Static | ZeroBOX

PE Compile Time

2022-07-05 15:13:53

PDB Path

GZXKJDSJSD.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0003f594 0x0003f600 7.66532370542
.rsrc 0x00042000 0x0001a1de 0x0001a200 3.81101812974
.reloc 0x0005e000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0005b804 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005b804 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005b804 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005b804 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005b804 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005b804 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0005bc6c 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0005bcc8 0x0000032c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0005bff4 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
%&h(E
%&L(E
%&,(E
%&H(E
%&0(E
%&4(E
Z?_d
_b`*
v4.0.30319
#Strings
GZXKJDSJSD
ComVisibleAttribute
System.Runtime.InteropServices
mscorlib
System
Boolean
GuidAttribute
String
AssemblyCopyrightAttribute
System.Reflection
AssemblyTrademarkAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
GZXKJDSJSD.exe
<Module>
MJCKVKLUIOR
Object
opfPorKuMpjUVeZpeY
MulticastDelegate
DiKTGnQF0QxWZEkBt6
M1vd0Oe86nQP9btj9m
LcG9SQqSpKyDtJ4RAi
TIIl7oFpBfMgf04pHw
HMsTndVTOGepptttyG
tLU5LagAgIOlomNjN4
htbV4pGLxkkit4mqbA
UCddh1W4sUenoVBSDP
RbIVhuPBdKeL6114Si
STp1K355GOnAHO4CHS
ValueType
K9d4pursqaEdFJxgRs
rOtMUDcv596i2aTvac
ustjbFHadmabjO2xqi
Attribute
System.Windows.Forms
tPIRuNn0AgYGnw15gQ
h8uWYB69PstrZsn6Sp
HQbs0jEgGqXOCB15Rc
YACLlBa0f7tldLjSxZ
tGIsO5CiRruV5saHqm
TZuNcy1xk8fP766EIa
GWLcSySZoGJcLZRXeD
iG5gOFZKVlQRP1XCg7
TBiCvwyitNKYgtBD6d
c5lIvnU6GSHYCBB6Ng
SHQpKohWmnRbpHe2cy
rYvTDguer3L2duQw4w
ruMT78vy2Mp6KUjOJv
db6L4ITw4FSnpFWEn2
JTyEERAHMMGG68V54S
ycOY2uICIdNw6pI6t4
qYGUJKjFam4xmjIEcO
woeQSrlDZtlP9tukJ6
mUt7Gkp5bby4rnIC0C
vjdfjfYnQm2200Zopa
XyrYgw2b3Dn1FvwriY
jpvU4A8wSvpUPbIn6W
lCWymoi31CjkmmfpTs
kU3EV2Oc8Si1Z5dXE2
r16bNXoldNYtRTNOWs
W0EPI1mq69kXvBtX5y
NqI6r1NpjAgvRjZUPe
ECQnrtfh9yTGVhiMV6
<Module>{AE374139-3FCD-42AD-8A5C-856A595AE096}
j6qtNU9A68CCSuoQ3I
ilhgTSRI22DitXeHBQ
P9k0rNLPeF3MAEhl6t
aIQnJPdSBbOPLGoH9b
ugWLvBbUJ0TtfvEmuD
Dyk25skSVXV8U32Z6n
wmZKxnw0OBXj5anvfF
r95N0rBo8HgyhtAtT4`1
qsYOQes5TqmwdnpCAJ
pwOG11XqiitevVbMSy
n4Bq1n4UN76NNLfKNK
DJrJHu0SE2eD3bbwOu
QhkxiN7x8MExICdM6k
