, { "name": "disables_smartscreen", "time": 0.0 }, { "name": "disables_startmenu_search", "time": 0.0 }, { "name": "disables_system_restore", "time": 0.0 }, { "name": "disables_uac", "time": 0.0 }, { "name": "disables_wer", "time": 0.0 }, { "name": "disables_windows_defender", "time": 0.0 }, { "name": "disables_windows_defender_logging", "time": 0.0 }, { "name": "removes_windows_defender_contextmenu", "time": 0.0 }, { "name": "removes_windows_defender_updates", "time": 0.0 }, { "name": "windows_defender_powershell", "time": 0.0 }, { "name": "disables_windows_file_protection", "time": 0.0 }, { "name": "disables_windowsupdate", "time": 0.0 }, { "name": "disables_winfirewall", "time": 0.0 }, { "name": "folder_enumeration", "time": 0.002 }, { "name": "discover_registry_mount_points", "time": 0.001 }, { "name": "adfind_domain_enumeration", "time": 0.0 }, { "name": "domain_enumeration_commands", "time": 0.0 }, { "name": "driver_filtermanager", "time": 0.001 }, { "name": "dropper", "time": 0.0 }, { "name": "dll_archive_execution", "time": 0.0 }, { "name": "lnk_archive_execution", "time": 0.0 }, { "name": "script_archive_execution", "time": 0.0 }, { "name": "excel4_macro_urls", "time": 0.0 }, { "name": "escalate_privilege_via_ntlm_relay", "time": 0.0 }, { "name": "spooler_access", "time": 0.0 }, { "name": "spooler_svc_start", "time": 0.0 }, { "name": "mapped_drives_uac", "time": 0.0 }, { "name": "hides_recycle_bin_icon", "time": 0.0 }, { "name": "infostealer_bitcoin", "time": 0.011 }, { "name": "infostealer_ftp", "time": 0.082 }, { "name": "infostealer_im", "time": 0.046 }, { "name": "infostealer_mail", "time": 0.016 }, { "name": "Evade_Execution_Via_ASPNet_Compiler", "time": 0.0 }, { "name": "Evade_Execute_Via_DeviceCredentialDeployment", "time": 0.0 }, { "name": "Evade_Execution_Via_Filter_Manager_Control", "time": 0.0 }, { "name": "Evade_Execution_Via_Intel_GFXDownloadWrapper", "time": 0.0 }, { "name": "execute_binary_via_appvlp", "time": 0.0 }, { "name": "execute_binary_via_pcalua", "time": 0.0 }, { "name": "Execute_Binary_Via_OpenSSH", "time": 0.0 }, { "name": "execute_binary_via_pcalua", "time": 0.0 }, { "name": "Execute_Binary_Via_PesterPSModule", "time": 0.0 }, { "name": "Execute_Binary_Via_ScriptRunner", "time": 0.0 }, { "name": "execute_binary_via_ttdinject", "time": 0.0 }, { "name": "Execute_Binary_Via_VisualStudioLiveShare", "time": 0.0 }, { "name": "Execute_Msiexec_Via_Explorer", "time": 0.0 }, { "name": "execute_remote_msi", "time": 0.0 }, { "name": "execute_suspicious_powershell_via_runscripthelper", "time": 0.0 }, { "name": "execute_suspicious_powershell_via_sqlps", "time": 0.0 }, { "name": "Indirect_Command_Execution_Via_ConsoleWindowHost", "time": 0.0 }, { "name": "Perform_Malicious_Activities_Via_Headless_Browser", "time": 0.0 }, { "name": "Register_DLL_Via_CertOC", "time": 0.0 }, { "name": "Register_DLL_Via_MSIEXEC", "time": 0.0 }, { "name": "Register_DLL_Via_Odbcconf", "time": 0.0 }, { "name": "Scriptlet_Proxy_Execution_Via_Pubprn", "time": 0.0 }, { "name": "ie_martian_children", "time": 0.0 }, { "name": "office_martian_children", "time": 0.0 }, { "name": "mimics_icon", "time": 0.0 }, { "name": "masquerade_process_name", "time": 0.019 }, { "name": "mimikatz_modules", "time": 0.0 }, { "name": "ms_office_cmd_rce", "time": 0.0 }, { "name": "mount_copy_to_webdav_share", "time": 0.0 }, { "name": "potential_protocol_tunneling_via_legit_utilities", "time": 0.0 }, { "name": "potential_protocol_tunneling_via_qemu", "time": 0.0 }, { "name": "suspicious_execution_via_dotnet_remoting", "time": 0.0 }, { "name": "modify_certs", "time": 0.0 }, { "name": "dotnet_clr_usagelog_regkeys", "time": 0.0 }, { "name": "modify_hostfile", "time": 0.0 }, { "name": "modify_oem_information", "time": 0.0 }, { "name": "modify_security_center_warnings", "time": 0.0 }, { "name": "modify_uac_prompt", "time": 0.0 }, { "name": "network_dns_blockchain", "time": 0.0 }, { "name": "network_dns_opennic", "time": 0.0 }, { "name": "network_dns_paste_site", "time": 0.0 }, { "name": "network_dns_reverse_proxy", "time": 0.0 }, { "name": "network_dns_temp_file_storage", "time": 0.0 }, { "name": "network_dns_temp_urldns", "time": 0.0 }, { "name": "network_dns_url_shortener", "time": 0.0 }, { "name": "network_dns_doh_tls", "time": 0.0 }, { "name": "suspicious_tld", "time": 0.0 }, { "name": "network_tor_service", "time": 0.001 }, { "name": "office_code_page", "time": 0.0 }, { "name": "office_addinloading", "time": 0.0 }, { "name": "office_perfkey", "time": 0.0 }, { "name": "office_macro", "time": 0.0 }, { "name": "changes_trust_center_settings", "time": 0.0 }, { "name": "disables_vba_trust_access", "time": 0.0 }, { "name": "office_macro_autoexecution", "time": 0.0 }, { "name": "office_macro_ioc", "time": 0.0 }, { "name": "office_macro_malicious_prediction", "time": 0.0 }, { "name": "office_macro_suspicious", "time": 0.0 }, { "name": "rtf_aslr_bypass", "time": 0.0 }, { "name": "rtf_anomaly_characterset", "time": 0.0 }, { "name": "rtf_anomaly_version", "time": 0.0 }, { "name": "rtf_embedded_content", "time": 0.0 }, { "name": "rtf_embedded_office_file", "time": 0.0 }, { "name": "rtf_exploit_static", "time": 0.0 }, { "name": "office_security", "time": 0.0 }, { "name": "accesses_office_username", "time": 0.001 }, { "name": "office_anomalous_feature", "time": 0.0 }, { "name": "office_dde_command", "time": 0.0 }, { "name": "packer_armadillo_mutex", "time": 0.0 }, { "name": "packer_armadillo_regkey", "time": 0.001 }, { "name": "persistence_ads", "time": 0.0 }, { "name": "persistence_safeboot", "time": 0.0 }, { "name": "persistence_ifeo", "time": 0.0 }, { "name": "persistence_silent_process_exit", "time": 0.0 }, { "name": "persistence_rdp_registry", "time": 0.0 }, { "name": "persistence_rdp_shadowing", "time": 0.0 }, { "name": "persistence_service", "time": 0.0 }, { "name": "persistence_shim_database", "time": 0.0 }, { "name": "powershell_scriptblock_logging", "time": 0.0 }, { "name": "powershell_command_suspicious", "time": 0.0 }, { "name": "powershell_history_save_mod", "time": 0.0 }, { "name": "powershell_renamed", "time": 0.0 }, { "name": "powershell_reversed", "time": 0.0 }, { "name": "powershell_variable_obfuscation", "time": 0.0 }, { "name": "prevents_safeboot", "time": 0.0 }, { "name": "cmdline_process_discovery", "time": 0.0 }, { "name": "ransomware_extensions_generic", "time": 0.0 }, { "name": "ransomware_extensions_known", "time": 0.003 }, { "name": "ransomware_files", "time": 0.004 }, { "name": "ransomware_recyclebin", "time": 0.0 }, { "name": "ransomware_revil_regkey", "time": 0.0 }, { "name": "reads_password_database", "time": 0.001 }, { "name": "recon_fingerprint", "time": 0.002 }, { "name": "rdptcp_key", "time": 0.0 }, { "name": "uses_rdp_clip", "time": 0.0 }, { "name": "uses_remote_desktop_session", "time": 0.0 }, { "name": "removes_networking_icon", "time": 0.0 }, { "name": "removes_pinned_programs", "time": 0.0 }, { "name": "removes_security_maintenance_icon", "time": 0.0 }, { "name": "removes_startmenu_defaults", "time": 0.0 }, { "name": "removes_username_startmenu", "time": 0.0 }, { "name": "sniffer_winpcap", "time": 0.001 }, { "name": "spreading_autoruninf", "time": 0.0 }, { "name": "stealth_hidden_extension", "time": 0.0 }, { "name": "stealth_hiddenreg", "time": 0.0 }, { "name": "stealth_hide_notifications", "time": 0.0 }, { "name": "stealth_webhistory", "time": 0.0 }, { "name": "sysinternals_psexec", "time": 0.0 }, { "name": "sysinternals_tools", "time": 0.0 }, { "name": "language_check_registry", "time": 0.0 }, { "name": "tampers_etw", "time": 0.0 }, { "name": "lsa_tampering", "time": 0.0 }, { "name": "tampers_powershell_logging", "time": 0.0 }, { "name": "territorial_disputes_sigs", "time": 0.074 }, { "name": "uses_adfind", "time": 0.0 }, { "name": "uses_ms_protocol", "time": 0.0 }, { "name": "owa_web_shell_files", "time": 0.0 }, { "name": "web_shell_files", "time": 0.0 }, { "name": "web_shell_processes", "time": 0.0 }, { "name": "dotnet_csc_build", "time": 0.0 }, { "name": "mavinject_lolbin", "time": 0.0 }, { "name": "multiple_explorer_instances", "time": 0.0 }, { "name": "script_tool_executed", "time": 0.0 }, { "name": "suspicious_certutil_use", "time": 0.0 }, { "name": "suspicious_command_tools", "time": 0.0 }, { "name": "suspicious_mpcmdrun_use", "time": 0.0 }, { "name": "suspicious_ping_use", "time": 0.0 }, { "name": "uses_powershell_copyitem", "time": 0.0 }, { "name": "uses_windows_utilities", "time": 0.0 }, { "name": "uses_windows_utilities_appcmd", "time": 0.0 }, { "name": "uses_windows_utilities_csvde_ldifde", "time": 0.0 }, { "name": "uses_windows_utilities_cipher", "time": 0.0 }, { "name": "uses_windows_utilities_clickonce", "time": 0.0 }, { "name": "uses_windows_utilities_curl", "time": 0.0 }, { "name": "uses_windows_utilities_dsquery", "time": 0.0 }, { "name": "uses_windows_utilities_esentutl", "time": 0.0 }, { "name": "uses_windows_utilities_finger", "time": 0.0 }, { "name": "uses_windows_utilities_mode", "time": 0.0 }, { "name": "uses_windows_utilities_ntdsutil", "time": 0.0 }, { "name": "uses_windows_utilities_nltest", "time": 0.0 }, { "name": "uses_windows_utilities_setx", "time": 0.0 }, { "name": "uses_windows_utilities_xcopy", "time": 0.0 }, { "name": "wmic_command_suspicious", "time": 0.0 }, { "name": "scrcons_wmi_script_consumer", "time": 0.0 } ], "reporting": [ { "name": "BinGraph", "time": 0.0 } ] }, "target": { "category": "file", "file": { "name": "HTMLive.exe", "path": "/opt/CAPEv2/storage/binaries/dfc699781837e22302e61c78c7c4d39694b26a3dcc61da7d4e163bdcbb8f3434", "guest_paths": "", "size": 151040, "crc32": "350946E6", "md5": "dd8298f66e20ce262d9726dd72bcab0c", "sha1": "a4bc6e9479d4639bd3de2061e957fcac30bbc7c6", "sha256": "dfc699781837e22302e61c78c7c4d39694b26a3dcc61da7d4e163bdcbb8f3434", "sha512": "e41331e9de21c360b0db86028cf4ee82018a3f04e431a9b727f7a149cefde63085ddbcad466a1b3532429652e676ca8c8adcad7d182ce035b58263ea9ff0cab0", "rh_hash": null, "ssdeep": "3072:diCavxHdbxLytt25RRzmJVmbXQr1j5V1HbiPzaVNfE0yiC:tyzgVmbAr15j", "type": "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows", "yara": [], "cape_yara": [], "clamav": [], "tlsh": "T1DAE3C52236D86757EA7D73B519F0002482F2ED164132E70E7C69716E0EF9742CFA2B5A", "sha3_384": "44366c6713a742f2a707203379e810ed2a5df052e59b8a84f42eff1ea8c4d9942d91f391affa55307b5b2aadb3eb7e06", "yara_hash": "68e243d1d9aeb1f1e94057af9823c58e140832514ed3e7b46b181bf94e4e12ce", "options_hash": "b7818797508282994ea72592ded64b364725c9400a38d418189579c94a89385e", "pe": { "guest_signers": { "aux_sha1": null, "aux_timestamp": null, "aux_valid": false, "aux_error": true, "aux_error_desc": "File not found: C:\\Users\\Rajesh\\AppData\\Local\\Temp\\53\\HTMLive.exe", "aux_signers": [] }, "digital_signers": [], "imagebase": "0x00400000", "entrypoint": "0x000224ee", "ep_bytes": "ff250020400000000000000000000000", "peid_signatures": null, "reported_checksum": "0x00000000", "actual_checksum": "0x000281a0", "osversion": "4.0", "machine_type": "IMAGE_FILE_MACHINE_I386", "pdbpath": "C:\\Users\\Phillip\\documents\\visual