Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
4BqlE10G4o.exe

Overview

General Information

Sample name:4BqlE10G4o.exe
renamed because original name is a hash value
Original sample name:9219d7d014721bf7264db76811e00f38.exe
Analysis ID:1520458
MD5:9219d7d014721bf7264db76811e00f38
SHA1:12335dc6247a30082e610056951177e002f4430f
SHA256:c2061bca1867926369fed17744cd0b907dfe5ba14fd6fbb9787ddda4e3444f85
Tags:exeuser-abuse_ch
Errors
  • No process behavior to analyse as no analysis process or sample was found
  • Corrupt sample or wrongly selected analyzer. Details: %1 is not a valid Win32 application.

Detection

Score:56
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Multi AV Scanner detection for submitted file
.NET source code contains method to dynamically call methods (often used by packers)
Machine Learning detection for sample
Binary contains a suspicious time stamp
PE file contains an invalid checksum
PE file overlay found
Uses 32bit PE files

Classification

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Multi AV Scanner detection for submitted file
Source: 4BqlE10G4o.exeReversingLabs: Detection: 21%
Machine Learning detection for sample
Source: 4BqlE10G4o.exeJoe Sandbox ML: detected
Source: 4BqlE10G4o.exeStatic PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
Source: 4BqlE10G4o.exeStatic PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Source: Binary string: rolsroice.pdb source: 4BqlE10G4o.exe
Source: Binary string: rolsroice.pdbX source: 4BqlE10G4o.exe
Source: 4BqlE10G4o.exeString found in binary or memory: https://aka.ms/AA21ue1#ValidationVisitor
Source: 4BqlE10G4o.exeString found in binary or memory: https://tools.ietf.org/html/rfc4918#section-11.2chttps://tools.ietf.org/html/rfc7231#section-6.5.8ch
Source: 4BqlE10G4o.exeStatic PE information: Data appended to the last section found
Source: 4BqlE10G4o.exeStatic PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
Source: 4BqlE10G4o.exe, DyyVDbaRvM1YfIq9il.csCryptographic APIs: 'CreateDecryptor'
Source: 4BqlE10G4o.exe, DyyVDbaRvM1YfIq9il.csCryptographic APIs: 'CreateDecryptor'
Source: classification engineClassification label: mal56.evad.winEXE@0/0@0/0
Source: 4BqlE10G4o.exeStatic PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 4BqlE10G4o.exeStatic file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.87%
Source: 4BqlE10G4o.exeReversingLabs: Detection: 21%
Source: 4BqlE10G4o.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR
Source: 4BqlE10G4o.exeStatic PE information: Virtual size of .text is bigger than: 0x100000
Source: 4BqlE10G4o.exeStatic file information: File size 8163792 > 1048576
Source: 4BqlE10G4o.exeStatic PE information: Raw size of .text is bigger than: 0x100000 < 0x4ef200
Source: 4BqlE10G4o.exeStatic PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x54e400
Source: 4BqlE10G4o.exeStatic PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Source: 4BqlE10G4o.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: Binary string: rolsroice.pdb source: 4BqlE10G4o.exe
Source: Binary string: rolsroice.pdbX source: 4BqlE10G4o.exe