TAO0y33QUc842I83AW
FjLw6HMkBTQgNIUPy6
TpJTnhJ1wIPe7DNj3s
NoMeADzThUcO3KG9l6
GEyxnvxtKe50nDTtUQD
TOTuNgxxGi696OYXL0v
sc9vVAxcABh1RisafD4
oJUBf2xH29iPq8tM93j
LBOUjrxKktAZr1uVuah
<PrivateImplementationDetails>{2791F2CE-B2C2-4069-A5CF-5E762BB9BDAF}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
u54uZhkGp
bHfv9jUIB
ncSY4kirj
hUySVJHxN
a7xX6g9Bo
dQZDh5ZJi
dpx4Yc3UF
FbDhJMvgV
G1ntoaY3F
MJqqgnFsa
diYgmJEHXO0R6gYNNJ
.cctor
JJFUHbRXu
IntPtr
LoadLibraryA
kernel32
gdpBPfE6Z
GetProcAddress
t3g9wQOYC
N3EBsvx522wa5EgbvP
GetTypeFromHandle
RuntimeTypeHandle
Marshal
GetDelegateForFunctionPointer
Delegate
Thread
System.Threading
SizeOf
Convert
ToUInt32
UInt32
Replace
FromBase64String
Exception
BitConverter
ToInt32
Buffer
BlockCopy
ToInt16
get_Size
GetBytes
Process
GetProcessById
RuntimeEnvironment
GetRuntimeDirectory
System.IO
Combine
cjcPkcrk6JdOdOBRY3
yxr5Ny8UA1lWF27oyT
VGj5AHQNHoBvsm0Mik
C75oT9aLNLsWDOIBq1
Invoke
handle
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
thread
NMCXNCNMXCNXCMFDKLFDFDKLFDKDFLKERERRGDFDFDFDKJDJDSKKJSKJSSKDJSDJNMCXCXBCXBXC
address
length
protect
process
CXCCXHJCXCYUXYUDSIUWYEWHDSKDKJSJDSKJKDSJKJKDKSDJKDNMCBCBNCBXNBNCXBNCXBNCXJHSDSJHDSSDSD
buffer
bufferSize
bytesWritten
bytesRead
applicationName
commandLine
processAttributes
threadAttributes
inheritHandles
creationFlags
environment
currentDirectory
startupInfo
processInformation
i1WAG4RVe
IZV3yvAb6
dhPKbrPEj
Ud1V8ZxoP
CvsZNjadK
Kb95iN0n9
gNDijfvTG
EN3bfTpIW
mKCxbJtHh
c05LkjEgL
H1x0DAfRL
pdps9GciS
qVSMmbJBm
wFqaIPjXEkwyvLeeui
dVFZ33iKJxcrGSMDQb
L3KkSm4EL6tqeaW1MG
kblWMRFHk3BT64AMAE
qgwyXH8mg
IContainer
System.ComponentModel
GbtyRan1qHWOHVfe4I
Dispose
disposing
lh8JCqySq
System.Drawing
Container
fGS1BuclqG74xke6xe
tZQYTyLVeeEN1TdrWC
MD5YxYeD8KrZyoKawG
eSS6crYFw5yTrNBd16
RIBAh3KTNyOfE5WxFc
IDisposable
cQix4lwySNHkYVv269
Ae8Mqi2xOS4tRmW7wT
AutoScaleMode
ContainerControl
set_AutoScaleMode
pxTUam5C9DvS9vrFN3
set_ClientSize
GsVy591XGqLOlZyvfN
CeYiVDggy4c92ojmM6
Control
set_Text
yWDw6bXru
cVqCyFqgY
TQvka8HhX
tr640YON4MtH6m2riv
Stream
YLBFEYBrT
xTJ7BwrmY
ToInt64
SFrEbrphy
Single
PuFfU4GUv
Double
sfbIVn5lw
PhsHEmS35aE5TaRbSc
X6avdgAtVPc1ZKH6Fg
Encoding
System.Text
get_UTF8
WMEfG0TIqKkvHoWy18
GetString
TCdwVKNF1ecVaQrvJ5
Assembly
GetExecutingAssembly
jZ6V5qbRigOOyJwaRQ
GetManifestResourceStream
A0gux7hW5WTrjtV2eI
