Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: mscoree.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: apphelp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: kernel.appcore.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: version.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: vcruntime140_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: uxtheme.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: windows.storage.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: wldp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: profapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: cryptsp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: rsaenh.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: cryptbase.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: amsi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: userenv.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: msasn1.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: gpapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Section loaded: windowscodecs.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: mscoree.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: kernel.appcore.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: version.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: vcruntime140_clr0400.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: uxtheme.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: windows.storage.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: wldp.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: profapi.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: cryptsp.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: rsaenh.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: cryptbase.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: wbemcomn.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: amsi.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: userenv.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: sspicli.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: vaultcli.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: wintypes.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: iphlpapi.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: dnsapi.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: dhcpcsvc6.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: dhcpcsvc.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: winnsi.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: mswsock.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: rasadhlp.dll |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Section loaded: fwpuclnt.dll |
Jump to behavior |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, l3uKDiGEukCXQ10mb1.cs |
High entropy of concatenated method names: 'K6dfnkDS5', 'ms6FqFT5r', 'yP5Pkef6Q', 'hDGArSZrf', 'MpXoojA50', 'SYBhjNu1r', 'I4t0mYQSfa1vTGMeQc', 'eqMsFv2kM25xF444NG', 'GaUI0CkIX', 'zyaWtYqru' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, DNjYqavbeRfGYMOMNx.cs |
High entropy of concatenated method names: 'VgLHZOIS4c', 'iiNHoMM8SB', 'xZtHKTpDEM', 'wq9HeNkVXt', 'yYSHBxDPKH', 'OmDHtoAW1W', 'XiAH8mXFH9', 'wvTH0XGyYi', 'gh6HJZChsE', 'bvEH2FpNXx' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, il3qo0bBxWcPXwwvUq.cs |
High entropy of concatenated method names: 'ToString', 'JchY2qlZhU', 'rNOYeBB7q9', 'QAyYXpaQbZ', 'FPKYBbEOFK', 'WwyYtMeGp2', 'klQYl4oqg5', 'guoY8wB94n', 'mLOY02t0DD', 'fXiY3SWYbG' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, yJ5mACQQOvtCvII9Xry.cs |