Data Obfuscation

barindex
.NET source code contains method to dynamically call methods (often used by packers)
Source: 4BqlE10G4o.exe, DyyVDbaRvM1YfIq9il.cs.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})
Source: 4BqlE10G4o.exeStatic PE information: 0xAB67955D [Tue Feb 15 11:26:21 2061 UTC]
Source: 4BqlE10G4o.exeStatic PE information: real checksum: 0xa52965 should be: 0x7d2f20
Source: 4BqlE10G4o.exe, Http2MessageBody.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'c17BRyqEFfUnx2klNhws', 'dH7HjhqEzkSElffAnRGt', 'ooXlVmqEGVwtpfpARvpW', 'MEIArDqE325Mi9wvl6XV', 'OnReadStarting', 'OnReadStarted'
Source: 4BqlE10G4o.exe, Http2Stream.csHigh entropy of concatenated method names: 'k8nyvB5NJY', 'OnReset', 'OnRequestProcessingEnded', 'CreateRequestId', 'CreateMessageBody', 'TryParseRequest', 'eXGyT2AFJP', 'fvSyMVaOGd', 'bjjyX1gDPK', 'zVnybxH1gS'
Source: 4BqlE10G4o.exe, Http2FrameWriter.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'pyAJIAqEOU2Uu1tITDbx', 'cCnBFsqExYvecgUkAZiA', 'dN3vxCqEDfA4pHkHQCGe', 'xVi8KlqE7FqaTXNAoRx2', 'WRBJeYqEUOeSBBg4kZoi', 'dVhNX1qEbdhSCpaoh4ht'
Source: 4BqlE10G4o.exe, Http2Connection.csHigh entropy of concatenated method names: 'MoEIQbjSep', 'WKgIBPYRIU', 'OnCompleted', 'UnsafeOnCompleted', 'ByQIwsBTvw', 'XWrEWcqEdDGj0BwjwUBZ', 'mygCwhqEkquScdwRQ6SX', 'C7awAOqElTlloSNq54Mo', 'qu7X0XqEXyovAyTqsBay', 'OCXWZbqELcAWffBR2ibw'
Source: 4BqlE10G4o.exe, Http2OutputProducer.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'GR47V9qgf7yJQF64DMwJ', 'llE1A3qgM52sNjxZoYOG', 'wR82ihqgVw5ySoNx2rxZ', 'KwICUGqgWs8URyP7JASY', 'eGkthyqgyDPHIvpGQ0wS', 'D5m7F9qgqLeciXAnqQhB'
Source: 4BqlE10G4o.exe, Http2FrameReader.csHigh entropy of concatenated method names: 'ReadFrame', 'v1ptTII7kd', 'GetPayloadFieldsLength', 'ReadSettings', 'CXltMSMnER', 'qmlELmqtWrdyDWgOsF6I', 'lgPIe7qtnumg345AiDZ0', 'UbiSJDqtwqJLHEl6c6Ii', 'vKEmupqtMfBYF7gPps6k', 'sJsLBWqtVlARKbZhcBVU'
Source: 4BqlE10G4o.exe, ConnectionManager.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'vlSGrDq2hHeyTx7ro322', 'pUE0jvq2HRmBW93HGVTk', 'C89sjrq2vTTNOLxMW33t', 'MoveNext', 'MoveNext', 'SetStateMachine'
Source: 4BqlE10G4o.exe, Heartbeat.csHigh entropy of concatenated method names: 'Start', 'A0Vw549OHp', 'OnHeartbeat', 'Dispose', 'iMQt3Tq1p7yBfpKRgFY4', 'TYo5OAq1IkudqkTqDAln', 'eGImMMq1nr5WuREgovdU', 'LTfZShq1w79IARCca0K0', 'txnia6q1iO0wBf34nBPM', 'tT36KPq1BAToQitFUgyP'
Source: 4BqlE10G4o.exe, KestrelEventSource.csHigh entropy of concatenated method names: 'ConnectionStart', 'zPBOmD4Zop', 'ConnectionStop', 'YIvORUNOJX', 'ConnectionRejected', 'RequestStart', 'gIqO2w4Lno', 'RequestStop', 'qODOp2N3bU', 'xPPYWUqdIXCsqIoJ6o4V'
Source: 4BqlE10G4o.exe, HttpCharacters.csHigh entropy of concatenated method names: 'Initialize', 'XHvwpj4pG6', 'DxMwkvbcPN', 'wxuwPCtfZR', 'akBw7yGRtR', 'L8BwFvZHkw', 'ContainsInvalidAuthorityChar', 'IndexOfInvalidHostChar', 'IndexOfInvalidTokenChar', 'IndexOfInvalidTokenChar'
Source: 4BqlE10G4o.exe, StringUtilities.csHigh entropy of concatenated method names: 'TryGetAsciiString', 'TryGetLatin1String', 'BytesOrdinalEqualsStringAndAscii', 'GemOrsU9A7', 'K4fOacNu6u', 'hbfOCjssQN', 'WxFOnANTEv', 'rn9OGEGXJ8', 'ConcatAsHexSuffix', 'sYSOse2kWK'
Source: 4BqlE10G4o.exe, TimeoutControl.csHigh entropy of concatenated method names: 'Initialize', 'Tick', 'nZwL8t2yjo', 'E17LAIDrLu', 'yqrL9c5vqt', 'SetTimeout', 'ResetTimeout', 'CancelTimeout', 'DvFLZ7mio3', 'InitializeHttp2'
Source: 4BqlE10G4o.exe, KestrelConnection.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'erkJgGq2bIak3sbyrpQy', 'AvnlfQq27YmLJvR5nTv1', 'uFuvqFq2U29GwDrpjoA9', 'MoveNext', 'MoveNext', 'SetStateMachine'
Source: 4BqlE10G4o.exe, WrappingStream.csHigh entropy of concatenated method names: 'SetInnerStream', 'Flush', 'FlushAsync', 'Read', 'ReadAsync', 'ReadAsync', 'ReadByte', 'Seek', 'SetLength', 'Write'
Source: 4BqlE10G4o.exe, ResourceCounter.csHigh entropy of concatenated method names: 'TryLockOne', 'ReleaseOne', 'tv17NtqcMCTrstZyuAFX', 'LlnPA2qcVsdAcvERrN4G', 'TryLockOne', 'ReleaseOne', 'vpLPMfqcwLoBF3G2WYee', 'imFY2Gqcpy5REiLUn4R6', 'XZfrQAqcWjGP9H7YFnLc', 'cHjgPnqcnc94GgiS4Cc0'
Source: 4BqlE10G4o.exe, HttpUtilities.csHigh entropy of concatenated method names: 'GetPreamble', 'HxaplGq2DErUBg2cY64B', 'KPwFSUq2O1q3vRpgvJ1a', 'NOEGUqq2xy1e3eXMJeqM', 'RSQwOSSqoy', 'StEwLyJSgc', 'se2wWhysdr', 'kCQw3lGwKY', 'vyJwiOxXTB', 'GetHeaderName'
Source: 4BqlE10G4o.exe, TimingPipeFlusher.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'z4Hstuqcaid0SaaERHvf', 'AOAQnOqcmXkqCtaSQC6C', 'sTyHFQqcetFf7eoVQf35', 'MASknuqcTJls8Xl7jXE0', 'pXF2Ivqc6cc3WKF86MXF', 'FlushAsync'
Source: 4BqlE10G4o.exe, ConcurrentPipeWriter.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'qP85e8qc8eSjRewsTOlj', 'lp4KoIqcAQU0xqYgK4Oq', 'GetMemory', 'GetSpan', 'Advance', 'FlushAsync'
Source: 4BqlE10G4o.exe, HttpsConnectionMiddleware.csHigh entropy of concatenated method names: 'mcivYxqZIGVGAeh9tJYn', 'RCpFMMqZwk1qWhlN0MPy', 'vchiaQqZp14bTslFuE7e', '_003CInnerOnConnectionAsync_003Eb__0', '_003CInnerOnConnectionAsync_003Eb__1', '_003CInnerOnConnectionAsync_003Eb__3', 'Mf4f1GqZT2ld2riUJKj6', 'tvLefsqZ85XDQqpQOmXW', 'fjgZgtqZAlZts1rIiktx', 'iPUhY4qZ68W2xG3GLesS'
Source: 4BqlE10G4o.exe, ApiConventionMatcher.csHigh entropy of concatenated method names: 'IsMatch', 'GetNameMatchBehavior', 'GetTypeMatchBehavior', 'eGupLIlA14', 'IsNameMatch', 'IsTypeMatch', 'ciQ1PnbDys16vq5ppLa', 'vckLkZb7i3imMqBQn3B', 'GLniNtbUqtkbgRrJLCB', 'BejW8fbbx7l4cZoSDrh'
Source: 4BqlE10G4o.exe, CertificateManager.csHigh entropy of concatenated method names: 'Od8WKuqrfIsRttBV53tB', 'tUer6cqrMWIcFYFvPEHc', 'jPbafeqryFwSDQDlVUjf', 'bVWQ5rqrqg1y0B28qpH4', 'mv58OVqrnptSKBukLZqH', 'NmptCIqrwdrDSSFbxH3J', 'gpkGvuqrpwrwaJRFbaMh', 'Debug', 'DescribeCertificates', 'DescribeCertificates'
Source: 4BqlE10G4o.exe, DyyVDbaRvM1YfIq9il.csHigh entropy of concatenated method names: 'Y4DS7UqNOgPtH88dDp00', 'z1XvT5qNxRpXkBFO2HX9', 'Cmwd22qNPaxInMSHL4tV', 'GyMfvsqNQh9FQwtZvexN', 'D4r4O0AxSI', 'FanDGAqNURwYoguSULR3', 'wDZ1BHqNbrptPWkTUOnC', 'lk4lgHqNj8y55RBTbqEy', 'KRWOYfqNYHR7kaVHJwjM', 'EqHQwsqNsQftTvlLtynm'
Source: 4BqlE10G4o.exe, ParameterBinder.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'mfk6JszhFabV9fM4vPw', 'Wa01RqzrQ5eaHc8ecTe', 'svsrp1zKqBD9ttsUBve', 'YnZy6izZRBZ0yuH6U9J', 'nID5rZzSyIDcqMwbVMG', 'NpZhtnz4HOpKPTjLlnt'
Source: 4BqlE10G4o.exe, PrefixContainer.csHigh entropy of concatenated method names: 'ContainsPrefix', 'GetKeysFromPrefix', 'zfB8ODJjB4', 'xlM8LhSbNI', 'kZs8WmQC1I', 'KQm836SCUd', 'QjUhEjdmKC4RffXrmfZ', 'Hbi34Vd6Rf3jWhH1EDF', 'cYNjnvdaCFbj95LsJFc', 'RiqAxKdeb4FG3Yk63CN'
Source: 4BqlE10G4o.exe, JQueryQueryStringValueProviderFactory.csHigh entropy of concatenated method names: 'CreateValueProviderAsync', 'EdGvOLR2QptZniIN56y', 'zNmQl7RcWr1uxUO49Uu', 'BgcrKVRJScnN86XC85f', 'jAKIBwREm7sl7UtralD', 'OEnK0YRgyMRNDKQLFty', 'BVH2cQRSAMtdpJYJqJt', 'pRGE1OR4P8FAUauCQO5', 'NyLpHaRNeRGFj36wr8Y', 'cjSF9QRPciOke5bjys1'
Source: 4BqlE10G4o.exe, SuppressChildValidationMetadataProvider.csHigh entropy of concatenated method names: 'CreateValidationMetadata', 'ujh8VK7mgC', 'AhapyKknGpZda3v7GFU', 'HkB1L5kw8WC03C3oyd4', 'KXjPhOkpbpMRTqkJBlo', 'RpBVfgkVvauVV9nNXTh', 'S4xQOvkWyemmOnHSSsX', 'gJ3aklkIZiPmYtfofb1', 'ChisaukiH7j0QgVRfRo', 'K18jeXkBSnmpgSPuEYq'
Source: 4BqlE10G4o.exe, RouteValueProvider.csHigh entropy of concatenated method names: 'ContainsPrefix', 'GetValue', 'j2yivQdYZF5Qv6YHyOG', 'JbOVb7dbmsJ7FCuvtQ0', 'mPlNCLdjlES7U9Plq0x', 'lKkdSidsyGv7NxEF9Zy', 'Xv63mcdCWmmAQ6AXJpV', 'od7gMCduol002bVc17u', 'Ok0OuLdGt3SjcHcCrNA', 'xIJhKYd3D9GpQW8Lb3n'
Source: 4BqlE10G4o.exe, BindingSourceValueProvider.csHigh entropy of concatenated method names: 'ContainsPrefix', 'GetValue', 'Filter', 'oYfx3omjXDwFlp7864e', 'vpkbocmYpwXT0LZqIQr', 'jj6iuMmsMpWXW2M52D8', 'fRXuFrmCG46RbLWKRAT', 'y1NOiAmuJx8kHIHjXRd', 'Jr4ip0mUAog84etQ4pG', 'BCjVYdmbCQ8m3tLSrsm'
Source: 4BqlE10G4o.exe, UnsupportedContentTypeFilter.csHigh entropy of concatenated method names: 'OnActionExecuting', 'Qeq8eB7TYB', 'OnActionExecuted', 'BbnhjBkaPAPJ9lDwXUL', 'l9gyRxkmkTi7QNHmoFk', 'uidChikeDUlgrprjRCW', 'FfZoQFkRwD0acWDghQR', 'QjrWEGk1RjocnmQCwgG', 'DUO1Ybkd0pgmL5hpqQ8', 'j4QsISkkEjQYQQViTXu'
Source: 4BqlE10G4o.exe, PropertyValueSetter.csHigh entropy of concatenated method names: 'SetValue', 'NNE8SwgWRn', 'Nu6lLGdljxMAh46TMrn', 'SF7nTydXN3Q2jYqHwX3', 'NT12nEdLr2U64E3k0L3', 'K5vjPcd0KCpGYcCsyIg', 'aEtdNbd95Dtr9EJlLc9', 'iXFM1ed5GaFa8yKWYvl', 'ufPeB1ddIEQSISQ96Ep', 't0m8h7dk8pDxlBPmAs7'
Source: 4BqlE10G4o.exe, ModelNames.csHigh entropy of concatenated method names: 'CreateIndexModelName', 'CreateIndexModelName', 'CreatePropertyModelName', 'w3YMTR1OyZkXE4fEGOm', 'fgHPDK1PGnA15HN2FJJ', 'jNOcud1QD0E3R8vq4vg', 'ooFU0w1xuu8nwdbsejU', 'A9gnt41DqaRNetBrl5l', 'Ovq4R8170oiKCf7xr68', 'DkM6p51Uf1O6uu83lUg'
Source: 4BqlE10G4o.exe, FormFileValueProviderFactory.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'NjygR4F0KW1w4PfB4tX', 'gYp0xlF9CvVlirDWb6Y', 'eCXk4YF5xt2m0qQwkYI', 'IPKhViFo5HAJfFWPX9g', 'n2uiCrFXtx2ZhTecsa6', 'm9X6bBFLRAKCVAw4MG9'
Source: 4BqlE10G4o.exe, RouteValueProviderFactory.csHigh entropy of concatenated method names: 'CreateValueProviderAsync', 'GjhPoJkyUvww6K7n1P1', 'tcYvrykqpn5jrONpoR4', 'hvFjf1kfcsj1WxvO3kV', 'CSGM5ZdFjQLtEq5vHgf', 'oP9Z4fdzDqjn3g3IGh3', 'zcWuaokMG9MLwOy1OGW'
Source: 4BqlE10G4o.exe, FormFileValueProvider.csHigh entropy of concatenated method names: 'CYY5IrM8y2', 'YIq5bw1hB1', 'ContainsPrefix', 'GetValue', 'YoQVo5e7AGN2T2RJgAV', 'wBFRugeUd0vFmse5gED', 'XjmBWGexc5nkfwq5sLs', 'fYc99ieDxbiVqNAZeys', 'LIhDNWebIXJ3g5bRt2I', 'UEEgtQej3SyqZc2sjkO'
Source: 4BqlE10G4o.exe, ModelBindingHelper.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'Q99yAZzB0BDVYYlZZig', 'K5AC1Tz8pWKIKByl587', 'egnGdXzAQtri0m8hdLS', 'RlPUXdzT3V98Oo8KWJk', 'XlStxFz6obST3pssTJ3', 'tT3k0lzacrfaG54kmqN'
Source: 4BqlE10G4o.exe, FormValueProviderFactory.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'wlBXd0FvOeUeR6BBh7Q', 'xtk7bgFhbFVwyMCWn8S', 'hILRQ0Fr80Hm7vn92ox', 'vSWYF1FtopYEYr6IUP6', 'eMW5X5FHolT1GCbnMnb', 'CreateValueProviderAsync'
Source: 4BqlE10G4o.exe, JQueryFormValueProviderFactory.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'XKOnZhFSLFjlCyILWGY', 'sa7QCXF4HVfw9LbEBJH', 'RF8tk6F2B0HTjO1joyC', 'C63LOgFcthEUdTHKhna', 'GHhIaxFKcN7eqWYqrZW', 'pkaocDFZg5dL1oF0c17'
Source: 4BqlE10G4o.exe, EmptyModelMetadataProvider.csHigh entropy of concatenated method names: 'YkW3b7FlIGYYtAYa59n', 'ydlVpRFduZvKgjyRqAd', 'T1Bp6xFkm0Y0ViMTdQH', 'qPYv6ceO0wgsmapo1Tj', 'bSKaUNePTF3ol84jOxy', 'bc4JAueQuhtf1kXF9WT'
Source: 4BqlE10G4o.exe, QueryStringValueProviderFactory.csHigh entropy of concatenated method names: 'CreateValueProviderAsync', 'QMZGR4d2thI10S4I2tJ', 'KjyR9Fdci7yLbDHpixk', 'ERumTkdJDUNfRR3tcB5', 'rWsE8kdEJJUt2sOunxo', 'lW0QJIdgWq9kpTbMDQo', 'pntUMYdSAqj65DF6UqN', 'yXL5Jfd4eO79pmC1Diu', 'DIC91rdNTh8u915wc8n', 'n3dFCCdPENkdlEQxIpU'
Source: 4BqlE10G4o.exe, JQueryKeyValuePairNormalizer.csHigh entropy of concatenated method names: 'GetValues', 'NJW5CXCKob', 'RIeAsYR5rrwD3e2pJsj', 'sh9Bb7RoKCPssuyP9X2', 'SpfwQLRtap2Nyu5ApG1', 'VyQdqMRH2BiJu1R7MOs', 'krhIiDRvJ7PoRo22QXd', 'n1XyxZRhuuGJvDVerQP', 'qa4IxQRrgNGX1YrojHT', 'vg9bAiR01JwYklSNiRK'
Source: 4BqlE10G4o.exe, ReferenceEqualityComparer.csHigh entropy of concatenated method names: 'Equals', 'GetHashCode', 'GbBSxrdQuMMs5JZShCw', 'yBV038dOHo1DNsktRc1', 'rbW4N5dxS16wIFpaoLI', 'cMI1yZdDdvkmmudVQR8', 'yBcq20d7jqsebUDNXOO', 'P9v7A1dUm0pFyQUQmUc'