u8HxBLP7xjcWIdFkbE
VeRFfPkIfHjn0HAtIo
mGVFsmmR6HpvbOxGg3
ToSingle
FkKrB1CRuS13Fu0nyk
ToDouble
VHZfTdMdHbhZFEjSAw
rdQPfdRsJ
iU3G1Qhkl
BOZNIf710rwGT6f7Hk
FFPc8a0Ta
Intern
PoXnOntuWj2s8QDFsO
EREIc93m8pvlOXx6td
b8lExF0qnEIrrWb34V
HhtZgofZ2p0iUDWLGv
EKPvjoBrKJhRPERvCp
Kx81jgGOolwOAkVLf7
GTxLm1upkEVRgdrQ9M
KpDxJtH07NIrjorQdN
s2yt9bxSUvO8HERJbb
DKHePpoiTUHV5fJxy6
get_Unicode
ImnrCnrDj
RaU8eKZob
h0gj1y7Z5
M37dSgX7I
mfkOdknN0
scXg0PSnY
iDY2LtRo7DFdSfCb1t
MemoryStream
blDeKRf9K
Substring
IndexOf
WmUn0wbIG
NumberStyles
System.Globalization
unbaGpuo1
wuO26U3Nt
lU9o5nucB
UInt16
DESCryptoServiceProvider
System.Security.Cryptography
ICryptoTransform
DeflateStream
System.IO.Compression
set_Capacity
TransformFinalBlock
get_OutputBlockSize
set_Position
SymmetricAlgorithm
set_Key
CompressionMode
get_Length
get_Position
set_IV
aLQY5d6T7sD3KVeMgr
T86n7AqxPDJBx1ptnh
gsg4dQD8rRUmXqn3w0
MtOPRJJIOWv5WdaQuH
get_FullName
vLupAaWvXRmaa1csCF
eH0vRhleQh0iKd3CEQ
OAaN2cvSf72SXGRgbH
get_Chars
klUUw7zg8xhEO0QjMg
gQ5lkYysJ3j6noFyp4V
Reverse
jlPOIxyywYjGAejrniD
Monitor
cwka5bydDuO8LPkmHNq
DjnsrVyIVefY64uuByq
P5X1j7yEa8H39fX5CcR
ReadByte
wGF9ZTyQnUjhlLOkOxP
HspvtAyaEPFaWj0eve4
gWRYdHyrVIkRwICT5TJ
L2VcRCy8PWLDNidoDau
TS92thyjaA3gy43r9TA
HYr3Cky4Vt4lb7CedNg
TDd1kDyFkKDvwnwcJUG
CreateDecryptor
IILKpcyiXpPEemr0eOI
get_InputBlockSize
yitfV6ynGwO4L4Ygtti
N8BKF8yL6s59SCJGm4T
VncIvCye9dAbausjF3G
TransformBlock
BtVT6fyc5TD2mIEgBSq
Q7GVW5yY5IIuAYZlvF1
ToArray
Dk3UvD3QbD
h2TkgpyKHpGJsnkQLsD
TUR1GBGKF
SetLastError
kernel32.dll
Ta0mkqLEP
CloseHandle
IRIQqc0Sl
OpenProcess
YF1T3Ouwe
GetCurrentProcessId
JPVHyipGd
LoadLibrary
KgXW9HjPX
yoF6KQdNJ
EMqp2CvgP
tLglgHNcX
gJfNl24eI
oQazcGvwW
WjjURaaDj9
PuZUU4ffDM
StringBuilder
GetClassName
user32.dll
KSKUBSH30O
ToString
a7aU9VEUHW
Format
NCFUu5jPBT
IIsPlFy58Dg0SHegcwr
Vugl8Dyw2IhZVOVm0Py
HwnnjRy2VWRKkI9Z0Av
CfEUlZy1HhFZwd3CHTN
Stx2otygbDv180C7Kbu
wqHdUuyO6RaPncRooUA
koMsS3yhfZZxiYviWmA
Compare
swV7AFyPFihD3X1BksO
get_Capacity
nM7F3oySdwDmpPRcvD0
NGEnunyAkJyF7io7dbe
ED11GbyTAwgcUB2ds9Y
Debugger
get_IsAttached
LC1oqnyNgbVFitP54CO
op_Inequality
NFAUYi11Db
KVUUSoEKel
PCDUXl5SRx
qPXUDxt2jY
fQFU4La8ss
cJ3UhJjOr3
DsfIncyb7D1jvaHXoIJ
cSc62FyCrALlwFr0uIF
cDfucwykCCwEcSmarpg
oRtst6ymI1sSk8fqwtv
ProcessHandle
ProcessInformationClass
ProcessInformation
ProcessInformationLength
ReturnLength
debugPort
lpOutputString