studio 2010\\Projects\\livehtml\\livehtml\\obj\\x86\\Release\\livehtml.pdb", "imports": { "mscoree": { "dll": "mscoree.dll", "imports": [ { "address": "0x402000", "name": "_CorExeMain" } ] } }, "exported_dll_name": null, "exports": [], "dirents": [ { "name": "IMAGE_DIRECTORY_ENTRY_EXPORT", "virtual_address": "0x00000000", "size": "0x00000000" }, { "name": "IMAGE_DIRECTORY_ENTRY_IMPORT", "virtual_address": "0x00022498", "size": "0x00000053" }, { "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE", "virtual_address": "0x00026000", "size": "0x00003f28" }, { "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION", "virtual_address": "0x00000000", "size": "0x00000000" }, { "name": "IMAGE_DIRECTORY_ENTRY_SECURITY", "virtual_address": "0x00000000", "size": "0x00000000" }, { "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC", "virtual_address": "0x0002a000", "size": "0x0000000c" }, { "name": "IMAGE_DIRECTORY_ENTRY_DEBUG", "virtual_address": "0x00024000", "size": "0x0000001c" }, { "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT", "virtual_address": "0x00000000", "size": "0x00000000" }, { "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR", "virtual_address": "0x00000000", "size": "0x00000000" }, { "name": "IMAGE_DIRECTORY_ENTRY_TLS", "virtual_address": "0x00000000", "size": "0x00000000" }, { "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG", "virtual_address": "0x00000000", "size": "0x00000000" }, { "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT", "virtual_address": "0x00000000", "size": "0x00000000" }, { "name": "IMAGE_DIRECTORY_ENTRY_IAT", "virtual_address": "0x00002000", "size": "0x00000008" }, { "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT", "virtual_address": "0x00000000", "size": "0x00000000" }, { "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR", "virtual_address": "0x00002008", "size": "0x00000048" }, { "name": "IMAGE_DIRECTORY_ENTRY_RESERVED", "virtual_address": "0x00000000", "size": "0x00000000" } ], "sections": [ { "name": ".text", "raw_address": "0x00000400", "virtual_address": "0x00002000", "virtual_size": "0x000204f4", "size_of_data": "0x00020600", "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ", "characteristics_raw": "0x60000020", "entropy": "5.73" }, { "name": ".sdata", "raw_address": "0x00020a00", "virtual_address": "0x00024000", "virtual_size": "0x0000009a", "size_of_data": "0x00000200", "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE", "characteristics_raw": "0xc0000040", "entropy": "2.22" }, { "name": ".rsrc", "raw_address": "0x00020c00", "virtual_address": "0x00026000", "virtual_size": "0x00003f28", "size_of_data": "0x00004000", "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ", "characteristics_raw": "0x40000040", "entropy": "5.91" }, { "name": ".reloc", "raw_address": "0x00024c00", "virtual_address": "0x0002a000", "virtual_size": "0x0000000c", "size_of_data": "0x00000200", "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ", "characteristics_raw": "0x42000040", "entropy": "0.10" } ], "overlay": null, "resources": [ { "name": "RT_ICON", "offset": "0x00026440", "size": "0x00000468", "filetype": null, "language": "LANG_NEUTRAL", "sublanguage": "SUBLANG_NEUTRAL", "entropy": "6.01" }, { "name": "RT_ICON", "offset": "0x000268a8", "size": "0x000010a8", "filetype": null, "language": "LANG_NEUTRAL", "sublanguage": "SUBLANG_NEUTRAL", "entropy": "6.19" }, { "name": "RT_ICON", "offset": "0x00027950", "size": "0x000025a8", "filetype": null, "language": "LANG_NEUTRAL", "sublanguage": "SUBLANG_NEUTRAL", "entropy": "5.96" }, { "name": "RT_GROUP_ICON", "offset": "0x00029ef8", "size": "0x00000030", "filetype": null, "language": "LANG_NEUTRAL", "sublanguage": "SUBLANG_NEUTRAL", "entropy": "2.49" }, { "name": "RT_VERSION", "offset": "0x00026148", "size": "0x000002f4", "filetype": null, "language": "LANG_NEUTRAL", "sublanguage": "SUBLANG_NEUTRAL", "entropy": "3.26" } ], "versioninfo": [ { "name": "Translation", "value": "0x0000 0x04b0" }, { "name": "CompanyName", "value": "12padams" }, { "name": "FileDescription", "value": "livehtml" }, { "name": "FileVersion", "value": "0.4.0.0" }, { "name": "InternalName", "value": "livehtml.exe" }, { "name": "LegalCopyright", "value": "Copyright © 12padams 2010" }, { "name": "OriginalFilename", "value": "livehtml.exe" }, { "name": "ProductName", "value": "livehtml" }, { "name": "ProductVersion", "value": "0.4.0.0" }, { "name": "Assembly Version", "value": "0.4.0.0" } ], "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744", "timestamp": "2010-11-21 12:05:22", "icon": "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", "icon_hash": "ad28893065a52c08b5a6a12d55314087", "icon_fuzzy": "65012ba4fce4a99e4b663d6321f8ef80", "icon_dhash": "1f49cc8ccccccd27", "imported_dll_count": 1 }, "data": null, "strings": [ "CCS_Word_Spacing", "ShowDialog", "repeat-y: The background image will be repeated vertically.", "startcode", "page and the text.", "DecorationToolStripMenuItem_Click", "set_SaveAsToolStripMenuItem", "_NewHorizontalItemToolStripMenuItem", "New Horizontal Item ", "set_HeadingsToolStripMenuItem", "Color", "CCSToolStripMenuItem", "get_LetterSpacingToolStripMenuItem", "AssemblyTrademarkAttribute", "m_CCS_Text_Align", "teroffact", "Possible Format Methods:", "right top", "Value", "m_FormBeingCreated", "get_Items", "Local image locations will not display in the preview", "ComVisibleAttribute", "Javascript_Function", "LineHeightToolStripMenuItem_Click", "AlertBoxToolStripMenuItem", "ListsToolStripMenuItem", "get_IndentToolStripMenuItem", "m_CCS_Text_Shadow", "HtmL-ive 0.5.7 - by 12padams / ", "oldselstart", "set_OpenFileDialog1", "get_Heading4h4ToolStripMenuItem", "System.Threading", "get_ColorToolStripMenuItem", "Indent", "TextBox", "AssemblyProductAttribute", "System.Globalization", "get_CCS_Text_Color", "Minimum:", "set_TextBox1", "HtmlToolStripMenuItem", "DebuggableAttribute", "_ItaliciToolStripMenuItem", "Font weight is how bold the text is.", "_DecorationToolStripMenuItem", "sender", "superfrench", "_ColorToolStripMenuItem", "set_Checked", "text-shadow: ", "Background Image", "turalight bt", "BackgroundrepeatToolStripMenuItem_Click", "livehtml.Resources", "set_RichTextBox1", "_Heading6h6ToolStripMenuItem", "_SubscriptedsupToolStripMenuItem", "get_SubscriptedsupToolStripMenuItem", "_HorizontalToolStripMenuItem", "SplitToolStripMenuItem", "cademy engraved let", "_CCSCustomTagPropertiesToolStripMenuItem", "htmllinktext", "set_Label1", "set_Heading3h3ToolStripMenuItem", "HorizontalToolStripMenuItem", "FileDialog", "AssemblyFileVersionAttribute", "set_RandomNumberToolStripMenuItem", "$this.Icon", "set_CCS_Background_Image", "set_Label7", "Background Repeat", "FontToolStripMenuItem", "set_Title", "You also have the option of the % where 0% 0% is the top left corner", "set_TabIndex", "VerticalAlignToolStripMenuItem", "set_Heading5h5ToolStripMenuItem", "Label7", "set_WeightToolStripMenuItem", "that you want to have the text indented.", "mekanik let", "Concat", "A timeout in Javascript allows an action to be performed after a set