High entropy of concatenated method names: 'ToString', 'kFwW9gcw8j', 'akdWD7LW0u', 'iG0WwNDVMe', 'Q4DW5If8lf', 'KIsWTMMkev', 'xXCWCOd5YY', 'mjoWRYcokE', 'K8gSeWYZcvf464xi9qk', 'UESJrWYr7bCauaE12DJ' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, WE8gUVL1pn26BaBie1.cs |
High entropy of concatenated method names: 'XUwIKU0jE0', 'grfIeTpI0h', 'FkDIXTcRwG', 'c4CIBJmqql', 'WwfI194RFr', 'eCbItENhha', 'Next', 'Next', 'Next', 'NextBytes' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, fBIFARM1dNcGpWBBWF.cs |
High entropy of concatenated method names: 'QJ19wAWq5Y', 'OUh95bGpWl', 'OWL9TSyJZM', 'mCt9Cut4WZ', 'fdO9RQ1Bc9', 'mMh9c6shW1', 'd2A9iWeFsw', 'dbK9MDmYHI', 'dbE9p39U5i', 'Se09khV9BS' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, IMHNqa1GwxHuBX79pe.cs |
High entropy of concatenated method names: 'Q007J9Opin', 'wIA7SfIy8n', 'MnK71Fgd3l', 'eJG7EyJppi', 'rFL7eCq3bc', 'Isq7XwlW7j', 'OBk7BG7sRK', 'Vau7tpVoip', 'R0E7luX35Z', 'hX478Ei0mh' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, Pb2E018WVNi9US0kvR.cs |
High entropy of concatenated method names: 'zM6i5E90sl', 'PgXiCxmeLG', 'bGKicgDURM', 'laOcaB8fTY', 'HOPczk4OdM', 'bP3iUsAuJO', 'G0biQPHL7Q', 'DDtiGTJBoS', 'QQ2i9paUlR', 'aoxiDgkUY4' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, X80DMSQ97ppGTWh50QH.cs |
High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'GPMW1ZnWeJ', 'HjPWEvaUrt', 'dcUWbBoeUQ', 'ipGWjGmXn0', 'jh6WnmTJQA', 'xyVWxts2a8', 'j2fWVm2Dph' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, OAkLgt3hVcB8a4TNPx.cs |
High entropy of concatenated method names: 'vBxi6UpN9B', 'XgVi4lyq0L', 'IfTifab76N', 'XQAiFJ9SWq', 'gTRiy3y09i', 'M1uiP7TuAv', 'LfHiADZFaR', 'UD2iZk02y0', 'oUhioYfEe6', 'Pd4ihbso1S' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, uY4pkiqDqX0kyNCuhi.cs |
High entropy of concatenated method names: 'XaxI57FQqO', 'n9rITsxy0A', 'TcPICPBBWB', 'cAGIRq9DLd', 'ATSIclExRT', 'gBLIi8iNQQ', 'ALLIMR7WH5', 'JxnIpBp5hp', 'VDDIkWNKMk', 'F8CIdIeF98' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, GDG5GMxJTp6njGdYES.cs |
High entropy of concatenated method names: 'FNpuqpxNnm', 'mIMuaEbPcO', 'qxHIUBZgXQ', 'RKrIQrMKov', 'ucKu2XSbxw', 'k0IuScc3Qn', 'gBSuvIMO57', 'cTbu1RQEHn', 'JnduEAHEEg', 'RDwub82bSL' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, dZ7lISDHl5QeJd73Tb.cs |
High entropy of concatenated method names: 'Gl8QiTAbF3', 'aBqQMJsYnu', 'aLlQkSOtTS', 'Fh7Qdd4FBb', 'scJQ7h5MbI', 'btXQYVwrlc', 'fD64FhAasOnoDhouFl', 'gFQJpqZ9RM2AuYfsHs', 'amNQQKW9rE', 'Q6vQ9DI7cm' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, zOZnVUoLlSOtTSKh7d.cs |
High entropy of concatenated method names: 'vPXCFQ68Zm', 'zfyCPH8sOY', 'mIGCZSCMgw', 'xoHCoF8Off', 'fFIC7UUryX', 'pxbCY3aNBp', 'BKJCulHbU5', 'updCI2X4TX', 'xttCOKyxTp', 'wguCWrndS2' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, CvEX3yQUapj0dPs76S0.cs |
High entropy of concatenated method names: 'wybO6t6uuQ', 'mq4O4kMn0v', 'yjmOfC8mNW', 'oe0OFsIc03', 'KekOyJPamB', 'PqYOPeIdrN', 'I1mOAr30br', 'k3cOZZNPwN', 'pGmOore6GS', 'LLFOhYrQWl' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, QUMQenaZE0bN9GbMZg.cs |
High entropy of concatenated method names: 'IK9OQmU98V', 'FtKO9sx9T7', 'jweODCXuDu', 'sLnO5ReX9i', 'xsDOTypdft', 'UmFORwnMd4', 'nD5OcvAQDF', 'DycIV4RDy2', 'SW2IqwiqP2', 'HLAIL1dXk5' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, kbIQtXKVwrlcFiSqxx.cs |
High entropy of concatenated method names: 'g9Icw0d8Ao', 'AoZcTEk1Tg', 'JRpcRBWDYL', 's1ZciqN2PK', 'jPycMpL3nv', 'yF5RnmfGCv', 'InsRxJOmQ6', 'A2RRVNPTDK', 'iLjRqd0DB0', 'tBqRLCiitR' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, LTAbF3ZUBqJsYnuwhW.cs |