hProcess
pbDebuggerPresent
lParam
lpEnumFunc
tFZUtn4hKG
X1lUJgeM96
mCcUq1R9ZF
BsFUFIJk0P
xiNUyr30Nj
MhYU79U28B
d11UfqMlSO
mh0UEbTxiS
VV6UI32BjP
S5GUwMmZbL
T1lGl1y6mgjebr59lju
AkiPaRYY3WIH6
typemdt
FieldInfo
MethodInfo
GetFields
Module
ResolveMethod
MethodBase
get_Assembly
VFnj85ylZZw6g40ZM9d
ResolveType
j32OfHyvWpOZR1k6Q7i
MemberInfo
get_MetadataToken
hV7C8eyz7hx0jl8A3R1
CreateDelegate
s4BAdfdsUNnpy9qriDH
SetValue
CoZfLPyJmaGMunwmxQ0
FfqYPDyWy5fbRy4PrZU
wcvFEedy1q8XEdCkLTT
u8ukY5ddFqjSGBLwMx0
get_ManifestModule
IHkBtIS9RN
uWZBFSfVQd
oNQB7tm6dv
arhBEPJUIt
xW1BciFuyt
THdBPKLVGS
QcgBGtwPLM
B1ABZITgxk
BbgBbUSisa
y1yBxJsGZv
BVOBeGfgwh
C92BaVcfVf
GphBf8vlUj
JThByxV3Q0
QvXB3OiXhY
IDgBYO555K
PmdBCfbjaC
oyBBqa12Ny
Dictionary`2
System.Collections.Generic
J5BBAruhak
fKUBVwWB0P
ydQB45UA4E
zclBKV4gX0
gvXBhkQcLO
i4EBiwD4E0
t8aBw2qwFt
CldBSw8iLh
plFBJHiLgP
IUqBMX8933
WSqBL1WeHU
FoRBD0Tpbv
W3gB0FlOti
Jj8Bs1w04g
jhfBXaO2bN
LboBkfkElD
BwtB59mR2Z
UrcBnL4Gq2
dTYBIltWhH
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
SortedList
System.Collections
Hashtable
RSACryptoServiceProvider
set_UseMachineKeyStore
Bo6PaRY9sc39P
drxUCIMF22
UInt64
e1sUk0BKBI
Lr8UcfBjGb
LuCUPPPB05
qWNUGpmWNX
tTGUAIJaa6
hYYU3yExGt
JalUKCo7E1
AesCryptoServiceProvider
System.Core
RijndaelManaged
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
Unwrap
EmRUVEmtpI
CryptoConfig
get_AllowOnlyFipsAlgorithms
KaOUZk3gjH
MD5CryptoServiceProvider
HashAlgorithm
ComputeHash
gwLU5B0d9u
xxdUiI28FF
DaGUbMyiwS
BinaryReader
get_BaseStream
ReadUInt32
XM3UxURLdo
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
ReadBytes
BindingFlags
get_Item
get_Module
GetGenericArguments
get_IsStatic
get_FieldType
GetParameters
get_DeclaringType
get_IsValueType
MakeByRefType
get_ParameterType
get_ReturnType
GetILGenerator
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
TOFU0jSOAJ
AyHUsFukbW
waZUMGheGq
oj8UeRWsat
CryptoStream
CryptoStreamMode
kCTUnG3897
mhqUawSkxu
OnnU22wq86
RZdUoVSshp
GetMethod
ko7UruKROS
get_Location
Exists
GetName
AssemblyName
get_CodeBase
GetType
GetProperty
PropertyInfo
GetValue
kcwU8XZJS3
hMkUjR6GGm
BwBUdomdGY
Concat
m0nUO1RjB8
x7UUguooZx
O4TU1Csp9N
sfFUmpwg3m
d4vUQmNxk6
umLocehuEC
op_Equality
hKKUTpA17f
FileStream
FileMode
FileAccess
FileShare
edpUHwhIaE
ASSUW5XZah
agsU6XkFfm
rt9UpUyA6a
hhmUluQQXd
L7ZUNUEnKM
kMYUzxji7D
H8aBRS6mOx
