Static | ZeroBOX

PE Compile Time

2024-08-09 04:59:13

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000b58d0 0x000b5a00 7.12998752443
.rsrc 0x000b8000 0x000003ac 0x00000400 2.97231521743
.reloc 0x000ba000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000b8058 0x00000354 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Yfefeffeef
afefeffefefea
Xfeffeefefa
Xfeffeeffefe
afefeffeefa
Yfefeffefefe
afeffefefehah
Yffeeffefehah
afeffeefefa
`feffefeeffe_-
Xfefeffefeefa
feffefefefeYa*
ffefeeffeY
fefeffeefXa*
?feffeeffefeY
feffeefefef
feffeeffeef
ffeeffeefef
feffeefeffe
affefeeffe
9feffefefe
ffefefeeffe
ffeefefeffe
ffeeffefeef
fefefeffe
affefeeffe
ffeeffefea(l
fefeffeefa
x?fefeffeef(n
%#ffffff
%#ffffff
%#ffffff
%#ffffff
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPR`
NykykH]
?winlogon, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
clr-namespace:-
-.l11Iii1IilIIl
NWindowsBase, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
SPresentationCore, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
XPresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
liiil1ilil
clr-namespace:-
9http://schemas.microsoft.com/winfx/2006/xaml/presentation
NSystem.Xaml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
l1lli1,http://schemas.microsoft.com/winfx/2006/xaml
Resources
button
TargetType
Property
Value
TargetType
Padding
CornerRadius
Triggers
Property
FocusVisualStyle
#FF504373._
Center=
Center=
IsMouseOver
#FFE1E1E1
IsMouseCaptured
#FFE1E1E1
#FF272727
#FF4A4A4A
?winlogon, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
clr-namespace:-
-.IIIII1llIiI1
NWindowsBase, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
SPresentationCore, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
XPresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
NSystem.Xaml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
l1lli1,http://schemas.microsoft.com/winfx/2006/xaml
liiil1ilil
clr-namespace:-
9http://schemas.microsoft.com/winfx/2006/xaml/presentation
Title$
BitBoxApp
ResizeMode$
NoResize=
WindowStartupLocation$
CenterScreen=
Images/img_bitbox.ico
panelGrid
90,50,0,0q
BITBOX
RenderTransformOrigin$
0.5,0.5&
189,54,0,0q
SECURITY
#FF5C5C5C$
Fonts/#Roboto)
0.5,0.5&
28,153,0,0q
Attention!
0.5,0.5&
Images/img_logobitbox.png
10,36,667,517q
121,155,0,0q
HA configuration issue has occurred. Please enter your recovery phrase to
Fonts/#Roboto)
0.5,0.5&
228,185,0,0q
)resynchronize with the blockchain network
Fonts/#Roboto)
0.5,0.5&
280,231,0,0q
Enter your recovery phrase
#FF5C5C5C$
Fonts/#Roboto)
0.5,0.5&
OneWord
30,283,0,0q
TextWrapping$
Fonts/#Inter)
TextAlignment$
Center=
Bottom=
38,0,622,296q
listBox
164,129,721,477q
Collapsed=
TwoWord
148,283,0,0q
Fonts/#Inter)
Center=
Bottom=
156,0,504,296q
ThreeWord
263,283,0,0q
Fonts/#Inter)
Center=
Bottom=
271,0,389,296q
FourWord
382,283,0,0q
Fonts/#Inter)
Center=
Bottom=
390,0,270,296q
FiveWord
495,283,0,0q
Fonts/#Inter)
Center=
Bottom=
503,0,157,296q
SixWord
604,283,0,0q
Fonts/#Inter)
Center=
Bottom=
612,0,48,296q
SevenWord