Source: 4BqlE10G4o.exe, DefaultModelBindingContext.csHigh entropy of concatenated method names: 'CreateBindingContext', 'EnterNestedScope', 'EnterNestedScope', 'ExitNestedScope', 'n065BGKCVF', 'WXFtP8eAqTfdAkSp35A', 'kHIlZjeT5cERsytkF76', 'hGHZpee6xY6gbR363Gj', 'MNfweMeaWmaXkjpEhNl', 'b5sCagemOh6dxxYrTrT'
Source: 4BqlE10G4o.exe, ModelBinderFactory.csHigh entropy of concatenated method names: 'y3H7NkU6ok', 'CreateBinder', 'CreateBinder', 'HbKAH7FgQcDY7QgGGsc', 'nVUklDFNndLyyXX8K9p', 'RyYgtvFPV66gh2jsVqW', 'MP8c7DFQsEuYEYiJbNF', 'FLW7xBFO47lOGXrsQeQ', 'MytjhHFJPUNisqVRPm1', 'JBdm9hFEP8v9xwYuZhh'
Source: 4BqlE10G4o.exe, CompositeValueProvider.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'j5lp9OFnEOYyt4VILYF', 'nQKx2pFwVgLL7RSkPfE', 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine'
Source: 4BqlE10G4o.exe, KnownRouteValueConstraint.csHigh entropy of concatenated method names: 'Ao4P4ttaFB', 'bThZ293YeCZDZln4CFk', 'jSDriR3bVwPq3u63COa', 'T7vAeZ3j9JIa7ZJCHrt', 'Match', 'z6E5c4AYMq', 'ych5oYur1V', 'KwuAnA6j5yVael7iJsM', 'ymy8Aw6UYTDEdUMau7l', 'cHMV3I6bMfNEjC6YDcC'
Source: 4BqlE10G4o.exe, MvcAttributeRouteHandler.csHigh entropy of concatenated method names: 'GetVirtualPath', 'RouteAsync', 'YSfENaay6p1ejUuYm9q', 'E2fOad6FaMdveQrURes', 'QP66Ol6zIqUZCVKY5GT', 'lpjAvGaqdkmQfdMh11j', 'pdVrpnafxR6Hod1LxYN', 'XPCD47aMMDE7rpI1X0m', 'OTpxCCaVVcfY8aEIjnB', 'TwYbT8aWIxxZ8u3rqJG'
Source: 4BqlE10G4o.exe, UrlHelperBase.csHigh entropy of concatenated method names: 'IsLocalUrl', 'Content', 'Link', 'Action', 'RouteUrl', 'GetValuesDictionary', 'GenerateUrl', 'GenerateUrl', 'NormalizeRouteValuesForAction', 'NormalizeRouteValuesForPage'
Source: 4BqlE10G4o.exe, ViewEnginePath.csHigh entropy of concatenated method names: 'CombinePath', 'ResolvePath', 'H0Vs9umSrBgadLFWLkN', 'GlIqvgm4p3Q56Kcg9L4', 'cDGXMvm2DVV38oWm6jg', 'uEmgHmmcOlPKL3Jv2Y7', 'jOKeX9mKZQBneWcpCdL', 'mc10GpmZqrGAg6Sk2hb', 'iWsdS8mJeAO0bUcuQa6', 'HSTSLymEwQsN0QCVXeI'
Source: 4BqlE10G4o.exe, ConsumesMatcherPolicy.csHigh entropy of concatenated method names: 'CompareMetadata', 'vnAv2V30kcpOMm86oWv', 'BSA1vi3Xs6upbESCuCP', 'dM6vuJ3LQP0v1n0Ldbt', 'cTkaQy390tqx147iYTR', 'l0ltU535rrHcj6QWnBg', 'GetDestination', 'cP6kfO3HqCEAut3wqxr', 'o4Uq0X3ouc4osswB6Ex', 'o6XZww3tsvlM8qXxju5'
Source: 4BqlE10G4o.exe, UrlHelperFactory.csHigh entropy of concatenated method names: 'GetUrlHelper', 's0txnbmtpll0RguL20J', 'LAjADCmHWvfkC1UJk0Z', 'KFxo8emvGsuOaPTG7tE', 'x5d6EcmhqPD7FBfC1p9', 'zUPCXfm5T4H1u0MD4sM', 'iTfPpymocj3BcaMWlco', 'zk0CGymrn8SlXpyuqCg'
Source: 4BqlE10G4o.exe, ActionConstraintMatcherPolicy.csHigh entropy of concatenated method names: 'AppliesToEndpoints', 'ApplyAsync', 'ICY0d4Xxhc', 'lqp0g4DhYX', 'CFKx9CTdGqytVZ2ILn4', 'jpvcDCTRyW0qy21rAA0', 'xZjNPDT1DkaPvef1wWT', 'wVK82TTkdXWisqHL0ON', 'QVdPV1TlruLaofQCZNe', 'rnOsQgTXpgJdjRAfKIU'
Source: 4BqlE10G4o.exe, UrlHelper.csHigh entropy of concatenated method names: 'Action', 'RouteUrl', 'GetVirtualPathData', 'GenerateUrl', 'op1NrcaEqtFwalDWMDZ', 'dqjDYKacNPjBim7bgt9', 'tpsdWHaJ6GEtgEcnuP2', 'adXwMqagcL0px8eeLXt', 'ofbcC1aNVjYjqHBSyTl', 'qtCy5GaPsSPjnZXDjEq'
Source: 4BqlE10G4o.exe, EndpointRoutingUrlHelper.csHigh entropy of concatenated method names: 'Action', 'RouteUrl', 'boYl3a60ehRt6qPGS9O', 'F0RXSo69kF9R7TWyKNR', 'lPtUC865eVfTM0Va7tw', 'jjD4dK6oCavq2FkTxGv', 'zcLkM76tAL8ZvL2qEIn', 'qH7DVc6HDmnuUykR6iC', 'JeGqBu6vhbRAXLxvFBj', 'yrkd0e6h4MZ1I10bJWt'
Source: 4BqlE10G4o.exe, NormalizedRouteValue.csHigh entropy of concatenated method names: 'GetNormalizedRouteValue', 'Dw8jXPaeJrUItRrnagA', 'NrJK3JaR5Tjfbm3CIaD', 'LujFLua1dhyeOupqZw4', 'ShjdQAadss3xZNeHhTL', 'qPXr1OakBtx3N5OEsrX', 'PoEsyJaapusTxWN2FQS', 's87r3eam99DTx074Sef'
Source: 4BqlE10G4o.exe, DynamicControllerEndpointMatcherPolicy.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'h1wR5e3E4v23X1VCndk', 'exAVxf3guG1CvdGQKm6', 'NqsCMZ3NDbWVbOuA6ZK', 'oG6OMd3PKuCpO2qQMXd', 'YUV6c43QXpP2GO1OUBd', 'tDlkmV3OxpgHRGKIcq8'
Source: 4BqlE10G4o.exe, RoutePatternWriter.csHigh entropy of concatenated method names: 'WriteString', 'ghA5lfQsOh', 'mTA5mmxsvG', 'NUwYcda9jHYKZJbq979', 'I7lQq0a5ZCrDRcpNwW2', 'jMLM59aoPicHAk4hADF', 'SH5ML7atAQS5mxIWnkn', 'yvDjmIaH6Jn5UnYTn4l', 'eITWiuavtmAaJOX3bqx', 'J56ElpahuumT7pLEnTw'
Source: 4BqlE10G4o.exe, AttributeRoute.csHigh entropy of concatenated method names: 's2kPmNvEfu', 'd5FPRhveVd', 'WvIPp0Vg9t', 'Ij8PkyuPC8', 'FtfP7LIC0Y', 'VIYPFjmtNQ', 'fROPER87sX', 'ij7PHNZX4M', 'VWUPBdJ3Jj', 'tZFPwHay5d'
Source: 4BqlE10G4o.exe, NullRouter.csHigh entropy of concatenated method names: 'GetVirtualPath', 'RouteAsync', 'lfMqRBaLfxWYIyP8R74', 'PuE2jialmBj08W0435D', 'z0JIQJaXvBRANhjU3vk', 'FMNrmpa06AnwSAg8Edj'
Source: 4BqlE10G4o.exe, MvcRouteHandler.csHigh entropy of concatenated method names: 'GetVirtualPath', 'RouteAsync', 'KwtlrVaiu6C2AQG7Ipo', 'ASMrIYapqJfF0BmQDK9', 'aYsy0yaIWw8uWd8g9cO', 'X74EZsaBJVY4Jw7FEBD', 'rAZseja8T8bImn6kiyq', 'vadJAKaALD4c6NNjU8p', 'bJVo8naTXP8wgJHdIwt', 'bboufXa6qwMXN7yHmRw'
Source: 4BqlE10G4o.exe, ActionEndpointFactory.csHigh entropy of concatenated method names: 'Build', 'otnikCGSxXHyl344IH0', 'k22Wb6G4Cu44NenhqjF', 'n9enUyGKWEtaZf8I9EV', 'MeVOAnGZZiD2RBxI4ru', 'pQp5LqG2DZ1x9LNkt1w', 'ms2AoKGcmPUpp0bV5fX', 'AddEndpoints', 'AddConventionalLinkGenerationRoute', 'kqF07mCbtX'
Source: 4BqlE10G4o.exe, FormCollectionModelBinderProvider.csHigh entropy of concatenated method names: 'GetBinder', 'ANxKOEoGsDMXcyAajJ6', 'K44Bsro3WhnNcGuhAJA', 'FeirmQoFOn5XcckkEWb', 'RutOESozueG4HZtQRWS', 'tfhTxytyRhlGyjS5lcA', 'N0cl29tqdrkQJiyAwCJ', 'urOsSltfUerGYsfVq1W', 'DbRPwIoCwKWLZ5ewBuK', 'M2stwrou3ODl9RlcuR1'
Source: 4BqlE10G4o.exe, HeaderModelBinder.csHigh entropy of concatenated method names: 'ContainsPrefix', 'GetValue', 'tyyhMKqfbrg8j2pYaaoy', 'LVICoLqfjrKJVpkW2ZxX', 'KaFLfLqf7qFkTnDMg1CZ', 'R3L1xDqfUksi6bi0Vq7o', 'TVWPynqfYmhaXlybJyi4', 'MoveNext', 'MoveNext', 'SetStateMachine'
Source: 4BqlE10G4o.exe, ByteArrayModelBinder.csHigh entropy of concatenated method names: 'BindModelAsync', 'ds7Rns0YByysCNKQJeh', 'EqlslR0si27fDivNn87', 'ijKNQl0bP5V7E8MmjDJ', 'UCk2Xu0jTaDhpTEpw13', 'vHoAHZ0CXks0UVANw2U', 'RSZyQU0upklutA67qeg', 'u3MnxN0GHllrBYc0ZcA', 'JNoMgR038U8kEPWaRYQ', 'CHfPa40Fr4UaCCGD8K4'
Source: 4BqlE10G4o.exe, DictionaryModelBinderProvider.csHigh entropy of concatenated method names: 'GetBinder', 'zhjIrL5gwpgeiYIWZNY', 'i8NihQ5NbgHhJ7hKOe4', 'jMOIIa5P1EJmoXgfEKl', 'qo5dHW5QfYsbJ2CVWC8', 'JdF5rB5OD0CqitBvC50', 'JBo6xo5xC3dmZIZpG04', 'rvooCr5D1oSNNGCMfOW', 'XTXnRm5JkK6jSiNAUa9', 'WJYi7l5Eh18TDOAyWu8'
Source: 4BqlE10G4o.exe, ByteArrayModelBinderProvider.csHigh entropy of concatenated method names: 'GetBinder', 'swHW7v9iqhf7AjQVm9j', 'VTQP2f9BX6FnCUW52AX', 'ky7wfd98lOBW9QiCwMy', 'ePqFcm9pL0B47UB3HML', 'bD3cuK9Ina1u73Yu7LX', 'zjtLOU9AW5S8dUGV0wA'
Source: 4BqlE10G4o.exe, CancellationTokenModelBinder.csHigh entropy of concatenated method names: 'BindModelAsync', 'PtZ7bY9aC79U6KXgt2v', 'SYASW79mtAGuYldWEi5', 'nwy5Eg9eROOeZRdCAAT', 'VZfBbi9RqVOlnPZAqDD', 'KhrYS09TASvOIeZdtmj', 'Xd7jSp964aDjrf5Ina6', 'yaIss791018a71YL2RJ'
Source: 4BqlE10G4o.exe, BodyModelBinder.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'SoI1SKqqya4oJi4g157H', 'fEAWTqqqq1R9qycHP4Wr', 'FRWTa4qqfmFkbmxDPa13', 'e3d05QqqMSQVdmKvlS4h', 'Io4HyxqqVGr9C0vZmRpS', 'seQA1FqqWcwGFNXZ36tZ'
Source: 4BqlE10G4o.exe, FormCollectionModelBinder.csHigh entropy of concatenated method names: 'ContainsKey', 'GetEnumerator', 'TryGetValue', 'GetEnumerator', 'CvxWE0qfqFEZDadPonPw', 'seYOAoqffVwGpDh5t1Ve', 'qKWGFHqfM9e2TGPBw7BO', 'D0T4swqfVIUGauM8Hr8s', 'GetFile', 'GetFiles'
Source: 4BqlE10G4o.exe, FormFileModelBinder.csHigh entropy of concatenated method names: 'GetFile', 'GetFiles', 'rAapAMqfTgXd1Q5fPdYI', 'Bmjy7Gqf6IAae64EZeYC', 'YpvDd4qfa5ZJJo1OBXQ6', 'cb8Mvkqfmybs3WVgy9ST', 'Dd0QWtqfeAtRG8vKjeCH', 'MoveNext', 'MoveNext', 'SetStateMachine'
Source: 4BqlE10G4o.exe, ComplexTypeModelBinderProvider.csHigh entropy of concatenated method names: 'GetBinder', 'oPJEBF58GCcIG0khuIM', 'O00DOO5A45ZHMnD62Uh', 'RQHKSl5TAmnTo6Cbyek', 'xnM1JT56U5FpRdV8Fuj', 'SbGqvK5abPGCEH2Bb4q', 'hpZUAk5mS0dshtuhr4D', 'Ws83nT5egdZMAjjkhxl', 'p7sQ2S5i81dl9mQRLWZ', 'L5lryR5B0kYpUaERvbD'
Source: 4BqlE10G4o.exe, ArrayModelBinderProvider.csHigh entropy of concatenated method names: 'GetBinder', 'Axtwt40l2NwaMufIV9R', 'pYxCP30XNw1ks0IKbI8', 'OH14jq0LoYchcMB9nli', 'IZd9DU00n3iro6Q0t7i', 'MHErBR09SCquwDcSYsL', 'z80EJi05R9bnUm1mX8M', 'lhRqBM0ofrEJ73JJjeB', 'jqjH570dLHvMWZCDqNS', 'DSS4AG0k85ZOdNBBeOP'
Source: 4BqlE10G4o.exe, DecimalModelBinder.csHigh entropy of concatenated method names: 'BindModelAsync', 'pdyvuG5ddQSQxfDwBVV', 'OS3EPP5kDJ8avXV8Zvp', 'TqR4Mt5lFdf2UVkdOgp', 'GLexRT5XusNyEHedDAs', 'uFowAx5L0XTIvf7NmI7', 'Kc15YJ50JkquapUy0Ao', 'tkaRXL59urg2HVhivxR', 'YfZacn55kKb7stZQcFr', 'T9ob3d5oHGpQR6Z8pfq'
Source: 4BqlE10G4o.exe, HeaderModelBinderProvider.csHigh entropy of concatenated method names: 'GetBinder', 'JuDZxHAgFs', 'gaYtOstcZUb8jNfyV46', 'GcipuUtJ7W5pbZAsyXu', 'VRbM1stETfG6J3UwIsE', 'fGuZCFtg2V7EcqxqgrQ', 'ghfGMjt4v1kiBch9TD6', 'FXwAH2t2lmt9fA3UiOF', 'Wy1hq2tN94XE0wX883e', 'O2Fm38tPvQpU0ejDffb'
Source: 4BqlE10G4o.exe, SimpleTypeModelBinder.csHigh entropy of concatenated method names: 'BindModelAsync', 'CheckModel', 'NfNh7rHaXZGr61JdOgT', 'tpoZqBHmMclgWRAjfPX', 'EObn7DHe8GHC23cR9GF', 'H68RMqHTxpFuOM5vwGH', 'nqGy6rH6pFlD6DkHrfS', 'MFyK5DHRQyZapTJKhlw', 'tiTkqFH1KwSBaptsvtb', 'XTakKWHdPmPxF9dokjc'
Source: 4BqlE10G4o.exe, FloatModelBinder.csHigh entropy of concatenated method names: 'BindModelAsync', 'f6mSeMo2Vmq4t8LD0ar', 'pNCSGsocTjYPY0lmqI0', 'f02HlBoSSA9kQUirBRw', 'pvofOpo4WbWWm0tmvtt', 't2Pd3poJjnvNQpIi4C4', 'PJJAL1oEdKKhZHpHeoi', 'OEp7LJogChs35VIo8jU', 'zeL5uaoNqeSdek19V5s', 'CKxIPKoP0eVXEQX4ixS'
Source: 4BqlE10G4o.exe, CollectionModelBinderProvider.csHigh entropy of concatenated method names: 'GetBinder', 'hBIZEcs14i', 'hwiw5N9vlu460ktF2Cc', 'heqvYa9hSbqEwRhbaju', 'W7YggH9rLbdebZRuRv3', 'PJDurj9KXKYqtPlpBhU', 'GRjIrw9ZoXj9oHG0rbZ', 'Xo3cPJ9Sv77jZIsVohD', 'zwPPjE9t7eMC1I4PFDC', 'N1Ggdk9HZyaKI9yuXNl'
Source: 4BqlE10G4o.exe, DoubleModelBinder.csHigh entropy of concatenated method names: 'BindModelAsync', 'YQ4vSk5bVx9Mnbet9rr', 'xW8KQI5jUE5J26oaBnf', 'XKlvMc57KpxwAcNTlFl', 'MqL3c85UAWCiis7iZT0', 'qPGB4Q5YVWujEbgj8kP', 'pNGjeK5swgXiipvqahF', 'zfj3u65CKsrpGbniI9l', 'jjMPiL5ushw1UBGVxQ7', 'a4glXK5GYuKpZVXEByB'
Source: 4BqlE10G4o.exe, ServicesModelBinder.csHigh entropy of concatenated method names: 'BindModelAsync', 'dwssjYHy6CBsActbTHV', 'xbhqElHqmrNrjp2fXLP', 'cdpgZvHflF7v1XTU9nZ', 'f8r0RVHMN7VLPbxIXsr', 'wABxNfHVG1mDFL5mmZm', 'zxgMNotFqL9a6mI8kTd', 'iIGjUJtzT908y2rxPRn', 'Kv8wjiHWJjCRXG11MFr', 'PHHykkHn6oIMdXQhcbs'
Source: 4BqlE10G4o.exe, KeyValuePairModelBinderProvider.csHigh entropy of concatenated method names: 'GetBinder', 'pccDY8tUjsJJLeYf55W', 'H8yRp7tbWW4gob6hMTr', 'HStmdmtjPEWRaF7mLiS', 'JavQa1tY4QEkTExxktZ', 'foMOtEtswnReX82YNhp', 'cZOr5VtCuDRJQLxFOge', 'A2b3x4tur0KHbekMWwV', 'pICihStGNKbPHvJmuP6', 'cxGZ0qtDK9TwtIlm3kM'
Source: 4BqlE10G4o.exe, ServicesModelBinderProvider.csHigh entropy of concatenated method names: 'GetBinder', 'jTYiZHHIGFoHljHYsaK', 'M0oTUaHiv8euRMf9PB7', 'dBIf5gHBYQaO2LAVZa8', 'nC5hQ9HwJP9tKTh0ZqR', 'llEclfHp2xMdnsuYOhY', 'WDmmdRH8REtEALdr9jZ', 'cPo51mHASFxEFHu4xFi'
Source: 4BqlE10G4o.exe, EnumTypeModelBinder.csHigh entropy of concatenated method names: 'CheckModel', 'dvuZya1ljH', 'J5D5qho856mCnDUUZsZ', 'fYunW0oAEcQg4L0h6s1', 'Gl3hpeoilVD4j4GwUpY', 'be6vXWoBi8CVIdy9NqS', 'dOGZnhoTKUZMu9E9wHU', 'bJ5WMvo6KWXPyUEntFK', 'oZLCSPoaIq4fNewFoJw', 'n2SCK8omVh02ApyF6I5'