EUdBUqdnis
jX3BB5Gx78
KHCB928WbN
k2oBuRJa8R
PwpBvCYhAZ
k29Z2mMZLZyp80EjIX
hZKlbUpYEixA0bPKeK
zwZT97TKl2tYO1Sqej
GuZTcU0g5IBvIgnQ7l
YEwOtkxCwV27NDpJvd
MqFRTkZT5qPKjQqO7Y
Ehbl5kQ4iUPIfNrcCX
SeOC2P3hHdehG9SV1X
ma2Q6rB1DkYDiGqVk1
GetPublicKeyToken
GTVsXFVcSBU7U9uFAv
r7Cgt1kGkJY9kkLbBy
CipherMode
set_Mode
blpMQeOHsVL5IDnOGC
g5pK9mHvvM9HjrPeTk
fiPPX5RfV2qTjtBvDl
dDbDYn71VhDTuU0tqG
FlushFinalBlock
KQ5r7H2CDBYyynT4VI
OmLB7wjianWistievP
WrFQIsCS9VVffdqPfo
n0poqF1xlVwQ4gbdXf
CUOByYexluIHtW7RS4
D6Zl1eN02LYUw9cQEZ
aqVmITt6UkqUJTZ5Ti
l2BCoKhNtDfrbaKRN1
g7kfG5dasKTkxageey4
DHtxc1drvLnEtarf4IC
MHAKvpd8fqSSNv37eTc
CA1m2HDuCac0XFhbf6
v0YB2gEscl
yISa2AdiMXhEGId2nSu
aQ9HR3dnTJWwPV3JQQI
f2JP2adLyARKGeK7QjQ
q5vDmudeKYOZVm6bm0h
uWg5fZdcKk1SB4R9IIf
htCj8xdYgvv66ll861a
nwnSFNdKbLJBGx8W07I
CreateEncryptor
drYTlIdwV2cC9NX6gNO
yYQtnsd2NL0fb4CyfZN
qWUYRyd5tZa1WghHHP7
ToBase64String
classthis
nativeEntry
nativeSizeOfCode
yeXBo5KdTb
NRBBr4C0wY
mHsBgbnFqO
KDikMXewCI
sHdB8U3sBs
rmUBjpvn4e
mUyBdLeV6L
lKbBO2OoUO
zpFdlbdAeAEeh654wMG
B18m4DdTqFqTHL44V4S
rGHhYmdN542pd9LyNeU
bNgiucdbWbTSnXrv7Ov
ReadInt32
QXGSbUdkj5ko6Gl7g7d
hModule
lpName
lpType
lpAddress
dwSize
flAllocationType
flProtect
lpBaseAddress
lpNumberOfBytesWritten
flNewProtect
lpflOldProtect
dwDesiredAccess
bInheritHandle
dwProcessId
value__
wKTB11PXtt
cdQPaRYzXSSuW
$$method0x6000317-1
$$method0x6000332-1
$$method0x6000332-2
$$method0x6000340-1
$$method0x6000340-2
$$method0x6000353-1
$$method0x6000395-1
$$method0x60005b3-1
UnmanagedFunctionPointerAttribute
CallingConvention
CharSet
FlagsAttribute
CompilerGeneratedAttribute
GZXKJDSJSD$
rc24NtUECHC2pGOJ5q.ZSbtRbA6trL99ggInt
GZXKJDSJSD%
GZXKJDSJSD.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
$4c626f02-3590-496a-95e9-239a5b34d4ca
Copyright
2022
1.0.0.0
.NETFramework,Version=v4.5
FrameworkDisplayName
.NET Framework 4.5
GZXKJDSJSD
WrapNonExceptionThrows
ugWLvBbUJ0TtfvEmuD.aIQnJPdSBbOPLGoH9b+wmZKxnw0OBXj5anvfF+r95N0rBo8HgyhtAtT4`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
SUsSystem.Runtime.InteropServices.CharSet, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
CharSet
a~rJ_x
Z\"jIbi
):9Py}C
6nN)K{f&
6PD4&iN
jw+%O_
9}zV,K
K6hm*7
'i_5"
lZu$"pX
-Ff[\aA
hIZxmM
^R-F|i~;2
EwqQEJ
,ta;7(
B~ll.M&
%<8bcp
0RbL(n
@Aq$!}
(P(X5MY
VI)'Qj
A>/(Hk
ViodU)u
J:6[!F7A5
Q/_7t\
IWb1^|
25N3\\[
T8Ri#`
|a-bk{
Rb&,{C
Jee:F.