High entropy of concatenated method names: 'sCHT16FA56', 'qY6TEqYnmK', 'pGcTbYxUkK', 'lsiTjmvvXt', 'PWHTnkXG5Y', 'aKbTxToV0D', 'bF8TVO1r8B', 'NQZTqOJ0Br', 'pZiTLWaotn', 'E90TaFB3bP' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, BUANBPjKABgFDh7hbJ.cs |
High entropy of concatenated method names: 'BAEuk8McdZ', 'l9rudYcI30', 'ToString', 'o3Hu5Xd5VC', 'tcYuTbcfCj', 'mdEuC0qV83', 'kWXuRssVSy', 'X6yucdjPmE', 'FcQui8hO5i', 'KNCuMcU7FL' |
Source: 0.2.SWIFT.exe.4f02210.8.raw.unpack, as7UGTTrgSge76n5y2.cs |
High entropy of concatenated method names: 'Dispose', 'iiyQLexZb8', 'elLGeFcgJs', 'RVissELPgg', 'emYQa4pkiD', 'WX0QzkyNCu', 'ProcessDialogKey', 'FiqGUE8gUV', 'RpnGQ26BaB', 'je1GGvUMQe' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, l3uKDiGEukCXQ10mb1.cs |
High entropy of concatenated method names: 'K6dfnkDS5', 'ms6FqFT5r', 'yP5Pkef6Q', 'hDGArSZrf', 'MpXoojA50', 'SYBhjNu1r', 'I4t0mYQSfa1vTGMeQc', 'eqMsFv2kM25xF444NG', 'GaUI0CkIX', 'zyaWtYqru' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, DNjYqavbeRfGYMOMNx.cs |
High entropy of concatenated method names: 'VgLHZOIS4c', 'iiNHoMM8SB', 'xZtHKTpDEM', 'wq9HeNkVXt', 'yYSHBxDPKH', 'OmDHtoAW1W', 'XiAH8mXFH9', 'wvTH0XGyYi', 'gh6HJZChsE', 'bvEH2FpNXx' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, il3qo0bBxWcPXwwvUq.cs |
High entropy of concatenated method names: 'ToString', 'JchY2qlZhU', 'rNOYeBB7q9', 'QAyYXpaQbZ', 'FPKYBbEOFK', 'WwyYtMeGp2', 'klQYl4oqg5', 'guoY8wB94n', 'mLOY02t0DD', 'fXiY3SWYbG' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, yJ5mACQQOvtCvII9Xry.cs |
High entropy of concatenated method names: 'ToString', 'kFwW9gcw8j', 'akdWD7LW0u', 'iG0WwNDVMe', 'Q4DW5If8lf', 'KIsWTMMkev', 'xXCWCOd5YY', 'mjoWRYcokE', 'K8gSeWYZcvf464xi9qk', 'UESJrWYr7bCauaE12DJ' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, WE8gUVL1pn26BaBie1.cs |
High entropy of concatenated method names: 'XUwIKU0jE0', 'grfIeTpI0h', 'FkDIXTcRwG', 'c4CIBJmqql', 'WwfI194RFr', 'eCbItENhha', 'Next', 'Next', 'Next', 'NextBytes' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, fBIFARM1dNcGpWBBWF.cs |
High entropy of concatenated method names: 'QJ19wAWq5Y', 'OUh95bGpWl', 'OWL9TSyJZM', 'mCt9Cut4WZ', 'fdO9RQ1Bc9', 'mMh9c6shW1', 'd2A9iWeFsw', 'dbK9MDmYHI', 'dbE9p39U5i', 'Se09khV9BS' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, IMHNqa1GwxHuBX79pe.cs |
High entropy of concatenated method names: 'Q007J9Opin', 'wIA7SfIy8n', 'MnK71Fgd3l', 'eJG7EyJppi', 'rFL7eCq3bc', 'Isq7XwlW7j', 'OBk7BG7sRK', 'Vau7tpVoip', 'R0E7luX35Z', 'hX478Ei0mh' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, Pb2E018WVNi9US0kvR.cs |
High entropy of concatenated method names: 'zM6i5E90sl', 'PgXiCxmeLG', 'bGKicgDURM', 'laOcaB8fTY', 'HOPczk4OdM', 'bP3iUsAuJO', 'G0biQPHL7Q', 'DDtiGTJBoS', 'QQ2i9paUlR', 'aoxiDgkUY4' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, X80DMSQ97ppGTWh50QH.cs |
High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'GPMW1ZnWeJ', 'HjPWEvaUrt', 'dcUWbBoeUQ', 'ipGWjGmXn0', 'jh6WnmTJQA', 'xyVWxts2a8', 'j2fWVm2Dph' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, OAkLgt3hVcB8a4TNPx.cs |
High entropy of concatenated method names: 'vBxi6UpN9B', 'XgVi4lyq0L', 'IfTifab76N', 'XQAiFJ9SWq', 'gTRiy3y09i', 'M1uiP7TuAv', 'LfHiADZFaR', 'UD2iZk02y0', 'oUhioYfEe6', 'Pd4ihbso1S' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, uY4pkiqDqX0kyNCuhi.cs |
High entropy of concatenated method names: 'XaxI57FQqO', 'n9rITsxy0A', 'TcPICPBBWB', 'cAGIRq9DLd', 'ATSIclExRT', 'gBLIi8iNQQ', 'ALLIMR7WH5', 'JxnIpBp5hp', 'VDDIkWNKMk', 'F8CIdIeF98' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, GDG5GMxJTp6njGdYES.cs |