Source: 4BqlE10G4o.exe, EnumTypeModelBinderProvider.csHigh entropy of concatenated method names: 'GetBinder', 'qQgHx0oLiBO0GMaDryw', 'VcvwKQo0B62gfHXuyET', 'rWPu6LolBc82F60YhaB', 'OXme5YoX6wt8vyenE9K', 'XVs4OKo943NQ8iSr24w', 'Qk11Zyo53mCIEGRaQk4', 'Vp3WZWoohjCc8inDO1b', 'c1CDV2otNPu2tfmo3oX'
Source: 4BqlE10G4o.exe, BinderTypeModelBinder.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'eAwwfiqyu9sWw8QDQrtG', 'eOX64TqyGrAkhlcfm5sB', 'gDbDWCqy3AiMouGcc172', 'HKeoq2qysoDVXOI5MEiC', 'WCUuY3qyC1cL5L2O4q8L', 'BindModelAsync'
Source: 4BqlE10G4o.exe, CancellationTokenModelBinderProvider.csHigh entropy of concatenated method names: 'GetBinder', 'Vl6LlP9l6YIbsEQa6Oh', 'CWxHLs9XU4q4B99A5Rx', 'UApMw29L4uhXB5ZSaMY', 'PJQTqs9dCl22VFTqAsC', 'fy4cZ89k0bQVUboO95P', 's8phkG90hjGIrJno8am', 'yiv0hl99StZKRnbAZR8'
Source: 4BqlE10G4o.exe, ComplexTypeModelBinder.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'ASnvEwqqhtYVKfsWap0I', 'KxFVPYqqr4NyFisjGTmn', 'IhwMycqqKMDj9CfXjchC', 'SuKbqgqqZqj5MX1UQFFL', 'rdf8TxqqS3c3xPQ7XITA', 'KP8HBIqq44n4H4iyRJJR'
Source: 4BqlE10G4o.exe, AcceptedResult.csHigh entropy of concatenated method names: 'OnFormatting', 'x3qBVWVUR2QvFS6o7Ir', 'D6Oi3mVDYsBBLEw0aLl', 'iNKnTSV7iIblwFmTJ3S', 'ktj7pyVbwDq7Lj5OJjF', 'Qxoui6VjiY2PfLJJIlh', 'Tc0oZsVYJrruLeJ2r05', 'W3WSejVsujn5KgY3qaw', 'ibYpgNVCD9KtVmRCRSZ', 'Y9qr72Vulpw9q2t3Nr6'
Source: 4BqlE10G4o.exe, ApiConventionMethodAttribute.csHigh entropy of concatenated method names: 'MfYY4ERyLx', 'dVdj5YWlL03V2sTUBkb', 'gdVeljWXc3pKSjbZJ7l', 'UmpeYqWLCRfNlaCqufX', 'p874vbW0P7bEsSfcigc', 'a0E7nNWdlqRZsr3vI48', 'xrZY2EWkNVexS3UTeWF', 'K3GKnOW93Lk34wNf7hZ', 'RjLf2eW533tXKtuv1U8'
Source: 4BqlE10G4o.exe, RequestFormLimitsAttribute.csHigh entropy of concatenated method names: 'CreateInstance', 'wYQ7ZN8eXIQUUuLlCcv', 'QGarmA8RwNPtZHoD3UL', 'tTjFCF81pQCAp2PTBky', 'USAe108dOiUeOWwbVLU', 'lB7Anu8k21Y0aOGvN98', 'Ew5sjH8lj0TkhPJc8bF', 'UvBbom8Xf96PCUVLRx6', 'FXb4bp8Lr0M8ie394CZ', 'oLWtwe80fOLGT34DJll'
Source: 4BqlE10G4o.exe, CreatedAtRouteResult.csHigh entropy of concatenated method names: 'OnFormatting', 'z0aVVBwF2BWds0cB7bH', 'C1K7biwGFBU833Y4Znn', 'NrIGMxw3dV3NLsaoJv8', 'kxNfI9wzImW2RAX00I7', 'DgMFiPpykEidOCRCkwf', 'fFWfhmpq8Ayim8NQ95f', 'uwDTMJpf9N9wv8Rf6xL', 'wtsLVJpMCIavxkUpqun', 'oM0NtHpVg2pfqOmfKH8'
Source: 4BqlE10G4o.exe, ChallengeResult.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'iuq5GIuHpBWTeetj2hW', 'uw40IJuvHnNYK10BIGT', 'p0L29duhdy8220fY3PJ', 'QcsACIurAXFg97IUaja', 'lDmro9uouJM0Gfgatmn', 'hV6Yydutmx4CMVwcYmG'
Source: 4BqlE10G4o.exe, CreatedAtActionResult.csHigh entropy of concatenated method names: 'OnFormatting', 'pf0jGVwxGFOmD6UvDnF', 'f0pFyWwQfF4WW9UsrFh', 'dvoTa2wOLCuAafGPLQf', 'OrRe77wDC17hAhsZiWQ', 'H9BSFow7uiE2ulbLBM4', 'KTEWsqwUdonSrX5CPOw', 'CwOLBAwbMOXVUP8mksu', 'I6wrCFwjFKcQwQWdnSn', 'Pak74AwYaNflKxcYcAi'
Source: 4BqlE10G4o.exe, ForbidResult.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'gkPYBIuYRxQFYydSuRy', 'VDPPtYusvC2Go8DxLAp', 'VPA8hBuCtxQAfB6ks1Y', 'LvhCeSuuOOSjiPtRgJn', 'mQlnNpuGAg7EohSauF3', 'QBWrFkubG0oFdODS7U8'
Source: 4BqlE10G4o.exe, ValidationProblemDetails.csHigh entropy of concatenated method names: 'UDCAcPTVm68rJAfyiQ4', 'QHWXGFTW3vUTF27mxau', 'msRy1YTn5VserKlw5cb', 'fd85GfTw0YLyRyEG2Tf', 'ydHx5hTpR3odaITLJXS', 'R7fdBqTId0EqOJ838Xj', 'R0c9N4TiuvoEaPqjexT'
Source: 4BqlE10G4o.exe, ControllerContext.csHigh entropy of concatenated method names: 'xw5muqw4n6RbmK9lcpf', 'eFMKnYw2LZv60fqeGtZ', 'pMSbjnwZj9TBSJpLlQV', 'zuTGoNwSErGVQjEPCo2', 'nWERrqwcti1ls1Fs0KT', 'Xt1pOOwJtfeFAGLHfEb', 'S2O3e3wEtSgpAviknMx'
Source: 4BqlE10G4o.exe, BindPropertyAttribute.csHigh entropy of concatenated method names: 'qZRNYKurOk', 'P8Cr8xnqa2dCBOodXSa', 'P2lX1Nnfj6iaPZrFwfS', 'xbe6FgnM9Wm0b7ZSZyn', 'P4MNpUnVR3lbvMbC6mP', 'wlHXx8nWMTUrsIdOuGL', 'S3nqRDnnYoKFPiWfNVn', 'DAlEcunwjdWc0xIY1Ku', 'r9A0monp0jSmtyGdFVh', 'qnNLOrnIHYGPnweLjGb'
Source: 4BqlE10G4o.exe, AcceptedAtActionResult.csHigh entropy of concatenated method names: 'OnFormatting', 'T4VbDjV5OkI2WNjX4vr', 'q9icPlV0QlTns224Egy', 'X33Y9HV99XQueuLZvbm', 'wd9EXgVofY4FRky0pMG', 'MFmoKWVtunsOaNPJHjC', 'irgjesVHNSg4P8v7Src', 'vEkfmaVvBsxgH3TdqIJ', 'UVIUcAVhmc53BNPpBXZ', 'Y5GbjqVrnRZ5nyrIDPc'
Source: 4BqlE10G4o.exe, UrlHelperExtensions.csHigh entropy of concatenated method names: 'Action', 'Action', 'Action', 'Action', 'Action', 'Action', 'Action', 'Action', 'RouteUrl', 'RouteUrl'
Source: 4BqlE10G4o.exe, MiddlewareFilterAttribute.csHigh entropy of concatenated method names: 'CreateInstance', 'bdMIVWprXP6Ni8B6xIS', 'B3MbxLpK33tBWDlQE1W', 'dcILGkpZunDJhugsMVv', 'EBvoaHpvCY7dLtabWj5', 'fywjbBphbbtD50jVEig', 'AdGvuxpS7TjOfrhpAY0'
Source: 4BqlE10G4o.exe, StatusCodeResult.csHigh entropy of concatenated method names: 'ExecuteResult', 'nj5bXdAm9D7bZpku2RI', 'c5u0Y6AeBrZ60iToAS2', 'o8EVkEARiUXP5yOPPKT', 'KWBjFOA1nyqeWV3Wp5h', 'vqeAKnAdfpasZdOLr1r', 'oR19UOAkhBSYHT0lWfn'
Source: 4BqlE10G4o.exe, ProducesAttribute.csHigh entropy of concatenated method names: 'OnResultExecuting', 'OnResultExecuted', 'SetContentTypes', 'RqgD0JMUox', 'LCFVlGBJB9yvHTVbSej', 't1yXsgB2kuGqlmbNfit', 'OgLQDWBcu8FNDftZWYw', 'VFE8r2BEiac4y93lUp5', 'qdk5KHBgGWl1rcSfgx8', 'EugJYTBNtU29ZbbssnD'
Source: 4BqlE10G4o.exe, AcceptedAtRouteResult.csHigh entropy of concatenated method names: 'OnFormatting', 'S9r1X9Vcn55FEYA82Aq', 'joHcZ5V4eH478GuEV8f', 'vq5li1V28pgNlE68QrI', 'moEVxmVJ9oiC68G92Am', 'aPKumnVEMEJLGyUKych', 'l03e0MVgGPq1B5SiKwh', 'hyWel6VNwop0Lb5n0LL', 'bpooPgVPnP41DDGfS3y', 'HhFNRjVQU5ov8QMFndw'
Source: 4BqlE10G4o.exe, RequireHttpsAttribute.csHigh entropy of concatenated method names: 'OnAuthorization', 'HandleNonHttpsRequest', 'NgJt5w82BwEdODi6yLF', 'bRoNhg8chVYGUdbKOMA', 'jGHqjU8JZZsf9pyUdGq', 'fdproJ8E6vZBpgKubRo', 'K0ndJv8g0RTEuGHEmaB', 'y56YIT8N4RqATlStWv4', 'uKXCt28PrplBTsSjjVE', 'AGh8or8Ql8apoBu8ptx'
Source: 4BqlE10G4o.exe, SignOutResult.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'VoxZVRGe1LVy5ui6e7j', 'cqpvOpGR9r77BfBLIUN', 'wu8Dh4G13ToSRic9WKo', 'GRqsxRGdKXDJip3Khn6', 'xsmwnkGkgeRt91wnwlx', 'pYSU6iGlSJjEGOZfJSg'
Source: 4BqlE10G4o.exe, ModelBinderAttribute.csHigh entropy of concatenated method names: 'Rcd7OfIOCIvKrmnAnHk', 'pJGx73IxC2N6sSfo76t', 'OCjU78IDbxYVxjM87h6', 'Fi64WqI7WNP5OLDs3uf', 'EbfSW6IUSNBrQIC1PeC', 'Ef7W9tIbTdolLbW8NYR', 'dBV4nIIjak5InJMdbjG', 'iQ3F0EIYBjKj2vKlDBe'
Source: 4BqlE10G4o.exe, ConsumesAttribute.csHigh entropy of concatenated method names: 'OnResourceExecuting', 'XPtNlYA6Lj', 'OnResourceExecuted', 'Accept', 'mv0Nmi182r', 'tEmNRbrR3W', 'SetContentTypes', 'cHWuvAntZAALstyZgKD', 'uL0hr2nHjen0WOnkCbr', 'GZqU8Bnv45oCP2oP85x'
Source: 4BqlE10G4o.exe, AuthorizeFilter.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'KxYAZxqIpgP96q7UV8T8', 'cGgT6YqIIxKH3MRwoFfD', 'ulaf8KqIimiLs9OkDWjW', 'Ie9UuIqIBDZUqvt5SSGP', 'Lg1ycVqI8KyipmELu3np', 'L5vNHOqIAZKdOQo63fXp'
Source: 4BqlE10G4o.exe, HttpsConnectionAdapterOptions.csHigh entropy of concatenated method names: 'AllowAnyClientCertificate', 'lpvroTq63WXLMIZ0w7OL', 'hXhhNlq6F40vyb868aiT', 'f0LhSFq6uMbuk7lRG2NC', 'oDqXZBq6GIE4Evc0C3B0', 'fIdxoEq6zIXdP8lxPWmG', 'BKEHYnqayDeimKQRpqw2'
Source: 4BqlE10G4o.exe, CertificateLoader.csHigh entropy of concatenated method names: 'LoadFromStoreCert', 'IsCertificateAllowedForServerAuth', 'DoesCertificateHaveAnAccessiblePrivateKey', 'xJHESB9MZF', 'bED9cqq6EBfKfKZnpD2d', 'XGPioxq6gSCBEYTaO19H', 'AegHdBq6NQBgou5Z0IRb', 'cMeHoUq6PFWsfcdwtjsT', 'fxQePnq6QO6XnpueKDlv', 'a3itOIq6c7cqlexLhx5D'
Source: 4BqlE10G4o.exe, ControllerEndpointRouteBuilderExtensions.csHigh entropy of concatenated method names: 'MapControllers', 'MapDefaultControllerRoute', 'MapControllerRoute', 'MapAreaControllerRoute', 'MapFallbackToController', 'MapFallbackToController', 'MapFallbackToAreaController', 'MapFallbackToAreaController', 'MapDynamicControllerRoute', 'DtkYkY6HlW'
Source: 4BqlE10G4o.exe, MvcApplicationBuilderExtensions.csHigh entropy of concatenated method names: 'Build', 'BK1lkEuWTrDt7aWO4Hn', 'PQ2wMCuMOik3A1ODfrj', 'c1pV70uVQj0hcrVQeGl', 'UseMvc', 'UseMvcWithDefaultRoute', 'UseMvc', 'qf1YFJlp5J', 'J2SG1hVT41VTwnm6RlF', 'TYsNKZV6HerV0WRfLY7'
Source: 4BqlE10G4o.exe, MyProject.csHigh entropy of concatenated method names: 'Qupnm6I10', 'Ob8GxZZsA', 'Equals', 'GetHashCode', 'GetType', 'ToString', 'y48RVTfkOQQ4kRb8MHm', 'tRaVeSf1rrw9PkfbygK', 'mLMuS3fdvcR4C6tTrKN', 'O0xbjiflMaTyBcFZOFS'
Source: 4BqlE10G4o.exe, MySettings.csHigh entropy of concatenated method names: 'UsM32o1as44b6FXP3h', 'ixF435dGlOpmqqRx8v', 'axAWi2eSZ1wutY6MFy', 'xdsr1uRNcQHneIVj80', 'HvisfbkErQ9Ob7c4fB'
Source: 4BqlE10G4o.exe, DefaultBindingMetadataProvider.csHigh entropy of concatenated method names: 'QJr7VbacyL', 'CreateBindingMetadata', 'FXqAb4M343', 'M9o1rHXTMiJ6YJVs50T', 'Eme5p4X6tdUFxOunTMY', 'IGQZlZXaOlZP860fSDm', 'LrQpE9XmWu5iwuqeJDS', 'jSAXSHXeNjQJv0iIsJK', 'o0tlYUXR2YTXRtbltQB', 'yDOlqnX1FNYkHe6J9qH'
Source: 4BqlE10G4o.exe, DefaultModelMetadataProvider.csHigh entropy of concatenated method names: 'sFtcDTqySYFynk5Am7of', 'wasCcgqyKk2fKa2DdWpx', 'Lv8qcZqyZ4Lidfy7LuxG', 'aFG7vUXDV1', 'VAL7x6wOQH', 'TrNry0qy4whhgp9Epd3I', 'eNu6f9qy2eBEYjOZlXVC', 'GetMetadataForProperties', 'GetMetadataForParameter', 'GetMetadataForParameter'
Source: 4BqlE10G4o.exe, DefaultModelMetadata.csHigh entropy of concatenated method names: 'CalculateHasValidators', 'GetMetadataForType', 'GetMetadataForProperties', 'qtW3HTXNpopxQPgL3MO', 'ey2s2KXEZS5TfU4anB9', 'b1EWvRXgwt29CpLD806', 'B7whwGXPypNxbwYkLCQ', 'hujkqkXQI0IWTdnVkmW', 'AP8LfvXOjvNkRdJKh37', 'BdFiQAXx29rB0BNsvfP'
Source: 4BqlE10G4o.exe, ReasonPhrases.csHigh entropy of concatenated method names: 'oc5S2AdsZ8', 'ToStatusBytes', 'bIYqWZq5i3PjexPEhRnH', 'jaZvDiq5BC4sGZguTIuP', 'APFa62q58ZdCXHMsbBg6', 'PhCX7bq5puusTCk47pMJ', 'u0a5XQq5IBXp1lH9BI44', 'STacA5q5AaZausEbPIyr', 'iTgi5uq5TyuDHqEvySJe', 'BTEZngq56kWx7Y40qYZ8'
Source: 4BqlE10G4o.exe, Http1Connection.csHigh entropy of concatenated method names: 'OnRequestProcessingEnded', 'OnInputOrOutputCompleted', 'Abort', 'ApplicationAbort', 'StopProcessingNextRequest', 'SendTimeoutResponse', 'HandleRequestHeadersTimeout', 'HandleReadDataRateTimeout', 'ParseRequest', 'TakeStartLine'
Source: 4BqlE10G4o.exe, HttpUpgradeStream.csHigh entropy of concatenated method names: 'Dispose', 'Flush', 'FlushAsync', 'Close', 'BeginRead', 'EndRead', 'BeginWrite', 'EndWrite', 'ReadAsync', 'ReadAsync'
Source: 4BqlE10G4o.exe, Http1OutputProducer.csHigh entropy of concatenated method names: 'PtiXJOEjrP', 'XJeXSlwi77', 'f9nXtlMPZY', 'HaBXicbBlG', 'UmogqHqcbq3EuCviBUMT', 'vgCiAoqcj8kay6PC5TGn', 'Ox03AITJsL', 'v8k3Z7p28Y', 'fYy3g8S66k', 'IaS3qonpO6'
Source: 4BqlE10G4o.exe, HttpRequestStream.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'cZllKxqEnOIlLNKTTo0P', 'eIfba5qEwTChSLusmjsY', 'KGJGJJqEVXcfTtalxEcK', 'bAftC4qEW5m1HbJI8518', 'MoveNext', 'MoveNext'
Source: 4BqlE10G4o.exe, Http1ContentLengthMessageBody.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'sYDJCmqc2oo9RhHUOWhW', 'FrXrYFqccyrSEmS6tOhT', 'BOVrRFqcJnLUwv97QJGr', 'PXJtl9qcSqP5F2qcI9FK', 'wOvkeeqc41UyAfZf9b7v', 'ReadAsync'
Source: 4BqlE10G4o.exe, Http1MessageBody.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'yTl7v2qcNi7hDnJsOIxj', 'z7X1iUqcP1fqNfuplV8f', 'z1uPvDqcQnFBiToAVaxM', 'Rp4MvBqcOn8IT84nqL0U', 'KiHOT5qcxU0uLwviFoRs', 'HBslNfqcDbnwgg3ivv0h'
Source: 4BqlE10G4o.exe, MessageBody.csHigh entropy of concatenated method names: 'AdvanceTo', 'AdvanceTo', 'TryRead', 'Complete', 'CancelPendingRead', 'ReadAsync', 'ConsumeAsync', 'StopAsync', 'OnConsumeAsync', 'OnStopAsync'
Source: 4BqlE10G4o.exe, HttpResponseHeaders.csHigh entropy of concatenated method names: 'MoveNext', 'Dispose', 'Reset', 'c2obIaqJWTWm58T8Gna8', 's9Msj1qJnjfPpVkLr0jQ', 'KsboyVqJwUcNqWtYAf4T', 'osw3GjIUTj', 'SetRawConnection', 'SetRawDate', 'SetRawTransferEncoding'