CJnxEt
tc:cNb
]V^'T1hEc
ikRlmr
1E3YcSE
d]TW4K
/dQE``rW
"!c\Nv@
^`{~&
^{uV1j
oQR?]3;
yrh[@GWm
=[OJ%v
iRg$A}#
b:e,~!
DW/p$[A U
z2nvX|`
m@#3u
8FprRD
Wkigs
mN|:aO
K?L]YE
8Kqq*k
,cIRfzg=T
xMTI]RM
47eRjI
iG?G@s
1+~E|C7=q@
s<&(b9
MI%rY_
bnc2bYz5
L(;X2=
0l5!_3
w]Ow?(
R9+U <D
3bJq>x~
19m(Qhm
Sg<@cUK
'ty&Te
@xx6~N
'B]$6fi7
EKgt{T
(t8R$#
z0rT1t
\lf%LNFS
dc)wE4
dd_)}-
KwOxG[?}!j
)HM"4]
y> P*I
qDY(OH
",31|x
2%Wy&.50
a|<:{Z
@?o>>I
6_7*x=P
d"W??^
PeP?Mx!k
9qA:w=W
*<w^.-
W[0dD4b
Q3K~^k4
a;:"v]
.1""\@
=~E.M*9vz!Q
Q`!fA=
WQ)L'0E
00+h^(
w,.=Kc
$sU`#<
ANqOa)
GjfPT_X
(?wI1DB
<fP<cQS
Cv^Gjk
8D}P&X
_SP&%!
QYw9uF
GP=3S@2
0l$7J@
cLZ[m*
b-4u$?
B{$ +l
l#&Zf@
"'pDtO
}s9'b1v
Cp>2(<
h)nWe5
|q`P n
Ity__3
R[Y+pq-
H<SsLL
1#ULS~
}dty%/.
OXqUJp
t)Vu+[
Q5/u*Q
d{3\oB?w
nUkLW'
<ieH<f@op
rH-J42D
4)q;hLt
^X&>smLCPk
E%5F4
u<x}4k
hNR%XbtP
E=.%l9
6z'%4:<
q\j} K
k_L'y6
%sO'D{
e{}j}&
s[dJ6
=APg[u
?B?vg9
T<|cP<K
[]MLQm:
*3Ow^A
v;^0;+
H*nwbY3
BtVMy}3h,
MJEy<:Q
-EbR|h
`l ~5.