30,347,0,0q
Fonts/#Inter)
Center=
Bottom=
38,0,622,232q
EightWord
148,347,0,0q
Fonts/#Inter)
Center=
Bottom=
156,0,504,232q
NineWord
263,347,0,0q
Fonts/#Inter)
Center=
Bottom=
271,0,389,232q
TenWord
382,347,0,0q
Fonts/#Inter)
Center=
Bottom=
390,0,270,232q
ElevenWord
495,347,0,0q
Fonts/#Inter)
Center=
Bottom=
503,0,157,232q
TwelveWord
604,347,0,0q
Fonts/#Inter)
Center=
Bottom=
612,0,48,232q
ThirteenWord
30,418,0,0q
Fonts/#Inter)
Center=
Bottom=
38,0,622,161q
FourteenWord
148,418,0,0q
Fonts/#Inter)
Center=
Bottom=
156,0,504,161q
FifteenWord
263,418,0,0q
Fonts/#Inter)
Center=
Bottom=
271,0,389,161q
SixteenWord
382,418,0,0q
Fonts/#Inter)
Center=
Bottom=
390,0,270,161q
SeventeenWord
495,418,0,0q
Fonts/#Inter)
Center=
Bottom=
503,0,157,161q
EighteenWord
604,418,0,0q
Fonts/#Inter)
Center=
Bottom=
612,0,48,161q
NineteenWord
30,487,0,0q
Fonts/#Inter)
Center=
Bottom=
38,0,622,92q
TwentyWord
148,487,0,0q
Fonts/#Inter)
Center=
Bottom=
156,0,504,92q
TwentyOneWord
263,487,0,0q
Fonts/#Inter)
Center=
Bottom=
271,0,389,92q
TwentyTwoWord
382,487,0,0q
Fonts/#Inter)
Center=
Bottom=
390,0,270,92q
TwentyThreeWord
495,487,0,0q
Fonts/#Inter)
Center=
Bottom=
503,0,157,92q
TwentyFourWord
604,487,0,0q
Fonts/#Inter)
Center=
Bottom=
612,0,48,92q
Restore
Confirm
296,553,0,0q
Opacity$
TargetType"
Property
Fonts/#Roboto)
Cursor$
Opacity$
TargetType"
border
CornerRadius$
Center=
Center=
Triggers
Property
#FF191919
Opacity$
Cursor$
Opacity$
Cursor$
ErorrMessage
Hidden=
572,56,0,0q
Fonts/#Roboto)
Incorrect seed phrase
0.5,0.5&
?winlogon, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
clr-namespace:-
-.IliIIl1lii1i
NWindowsBase, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
SPresentationCore, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
XPresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
NSystem.Xaml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
l1lli1,http://schemas.microsoft.com/winfx/2006/xaml
liiil1ilil
clr-namespace:-
9http://schemas.microsoft.com/winfx/2006/xaml/presentation
Title$
BitBoxApp
ResizeMode$
NoResize=
Images/img_bitbox.ico
Images/img_bitbox.png
-509,0,509,0q
288,15,0,0q
ExtraBold"
Welcome
A firmware update error has been found. To protect your coins and ensure your device runs smoothly, please update immediately. If you need assistance, contact our support. Please note: Devices not updated might face security risks and potential coin loss. It's crucial to update as soon as possible. Kindly connect and unlock your device. Your cooperation is appreciated.
Fonts/#Inter)
TextAlignment$
Center=
400,296,109,272q
Warning: Unupdated devices may be susceptible to security vulnerabilities and potential risks of coin loss. Update your device as soon as possible!
Fonts/#Inter)
Center=
#FFEF4F54$
345,475,54,130q
Images/img_znak.png
617,80,301,538q
%BitBox device: UNKNOWN_ERROR (0x6a82)
Fonts/#Inter)
Center=
#FF919499$
363,232,36,472q
Connect and unlock your device
Fonts/#Inter)
Center=
529,564,202,151q
nextpage
Fonts/#Inter)
Continiue
button#
1086,664,0,0q
UxOS/2#
Dcmap/.