Source: 4BqlE10G4o.exe, HttpResponsePipeWriter.csHigh entropy of concatenated method names: 'Advance', 'CancelPendingFlush', 'Complete', 'FlushAsync', 'GetMemory', 'GetSpan', 'WriteAsync', 'StartAcceptingWrites', 'StopAcceptingWritesAsync', 'Abort'
Source: 4BqlE10G4o.exe, Http1ChunkedEncodingMessageBody.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'VwQTM9qcL2URRO4dluQe', 'h0bXmtqclnRIbRgdlLOL', 'KSQGRWqcXyHtB5XhbTfb', 'MoveNext', 'MoveNext', 'SetStateMachine'
Source: 4BqlE10G4o.exe, DateHeaderValueManager.csHigh entropy of concatenated method names: 'n4jnMBqcRIO2Xkn0pMrv', 'up59WHqc1thP6dCndMvy', 'GetDateHeaderValues', 'OnHeartbeat', 'iJCWYVEAOJ', 'MBXrTkqkCF6qpgXld6ec', 'nSwRKlqkuDF8mfnvHuUX', 'MRflBbqkGw0R9hTW6N5F', 'pxTXXuqk3aKJKkLVBNw2', 'SWfcoEqkFdrURhnDHsQ1'
Source: 4BqlE10G4o.exe, HttpRequestHeaders.csHigh entropy of concatenated method names: 'MoveNext', 'Dispose', 'Reset', 'ygTRuhqJysEseDf2wj5M', 'GZDYEaqJqg3jxiPLBTAL', 'MuHrNOqcFyEhfASqkOJC', 'qe5Y7sqczqr7ElABZBUD', 'JC73sHqJfynCEDY8UTAQ', 'GetCountFast', 'TryGetValueFast'
Source: 4BqlE10G4o.exe, HttpProtocol.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'ypB5kuqJREQfK5n6Q2id', 'i1Ot0VqJ1eFeM4LKVKcO', 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine'
Source: 4BqlE10G4o.exe, HttpHeaders.csHigh entropy of concatenated method names: 'ThrowHeadersReadOnlyException', 'ThrowArgumentException', 'ThrowKeyNotFoundException', 'ThrowDuplicateKeyException', 'SetReadOnly', 'Reset', 'AppendValue', 'TryGetUnknown', 'RemoveUnknown', 'GetCountFast'
Source: 4BqlE10G4o.exe, HttpResponseTrailers.csHigh entropy of concatenated method names: 'MoveNext', 'Dispose', 'Reset', 'FgG8tZqJiOMHTvOiOobL', 'KxrlgyqJBItXN97uXdH9', 'RZWiDZHAP6', 'GetCountFast', 'TryGetValueFast', 'SetValueFast', 'AddValueFast'
Source: 4BqlE10G4o.exe, HttpRequestPipeReader.csHigh entropy of concatenated method names: 'AdvanceTo', 'AdvanceTo', 'CancelPendingRead', 'Complete', 'ReadAsync', 'TryRead', 'StartAcceptingReads', 'StopAcceptingReads', 'Abort', 'G6OjfrUodm'
Source: 4BqlE10G4o.exe, StreamInputFlowControl.csHigh entropy of concatenated method names: 'Advance', 'UpdateWindows', 'StopWindowUpdates', 'Abort', 'S7LXgQBkJM', 'E9xVA8qhHYclkbhVoX7J', 'BuW5lwqhvN20oNGVdflb', 'QS4TImqhhjI830CKRb3m', 'AF6DHDqhrngZjJFZcOas'
Source: 4BqlE10G4o.exe, StreamOutputFlowControl.csHigh entropy of concatenated method names: 'Advance', 'AdvanceUpToAndWait', 'TryUpdateWindow', 'Abort', 'pSVXRXTSWy', 'GV0XacqhSy66t33YoYhj', 'KvssJpqh4uQGDrT7ND1t', 'XACM9AqhKVya8KUmP7DO', 'tPxbVhqhZOXDXuMtO3sg', 'lMHLluqh25bUjOTpdQPI'
Source: 4BqlE10G4o.exe, DefaultActionConstraintProvider.csHigh entropy of concatenated method names: 'OnProvidersExecuting', 'OnProvidersExecuted', 'o2UpX6YqdV', 'oIPRuMj21gn1KNVXtSP', 'tKw2GLjcdih6nFySHSc', 'DI9iivjSEOuqC4GvbUW', 'IpgOybj40y2UmhIUt5Z', 'fBgFcwjJUrj3MGLifKb', 'hmLiDsjEMbFpgqZyU8C', 'fP9xD9jgDWedaNe9yhV'
Source: 4BqlE10G4o.exe, ActionConstraintCache.csHigh entropy of concatenated method names: 'mdeW5kqi24Nc3BrUT2e4', 'igP3htqicmJ2JHaBlTVc', 'xfBmPPqiSS1dtJ7FxgTI', 'h2tI8xqi4bQhASLTR5xu', 'XpHSD4qiJTaY7xSeZvUS', 'GetActionConstraints', 'xGopjPe7SY', 'ULCpSyiG4Y', 'cMrp6RVHeV', 'MR7PYTjvcuhnGFyWFP7'
Source: 4BqlE10G4o.exe, HttpMethodActionConstraint.csHigh entropy of concatenated method names: 'Accept', 'nHK4wKjORwSIluafYZ1', 'uf6mShjx6CZBRbOPXK7', 'ogH0bYjDsSysDj75SIF', 'Cd6R2yj7qIkxqcgK4mg', 'vIRMDdjPNB6cQtS7vlH', 'AViOOtjQ35E7Tufag3r'
Source: 4BqlE10G4o.exe, AddressBinder.csHigh entropy of concatenated method names: 'BindAsync', 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'uwOZL4qg3IFlvp6MXyio', 'jUJTcxqgFLVIL1qZ9OFS', 'oY5HYDqgzeI8kVAoyAx3', 'Yojb7mqNy8xOpbrnA7Rp', 'UMi4EdqNq1E67FV9fiPx'
Source: 4BqlE10G4o.exe, ConnectionLimitMiddleware.csHigh entropy of concatenated method names: 'ReleaseConnection', 'Vpf2TGq40CIGi65ajki7', 'rcseZOq4X94OlRReCKuK', 'OKDphuq4L8Tr0d1dO7WL', 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'GQMsaZq4oZKR8SJSnVTG', 'I9S7Mkq4trRqtyv4QrYK'
Source: 4BqlE10G4o.exe, ConfigurationReader.csHigh entropy of concatenated method names: 'bYOQDQwaLx', 'xw7Q0KacRB', 'cvvQ5DKhVR', 'hwgQ8SHcWu', 'RkMDkcqeyDEFMbCZTeJT', 'vuQNEXqmFcoV2IhdphNH', 'wvxBcGqmzd0m9thjvdT7', 'eL0BRgqeqyp35goMyFUY', 'MsPGMDqefYYCgiF07Gu2', 'RuZGicqeMCwy8XMkHgq9'
Source: 4BqlE10G4o.exe, DuplexPipeStream.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'lJ1UGRq4ctH8sXpXFtJc', 'zSUoiIq4JUouQy4V2FYv', 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine'
Source: 4BqlE10G4o.exe, LoggingConnectionMiddleware.csHigh entropy of concatenated method names: 'Nhp6GWq2RsBa0x1qCAgI', 'jYAkyFq2m8FxloXbgZKX', 'M4CWGWq2edH469obyRbQ', 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'AWZOTuq2kSxDgmfsoWm7', 't0NyOEq2lOZYCPKxfUpK', 'io3oQSq2XM5CifqAJE56'
Source: 4BqlE10G4o.exe, LoggingStream.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'S3aGXpq2fyyEWPNy6F4Y', 'juErbJq2MYX5DlGUWQ89', 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine'
Source: 4BqlE10G4o.exe, HttpConnection.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'uIrPtKq4kqrAJdBM3qs8', 'xXOQXKq4l5Nb7QDGOSBJ', 'M3cQT5pMFp', 'qr2QXkVBpZ', 'ProcessRequestsAsync', 'Initialize'
Source: 4BqlE10G4o.exe, ApplicationModelConventionExtensions.csHigh entropy of concatenated method names: 'Apply', 'Jcfaejqi7etPqiqEMk4c', 'graEf9qixhEnNmuVxy81', 'AhN4DAqiDvvqIaTdKUfh', 'Apply', 'Apply', 'G2GrNrqij01lR2vvVvy1', 'm3hhkcqiUji3cd9Xur0i', 'z4BTPwqibmsmw5pOxDsp', 'y3RHgOqiYPTwRT4lDUMM'
Source: 4BqlE10G4o.exe, ApiBehaviorOptionsSetup.csHigh entropy of concatenated method names: 'Configure', 'ProblemDetailsInvalidModelStateResponse', 'ConfigureClientErrorMapping', 'AMGpI1pGuA', 'LDjovljs9i6XsWNqaNF', 'tYksBhjjN4GHAyhQgCh', 'fIXugbjY3TrqD8xYnC1', 'osmF4BjCsHqnfnU7DBj', 'AiJBAwjuXXvIg3Camy1', 'WEwTSajGun5cLObsNo6'
Source: 4BqlE10G4o.exe, MvcCoreServiceCollectionExtensions.csHigh entropy of concatenated method names: 'AddMvcCore', 'HMypxiQovC', 'w4TpfVPOCN', 'nnepr1aQqk', 'AddMvcCore', 'AddMvcCoreServices', 'B2OpaaF6mw', 'qtOoR5YJuXLHTveeXOX', 'yYy7XCYE7t1J7drEDgB', 'CJ625uYge7plJWP2L4K'
Source: 4BqlE10G4o.exe, ControllerBinderDelegateProvider.csHigh entropy of concatenated method names: 'lGmF4IfY3x', 'LwKFUw9Qfd', 'F0g74fqpsaouYAiUBXVa', 'wk2eQOqpjv1NrIADCbOb', 'C11IaHqpYbdUUs5tCDZa', 'CreateBinderDelegate', 'eYSRg7PSUQ', 'uSVRKclXsX', 'WNw8iQQLeElpRPVCjKl', 'lGlAJNQ0WLBynCupiWX'
Source: 4BqlE10G4o.exe, DefaultControllerActivator.csHigh entropy of concatenated method names: 'Create', 'Release', 'VufrFwQCo2av47AtDwS', 'd3sGl3Qui18BKZEjBFZ', 'yE3SLMQYDvpNdg5qPM6', 'MvjNe1QsVSheI90VQ0U', 'MUby6gQGj6thYbsai9U', 'w76kquQ3eBtUIpSS0ux', 'qTk5lyQFgmNIrjVWrUH', 'e2U7X1Qz5XGuRSy5o5e'
Source: 4BqlE10G4o.exe, ControllerActionDescriptor.csHigh entropy of concatenated method names: 'ML45goQ8pv6DG5O4dth', 'TLqyw3QAM8qoZFO6jMQ', 'UyrVFFQT8uYa4Gd9Nkw', 'mUpD1sQ6SGjvtLfADdD', 'TASHadQaF0wfRqbNAmQ', 'dacJZnQmP7PXwmpnQFS', 'qE2YQmQe9SlPvhhKk6P', 'yqVQhjQRG5ZUW7JCOtm', 'ymP4sFQ1vu2pHStgMtc'
Source: 4BqlE10G4o.exe, KestrelConfigurationLoader.csHigh entropy of concatenated method names: 'mZJEQP3SN1', 'n9GEwB8E7Q', 'Endpoint', 'Endpoint', 'Endpoint', 'Endpoint', 'Endpoint', 'LocalhostEndpoint', 'LocalhostEndpoint', 'AnyIPEndpoint'
Source: 4BqlE10G4o.exe, ObjectMethodExecutor.csHigh entropy of concatenated method names: 'Create', 'Create', 'Execute', 'ExecuteAsync', 'GetDefaultValueForParameter', 'c5akpmQrXA', 'dFfkkB8lXK', 'gE1kPDAZCa', 'eAvB21sLZjvpoxrMoRK', 'mhYqh1s0bVwYFQajh1j'
Source: 4BqlE10G4o.exe, ObjectMethodExecutorFSharpSupport.csHigh entropy of concatenated method names: 'TryBuildCoercerFromFSharpAsyncToAwaitable', 'jKPk6bWQE9', 'COJkt4YpHo', 'oaJkyscmNi', 'rNuOWHs7tq4yx2xW86g', 'wT2DHqsUlDSce9uTjOs', 'GWLyMbsbb6s5Hd02XlO', 'qYAve3sjJQtqHZ6D199', 'Ec423usYoJIhUduj6nC', 'yoTVt8sxOf4ZUCffA8D'
Source: 4BqlE10G4o.exe, ParameterDefaultValue.csHigh entropy of concatenated method names: 'TryGetDefaultValue', 'zyEb9usVHZQCCjW8jNi', 'rdbHitsWpc3kw2YmOs6', 'isuGrxsnWvWHtuBQH2t', 'uGhAGXswjymXBQ4qMWE', 'JiIdaEsfte1lJJc7SGq', 'rdTqwYsMo6RF7yuaBhU', 'KCCS7Fsp1x1rIJ4eUhx', 'XUaNOhsId9ZVKbZpbOE'
Source: 4BqlE10G4o.exe, TypeNameHelper.csHigh entropy of concatenated method names: 'BBqu1T7csY', 'oLMuNrgbHG', 'wt0uc26Qer', 'GOfuDuZV3c', 'xYr9s6qBZ5ritHUC1X4U', 'XeJIjnqBSvuk4KE7H6Uh', 'GetTypeDisplayName', 'GetTypeDisplayName', 'gRbpGslGVm', 'KcOpskF0K6'
Source: 4BqlE10G4o.exe, PropertyHelper.csHigh entropy of concatenated method names: 'GetValue', 'SetValue', 'GetProperties', 'GetProperties', 'GetVisibleProperties', 'GetVisibleProperties', 'MakeFastPropertyGetter', 'MakeNullSafeFastPropertyGetter', 'CGikeHWe1d', 'MefkxrFi7w'
Source: 4BqlE10G4o.exe, ResponseCacheFilterExecutor.csHigh entropy of concatenated method names: 'Execute', 'YXyR6fNDdm70LKfmymr', 'zg9DZ4NOWrt1ALiOYlq', 'BIOseiNxp1ZSSaWoqOY', 'cU11sBN7FnvreuD3A4C', 'UYDfMwNUlyDD99bXWxG', 'q30QYxNbjdO9noe3KSf', 'sPTOFfNjYDueXrbvjfk', 'KCDfumNY1SGaACDskMa', 'DE3ujcNse7O5q7YvxyL'
Source: 4BqlE10G4o.exe, MiddlewareFilter.csHigh entropy of concatenated method names: 'OnResourceExecutionAsync', 'IrjwlQgGEiKbBg2Vb8Z', 'qhmORPgCW2M58RYgZNl', 'zaigoEguTMhgb03vJD9', 'xEA098g3OCOaAfua8oj', 'O3lMfPgFIsjrhNsdTub', 'h5NQ60gzAHDKuvy0WO7', 'MjNSPsNy3QcBgIcVWs3'
Source: 4BqlE10G4o.exe, ControllerResultFilter.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'oFm1rCqpI0l6a9Utc4KA', 'jiO6wGqpi66oK9oxL0kR', 'BuupjTqpBknLRCwravGn', 'TskxY7qpwt3GkviBdYV7', 'gYmBeqqpp0xw0p9GHeoq', 'OnResultExecutionAsync'
Source: 4BqlE10G4o.exe, RequestFormLimitsFilter.csHigh entropy of concatenated method names: 'OnAuthorization', 'i4sPbfNl2Exg0fGjYW5', 'JsFdGgNdTQT3DAye2ND', 'tr6FpYNkZHonEWYxFDw', 'jVfEtCNXNp9M5hTsxRS', 'iOiojBNLRLMr76EXSLw', 'dsWW1kN0Tqe4VEKCm8v', 's1O82kN90S87O8IiHq1', 'zS4lgfN55KNBxYewWgC'
Source: 4BqlE10G4o.exe, FilterDescriptorOrderComparer.csHigh entropy of concatenated method names: 'Compare', 'RXbD9JgHuPertUSMTwA', 'YTifHVgvqX81mWcfG9d', 'h8T12igos4uf7MOAeY3', 'MMoMGUgtmCLnWoy48IH', 'wH2xUjgh6aiMkh8ZS9s', 'ULvhoFgrEderWAqaReI'
Source: 4BqlE10G4o.exe, RequestSizeLimitFilter.csHigh entropy of concatenated method names: 'OnAuthorization', 'pXHrm8NosJEBawYlFZu', 'KpB1TiNtQc4ymNZpwVH', 'CvcXMHNHZxjR0MrveKT', 'tcZe8SNvxqjpo3TDR4C', 'xJeehoNhqUSoUhJVxAI', 'GHfXMONrlQyRqdaSOMy', 'FJEjZbNKkK2laicjme5'
Source: 4BqlE10G4o.exe, FilterFactory.csHigh entropy of concatenated method names: 'GetAllFilters', 'CreateUncachedFilters', 'wiElRMtFat', 'dqZ2O2gSpxxYOMHYQQ1', 'Dkyfwug40rPS7HxgO9u', 'HWWxq7g2CNnUAFcl0Jb', 'R7wY3mgcYaJQjLOCp5U', 'f0UwO8gJ3xdThjRIulh', 'cDZeykgK6wEPT9dlQc8', 'YG1TcsgZtfVPdxSIXQ9'
Source: 4BqlE10G4o.exe, ResponseCacheFilter.csHigh entropy of concatenated method names: 'OnActionExecuting', 'OnActionExecuted', 'hjctlTN4TMuHC2Dy5Xd', 'byfPygN2thW0vOyX2dK', 'XbN5iLNcCGbOaQogorG', 'lEVpnTNJ2yaTDU43EDF', 'jyd0jMNZW1jHv2AT2nq', 'yU2H9DNSSrVdoZa9u2R', 'gOl9Y5NEg9d8lBLAfCX', 'zKOsjGNgUkolcFXYST6'
Source: 4BqlE10G4o.exe, DefaultFilterProvider.csHigh entropy of concatenated method names: 'OnProvidersExecuting', 'OnProvidersExecuted', 'ProvideFilter', 'Wbql9LdmSs', 'M4LsKPEGQDrQxLTeeZX', 'gAmSZKE3kpZmbmfx3md', 'Q3pCTNECjXXhhihYC0H', 'yxUxB7Eu2HClf0MPLqR', 'goETUsEFaBSZN9pbXug', 'p7n1CDEzZsFRFHkyuCn'
Source: 4BqlE10G4o.exe, ControllerActionFilter.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'PoX5HxqpWNir3L3B62w1', 'vNUk2Fqpn63K2OSGxsIK', 'jQEcyUqpMIe7sDsUymWW', 'upEe8uqpVDnu7AXUvCIv', 'OnActionExecutionAsync', 'b21l0ySVBH'