5`:C@bz
:si%pzO%Z
[>c?,0
_&nxBC
'A.u31
BhqaAn
MEYu}2)
N/uH<4}
<E*W3N
!MISmw
L8XeU3
|Jk=|&N
#[I_
Hbs044
zN=wfB,
TFodnUN"D
y!_b-N
c4.y2ziV
N!z3%U
<&M(T{
+e\)Ap
(V ?5T
{wc`aP
>3GuV@
1~.|b`
sZSky>3
i<qz<dpu
q/W 2-#B
W@C@Mz
]'0(o}
^z>!1
fit#*/
\c]6v,
-OXpx1rX$
9N`:-,
=rd06O
Ubh4b68
OX}.s8
~qgNad)`WD
kcNq&-s
6Q ]1mS
tUAEEf
<"d9oA
Y/{L=`
(m%Px4
}kz4RH<
ew=R6F
xS.;8
P+fJO%
g-ld]1
F$|LQ|
By3N#;
6u5S"S
aVgNv!
}*R3!f
|;(C.p%
h\")&`
>otUo6
$2D ^p
YE`.kDH
P^,O~
D=hdm.
oa][sq
,um*_1}
#o`Mq46X
R,g.e;Z
_5J' ?(
I9VHK@eb
K)Q/xj
#=uO-F
s.xTlZ
BKQaLu
l'8~b<q
fkX7.
=aG'*^&
`R:f^A
c)O<Ym
yj2md[M
uZB! _
g7Br4:f
SPjSfanln
aB2:!%
|DXIEF
#Tk94K
PzkP`'
E8>~b
"!E_V.
`G!h=!o
oD^Z*gw)E0
cPjFRhL
_k<e(cf
@v_5}o
>>16c#
U_qMCU
xr;2?0
(/Q2{4
Ej/OuyW
{4fuXS
gJx#wih]-
~~R1"5
$!Iv'N
)CLN0g
{%ctzi
P#yRT$
YkQKKs
d{*\l
t.:@}^
;~[r=9
$@~ 9^gL
|dmHXgd
~hic5Jh
kBj,Tbn
v@n_?p
$J&RT~
8r'(B
F)m:?lF
l9_#^Rj
JkhQQw
10\a@(
_=8^}>
6${a{/
_cD@Jt
3yIF-x
5nXwDl
p kuR9
h=7GBY
0;Kik^
jbHq^j
U7deR|V
!42`kE
>cj[0
5R'fl>R
&hZ/k*
s:D?.c<
v1;jgk
#XHgo#
-d{M,V2
L9Pbhm
`~CR[O2W>
\QE]n_
->bnP"
[J`z,%
7{kq5o\
5@k0?sV
hyoec$
juC.Mu
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
System.Globalization.Calendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
Rfhn M
GZXKJDSJSD.pdb
_CorExeMain
mscoree.dll
db#@"1t=
0?h* +(
x}(b!%
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
(f*^[0
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
220323000000Z
370322235959Z0c1
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
210429000000Z
360428235959Z0i1
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
[K]taM?
SA|X=G
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
jj@0HK4
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0
220329000000Z
330314235959Z0L1
DigiCert, Inc.1$0"
DigiCert Timestamp 2022 - 20
AjEB#AZ
Ihttp://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
http://ocsp.digicert.com0X
Lhttp://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
2xJK7*L
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
211213000000Z
250108235959Z0
Baden-W
rttemberg1
Stuttgart1 0
philandro Software GmbH1 0
philandro Software GmbH0
Yd?O_{
Mhttp://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Mhttp://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0>
http://www.digicert.com/CPS0
http://ocsp.digicert.com0\
Phttp://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
$Ck&Hm
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
220603110044Z0/
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
210429000000Z
360428235959Z0i1
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
[K]taM?
SA|X=G
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
jj@0HK4
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
211213000000Z
250108235959Z0
Baden-W
rttemberg1
Stuttgart1 0
philandro Software GmbH1 0
philandro Software GmbH0
Yd?O_{
Mhttp://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Mhttp://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0>
http://www.digicert.com/CPS0
http://ocsp.digicert.com0\
Phttp://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
$Ck&Hm
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
20220603110044Z0
Symantec Corporation10
Symantec Trust Network110/
(Symantec SHA256 TimeStamping Signer - G3
VeriSign, Inc.10
VeriSign Trust Network1:08
1(c) 2008 VeriSign, Inc. - For authorized use only1806
/VeriSign Universal Root Certification Authority0
160112000000Z
310111235959Z0w1
Symantec Corporation10
Symantec Trust Network1(0&
Symantec SHA256 TimeStamping CA0
https://d.symcb.com/cps0%
https://d.symcb.com/rpa0.
