Suspicious
Suspect

866ef5e985ab55368a5c6a7da1723292

PE Executable
|
MD5: 866ef5e985ab55368a5c6a7da1723292
|
Size: 696.32 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
 Hash Value
MD5
866ef5e985ab55368a5c6a7da1723292
Sha1
667a31804ae46be1b85a8a8e1ab48da943888108
Sha256
efd69a0ac7b81d3d2fe4900b06a98066f2517e0d9364361d396e143d6f90d128
Sha384
ddc5ba11b4aa5dcb73d437286b136c1d8d38fae4185a8cfe670b5b0b104f64d0af5627239b49683cc887a8149e71c627
Sha512
6184944d94afee1cd456a7b336665792a683637c1ea9648eb68cb4578d82a693c9f46d964ebeece549ef46fcb4352c0aed2b3b8bda9c10803fb6a12ac8b531f6
SSDeep
12288:XMpppppppppjHpppppppppp3j3S2SGF9RJrZtmhoASb+8YI2msVdCVT5dzLoKnHd:8pppppppppjHpppppppppp3j3iGF9RJl
TLSH
E9E4122479AAEC23F89513BC41B0E7B122B14ECCB812D74A4BDDBCD776BAB473414192
File Structure
866ef5e985ab55368a5c6a7da1723292
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
usercontrolwithdatabinding.Form1.resources
$this.Icon
[NBF]root.IconData
bsCustomer.TrayLocation
engh
[NBF]root.Data
errorProvider1.TrayLocation
usercontrolwithdatabinding.Properties.Resources.resources
vkNz
[NBF]root.Data
[NBF]root.Data-preview.png
usercontrolwithdatabinding.UserControls.AddressControl.resources
Informations
Name
 Value
Module Name

itZX.exe
Full Name

itZX.exe
EntryPoint

System.Void usercontrolwithdatabinding.Program::Main()
Scope Name

itZX.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

itZX
Assembly Version

1.2.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

106
Main Method

System.Void usercontrolwithdatabinding.Program::Main()
Main IL Instruction Count

6
Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void usercontrolwithdatabinding.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Artefacts
Name
 Value
PDB Path

itZX.pdb
866ef5e985ab55368a5c6a7da1723292 (696.32 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