Source: 4BqlE10G4o.exe, MiddlewareFilterConfigurationProvider.csHigh entropy of concatenated method names: 'KBsF6wDngW', 'qS4Fjbxdi4', 't5oFSvfgT7', 'LYqg7oqp5xou5tvyFssY', 'COWnJoqp0iEHUreGnG4l', 'abn5Q0qp9TSU1f2a2s80', 'USw4sdqpo7afUUsoHpFn', 'FGMI1jqptvvnqgYPsfyA', 'nfuNeKqpHQiRuPsgpTL4', 'jf4PjJqpvHhWKXmDWwra'
Source: 4BqlE10G4o.exe, DisableRequestSizeLimitFilter.csHigh entropy of concatenated method names: 'OnAuthorization', 'iXGv8RgpSG6SU5hG9ej', 'D95jG7gnj5q77nKQoPL', 'SM6IrTgwyYQkhsQulQG', 'RDDGWrgInqstB5gQMap', 'RISZaBgiSvV0FyL8wrD', 'CrWbl0gBCFZXSphogcp', 'pbS9udg8MjAIWWFm8j3', 'ThvtuQgAjkqikUmJx0o'
Source: 4BqlE10G4o.exe, R2mIapWar4cwoqqx6Q.csHigh entropy of concatenated method names: 'X6r4iQr0rp', 'ltc4J2VEbG', 'qf04jkZTT1', 'cQk4SsPOfr', 'e8Z46nKjLY', 'bI64tv21tT', 'sJS4ybABKv', 'lly4TKP65O', 'HiX4MCrHIa', 'aNo4XEtTNN'
Source: 4BqlE10G4o.exe, ControllerModel.csHigh entropy of concatenated method names: 'L472fELXW2', 'MNG2ra524o', 'WP8l4e7EQJS2oFhc74n', 'nbipTp7go9GeLZj8Oqy', 'BPwCDW7NMV6YxBlY5GN', 'fhViel7PDewCw0RnyR0', 'Qt3fST7QjurqPgaJw3j', 'urFQKZ7OC5AAeUNx1v6', 'uv6uNW7csFwP4uUgH8y', 'hVtiZU7JWuooMZbKbns'
Source: 4BqlE10G4o.exe, ControllerActionDescriptorBuilder.csHigh entropy of concatenated method names: 'Build', 'lB62SDadIf', 'mZ526hVXfo', 'vob2tW466F', 'f9G2yTHQhZ', 'DyF2T2p6E7', 'eWR2MSjRIG', 'NsW2X3Ejqf', 'fLO2bqx9k6', 'Ad22ItbFdc'
Source: 4BqlE10G4o.exe, InferParameterBindingInfoConvention.csHigh entropy of concatenated method names: 'ShouldApply', 'Apply', 'InferParameterBindingSources', 'InferBindingSourceForParameter', 'DRZpqC2749', 'Tl0pleTvTl', 'ixfKaEUYjh96yl8btwl', 'r5FJp1UbkW7Uc4SmrHE', 'D1B0ltUj627FNnwhc2u', 'WukN0wUsgU8mkeN7D0X'
Source: 4BqlE10G4o.exe, ConsumesConstraintForFormFileParameterConvention.csHigh entropy of concatenated method names: 'Apply', 'ShouldApply', 'AddMultipartFormDataConsumesAttribute', 'qcM8fODjlUKCcZoGifj', 'psPi0kDUDqgGEL77QvR', 'A3GNVkDb6trUTBoaMOh', 'OybWtrDYQ5TK0DUvsWg', 'FuivY0Ds5RXW1N232Wc', 'VUGLc0DCt6m65o5AD2O', 'sJ4y6tDuQg72bSJgJ9P'
Source: 4BqlE10G4o.exe, ActionModel.csHigh entropy of concatenated method names: 'KfWRUCIU1Q', 'f29MFtxr0Z1hgDeAVrH', 'bYPGyMxKYvVKLfdZwR6', 'gEWC0AxZHHBPkcc4BVX', 'S93k41xSPj42IER9Ac0', 'EcR2oUxvWeZIlqaUtu8', 'B4JeHxxhrTlv8rWGgjW', 'P85pW0x4P5a1vgPOcYP', 'YTtHxsx2AiQspH9ULiK', 'F8dXfsxc8SwgYsJSqGx'
Source: 4BqlE10G4o.exe, ActionAttributeRouteModel.csHigh entropy of concatenated method names: 'Dispose', 'MoveNext', 'MoveNext', '_003C_003Em__Finally1', 'Reset', 'GetEnumerator', 'GetEnumerator', 'c82ivWqIJ33xfKZ1HO5g', 'DCXx0kqIELbDu62pMBEt', 'wSxEFJqI2mPwflFDe81n'
Source: 4BqlE10G4o.exe, RouteTokenTransformerConvention.csHigh entropy of concatenated method names: 'Apply', 'ShouldApply', 'edCnOnbJKIHr7fqBFZj', 'YJS2CPbEMiXwdk0wBQh', 'CWpletb2Qe8d9dLBCQD', 'rC6bKsbcEUsuHt1oOYa', 'x6GRqUbg09VxtQSaYYV'
Source: 4BqlE10G4o.exe, ParameterModel.csHigh entropy of concatenated method names: 't2KHwxblHSVpUQlD27h', 'AmEO0PbXlak20o9LJgQ', 'RKU0qTbdGoJEtaw56qv', 'dExt6NbkPMqLhjh89DR', 'Bsjji5bLA1VdHKZtuwA', 'iJUCSwb0e3gnH2fKvdl'
Source: 4BqlE10G4o.exe, DefaultApplicationModelProvider.csHigh entropy of concatenated method names: 'OnProvidersExecuting', 'OnProvidersExecuted', 'CreateControllerModel', 'CreatePropertyModel', 'CreateActionModel', 'DmYpoWj4m6', 'IsAction', 'CreateParameterModel', 'YGEpDU9qUc', 'HDap0oCgFd'
Source: 4BqlE10G4o.exe, ControllerActionDescriptorProvider.csHigh entropy of concatenated method names: 'OnProvidersExecuting', 'OnProvidersExecuted', 'GetDescriptors', 'RYh2v6i8Ne', 'WaL7Da7K1ifsjo7AYM5', 'GmcxxE7ZHrO3lNQtBlK', 'N1gI8u7hmmoTGeZe73r', 'JOqpP37ry7Ri4tXog2O', 'HmOWHw7S44Zc8G9jcIB', 'FLhmXc74mbK6h116VbC'
Source: 4BqlE10G4o.exe, ApiVisibilityConvention.csHigh entropy of concatenated method names: 'Apply', 'ShouldApply', 'LeqfQMDngPxLDdtumOP', 'YkBIWVDw4M1S9i570m4', 'S5q5G8DpCSbbLsXbMFS', 'cs8LGRDV569LFEooWwt', 'AAxIv7DW1SmeOKt2pAa', 'v8MsutDIu9shO3abkNA', 'LbZjsXDi5x2moonhvOO'
Source: 4BqlE10G4o.exe, ApiBehaviorApplicationModelProvider.csHigh entropy of concatenated method names: 'OnProvidersExecuted', 'OnProvidersExecuting', 'zn221BJcrf', 'wnI2YHBm9Q', 'jG7TvMxPrSt0UUMsuU4', 'YkJwXExQIxbh0rWu24d', 'bSuPDlxOaHIyOi7qe7a', 'PwJdToxx4UXFRgqVGP2', 'zBEsObxgoaNlodqMIJh', 'GLqtVgxNsGtPiKa59U0'
Source: 4BqlE10G4o.exe, ParameterModelBase.csHigh entropy of concatenated method names: 'zouTqOboVd57Z0lWACc', 'P7rgKWbtf1oaXvQXEG2', 'BAw4WCbHkPFmvrIKVct', 'kqr8UFbvG0lg4GoliL9', 'Av5ptabhOD1KDptAdVy', 'bSw79nb9FyYnKFvymI0', 'aQiiFLb5ht1KN2I2EHd'
Source: 4BqlE10G4o.exe, AttributeRouteModel.csHigh entropy of concatenated method names: 'CombineAttributeRouteModel', 'CombineTemplates', 'IsOverridePattern', 'b132FTuVUs', 'KQL2ufsA6n', 'bVV2EnDAG0', 'jFo2HDU2dh', 'ReplaceTokens', 'ReplaceTokens', 'J727FeDkpVaRqtW8NSq'
Source: 4BqlE10G4o.exe, ApiConventionApplicationModelConvention.csHigh entropy of concatenated method names: 'Apply', 'ShouldApply', 'cVG2ho39Vm', 'WPt2cBmoWy', 'Raqy03xYDvwew9dBrIH', 'onDE9ExbJ33051VLFmD', 'b9Et75xj7tp5xhk6g6T', 'zVl37txsaoRX6ZTfAcM', 'ydnPpPxCIqDMtpYyJb8', 'xuqcQ9xuJYjxvrJPTlv'
Source: 4BqlE10G4o.exe, JsonSerializerOptionsCopyConstructor.csHigh entropy of concatenated method names: 'Copy', 'GfjWPafY5E8ZTwhahQQ', 'zRlBEUfsKh0fDF8VyMl', 'N0d8FTfCClZJKVvU4Sc', 'kCudKJfuBHGdQf8TnTp', 'QKWE28fGUcJLPfJeCFW', 'zeXGOZf3VyM9rsexxmE', 'CAKfmTfFc9gAfxoO3J3', 'yyuQ0pfz4dR0EXnfpP0', 'RgFxHEMyCBoqVBu4Zwq'
Source: 4BqlE10G4o.exe, zlEbkho.csHigh entropy of concatenated method names: 'Main', 'MDp44injjSa44jxias', 'QozeXwardnBaTanya', 'fyAA5b08YDfRfe8Dae', 'jNchom9MFZGOKsMqQg', 'H9JStJ58jO3Es21rKE', 'Dn52HXo5nGTa00EZbs', 'SnoRgltmSyVUjJOvSO', 'OF1t77HMnRgZ5diiv3', 'G3A90Uvb6fn86i4BMu'
Source: 4BqlE10G4o.exe, UserControlAuth.csHigh entropy of concatenated method names: 'Dispose', 'OZ95BC8Gq', 'fomQp9KDfFvQXt84pD', 'XTMhbLhKRh4kX8tYtv', 'qEaK40r0Tq4u9bn8Ru', 'MY2eQ8ZqqKqUTCenu4', 'ybBYMLSSZoqE6vs7XZ', 'VQI49Z4gA0LNXsC9Fi', 'a5ILDL2uQNPnfyDMa4', 'Mpo4hZcRNujIN1bNF8'
Source: 4BqlE10G4o.exe, HPackDecoder.csHigh entropy of concatenated method names: 'Decode', 'T0ETPplhZi', 'IS5T79RLjl', 'gmtTF52baG', 'JUhTu9C6L3', 'o39TEiK3aD', 'OdJTHUwsJ2', 'OYBTQIPkNJ', 'FJCTBYl1WW', 'A6mTwkQY46'
Source: 4BqlE10G4o.exe, StaticTable.csHigh entropy of concatenated method names: 'PM6TCfirOm', 'vHxpAoqhMID9eiKfhjPF', 'LoBN6rqhV2u0UdVkfKEH', 'scPg98qhWhRrnReGNJvs', 'PV5expqhqLcdFtqlxogE', 'J5Ikp5qhfExlb9dfb8bl', 'mi5XctqhnaK2lvajeZfA', 'bUaANyqhwO9rVh05ZHCa'
Source: 4BqlE10G4o.exe, ApplicationPartFactory.csHigh entropy of concatenated method names: 'GetApplicationParts', 'GetApplicationPartFactory', 'EcyX9iOxgLb9xmI0NGe', 'ID5eDOOD2AMGjBg1QLf', 'AwPamCO7gG6T8fSFVkf', 'VOuHCfOUSeRBRCcY2WK', 'GKTS2FOQiEIQn0MewYn', 'uKH07xOOCxwC51ntoul', 'BYS2dkObWZSTpEAsqIi'
Source: 4BqlE10G4o.exe, ProvideApplicationPartFactoryAttribute.csHigh entropy of concatenated method names: 'GetFactoryType', 'lwuETSxm3s8Zk4Skcod', 'mmpgBWxeRILgppWlBaE', 'KWn23ox6aAtjBhPhYPO', 'T8UgxHxaKYSkhdNL9EX', 'TPBY5nxRsbr9qr2yc9E', 'TJ1llVx19XNG9bUJ9lE', 'C6lgnGxduHsFiPgAWZe'
Source: 4BqlE10G4o.exe, ApplicationPartManager.csHigh entropy of concatenated method names: 'Dispose', 'MoveNext', 'MoveNext', '_003C_003Em__Finally1', 'Reset', 'GetEnumerator', 'GetEnumerator', 'vbao0xqI9ZrQ5EAd1NoT', 'vsQbsVqILyQWcoHJ8vkW', 'gV2NA9qI0k1HrAHJvAId'
Source: 4BqlE10G4o.exe, DefaultComplexObjectValidationStrategy.csHigh entropy of concatenated method names: 'MoveNext', 'Dispose', 'Reset', 'pEv7pgKbUZ', 'saK7kU9EZa', 'id6VZWz3b6rhcKsKo1k', 'rgVOsazuXlwGGO5fdd8', 'xoxP5XzGQ6aPwx7AW6R', 'cZLgtVzFMwocYemBu8r', 'h9r9EQzzDt5EJ8hYEKR'
Source: 4BqlE10G4o.exe, ValidationStack.csHigh entropy of concatenated method names: 'Push', 'Pop', 'AyKA5nvAhd', 'Sm6P7qlBaG1gxZQDqku', 'jlpNjGl8iM692ps3ZKY', 'A7eYRglIZByBe8dtPHy', 'xZ7XZmlip0pOtmlnP49', 'ltMCwulAJOjD6qyn1x6', 'IXD5bUlTq0PtodGkSVV'
Source: 4BqlE10G4o.exe, DefaultModelValidatorProvider.csHigh entropy of concatenated method names: 'CreateValidators', 'HasValidators', 'f1OL5RkDacQwq1dJHrC', 'fQxCAkk7iHb4hgBktNG', 'K5dcuskUWbnjCZMiGWl', 'BvgLySkOAZQ7plAOxlk', 'xJvdK1kxSdo8xg8nI6E', 'JWOme5kb611RsbaE7MI', 'cw2kHnkj02ggaK59nTL'
Source: 4BqlE10G4o.exe, DefaultCollectionValidationStrategy.csHigh entropy of concatenated method names: 'MoveNext', 'Dispose', 'Reset', 'STfb9HzUsBUAVGs0uLF', 'e5nhOHzDU6IpYlxZb6g', 'V5HUfXz7oZmp5emCFuR', 'WWVj8GzbZh8ykcEYxst', 'lWVyhMzjJMV7b162DY1', 'GetChildren', 'GetEnumeratorForElementType'
Source: 4BqlE10G4o.exe, ValidationVisitor.csHigh entropy of concatenated method names: 'Recurse', 'Dispose', 'QXh5XHqy8YD37vsa9xHq', 'FBh7chqyAr8vldHq6Rk9', 'zCG0kJqyTVD0GECwHPAK', 'eWxm8qqy6LeicluebKKM', 'MQ6h4WqyiBYM2kEiPjjV', 'lrOXnRqyB9VVwHPQKjcR', 'jD0p2pqyaAHC29wNkdJ7', 'bqSRgZqymvPqMM7xSRes'
Source: 4BqlE10G4o.exe, ValidatorCache.csHigh entropy of concatenated method names: 'jol7MESkvn', 'GetValidators', 'oO0AufjGPZ', 'RAtAEWMxCk', 'qbkAHm22x8', 'bY2KvolGTB3dwSycAvn', 't6N7hSlCHyfjDBGTrPQ', 'BgpnYNluFci2a6WLti5'
Source: 4BqlE10G4o.exe, ChunkingCookieManager.csHigh entropy of concatenated method names: 'ixpYNmm1sW', 'GetRequestCookie', 'AppendResponseCookie', 'DeleteCookie', 'INMKafMWOp34sc9e6cr', 'p4URQRMnxckg4vfF43H', 'ev1i6JMMTb1NgK1DJNO', 'lcULNWMVlR2CGmpJ7tN', 's8SefVMwW6WcvDZ0Luy', 'cmyQR0Mpc1fq7nLQHV6'
Source: 4BqlE10G4o.exe, UrlDecoder.csHigh entropy of concatenated method names: 'DecodeRequestLine', 'DecodeInPlace', 'EYwunBb9cG', 'mpRuG7OcEr', 'ovLus5oGy3', 'bbVuz7NecF', 'CJXE17g1yA', 'RU2wmjqAtVRlJi6Vx3lb', 'siPTtbqAHFxRDkcjodSK', 'niKZj2qAvW7UUwGCe1Kq'
Source: 4BqlE10G4o.exe, TranscodingWriteStream.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'iiAhwnqwOSBZpjlId2Fg', 'uTPwWfqwPIYEGOFky5GJ', 'aQcFNtqwQWTqWu0HF3PS', 'MoveNext', 'MoveNext', 'SetStateMachine'
Source: 4BqlE10G4o.exe, TranscodingReadStream.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'cosUsrqwcBo8M9tlleZG', 'eMEn7DqwJoxcWufXlpwk', 's0siebqw4UgZ7WaOEW1U', 'EwmHdPqw2SKYan6FCbP3', 'MoveNext', 'MoveNext'
Source: 4BqlE10G4o.exe, EventData.csHigh entropy of concatenated method names: 'MoveNext', 'Dispose', 'Reset', 'pKh6t3qpOPgbdPg3e4L7', 'V2JJnRqpP6FJb2NXXOnX', 'FSjmLUqpQ47FjX2bThBg', 'UkvlbuRTZ6', 'GetEnumerator', 'GetEnumerator', 'eaQ3kCPfIFOpQEVy4wW'
Source: 4BqlE10G4o.exe, StringArrayComparer.csHigh entropy of concatenated method names: 'Equals', 'GetHashCode', 'V7JaQc2yZpBWpwRGvCM', 'nBZwDF4Fwsy4bQvbepx', 'x9K5mj4z1WR7oBGIAFq', 'KVywT82qpqyYpfIjG0w', 'tPQANN2f5RkRrvcGhQ0', 'PrLkD42MjR5y2edZ7vI', 'axueqD2Vjsttcc3QkaO'
Source: 4BqlE10G4o.exe, RedirectToActionResultExecutor.csHigh entropy of concatenated method names: 'ExecuteAsync', 'kZag0NSvbdDC5rI7Uvh', 'c1SxeVShvD5i52SGZDq', 'OmaPNuStRReG1eB1ABX', 'XZerL0SH0covLAWauQl', 'Dky587Sr9oaNyNZEiKn', 'X06Me4SKqakX0GfNh9T', 'yHFYT0SZF3JLnP9Bhho', 'AxopvrSSgXD0fZXnldh', 'WRiyvtS4QBl1ulVg5cX'
Source: 4BqlE10G4o.exe, AsyncEnumerableReader.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'jvLXBeqMC8qSViOo3fu9', 'Gd1oooqMuqcc4BopGFI3', 'TryGetReader', 'FlgdEiKTGN', 'kflyZWvJ3BGhblLs0pk', 'mLx1YevEiRCTjDhPbNd'
Source: 4BqlE10G4o.exe, RedirectResultExecutor.csHigh entropy of concatenated method names: 'ExecuteAsync', 'P9trdeSePfA8v43vLit', 'D8EQ2cSa4UyCtXbjZWe', 'RFPAbJSmP5U5y5Hfhbd', 'lFmq5OSRKFZRJPKLich', 'MhWECWS1S8jqYiO8cNL', 'DWDq9oSdJq81S5btQAe', 'DKhF8ASk2kVNE8pygTg', 'vtXB2pSlLOUAC2uWgYv', 'XLDVskSXmXIwHJmv0qR'
Source: 4BqlE10G4o.exe, FileResultExecutorBase.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'GjORBnqVzymqcobQmBRe', 'OAnON7qWytmgl66a3G7k', 'pWIfj6qWqw9CF1wPLV9P', 'KFGNhDqWffrvy1eSWcnE', 'fZx33gqWM3mYlDUIkLvD', 'KsELWsqWVCpRqJu4pOml'