High entropy of concatenated method names: 'FNpuqpxNnm', 'mIMuaEbPcO', 'qxHIUBZgXQ', 'RKrIQrMKov', 'ucKu2XSbxw', 'k0IuScc3Qn', 'gBSuvIMO57', 'cTbu1RQEHn', 'JnduEAHEEg', 'RDwub82bSL' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, dZ7lISDHl5QeJd73Tb.cs |
High entropy of concatenated method names: 'Gl8QiTAbF3', 'aBqQMJsYnu', 'aLlQkSOtTS', 'Fh7Qdd4FBb', 'scJQ7h5MbI', 'btXQYVwrlc', 'fD64FhAasOnoDhouFl', 'gFQJpqZ9RM2AuYfsHs', 'amNQQKW9rE', 'Q6vQ9DI7cm' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, zOZnVUoLlSOtTSKh7d.cs |
High entropy of concatenated method names: 'vPXCFQ68Zm', 'zfyCPH8sOY', 'mIGCZSCMgw', 'xoHCoF8Off', 'fFIC7UUryX', 'pxbCY3aNBp', 'BKJCulHbU5', 'updCI2X4TX', 'xttCOKyxTp', 'wguCWrndS2' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, CvEX3yQUapj0dPs76S0.cs |
High entropy of concatenated method names: 'wybO6t6uuQ', 'mq4O4kMn0v', 'yjmOfC8mNW', 'oe0OFsIc03', 'KekOyJPamB', 'PqYOPeIdrN', 'I1mOAr30br', 'k3cOZZNPwN', 'pGmOore6GS', 'LLFOhYrQWl' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, QUMQenaZE0bN9GbMZg.cs |
High entropy of concatenated method names: 'IK9OQmU98V', 'FtKO9sx9T7', 'jweODCXuDu', 'sLnO5ReX9i', 'xsDOTypdft', 'UmFORwnMd4', 'nD5OcvAQDF', 'DycIV4RDy2', 'SW2IqwiqP2', 'HLAIL1dXk5' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, kbIQtXKVwrlcFiSqxx.cs |
High entropy of concatenated method names: 'g9Icw0d8Ao', 'AoZcTEk1Tg', 'JRpcRBWDYL', 's1ZciqN2PK', 'jPycMpL3nv', 'yF5RnmfGCv', 'InsRxJOmQ6', 'A2RRVNPTDK', 'iLjRqd0DB0', 'tBqRLCiitR' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, LTAbF3ZUBqJsYnuwhW.cs |
High entropy of concatenated method names: 'sCHT16FA56', 'qY6TEqYnmK', 'pGcTbYxUkK', 'lsiTjmvvXt', 'PWHTnkXG5Y', 'aKbTxToV0D', 'bF8TVO1r8B', 'NQZTqOJ0Br', 'pZiTLWaotn', 'E90TaFB3bP' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, BUANBPjKABgFDh7hbJ.cs |
High entropy of concatenated method names: 'BAEuk8McdZ', 'l9rudYcI30', 'ToString', 'o3Hu5Xd5VC', 'tcYuTbcfCj', 'mdEuC0qV83', 'kWXuRssVSy', 'X6yucdjPmE', 'FcQui8hO5i', 'KNCuMcU7FL' |
Source: 0.2.SWIFT.exe.5300000.11.raw.unpack, as7UGTTrgSge76n5y2.cs |
High entropy of concatenated method names: 'Dispose', 'iiyQLexZb8', 'elLGeFcgJs', 'RVissELPgg', 'emYQa4pkiD', 'WX0QzkyNCu', 'ProcessDialogKey', 'FiqGUE8gUV', 'RpnGQ26BaB', 'je1GGvUMQe' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, l3uKDiGEukCXQ10mb1.cs |
High entropy of concatenated method names: 'K6dfnkDS5', 'ms6FqFT5r', 'yP5Pkef6Q', 'hDGArSZrf', 'MpXoojA50', 'SYBhjNu1r', 'I4t0mYQSfa1vTGMeQc', 'eqMsFv2kM25xF444NG', 'GaUI0CkIX', 'zyaWtYqru' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, DNjYqavbeRfGYMOMNx.cs |
High entropy of concatenated method names: 'VgLHZOIS4c', 'iiNHoMM8SB', 'xZtHKTpDEM', 'wq9HeNkVXt', 'yYSHBxDPKH', 'OmDHtoAW1W', 'XiAH8mXFH9', 'wvTH0XGyYi', 'gh6HJZChsE', 'bvEH2FpNXx' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, il3qo0bBxWcPXwwvUq.cs |
High entropy of concatenated method names: 'ToString', 'JchY2qlZhU', 'rNOYeBB7q9', 'QAyYXpaQbZ', 'FPKYBbEOFK', 'WwyYtMeGp2', 'klQYl4oqg5', 'guoY8wB94n', 'mLOY02t0DD', 'fXiY3SWYbG' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, yJ5mACQQOvtCvII9Xry.cs |
High entropy of concatenated method names: 'ToString', 'kFwW9gcw8j', 'akdWD7LW0u', 'iG0WwNDVMe', 'Q4DW5If8lf', 'KIsWTMMkev', 'xXCWCOd5YY', 'mjoWRYcokE', 'K8gSeWYZcvf464xi9qk', 'UESJrWYr7bCauaE12DJ' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, WE8gUVL1pn26BaBie1.cs |
High entropy of concatenated method names: 'XUwIKU0jE0', 'grfIeTpI0h', 'FkDIXTcRwG', 'c4CIBJmqql', 'WwfI194RFr', 'eCbItENhha', 'Next', 'Next', 'Next', 'NextBytes' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, fBIFARM1dNcGpWBBWF.cs |