http://s.symcd.com06
%http://s.symcb.com/universal-root.crl0
TimeStamp-2048-30
Symantec Corporation10
Symantec Trust Network1(0&
Symantec SHA256 TimeStamping CA0
171223000000Z
290322235959Z0
Symantec Corporation10
Symantec Trust Network110/
(Symantec SHA256 TimeStamping Signer - G30
?'J3Nm
https://d.symcb.com/cps0%
https://d.symcb.com/rpa0@
/http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
http://ts-ocsp.ws.symantec.com0;
/http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
TimeStamp-2048-60
U){9FN
Symantec Corporation10
Symantec Trust Network1(0&
Symantec SHA256 TimeStamping CA
220603110044Z0/
/1(0&0$0"
3*Df\d
VX[@HmR|
!H?1H?9H?AH?IH?QH
.3i.+\.
%$'&(&)(*&+&,&-&.&/&0&1&2&3&4&5&8797:7;7<7=7>7
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
ICU6VDjusT12AVU26d.WlkfDEoEeBCklUBLUO
{11111-22222-10009-11112}
rc24NtUECHC2pGOJ5q.ZSbtRbA6trL99ggInt
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
ResourceA
Virtual
Write
Process
Memory
Protect
Process
Close
Handle
kernel
32.dll
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
{11111-22222-50001-00001}
{11111-22222-50001-00002}
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
CXHXCGHHDSHHDSSD
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
GZXKJDSJSD
FileVersion
1.0.0.0
InternalName
GZXKJDSJSD.exe
LegalCopyright
Copyright
2022
LegalTrademarks
OriginalFilename
GZXKJDSJSD.exe
ProductName
GZXKJDSJSD
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Trojan.MSIL.Agensla.i!c
tehtris Clean
MicroWorld-eScan Clean
FireEye Generic.mg.4c5903eb4a5bb905
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
VIPRE Clean
K7AntiVirus Trojan ( 0058b03a1 )
BitDefender Trojan.GenericKD.49308742
K7GW Trojan ( 0058b03a1 )
CrowdStrike win/malicious_confidence_100% (W)
Arcabit Clean
BitDefenderTheta Gen:NN.ZemsilF.34786.xm2@amSDPYp
VirIT Clean
Cyren W32/MSIL_Kryptik.HJO.gen!Eldorado
Symantec Trojan Horse
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Kryptik.ADNS
Baidu Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CG522
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Agensla.gen
Alibaba Trojan:MSIL/Kryptik.93c2c93f
NANO-Antivirus Clean
SUPERAntiSpyware Clean
APEX Malicious
Tencent Clean
Ad-Aware Clean
Emsisoft Trojan.GenericKD.49308742 (B)
Comodo Clean
F-Secure Clean
DrWeb Trojan.Siggen18.19484
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
Sophos Clean
Ikarus Trojan.MSIL.PSW
Jiangmin Clean
Webroot Clean
Avira TR/AD.Swotter.zdezs
MAX malware (ai score=99)
Kingsoft Clean
Gridinsoft Clean
Microsoft Trojan:MSIL/FormBook.NZT!MTB
ViRobot Clean
ZoneAlarm Clean
GData Win32.Trojan-Stealer.FormBook.CW8M2S
Cynet Malicious (score: 99)
AhnLab-V3 Trojan/Win.Injection.C5194159
Acronis suspicious
McAfee Artemis!4C5903EB4A5B
TACHYON Clean
VBA32 Clean
Malwarebytes Malware.AI.4224058029
Panda Clean
Zoner Clean
Rising Stealer.Agensla!8.13266 (CLOUD)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/Kryptik.ADNS!tr
AVG Win32:PWSX-gen [Trj]
Cybereason malicious.8c7e34
Avast Win32:PWSX-gen [Trj]
No IRMA results available.