Suspicious
Suspect

a2af576a21d00ec089b270e00687af35

PE Executable
|
MD5: a2af576a21d00ec089b270e00687af35
|
Size: 731.14 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very low

Hash
 Hash Value
MD5
a2af576a21d00ec089b270e00687af35
Sha1
10261d9d4cc3187ce3cdb5df02c5ce304bf5edba
Sha256
80c896a08d7847ff7d282d383deb7b753b2bd3e06e6cb3dbe7731adcae32197d
Sha384
f27dfd91b3ea98d3f8d2996c917f38eaa6a1eb755fca9f8d2b362385b462e2a5f25981bb0ee775c11d72f2463af8f05b
Sha512
f17528ed6b846c9d8b0354135c07fef4a213574017969d857969e6dc1444f6c219ef8eb7f8ca72fdd80758d7d4c59f938bd00cd7a2a3047aa3e7ea0456e5fc15
SSDeep
12288:P3NxTevnFY9G3oWLGe+0AVxHy9S02IxjQgJGQ/fZY/fgD2A0Qbodcz52gv5uLzTX:vNaUske+0A+U+BqZ/f+90Qbm0KnyV/2
TLSH
C0F41229365CC206D45963F28177E33463ED1D5FE664D30ADBE8AEDB782F6609A103C2
File Structure
a2af576a21d00ec089b270e00687af35
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Cycle_Jump_Game.Form1.resources
Cycle_Jump_Game.Main.resources
$this.Icon
[NBF]root.IconData
PIP
[NBF]root.Data
timer1.TrayLocation
Cycle_Jump_Game.Properties.Resources.resources
VKGx
[NBF]root.Data
[NBF]root.Data-preview.png
t1
[NBF]root.Data
[NBF]root.Data-preview.png
t2
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
 Value
Module Name

GxHx.exe
Full Name

GxHx.exe
EntryPoint

System.Void Cycle_Jump_Game.More::Main()
Scope Name

GxHx.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

GxHx
Assembly Version

0.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

64
Main Method

System.Void Cycle_Jump_Game.More::Main()
Main IL Instruction Count

10
Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Cycle_Jump_Game.Main::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Artefacts
Name
 Value
PDB Path

GxHx.pdb
a2af576a21d00ec089b270e00687af35 (731.14 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