High entropy of concatenated method names: 'QJ19wAWq5Y', 'OUh95bGpWl', 'OWL9TSyJZM', 'mCt9Cut4WZ', 'fdO9RQ1Bc9', 'mMh9c6shW1', 'd2A9iWeFsw', 'dbK9MDmYHI', 'dbE9p39U5i', 'Se09khV9BS' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, IMHNqa1GwxHuBX79pe.cs |
High entropy of concatenated method names: 'Q007J9Opin', 'wIA7SfIy8n', 'MnK71Fgd3l', 'eJG7EyJppi', 'rFL7eCq3bc', 'Isq7XwlW7j', 'OBk7BG7sRK', 'Vau7tpVoip', 'R0E7luX35Z', 'hX478Ei0mh' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, Pb2E018WVNi9US0kvR.cs |
High entropy of concatenated method names: 'zM6i5E90sl', 'PgXiCxmeLG', 'bGKicgDURM', 'laOcaB8fTY', 'HOPczk4OdM', 'bP3iUsAuJO', 'G0biQPHL7Q', 'DDtiGTJBoS', 'QQ2i9paUlR', 'aoxiDgkUY4' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, X80DMSQ97ppGTWh50QH.cs |
High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'GPMW1ZnWeJ', 'HjPWEvaUrt', 'dcUWbBoeUQ', 'ipGWjGmXn0', 'jh6WnmTJQA', 'xyVWxts2a8', 'j2fWVm2Dph' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, OAkLgt3hVcB8a4TNPx.cs |
High entropy of concatenated method names: 'vBxi6UpN9B', 'XgVi4lyq0L', 'IfTifab76N', 'XQAiFJ9SWq', 'gTRiy3y09i', 'M1uiP7TuAv', 'LfHiADZFaR', 'UD2iZk02y0', 'oUhioYfEe6', 'Pd4ihbso1S' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, uY4pkiqDqX0kyNCuhi.cs |
High entropy of concatenated method names: 'XaxI57FQqO', 'n9rITsxy0A', 'TcPICPBBWB', 'cAGIRq9DLd', 'ATSIclExRT', 'gBLIi8iNQQ', 'ALLIMR7WH5', 'JxnIpBp5hp', 'VDDIkWNKMk', 'F8CIdIeF98' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, GDG5GMxJTp6njGdYES.cs |
High entropy of concatenated method names: 'FNpuqpxNnm', 'mIMuaEbPcO', 'qxHIUBZgXQ', 'RKrIQrMKov', 'ucKu2XSbxw', 'k0IuScc3Qn', 'gBSuvIMO57', 'cTbu1RQEHn', 'JnduEAHEEg', 'RDwub82bSL' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, dZ7lISDHl5QeJd73Tb.cs |
High entropy of concatenated method names: 'Gl8QiTAbF3', 'aBqQMJsYnu', 'aLlQkSOtTS', 'Fh7Qdd4FBb', 'scJQ7h5MbI', 'btXQYVwrlc', 'fD64FhAasOnoDhouFl', 'gFQJpqZ9RM2AuYfsHs', 'amNQQKW9rE', 'Q6vQ9DI7cm' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, zOZnVUoLlSOtTSKh7d.cs |
High entropy of concatenated method names: 'vPXCFQ68Zm', 'zfyCPH8sOY', 'mIGCZSCMgw', 'xoHCoF8Off', 'fFIC7UUryX', 'pxbCY3aNBp', 'BKJCulHbU5', 'updCI2X4TX', 'xttCOKyxTp', 'wguCWrndS2' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, CvEX3yQUapj0dPs76S0.cs |
High entropy of concatenated method names: 'wybO6t6uuQ', 'mq4O4kMn0v', 'yjmOfC8mNW', 'oe0OFsIc03', 'KekOyJPamB', 'PqYOPeIdrN', 'I1mOAr30br', 'k3cOZZNPwN', 'pGmOore6GS', 'LLFOhYrQWl' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, QUMQenaZE0bN9GbMZg.cs |
High entropy of concatenated method names: 'IK9OQmU98V', 'FtKO9sx9T7', 'jweODCXuDu', 'sLnO5ReX9i', 'xsDOTypdft', 'UmFORwnMd4', 'nD5OcvAQDF', 'DycIV4RDy2', 'SW2IqwiqP2', 'HLAIL1dXk5' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, kbIQtXKVwrlcFiSqxx.cs |
High entropy of concatenated method names: 'g9Icw0d8Ao', 'AoZcTEk1Tg', 'JRpcRBWDYL', 's1ZciqN2PK', 'jPycMpL3nv', 'yF5RnmfGCv', 'InsRxJOmQ6', 'A2RRVNPTDK', 'iLjRqd0DB0', 'tBqRLCiitR' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, LTAbF3ZUBqJsYnuwhW.cs |
High entropy of concatenated method names: 'sCHT16FA56', 'qY6TEqYnmK', 'pGcTbYxUkK', 'lsiTjmvvXt', 'PWHTnkXG5Y', 'aKbTxToV0D', 'bF8TVO1r8B', 'NQZTqOJ0Br', 'pZiTLWaotn', 'E90TaFB3bP' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, BUANBPjKABgFDh7hbJ.cs |
High entropy of concatenated method names: 'BAEuk8McdZ', 'l9rudYcI30', 'ToString', 'o3Hu5Xd5VC', 'tcYuTbcfCj', 'mdEuC0qV83', 'kWXuRssVSy', 'X6yucdjPmE', 'FcQui8hO5i', 'KNCuMcU7FL' |
Source: 0.2.SWIFT.exe.4f7fa30.6.raw.unpack, as7UGTTrgSge76n5y2.cs |
High entropy of concatenated method names: 'Dispose', 'iiyQLexZb8', 'elLGeFcgJs', 'RVissELPgg', 'emYQa4pkiD', 'WX0QzkyNCu', 'ProcessDialogKey', 'FiqGUE8gUV', 'RpnGQ26BaB', 'je1GGvUMQe' |