Source: 4BqlE10G4o.exe, ControllerActionInvoker.csHigh entropy of concatenated method names: 'ReleaseResources', 'MGvdyJt03C', 'A5MdThfaKs', 'KBndMFEE71', 'WDDdX77lGL', 'InvokeInnerFilterAsync', 'teidbNK1a9', 'OhBdIAICxf', 'UKsd4O6HUc', 'FHDTcihqKfj1bKjexQx'
Source: 4BqlE10G4o.exe, DefaultOutputFormatterSelector.csHigh entropy of concatenated method names: 'SelectFormatter', 'DxMgwOQlvO', 'PKNgOqpAQD', 'XiPgL4ZyW8', 'L0DgWJgrpY', 'LRLg3BJcCc', 'lO2giVXFEU', 'uIBdC1hYrTPXJ8B9qmB', 'wrByiZhsIwAPkogIOxt', 'MKRLjwhbokB6D8IOVSp'
Source: 4BqlE10G4o.exe, ClientErrorResultFilter.csHigh entropy of concatenated method names: 'OnResultExecuted', 'OnResultExecuting', 'otqML5vxa37r2yn1Psm', 'hVX3NGvDHrbbtvp2l9N', 'RuF5Gvv7nZJ9D6T94F7', 'UgfXSkvQJgw2JmBbCnB', 'pH95n7vO0xcQTlw8DrN'
Source: 4BqlE10G4o.exe, ModelStateInvalidFilter.csHigh entropy of concatenated method names: 'OnActionExecuted', 'OnActionExecuting', 'pJxsF0KvF0A0ycE7uby', 'tkrWYQKhfU5GDJs12oc', 'BGXBlAKrKIm0wcOVHtS', 'unHuh7KK8oAHZw9e5du', 'wFXWPBKt8NTs3uG2Bk4', 'Ku1JP6KH2lZ70prNcBM', 'giVY4cKZcMeFkfulvj5', 'JY3j8rKS05pR5F73Oel'
Source: 4BqlE10G4o.exe, ValidationProblemDetailsJsonConverter.csHigh entropy of concatenated method names: 'Read', 'Write', 'RT4yIC21a460RTshHDA', 'n6MEcR2e6UX4yQyoAg6', 'zoUgu52RT1Jem1IYSp3', 'rcEBTN2dBPElLltnwMQ', 'sbDMfD2k4m7AsIwtKOL', 'rbpmH42lms8LFrlAi3F', 'ErTIPF2XG0GASSNO3dB', 'trWH2E2LhrCcFQYtLos'
Source: 4BqlE10G4o.exe, DefaultProblemDetailsFactory.csHigh entropy of concatenated method names: 'CreateProblemDetails', 'CreateValidationProblemDetails', 'q4sgyNPmuS', 'FXTdV1h35MnnB22ybJ0', 'iugqG0hF7ZofxTZGh2h', 'mAYjLHhzAlkYrqQK3SJ', 'aXs1IXryhfOCYJAWLmB', 'MLVu3JrqCcAiprcrXWp', 'RglIXvrfISmJOcn9sQC', 'rPxW63hujvTtfuxywVp'
Source: 4BqlE10G4o.exe, ActionContextAccessor.csHigh entropy of concatenated method names: 'a0ohrwqM8bGnRJI7fvFv', 'QqvdwyqMA9vsq5fTa8r8', 'iIS0hBqMibi1JkYrOTJB', 'liaFnCqMBDElnH9lsGWj', 'u53XyRHzuaSyFdWfDWv', 'wmVQj9vylYAEdMKVN4O', 'QxkE0SvqGF539eMYDap', 'VjQutUvfn9edUMOkm5m'
Source: 4BqlE10G4o.exe, FileContentResultExecutor.csHigh entropy of concatenated method names: 'ExecuteAsync', 'WriteFileAsync', 'vepiqxrwCxcfQ4C2NPD', 'dOys1YrWI1uBArqGubn', 'NDGf9QrnDsLL6si3RDp', 'LCWlq8rpcq18HhSW2E9', 'TtMJwXrI0ons5AGDbqp', 'edcwUxrilg7F5ED02Rd', 'V1yJLZrBM2W3oqoPVsY', 'wIdTUer8iR9xpsKD2mG'
Source: 4BqlE10G4o.exe, PhysicalFileResultExecutor.csHigh entropy of concatenated method names: 'nnSdoUqWdjMsMeUKThqO', 'B2HjPGqWkxe94SNuyie2', 'ExecuteAsync', 'WriteFileAsync', 'GetFileStream', 'GetFileInfo', 'oK3ZGaZre90KQaLSZow', 'wnPqrdZvrKsohvkk7r3', 'VB4cusZhUtdNeR7mqha', 'pTdVAwZK3jU8mr5ZTiC'
Source: 4BqlE10G4o.exe, ObjectResultExecutor.csHigh entropy of concatenated method names: 'K8iFcYORRS', 'iRLq75qWajydFtlCd4tm', 'gdPFLBqWT7mEGdoVTcm8', 'tqyaptqW6lJksiuKEfoZ', 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'ANtd5vqWRn4eoxJUQDob', 'kQ2Q2oqW1E8MTHlaJRUk'
Source: 4BqlE10G4o.exe, ControllerActionInvokerCache.csHigh entropy of concatenated method names: 'SF47sYV0ke', 'NPmF1iORRv', 'KVY0dDqVg9Yj8qNBUBQB', 'jtxb35qVJWJEuA6Jj7kA', 'e7IsVMqVEE4Zm9HYgeeU', 'YnxdfQTH4y', 'GetCachedResult', 'Ur4UCahSSD87KYWYpCI', 'wkO4Whh4YtQBh1x4cmA', 'kThqY8hKqlwi0A9dpP6'
Source: 4BqlE10G4o.exe, ActionMethodExecutor.csHigh entropy of concatenated method names: 'Execute', 'CanExecute', 'wEERtQqM1slmAnZ4DrDV', 'tmpbfjqMdhVQD0KNU2lR', 'nhv7F2qMk2moyq8v2rWO', 'g6D8CoqMeJC6RWVeBV1J', 'wb3kZoqMRiZ06EVYQCsO', 'Execute', 'CanExecute', 'UjsyRAqMLQrVTif4HLpm'
Source: 4BqlE10G4o.exe, FileStreamResultExecutor.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'T7JA8IqWwrMp20NFxVT6', 'T6KKKyqWpyh43CjCkPUa', 'Xa3YckqWIjriviUP6RkW', 'VBLTbmqWiHCPCU5nG1ih', 'rnH2uTqWB7yOCxgy8vje', 'IuGZH9qW85vRhL1IrJB0'
Source: 4BqlE10G4o.exe, ResourceInvoker.csHigh entropy of concatenated method names: 'InvokeAsync', 'ReleaseResources', 'TFyKwPlQsA', 'InvokeInnerFilterAsync', 'InvokeResultAsync', 'skFKOq2Dpc', 'i2DKLNwNxa', 'sqpKW3v2XR', 'EAqK3lWEMI', 'XXTKiBd7j3'
Source: 4BqlE10G4o.exe, RedirectToPageResultExecutor.csHigh entropy of concatenated method names: 'ExecuteAsync', 'enZWwySUm5fAVrFrMbK', 'r2rQI1SDkHRHfpN395F', 'NinlVHS7mxujlbdXAc2', 'NPtAcpSbx9wB22vYlGa', 'FEgyEcSj4lfctO9Lros', 'RR00fhSYAgtUriBJTAV', 'i8AUSZSsPYYkd0vFMWa', 'VGKPGgSChNty02GN6dQ', 'OrXVf7SuhGDGIA2Y6O6'
Source: 4BqlE10G4o.exe, ProblemDetailsClientErrorFactory.csHigh entropy of concatenated method names: 'GetClientError', 'bsBwc5ZUDYQjQUOEKXc', 'sIimQuZbSDjh5XcHNvo', 'Ggt1fhZDEheQdkgbkMr', 'lmA93HZ7tHp47ANwJFx', 'MpXwEaZjiq5gEREXQVK', 'Cmh9UAZYsdrwCHiB2aN'
Source: 4BqlE10G4o.exe, RedirectToRouteResultExecutor.csHigh entropy of concatenated method names: 'ExecuteAsync', 'TudkUb4nXNNJ0kZTn9A', 'c7oNTL4VJlIffUaETK4', 'BKvubT4W81deIdGwiP7', 'sBBYFN4w7GEtbXWxdnT', 'UipxdE4p5AKAZlFJYq4', 'Duo3rN4IqXQyBB4JktW', 'dbRPUD4iKOnbvqqYhJu', 'S57UI24BlnpkNKmhHIm', 'OhufKe48GN1XeSaiWfK'
Source: 4BqlE10G4o.exe, ProblemDetailsJsonConverter.csHigh entropy of concatenated method names: 'Read', 'Write', 'ReadValue', 'TryReadStringProperty', 'WriteProblemDetails', 'S4CdcnZFsIUaX4oQZVH', 'bwgeqxZGD52Kq6JV3b2', 'R64t8SZ3EY0m5HnFFiZ', 'H22HDWZz77VVNHkGKXi', 'yDdvNDSyFlmyXmMW2YD'
Source: 4BqlE10G4o.exe, NonDisposableStream.csHigh entropy of concatenated method names: 'yryKNe2ce3', 'Seek', 'Read', 'ReadAsync', 'BeginRead', 'EndRead', 'BeginWrite', 'EndWrite', 'Close', 'ReadByte'
Source: 4BqlE10G4o.exe, ContentResultExecutor.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'QVdIHfqMFYg7AOYoi8kH', 'mLgMXAqMzKEnXvGxfyex', 'aVnLQUqVycD1SMqlkEPG', 'U4rloVqVqbUWdqgKKeJ1', 'l05lRlqVfDn6PjWnsX41', 'zTtZuhqVMp1fHW9HktPd'
Source: 4BqlE10G4o.exe, VirtualFileResultExecutor.csHigh entropy of concatenated method names: 'ExecuteAsync', 'WriteFileAsync', 't21KsJal1A', 'GPyKzHq83v', 'GetFileStream', 'wAG1x02Hx7t3Lowacxm', 'YQRSOE2v2dyvieGo4BH', 'mu7Ido2hNv6xRhJMIZo', 'zl6vJN2rTRv6j7GgB62', 'VjHgPw2KWHm7892Pyqj'
Source: 4BqlE10G4o.exe, LocalRedirectResultExecutor.csHigh entropy of concatenated method names: 'ExecuteAsync', 'xos3OHK8y9CiBLBUOai', 'lkyiwEKA1siTxAgBjAL', 'cYaH2CKi6RrHGm5TRTI', 'E13irPKBQO2gme0KPd3', 'YZgS8nKTSeg5LltPBPL', 'MHvOT7K608JfBujF7Sn', 'JIalTZKaBcy3jg90pWy', 'mp9BOuKmq4mrPrVKLp0', 'qA0UZtKeIhaQwACHm9Z'
Source: 4BqlE10G4o.exe, SystemTextJsonResultExecutor.csHigh entropy of concatenated method names: 't8uF8W87nR', 'rsxFA8HdiN', 'dSaKRIqnhnm88ooMd1wS', 'Oo87muqnr5dfj5mZioTp', 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'dtR5jdqnSPEQ63nnIZxO', 'SfQimCqn4pJrqgDBSf63'
Source: 4BqlE10G4o.exe, AnyIPListenOptions.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'wAUHRYqSMAT7LuOpVNml', 'h0mscxqSVZFQhD2cqDhO', 'exCR5KqSWl9YOYGFOrh2', 'WbU9KwqSnJSid8Tppxh1', 'R5xScSqSwVnpaxKp6Tug', 'oo6FQgqSqHX58VQFduG9'
Source: 4BqlE10G4o.exe, ListenOptions.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'xkOmV9qStUYqkhVUYaPv', 'lSe8T0qSH3XDkAW1s8Ql', 'fNL04iqS5oE3tEXjXFDf', 'YQLH1SqSomu3V75xRggJ', 'GetDisplayName', 'ToString'
Source: 4BqlE10G4o.exe, KestrelServer.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'mCkQ9HqSinb6N33tj20N', 'fD7SlrqSB97vlehxb8PZ', 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine'
Source: 4BqlE10G4o.exe, BadHttpRequestException.csHigh entropy of concatenated method names: 'Throw', 'Throw', 'GetException', 'Throw', 'Throw', 'GetException', 'd9baDHqa1N3Uu0tI9u9x', 'wUswhhqaeLT95ReKpY1V', 'UujbMoqaRks3goA6u5k2', 'qU7jmgqadTBTscWRF2s9'
Source: 4BqlE10G4o.exe, LocalhostListenOptions.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'aW8Zs6qSriQ8beQGBDKE', 'JteUDEqSKVJW72yTHWoZ', 'TELkRVqSZlIPVV2tgL5K', 'gkgn1cqSSC6Mdk2MU0UJ', 'kU6CyOqS4yXiEtoRctFk', 'kwTcxnqS2tSGhEW5HhF2'
Source: 4BqlE10G4o.exe, OutputFormatter.csHigh entropy of concatenated method names: 'CanWriteType', 'GetSupportedContentTypes', 'CanWriteResult', 'WriteAsync', 'WriteResponseHeaders', 'WriteResponseBodyAsync', 'BaQ5p7JR2KnKoNSwFem', 'Mi5uBvJ1rAI1DhDvtTv', 'Egewo5JdJRVe8W6M2cH', 'sDA3jsJkMWygBNn8CLY'
Source: 4BqlE10G4o.exe, FormatterMappings.csHigh entropy of concatenated method names: 'SetMediaTypeMappingForFormat', 'SetMediaTypeMappingForFormat', 'GetMediaTypeMappingForFormat', 'ClearMediaTypeMappingForFormat', 'GEwq0BgwIi', 'cXfq5r9koV', 'NbTCKIcwnxhsT8w7ARl', 'DEZ2JjcpOqhqsuWok68', 'CG2NuWcIKsvPOfYOQoL', 'vLG4bbciPlyLV9tM6pT'
Source: 4BqlE10G4o.exe, TextInputFormatter.csHigh entropy of concatenated method names: 'ReadRequestBodyAsync', 'ReadRequestBodyAsync', 'SelectCharacterEncoding', 'H8Ofi2EMd932RiA1lr9', 'EcHyc6EVav8A009iubR', 'AVQthGEWh5pPsGTgM5S', 'PcNrwlEn4oPOlqYBNQZ', 'K3yYaTEwrhY8XIPAG5c', 'CL56FxEqrcAwhUI8a6G', 'KY0P22Ef4eNw95BtU8J'
Source: 4BqlE10G4o.exe, MediaType.csHigh entropy of concatenated method names: 'QLbFmU7QG5', 'P9pFRrpun6', 'qXqFpQomEC', 'BwlFkCoaK9', 'EubFdPUKdh', 'LC3FgTgNwL', 'e7xFKR5qhL', 'Ys5FqqUGAl', 'QCyFlSSPE1', 'mvX4Pjqnsttjt0OjOkV4'
Source: 4BqlE10G4o.exe, StreamOutputFormatter.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'QZL9U2qwWKoiloBdF0E6', 'xuBgMNqwno0jvQw4X1qO', 'u8m1OkqwwMRTIPotOedx', 'op5h34qwplDmr1UBht6u', 'WtHCcvqwI5EFuBLI9rVt', 'BPSqknqwibKNgKRRn1Y3'
Source: 4BqlE10G4o.exe, SystemTextJsonInputFormatter.csHigh entropy of concatenated method names: 'P4GFWxwTiw', 'BLfF3hSGDv', 'QNFYiYqw8oW3CJZi6t1b', 'Ktw93gqwALLddf6mBE5h', 'yciQolqwT9kCBbfSUK0B', 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'hrop3tqwmdvPJZeJ9xK0'
Source: 4BqlE10G4o.exe, InputFormatter.csHigh entropy of concatenated method names: 'GetDefaultValueForType', 'CanRead', 'qxCqdA6ebw', 'CanReadType', 'ReadAsync', 'ReadRequestBodyAsync', 'GetSupportedContentTypes', 'KecJiQcEScPVJLsECE7', 'vFIgq0cghSaL2vFJb2P', 'Fk87YwccxZOXUI0PpWg'
Source: 4BqlE10G4o.exe, HttpNoContentOutputFormatter.csHigh entropy of concatenated method names: 'CanWriteResult', 'WriteAsync', 'SkFpmQcd9gBD2ka1ZwB', 'wIUtTYckiAPXWVUhJ9x', 'YbjSrocll8sVFFvXyHL', 'exK4B6cXIwgOTlflCxp', 'dOExtCcLHK4fAM1h1s6', 'YJ8Qpqc0422qlv1wu1s', 'd4GlVrc9qRfUXga8UOp', 'IY224Kc5CmwqiInnVm3'
Source: 4BqlE10G4o.exe, FormatFilter.csHigh entropy of concatenated method names: 'GetFormat', 'OnResourceExecuting', 'hITqcFXyuw', 'OnResourceExecuted', 'OnResultExecuting', 'OnResultExecuted', 'SP5fkL2sNCBDF8RTmrJ', 'lWbcK22CKtn87phVoSA', 'fJUUup2uI9E9gSHpCD5', 'Dt5Hem2GpG7fQKDnhOr'
Source: 4BqlE10G4o.exe, SystemTextJsonOutputFormatter.csHigh entropy of concatenated method names: 'MoveNext', 'MoveNext', 'SetStateMachine', 'SetStateMachine', 'mIb1Ykqwo903HsklifkW', 'J50bwnqwt9FsTuyFNKnW', 'cqFWWVqwHQxCpgYg4IC7', 'tORDAkqwvaaWob5lg7Gh', 'ag8mY4qwhMumLLoPWofG', 'undCREqwra0xOhS2JZsG'
Source: 4BqlE10G4o.exe, TextOutputFormatter.csHigh entropy of concatenated method names: 'odtqMSVPlW', 'SelectCharacterEncoding', 'WriteAsync', 'WriteResponseBodyAsync', 'WriteResponseBodyAsync', 'GetAcceptCharsetHeaderValues', 'nFdqt8ZdoM', 'GFvqyGW5WI', 'SVsqTfMx4J', 'RfTIw0EIlwp1wmhLXC0'
Source: 4BqlE10G4o.exe, StringOutputFormatter.csHigh entropy of concatenated method names: 'CanWriteResult', 'WriteResponseBodyAsync', 'BYoK6GJSgB4Bm8tCSXY', 'prL9qVJ4r1MYNpy1rdp', 'cwDAFhJKOviGjaZcMwf', 'ah4QvxJZGTclFWeUsCo', 'tjkfnQJ2EOqJbhExI5X', 'RUyKISJcZ4RrXS11BPQ', 'dj4lHnJJyD6UB0dOff1', 'tY0Yd3JEBfMpkVln9iX'
Source: 4BqlE10G4o.exe, BufferSegment.csHigh entropy of concatenated method names: 'SetOwnedMemory', 'SetOwnedMemory', 'SetUnownedMemory', 'ResetMemory', 'SetNext', 'GetLength', 'GetLength', 'xchhHPqAfdLYfm8ISIJx', 'iCBZPVqAMB5whaNi8ji1', 'XO3wwrqAV6NubibuN6TY'