time", "FunctionToolStripMenuItem_Click", "get_Panel1", "Fixed", "QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a", "Javascript Random Number", "MyTemplate", "Conversions", "bolder", "SubscriptedsupToolStripMenuItem_Click", "TargetFrameworkAttribute", "want to have your image using x and y coordinates", "BackgroundimageToolStripMenuItem_Click", "ToDouble", "Settings", "This program will generate a random full number (without decimal places) between the min and max values set below", "While 100% 100% is the bottom right corner", "Alternate Text:", "", "get_UnderlineuToolStripMenuItem", "set_AToolStripMenuItem", "BackgroundcolorToolStripMenuItem_Click", "get_Controls", "Math.floor(Math.random()*", "set_ckblive", "arial", "", "get_SplitToolStripMenuItem", "", "the letters to overlap eachother", "AccessedThroughPropertyAttribute", "get_BoldToolStripMenuItem", "Y coordinate:", "Activator", "%BackgroundattachmentToolStripMenuItem", "rtl: The writing direction is right-to-left", "get_IsDisposed", "System.Diagnostics", "get_Forms", "arial black", "ccs_background_color", "balthazar", "Write", "CCS_Text_Color", "AToolStripMenuItem_Click", "WeightToolStripMenuItem_Click", "ControlCollection", "Instance", "NewItemToolStripMenuItem_Click", "left top", "Table Format Setup", "Link Text:", "set_CCS_Background_Attachment", "set_Form1", "get_RichTextBox1", "get_BackgroundrepeatToolStripMenuItem", "HorizontalToolStripMenuItem_Click", "_SaveAsToolStripMenuItem", "PHPStructureSetupToolStripMenuItem_Click", "get_Form1", "RandomNumberToolStripMenuItem", "repeat-y", "ComboBox1", "$5b21b810-a004-44e9-821c-1b0eb011ab4f", "CCSToolStripMenuItem1_Click", "_CodeToolStripMenuItem", "GetInstance", "britannic bold", "livehtml.CCS_Text_Direction.resources", "_TimedToolStripMenuItem", "AssemblyDescriptionAttribute", "RandomNumberToolStripMenuItem_Click", "LetterSpacingToolStripMenuItem_Click", "get_FileName", "ErrInfo", "Orientation", "set_Button1", "WeightToolStripMenuItem", "LinkToolStripMenuItem_Click", "bookman old style", "CCS_Font_Weight", "FunctionToolStripMenuItem", "Shadow", "get_TextBox4", "Synchronized", "SaveToolStripMenuItem", "coolsville", "ToolStripItemCollection", "", "WebBrowser", "TextToolStripMenuItem", "disposing", "trendy", "puppylike", "CCS_Letter_Spacing", "set_SaveFileDialog1", "", "OnCreateMainForm", "get_BackgroundpositionToolStripMenuItem", "SaveTextToFile", "CCS Background Position", "get_BackgroundToolStripMenuItem", "background-repeat:", "set_htmllink", "get_DeleteddelToolStripMenuItem", "VerticalToolStripMenuItem_Click", "ObjectCollection", "_TableToolStripMenuItem", "_SplitToolStripMenuItem", "set_Heading6h6ToolStripMenuItem", "get_FontToolStripMenuItem", "BackgroundrepeatToolStripMenuItem", "set_ClientSize", "CCS Custom Tag Properties", "Table Heading ", "get_Label6", "Direction", "A normal line height.", "v4.0.30319", "m_CCS_Text_Indent", "set_BackgroundpositionToolStripMenuItem", "set_DefaultExt", "", "CCS Text Align", " BackgroundimageToolStripMenuItem", "_BackgroundattachmentToolStripMenuItem", "add_Click", "get_SaveFileDialog1", "_ImageList1", "Split", "get_LineHeightToolStripMenuItem", "monospace", "set_DeleteddelToolStripMenuItem", "get_SaveAsToolStripMenuItem1", "SuperscriptedsupToolStripMenuItem_Click", "AToolStripMenuItem", "set_Text", "Scroll", "get_DocumentTitle", "Application", "Javascript_Timeout", "get_TableToolStripMenuItem", "", "add_Shutdown", "set_TextToolStripMenuItem1", "Javascript Function", "get_AToolStripMenuItem", "set_Name", "livehtml.My.Resources", "_Label2", "_DirectionToolStripMenuItem", "SaveAsToolStripMenuItem1", "set_BackgroundcolorToolStripMenuItem", "_ShadowToolStripMenuItem", "capitalize", "overline", "Button", "underline: Defines a line below the text", "UnorderedListulToolStripMenuItem", "Blur Radius:", "Choose Here", "_BackgroundcolorToolStripMenuItem", "System.IO", "ToolStrip", "set_CCS_Font_Size", "DesignerGeneratedAttribute", "set_DirectionToolStripMenuItem", "CCS_Line_Height", "set_Icon", "font-weight:", "CCS Letter Spacing", "Label9", "BackgroundattachmentToolStripMenuItem_Click", "* Hex - a hex value, like \"#0000FF\"", "ColorToolStripMenuItem_Click", "set_HTML_Image", "get_TextToolStripMenuItem", "set_Label3", "", "OpenFileDialog1", "set_NewRowtrToolStripMenuItem", "InvalidOperationException", "color:", "SaveAsToolStripMenuItem", "", "m_CCS_Text_Direction", "get_Label1", "New Row ", "Heading 1

", "CCS_Background_Image", "_NewItemToolStripMenuItem", "Label3", "set_CCS_Text_Indent", "livehtml.CCS_Font_Family.resources", "WinForms_RecursiveFormCreate", "ShutdownMode", "Label", "set_HtmlStructureToolStripMenuItem", "FontSizeToolStripMenuItem", "ViewToolStripMenuItem", "height", "impact", "background-position:", "transform the text", "get_Heading2h2ToolStripMenuItem", "set_NewItemToolStripMenuItem", "get_CheckState", "Line Height", "HideModuleNameAttribute", "Label8", "get_AlertBoxToolStripMenuItem", "WithEventsValue", "get_TextToolStripMenuItem1", "Time (ms):", "get_VerticalToolStripMenuItem", "_HeadingsToolStripMenuItem", "livehtml.CCS_Text_Indent.resources", "Underline ", " BackgroundcolorToolStripMenuItem", " none", "Maximum:", "components", "ImageList1", "", "matura mt script capitals", "Scroll: Background scrolls with the page", "set_Heading2h2ToolStripMenuItem", "m_CCS_Letter_Spacing", "m_CCS_Text_Transform", "CheckState", "CCSCustomTagPropertiesToolStripMenuItem", "ImageList", "_PHPStructureSetupToolStripMenuItem", "get_FileSystem", "set_LinkToolStripMenuItem", "get_BackgroundcolorToolStripMenuItem", "livehtml.CCS_background_Repeat.resources", "set_DecorationToolStripMenuItem", "MySettings", "get_NewHorizontalItemToolStripMenuItem", "get_DecorationToolStripMenuItem", "AssemblyTitleAttribute", "", "set_SubscriptedsupToolStripMenuItem", "VerticalToolStripMenuItem", "sans-serif", "get_ItaliciToolStripMenuItem", "get_SaveMySettingsOnExit", "set_MainForm", "line-through", "!This program cannot be run in DOS mode.", "remove_TextChanged", "Use Combo Box below to choose how you want", "if typed like this: \"/test.jpg\" but will appear when the user", "X coordinate:", "RichTextBox1_TextChanged", "length: ", "VarFileInfo", "My.Application", "_FontToolStripMenuItem", "set_ShadowToolStripMenuItem", "get_CCS_Text_Decoration", "", "livehtml.htmllink.resources", "get_Label3", "set_CCS_Letter_Spacing", "get_SelectionLength", "marlett", "GetObject", "System.Windows.Forms", "colonna mt", "get_GetInstance", "geotype tt", "Unordered List Setup
    ", "ProductVersion", "AuthenticationMode", "ShadowToolStripMenuItem_Click", "get_HorizontalToolStripMenuItem", "DirectionToolStripMenuItem", "get_TextBox2", "_JavascriptToolStripMenuItem", "set_CCS_Background_Position", "get_VerticalAlignToolStripMenuItem", "livehtml.CCS_Text_Transform.resources", "livehtml.CCS_Font_Size.resources", "Link Location:", "MenuStrip", "DeleteddelToolStripMenuItem", "TextBox2", "book antiqua", "get_CCSToolStripMenuItem1", "set_SaveMySettingsOnExit", "\"PHPStructureSetupToolStripMenuItem", "Hashtable", "wingdings", "ServerComputer", "TextBox4", "Assembly Version", "TextToolStripMenuItem3", "text-align:", "CCSToolStripMenuItem1", "_ViewToolStripMenuItem", "lowercase", "MyProject", "vineta