Source: 0.2.SWIFT.exe.5af0000.12.raw.unpack, V4uC3Iifq56IKQcfry.cs |
High entropy of concatenated method names: 'JcqLcnHE8kRk7VHJhl', 'baAwnpSkPWAs4YMGxr', 'wTgrto4LNQ', 'imnL6GCB6AIFRqkhxN', 'RgtTUJcyZL', 'dHYrbjNADO', 'xiCr8b7Qs6', 'PT2rZj37UR', 'P1WruDgOtu', 'd71eKLY6YVFQv' |
Source: 0.2.SWIFT.exe.5af0000.12.raw.unpack, vpednoN8EZgsJ4TDwx.cs |
High entropy of concatenated method names: 'SvRTLtpnA', 'uJwWpedno', 'REZpgsJ4T', 'uwxys3A5Q', 'Tl3iTkB7U', 'EqRFtDP16', 'TW5lfqidm', 'wSKAUGlNW', 'LkrevaXpK', 'cwu0Op5AT' |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe TID: 1352 |
Thread sleep time: -922337203685477s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -25825441703193356s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -100000s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1680 |
Thread sleep count: 1547 > 30 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -99891s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -99782s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1680 |
Thread sleep count: 8273 > 30 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep count: 39 > 30 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -99657s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -99532s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -99422s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -99313s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -99188s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -99063s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -98938s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -98813s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -98694s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -98579s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -98454s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -98329s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -98204s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -98066s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -97954s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -97844s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -97719s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -97610s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -97485s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -97360s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -97235s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -97110s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -96985s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -96860s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -96735s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -96610s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -96485s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -96360s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -96235s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -96110s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -95985s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -95860s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -95735s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -95610s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -95485s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -95360s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -95235s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -95110s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -94985s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -94860s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -94735s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -94610s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -94485s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -94360s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -94235s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -94110s >= -30000s |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1988 |
Thread sleep time: -93985s >= -30000s |
Jump to behavior |
Source: C:\Users\user\Desktop\SWIFT.exe |
Thread delayed: delay time: 922337203685477 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 922337203685477 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 100000 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 99891 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 99782 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 99657 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 99532 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 99422 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 99313 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 99188 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 99063 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 98938 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 98813 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 98694 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 98579 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 98454 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 98329 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 98204 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 98066 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 97954 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 97844 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 97719 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 97610 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 97485 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 97360 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 97235 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 97110 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 96985 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 96860 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 96735 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 96610 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 96485 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 96360 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 96235 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 96110 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 95985 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 95860 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 95735 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 95610 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 95485 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 95360 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 95235 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 95110 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 94985 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 94860 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 94735 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 94610 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 94485 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 94360 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 94235 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 94110 |
Jump to behavior |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Thread delayed: delay time: 93985 |
Jump to behavior |