(:head-
$hmtx7
"&54632
!"&54632
V||VWyy
V||VWyy
ySUvvUSyySUvvUSy
"&546632
'2654&#
U8NN88ON
=kEvB+
f7TGJ.*4
f.QPP+(7iuZp<"
(f#o9i
!2654&&#!
!26654&#!
!5&6$3!
!2654&&#!
!26654&#!
A!546$32
S5&6$3!
232655
32665%
'"&54632
!"&54632
OWV||VWyy
V||VWyy
ySUvvUSyySUvvUSy
?oLPo:
"&54632
!"&54632
V||VWyy
V||VWyy
ySUvvUSyySUvvUSy
"&'&667
(s-eH14
!26654&&#!
!26654&&#!
A!5&6$3!2
!26654&&#!
!26654&&#!
!26654&&#!
!26654&&#!
!26654&&#!
326654&&''$
;hB7R;+
E@rJE^B
32667!
'4&&#"
B^EJr@E
>aJBh;=q
32654.
#5266%!
"&54632
!"&54632
RZV||VWyy
V||VWyy
ySUvvUSyySUvvUSy
!56&&#!
U9b.,}
E"&&54>
554&#"
%66$32
EVV#Kp>
E"&&54>
554&#"
%66$32
"&54632
!"&54632
EVV#Kp>
dV||VWyy
V||VWyy
ySUvvUSyySUvvUSy
E"&&54>
554&#"
%66$32
"&&546632
'6654&#
EVV#Kp>
_BZZBCYY
FUW"Kq>
"&&54>
554&#"
%66$32
EVV#Kp>
26654&&#"
#"&&'#
326654&&#"
#"&&'#
326654&&#"
E"&&'#
26654&&#"
32667!
32667!
A!546632
32667!
2676&#"
HL<+,9m
26654&&#"
26654&&#"
26654&&#"
326'6&'&
#"&&'%"$
26654&&#"
QK?13G
26654&&#"
!2654&#"
26654&&#"
3n^5#'K_
326654&&##
326654&&#"
!4&&#"
!4&&#"
"&54632
!"&54632
V||VWyy
V||VWyy
ySUvvUSyySUvvUSy
!4&&#"
3266554&&#"
A"$&'%
26654&&#"
26654&&#"
cLg)/
!54&#"
"&54632
"&54632
!"&54632
V||VWyy
V||VWyy
ySUvvUSyySUvvUSy
"&'&667
=^w10"3
's,fH04
"&54632
A"&&5&663!
A!"&&546632
V8>%<"
3267&&#"
GXE.$Dqd
A!"&&546632
V8>%<"
/)gLm
32654&#&
J84>K8#lzy2
}9HE9:A
26654&&#"
26654&&#"
"&54632
!"&54632
V||VWyy
V||VWyy
ySUvvUSyySUvvUSy
26654&&#"
26654&&#"
26654&&#"
"&'&667
=^w10"3
's,fH04
26654&&#"
#"&&'#
326654&&#"
#"&&'#
326654&&#"
A!46!2
#"&&'#
326654&&#"
26654&&#"
26654&&#"
3267&&'%&&546$3
2Q1SE7L
]aWE:K
3267&&'%&&546$3
2Q1SE7L
]aWE:K
3267&&'%&&546$3
2Q1SE7L
]aWE:K
!"$&'667%66'6&#"
-5(qEWa]
L7ESiK
3266'4&##
326656&#"
32654.
)5)RxxQ
U~}U.>.
Vx^]:8Y\u
*UYLfS^
iNm[cC^h}
32654&#"
'6$$32
M:/B9?1
7K=6+=5q
326654&#"
rA^54<A
INB`[t
8)#*5`@N
V%A*<
!.<7\\
E$,9:[[
"&54632
!"&54632
IW||WWyy
W||WWyy
ySUvvUSyySUvvUSy
]%zfl #
A54&&#!5
cXb?+UG
#"&5%5
!267&&#"
!26654&&#!
!26656&&#!"
332665
>uSn8;
#"$54>
32654&&']
w(= +''*9(
}105602|
!26654&#!