bt", "word-spacing:", "TimedToolStripMenuItem_Click", "cursive", "System.ComponentModel.Design", "add_CheckedChanged", "set_Label8", "SaveToolStripMenuItem_Click", "Assembly", "SaveFileDialog1", "set_SplitToolStripMenuItem", "set_UnorderedListulToolStripMenuItem", "background-color:", "set_CCSToolStripMenuItem1", "livehtml.CCS_Background_Attachment.resources", "_TextBox2", "livehtml.CCS_Text_Decoration.resources", "new york", "get_Heading5h5ToolStripMenuItem", "get_CCS_Font_Size", "get_SaveAsToolStripMenuItem", "Close", "Javascript Timeout", "century schoolbook", "GetString", "strData", "TextBoxBase", "set_Label6", "background-image:url('", "set_UseVisualStyleBackColor", "UriKind", "set_CCS_Font_Weight", "_MenuStrip1", "set_VerticalToolStripMenuItem", "simplex", "_VerticalAlignToolStripMenuItem", "set_MinimumSize", "RuntimeCompatibilityAttribute", "line-height:", "_BackgroundrepeatToolStripMenuItem", "left center", "Enter in the textbox the amount in pixels", "You also can specify the % from normal size (e.g. 50%)", "set_FontSizeToolStripMenuItem", "ObjectFlowControl", "RichTextBox1", "Not all browsers can display all fonts but you may type your", "get_CCS_Font_Family", "small", "ltr: The writing direction is left-to-right.", "set_BoldToolStripMenuItem", "x-large", "_SaveAsToolStripMenuItem1", "WebServices", "get_WebServices", "swis721 blkoul bt", "orange let", "Save website", "Image Url:", "Heading5h5ToolStripMenuItem", "000004b0", "set_Javascript_Timeout", "m_CCS_Font_Weight", "EditorBrowsableAttribute", "mscoree.dll", "Action:", "_ListItemliToolStripMenuItem", "EventArgs", "medium", "Monitor", "get_ckblive", "m_ccs_background_color", "the image was for any reason unable to be", "NewRowtrToolStripMenuItem", "System.Collections", "surfer", "Heading4h4ToolStripMenuItem_Click", "text-indent:", "set_TransformToolStripMenuItem", "set_IsSingleInstance", "set_AutoSize", "Property can only be set to Nothing", "m_CCS_Font_Size", "get_CCS_Letter_Spacing", "_LinkToolStripMenuItem", "get_TransformToolStripMenuItem", "font-family:'", "m_ThreadStaticValue", "loads the website. It is recommended to use your websites", "symbol", "This text is displayed in the title of the web browser", "AnchorStyles", "StreamWriter", "right center", "get_WebBrowser1", "Use the combobox below to chose where you want your image displayed:", "get_Default", "Heading1h1ToolStripMenuItem_Click", "_WebBrowser1", "set_BackgroundattachmentToolStripMenuItem", "m_CCS_Text_Color", "Word Spacing", "LinkToolStripMenuItem", "chasm", "_QuitToolStripMenuItem", "", "livehtml.ccs_background_color.resources", "m_CCS_background_Repeat", "BackgroundpositionToolStripMenuItem_Click", "Leave \"Link Text\" blank if you have highlighted text", "get_Length", "get_SelectionStart", "Heading6h6ToolStripMenuItem_Click", "The \"blink\" value is not supported in IE, Chrome ", "get_OpenFileDialog1", "Object", "FontSizeToolStripMenuItem_Click", "SaveFileDialog", "IDisposable", "_StartJavascriptToolStripMenuItem", "alt='", "livehtml.CCS_Font_Weight.resources", "", "set_EnableVisualStyles", "", "superscripted ", "NewHorizontalItemToolStripMenuItem", "ColorToolStripMenuItem", "Environment", "NewItemToolStripMenuItem", "Link Options", "john handy let", "thYO{vq", "helterskelter", "", "HtmlStructureToolStripMenuItem", "_UnderlineuToolStripMenuItem", "m_CCS_customize_tag", "ReadAllText", "Resources", "alert('", "set_MaximumSize", "12padams", " StartJavascriptToolStripMenuItem", "_OpenFileDialog1", "CompilationRelaxationsAttribute", "set_TextBox4", "_TextToolStripMenuItem", "", "set_MenuStrip1", "HeadingsToolStripMenuItem", "SettingsBase", "FileToolStripMenuItem", "