home

GZeroUser32.dll

GZeroUser32

GZERO LIMITED

Publisher:
GZero  (signed by GZERO LIMITED)

Product:
GZeroUser32

Version:
1.0.0.0

MD5:
5cfd2ed1ec51a7ac6da8b4bdddaa87ad

SHA-1:
6b25cf6089ebe1050aa7b63b22b55ead94d1e330

SHA-256:
bd1f6112182daf3d81adad925a70e09e270a80aa7b9a5e0a6a2fe23d88cfee3b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:28:22 AM UTC  (today)

File size:
45 KB (46,112 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © GZero 2010

Original file name:
GZeroUser32.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\roaming\gzero\gboost\1.0.3.0\gzerouser32.dll

Digital Signature
Signed by:
GZERO LIMITED

Authority:
Thawte, Inc.

Valid from:
11/14/2010 7:00:00 PM

Valid to:
11/15/2011 6:59:59 PM

Subject:
CN=GZERO LIMITED, O=GZERO LIMITED, L=Mansfield, S=Nottinghamshire, C=GB

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
63182E481B05D6C6AE6EEA37B9C489AD

File PE Metadata
Compilation timestamp:
9/30/2010 10:21:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:mQaaJUGU4Ouv4qAJXZRDnP6+60Jf+lOgFjCuf0i31pHnGckppQBZCufMxSQuCUJu:sMwxfhnyMJf+lOgFjCuf0i31pHnGckpJ

Entry address:
0xB63E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.2470

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
38 KB (38,912 bytes)

Scan GZeroUser32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.