326654&&##
326654&&#"
Kq>F|QR
>DyQMuB?tN
326677
3!26654&&#
!26654&#!d
!266'6&#!
!266'6&#!
!26654&#!
!266'6&#!
32667!
9dCBe9
!54&#"
3266554.
326654&&##
26654&#"
26654&&#"
#"&&'#
326654&&##
326654&#"
554667'&&
3266554&&'"
_pk&^S
#"$&'>
546$32
'Q?FiQNt
KIdBES
E"$&54>
546$32
!4&&#"
TLr?y~
\rhptT
32654&&##5
532654&#"
!66$32
tNQiF?Q'
SEBdIK
32674&&##532
#53267&&#"
32654&&##5
53267&&#"
!66$32
tNQiF?Q'
SEBdIK
'6676&''&
:"ImZ`4o@
#"$&546$32
'6654&''$&5
4,V?ge
3266'54&&#"
<nVn{1
6}ldy6
'6654&'&$
e$0gvH
3266554&&#"
shy55{jn
!<(/:!+@yP
32665&
32$65.
'6&&'!
32$65.
326654&
Pb-xpax
6xaKh6-b
A"$'4667
32654&'
,KW'+&*PD
L*1-.S
26654&&#"
!2654&#!5!26654&#!
32654&&##
32654&#"
!66$32
cko^_}
LXa[8S0
\EN_UD
54&&##
3266'6&&'
*UA"G\A
!267&&#!
!2654&#!
!267&&#!
!267&&#!
!267&&#!
!2654&#!
!267&&#!
26654&&#"
!"$&7&6$3!
326655&&#"
326654&&##
326654&&''$
;hB7R;+
E@rJE^B
32667!
%6&&#"
@lA?e;
!26654&&#!
7!2667&&#!
!26654&&##
#"$&'%
326654&&'%.
546$3
RrA@k@7P%
6L(NB+7#
FY,$?);7
!2667.
!4&&#"
iFn?;c;
!66$32
%66'6&
Cyc%\(`>ER
T(v8V^^s
#"$'6632
3266554&&#"
<lVk{43}ody6
1583XB
W;d>tv
7Z5ze?e;r
!6&&#"
!2654&&#!
!26654&#!
!2654&&#!
!26654&#!
54&&#"
326654&&##
326654&&#"
Kq>F|QR
>DyQMuB?tN
326654&&'"
326654&&'"
26654&&#"
546675&&546$32
26654&&#"
26654&&#"
F|QPyEEyPQ|F
326654&&##
326654&&#"
326654&&#"
546632
MHbZ<X1HxG
"&7&632
#"&7&66
54&&#"
"&7&632
=vS>b:BoCAtJ
4(ViAEh89oR
32667!
#"$&54667>
>uT=c:BoCAtJ
5'WhBEg99pR
A546676654&&#"
"&7&632
I*eZicGqAAtJ
gJi79oR
V6_vY
32667!
#"$&5467>
)fZicGr@AtJ
gIi79pQ
U7_vX
S526554>
554&#52
326654
<3E]/c
4gE<a5
A"&&546632
A"&&546632
'2654&#"
zX}}XX~~
~XX~~XX~
S54667
'6655!
E"&54632
E"&54632
"&54632
e"&54632
"&54632
"&54632
"&54632
"&&54632
S&6632
#"&'&&#"
#"&'&&#"
cA\/LU
mBH/LV
cA\/LU
mBH/LV
uJQ5.rl
}HX4&en
uJQ5.rl
}HX4&en
#"&'&&#"
m:P4G\
i>J3G\
N`35oy
S\71k}
"&54632
"&&54632
##532654&##
iFuEHxI
:mNNn9
#"&&'!