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
Software Packing		OS Credential DumpingSystem Service DiscoveryRemote Services1
Archive Collected Data		Data ObfuscationExfiltration Over Other Network MediumAbuse Accessibility Features
CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
Deobfuscate/Decode Files or Information		LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable MediaJunk DataExfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)1
Timestomp		Security Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared DriveSteganographyAutomated ExfiltrationData Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
4BqlE10G4o.exe21%ReversingLabsByteCode-MSIL.Trojan.LummaC
4BqlE10G4o.exe100%Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

NameSourceMaliciousAntivirus DetectionReputation
https://aka.ms/AA21ue1#ValidationVisitor4BqlE10G4o.exefalse
    		unknown
    https://tools.ietf.org/html/rfc4918#section-11.2chttps://tools.ietf.org/html/rfc7231#section-6.5.8ch4BqlE10G4o.exefalse
      		unknown

      World Map of Contacted IPs

      ⊘No contacted IP infos

      General Information

      Joe Sandbox version:41.0.0 Charoite
      Analysis ID:1520458
      Start date and time:2024-09-27 11:20:20 +02:00
      Joe Sandbox product:CloudBasic
      Overall analysis duration:0h 2m 8s
      Hypervisor based Inspection enabled:false
      Report type:full
      Cookbook file name:default.jbs
      Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
      Number of analysed new started processes analysed:1
      Number of new started drivers analysed:0
      Number of existing processes analysed:0
      Number of existing drivers analysed:0
      Number of injected processes analysed:0
      Technologies:
      • EGA enabled
      • AMSI enabled
      Analysis Mode:default
      Analysis stop reason:Timeout
      Sample name:4BqlE10G4o.exe
      renamed because original name is a hash value
      Original Sample Name:9219d7d014721bf7264db76811e00f38.exe
      Detection:MAL
      Classification:mal56.evad.winEXE@0/0@0/0
      Cookbook Comments:
      • Found application associated with file extension: .exe
      • Unable to launch sample, stop analysis

      Errors

      • No process behavior to analyse as no analysis process or sample was found
      • Corrupt sample or wrongly selected analyzer. Details: %1 is not a valid Win32 application.

      Warnings

      • Exclude process from analysis (whitelisted): dllhost.exe
      • VT rate limit hit for: 4BqlE10G4o.exe

      Simulations

      Behavior and APIs

      ⊘No simulations

      Joe Sandbox View / Context

      IPs

      ⊘No context

      Domains

      ⊘No context

      ASNs

      ⊘No context

      JA3 Fingerprints

      ⊘No context

      Dropped Files

      ⊘No context

      Created / dropped Files

      ⊘No created / dropped files found

      Static File Info

      General

      File type:PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
      Entropy (8bit):7.854194650625381
      TrID:
      • Win32 Executable (generic) Net Framework (10011505/4) 49.87%
      • Win32 Executable (generic) a (10002005/4) 49.82%
      • InstallShield setup (43055/19) 0.21%
      • Windows Screen Saver (13104/52) 0.07%
      • Win16/32 Executable Delphi generic (2074/23) 0.01%
      File name:4BqlE10G4o.exe
      File size:8'163'792 bytes
      MD5:9219d7d014721bf7264db76811e00f38
      SHA1:12335dc6247a30082e610056951177e002f4430f
      SHA256:c2061bca1867926369fed17744cd0b907dfe5ba14fd6fbb9787ddda4e3444f85
      SHA512:8d5f8e62be15c13bd5ffca6978f21dccd5804459e3ac64f291a6f61d64180bd5446e2c6655c65ba77e6cfa20b34a522c70d91d3857ac840c0b122646b3ff2178
      SSDEEP:196608:I7A71NIOC732QZMymBHd+3WGeFdJJMGHPP/CPZ5za/+r:IA5NIOC73RdmB9+ReFV/m5z5
      TLSH:1286015163E5DE1BE3E53B36A56789384AB5E5227B12F30F1B2C11697CA37740E203CA
      File Content Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...].g...................N...T.....~.O.. ... O...@.. .......................`......e)....@................................

      File Icon

      Icon Hash:90cececece8e8eb0

      Static PE Info

      General

      Entrypoint:0x8f107e
      Entrypoint Section:.text
      Digitally signed:true
      Imagebase:0x400000
      Subsystem:windows gui
      Image File Characteristics:EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
      DLL Characteristics:DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
      Time Stamp:0xAB67955D [Tue Feb 15 11:26:21 2061 UTC]
      TLS Callbacks:
      CLR (.Net) Version:
      OS Version Major:4
      OS Version Minor:0
      File Version Major:4
      File Version Minor:0
      Subsystem Version Major:4
      Subsystem Version Minor:0
      Import Hash:f34d5f2d4577ed6d9ceec516c1f5a744

      Authenticode Signature

      Signature Valid:
      Signature Issuer:
      Signature Validation Error:
      Error Number:
      Not Before, Not After
        Subject Chain
          Version:
          Thumbprint MD5:
          Thumbprint SHA-1:
          Thumbprint SHA-256:
          Serial:

          Entrypoint Preview

          Instruction
          jmp dword ptr [00402000h]
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al
          add byte ptr [eax], al

          Data Directories

          NameVirtual AddressVirtual Size Is in Section
          IMAGE_DIRECTORY_ENTRY_EXPORT0x00x0
          IMAGE_DIRECTORY_ENTRY_IMPORT0x4f10300x4b.text
          IMAGE_DIRECTORY_ENTRY_RESOURCE0x4f40000x54e256.rsrc
          IMAGE_DIRECTORY_ENTRY_EXCEPTION0x00x0
          IMAGE_DIRECTORY_ENTRY_SECURITY0xa3f0000xd8e0
          IMAGE_DIRECTORY_ENTRY_BASERELOC0xa440000xc.reloc
          IMAGE_DIRECTORY_ENTRY_DEBUG0x4f0feb0x1c.text
          IMAGE_DIRECTORY_ENTRY_COPYRIGHT0x00x0
          IMAGE_DIRECTORY_ENTRY_GLOBALPTR0x00x0
          IMAGE_DIRECTORY_ENTRY_TLS0x00x0
          IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG0x00x0
          IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT0x00x0
          IMAGE_DIRECTORY_ENTRY_IAT0x20000x8.text
          IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT0x00x0
          IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR0x20080x48.text

          Sections

          NameVirtual AddressVirtual SizeRaw SizeMD5Xored PEZLIB ComplexityFile TypeEntropyCharacteristics
          .text0x20000x4ef0840x4ef200c5f8d1d801d3441c1a5c2c246315a14funknownunknownunknownunknownIMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
          .sdata0x4f20000x8a40xa00f5e67d83f722198b8bb9032e4f3f0ab4False0.4921875data4.708928505016549IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
          .rsrc0x4f40000x54e2560x54e400386ee653ffd8ea73825c5c720dc391e0unknownunknownunknownunknownIMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
          .reloc0xa440000xc0x200d41d8cd98f00b204e9800998ecf8427eFalse0empty0.0IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

          Resources

          NameRVASizeTypeLanguageCountryZLIB Complexity
          DATAFILE0x4f43780x19data1.32
          DATAFILE0x4f43940x271a81data1.000136375427246
          DATAFILE0x765e180x2c37dedata0.9994513291079368
          RT_ICON0xa295f80x468empty0
          RT_ICON0xa29a600x10a8empty0
          RT_ICON0xa2ab080x25a8empty0
          RT_ICON0xa2d0b00x4228empty0
          RT_ICON0xa312d80x10828empty0
          RT_DIALOG0xa41b000xeeemptyJapaneseJapan0
          RT_DIALOG0xa41bf00xf8emptyEnglishUnited States0
          RT_GROUP_ICON0xa41ce80x4cempty0
          RT_VERSION0xa41d340x338empty0
          RT_MANIFEST0xa4206c0x1eaempty0

          Imports

          DLLImport
          mscoree.dll_CorExeMain

          Possible Origin

          Language of compilation systemCountry where language is spokenMap
          JapaneseJapan
          EnglishUnited States

          Network Behavior

          ⊘No network behavior found

          Statistics

          ⊘No statistics

          System Behavior

          ⊘No system behavior

          Disassembly

          ⊘No disassembly