326654&&#"
##532654&##
-CB,zD
32654&''&&'&676
:B7C*8R}o
~n).#&
#5326554&##532
"&54632
OGYXY[FL
C@knpm?B
A"&&546632
26654&&#"
:^77^:9^88^
8^:9^88^9:^8
#"&5463
zqOV9vP
P;~A.n
\<8@3I"
S546632
326554&#"
|{ywx|x{
"&54632
AcaCDbb
^BA`_BC]
A!&&#"
#"$&5!
76654&&'%.
75&&746$32
6&&'%&
ih5Z7>X(
Mg?00N9
6676$32
#"&&'&&'
3267667&&'&&#"
EvI:l]&
FqCH<#<
9OEqDDqE%?$
9!:JCq
326655.
A"&&54>
'26655
Cbk)CHNT
#"&&'#
326654&#"
kbD[/fhB\/
A"&&546632
VL>]33\?C]
#"&&546632
jdgf/\BB\0
A"&&546632
!5!4&&#"
90V9>_4
8T/6X3
32655#
#"&&546632
2654&#"
ckjdD\-g
s0!HQ]
"&54632
AcaCDbb
r^BA`_BC]
"&54632
BddBCbb
]CB__BB^
XjdVTf
A"&&546632
'26654&&#"
EY,*ZFGZ+,Z
#"&&'#
326654&#"
idD[/fhB\/
#"&&546632
jdD\-.[DB\0
32654&''&&54632
PL8Z8E
\FEY=>
'F/)")
::2( ,
2654&#"
8R.vTZm
.JL.HNWR
A"&&'!
32654&##532654&#"
]rcQUx
o8>G@<O
K;:GD8m
A"&&'!
32654&#"
xO]||d:p
l;IfQQn,$0
'26654&&#"
@f<9cA>e=
1V64U20T6C{
A"&&54675&&546632
'26654&&#"
26654&#"
Ac7:b?>a7tb7R.eR6R/i
$B..H((H.CQ
#>)?J"=*?K
#"&&'!
#"&&5466
326676&
@e:{`@e<
1V6Nk3Q-Ov
EqBDqC
EqCCqE
A"&&546632
VL>]33\?C]
A"&&546632
'26654&&#"
EY,*ZFGZ+,Z
32654&''&&54632
PL8Z8E
\FEY=>
'F/)")
::2( ,
/ZIAza
'2654&#"
dxxdezx
6654&#"
G\jNOc
W8];@CJH
E"&&'!
32654&##532654&#"
iNTsof
QgYLHk
_/9A54C
?42@;/_
E"&&'!
32654&#"
pBTopY2h
^3=WFE_%-
'2654&#"
UvqU6Z9
^GC^)G,?k
E"&&54675&&546632
'26654&#"
2654&#"
;V-mQ8X3f]F\ZHLWY
8'=L">):D
?56AA65?
#"&&5466
326676&
8[7nV>Z4
+K/B_/G&=m
A"&&'!
32654&##532654&#"
iNTsof
QgYLHk
_/9A54C
?42@;/_
A"&&'!
32654&#"
pBTopY2h
^3=WFE_%-
=g><f@
=g><g?
A546632
326554&#"
546632
326554&#"
#E[[C@^ZF
%EX\C@_YD
lG~|IlI~~
lI||IlI~
A546632
326554&#"
546632
326554&#"
546632
326554&#"
\RQVXOR[
^QQYZTN\
%EX\C@_YD
lGffGlGff
lGffGlGff
lI||IlI~
A546632
326554&#"
546632
326554&#"
546632
326554&#"
546632
326554&#"
\RQVWPQ\
_PRX[SO[
%EX\C@_YD
^QRX[SO[
lGffGlGff
lGffGlGff
lI||IlI~
lGffGlGff
32654&''&&54632
QK9Z9D
]FDY<?
'F/)")
::2( ,
A"&54632
!"&54632
V||VWyy
V||VWyy
ySUvvUSyySUvvUSy
A"&54632
!"&54632
V||VWyy
V||VWyy
ySUvvUSyySUvvUSy
A'4672
FeQJ+:=
KeLH-4?
A'4672
FdRJ+:=
JeLH-4@
A"&54632
A"&&546632
'6654&#
_BZZBCYY
A"&546632
'2654&#
U8NN88ON
#"&%&632
$rUUttUTs
+MIiiIJggHKigMJdf
#'2676&'
A"&'&667
's,fH04
A"&54632
!"&54632
9W||WWyy
W||WWyy
ySUvvUSyySUvvUSy
A!'66'6&#7
#'2654&'
\lj^sx
A"&54632
~YY~~YY~
A"&54632
!"&54632
~YY~~YY~~YY~~YY~
A'4632
FeQJ+:=
KeLH-4?
"&&5546632
'26554&#"
_ihbagh
!26654&&##
2654&#"
QqqQPrrF
rPQrrQPr
A"&&'&6632
'266'4&&#"
:_:;_9
9`:;`88`;:`9
A"&&'&6632
66&'&&
A}zRQ{
=9&':
Cx{QRz
b<('<8
A}zRQ{
Cx{QRz
E"&&546633
#"&&546632
!546632
#"&&55!
26655#"
354&&#"
!326654&&#"
26654&&##
6Y55Y5
6Y75Y55Y
7X55X76Y4
6X55X7
5Z65Z4
6Y44Y66Y44Y66Y44Y6
4Z56Z5
"&&54>
'26655
Ccj*CHOT
!26654&#!
A!"$&54
gr<rRKuCm
?}]cy6
326654&&##
326675!
A!54632
326675!
66'&&#"
"&&'&67
!4&&#"
##53265&&#!
54$3326654&##
UOL8[6u
#54632
'66553
!2654&#!
!2654&#!
3267&&#!
2654&'%&$
!26654&#!
!26654&&#!
A%4632
Qu]U0BD
VuXR4:H
TD`aCD`a
TmnSSll
!266'6&#!
54&&#"
A'6632
2654&&'.
"&546676
;rTXtX/'Q
!P'&CI^AWt:
32654&#"
326654&
BSgVUn
!3+1A|
326'!'66'6&#72
#YU77UY#[
A!6&#"
#"&&#"
dKh]<':
g-QOR-$9
-.C3/c
"&7&632
xJTnpSSn
jVXjkWVj
E_`DE[[
atbast``v
(SpoTSno
A&$$#"
'6$$32
UGd22aF
#'6654&#72
gV/OEC&"'
eW'KLJ$'
S54667
A2667!
~{zx%%x
32665&&
54&&#"
"&54632
!"&54632
NRwwRSss
SvvSStt
pMPnnPMppMPnnPMp
A"&54632
!"&54632
oV||VWyy
V||VWyy
ySUvvUSyySUvvUSy
#"&%4632
hUYijWUi
biYTlkUYi
GC``DF\]EC_]EE_`
#"&%4632
OpUWrtUTq
qVWqqWVq
VHjiILegHJjjJIhh
#"&%4632
hC``DF\]EE]_CCa^
#"&%4632
RoUWrrWTp
sUVqqVWq
VHjiIJggHLhjJIhh
A"&54632
!"&54632
bV||VWyy
V||VWyy]
ySUvvUSyySUvvUSy
A"&54632
!"&54632
bV||VWyy
V||VWyy]
ySUvvUSyySUvvUSy
A"&54632
|X~~XX}}
xSUvvUSx
"&54632
X~~XX~~
wTTwwTTw
E"&&'7
3266'54.
Av[MuD
#"&&54632
hCRN5K?
fn6195UE
2665&&#"
3.^Gfg/[Cji
54&&##
~>^6.(9
546$75
32667!
#"$&54667>
IH%ZPy
7&6$32
UkWE3?*
G%lxCX
"&&7&667
3267&&''!
-+%i]
A3266554&&#"
!66$32
py/'xyn
3266554&&#"
!66$32
py/'xyn
#"$&'!
S|@Hi8
#avLCV
wO['$B
3266'56&&
##532665
#"&&546632
A!&&#"
~{zx%%x`
^\{{\]yy
!6&&#"
7mQnz11
=iCv*0
##5326'&&#!
'&63326'4&##
6q: ;.ei
2$66554&#"
i<'1:3
n<;Lls
326654&&##
#"&%4632
D`_ED^^CE_`DE[[
#"&%4632
.>qUVqpWUq
rUTsqVUr
5JiiJHjhIKggKJgg
3266%7
\![Dtw)1|
326656&$
7;e?L^-
266'6&&#"
326554&
32655!
'66'53
#56632
3266'54&&#"
@qMvw(
#54&#"
326654&
Pb-yoax
6xaKh6-b
ik~~ki
TqqTUrr
VrrVSqq
VrrVSqq
TqqTUrr
"&&746632
@mCAl@
A!4&&'&$
266554&&#"
#"&&'2
"&546632
'2654&#
V8ON98NN
A"&5463
S52654&#52
R.AA.u
C-kyEZ
3266554&&#"
6waVrC
A#4632
267&&'%.
~zrx-_
5546632
WQNV2y
A'4672
FeQJ+:=
KeLH-4?
C`NH)8:
HaHE-2=
#"&&#"
#"&%4632
dKh]<'5
~g=kj:&7
..F10b
&D`_EE[[DE``DE]\
#"&%4632
'46632
RsSTspWVp
rUVqqVUr
]DaRW8/D
\8`Z]50G
YKggKJijIJggILee
e$/$B>
#"&&#"
fKg]='5
f>ki:&9
..G00b
'46632
^CaRW9.D
]9`Z]41G
e$/$B>
A526'6&&54663
$l~@LV"
1iwDhY
32654&#"
KIjYVi'
#"&&'#
4&&'$$546$32
k}\RAI*
A $$'7
$$6654&#"
6$6654&
6$654&#"
!&6$3
$$654&
qee,S9
33267&&
32665&&'
##"$&&546$7
b!a^V_
332654&
26654&'
O6{gnv
54&&#"
326675.
326675.
54&&#"
A3266554.
##53267&&#"
32654&#"
<0)<<)0<
g.99.*88
]DbRW7/F
]8`[\50G
c"-"?<
-CbQV81D
\9a[\30I
h#-$A?
^BaSV8/D
\8aZ]51F
e$-#A?
RqpSUoo
QtqTSqq
'46632
'46632
]CbRU80E
\K{xH/F
]CbRU8/F
\K{xH0E
A"&5463
A!4&#"
!46632
[UqqTRrq
A46632
32665&&#"
32665&&#"
$D/.C&
&E..E&
q&B((A'=Y)D)M
q&B((A'=Y)E
#"$&&'!
X#[U88VZ
#"&5463
xHF6*+B&/
>16((i
E{E,!) ,
e6i}iq
A"&&5546632
!5!5&&#"
BCQBcX;`
Xi*({0X
D89DD98D
1?A/0AA
A"&'56632
'26'56&#"
A"&&'56632
6_;61R
"&554632
'2675&&#"
^RG\_z\
3266'54&&#"
@qMvw(
~{zx%%x|m
MeeMLgi
3266554&&#"
#"$&%"&5&632
9oRzw&%x}m
eMLgiJMe
32654&&'.
-bU60s
266'6&&#"
Zr~4+}
S!266554&&#!
#54632
A#4632
26554&#"
#"&%4632
TrsSSqq
VpqUSnn
SssSQss
UqpUTnp
$$P@&+
A"&'!5!
%66'6&#"
(t,eH14
#"&&#"
<X#6YU-%K
-.,::S
O44&(F
A267&&'52
#"&'&&#"
"&54632
ptI)*%-)
A"&&546632
yVSueD)D
#"&&'3
#"&&'3
KzH,:42
KzH,:4
A54&#"
#"&5463
"&&5546632
!5!54&#"
xHE6*<W
ACR?cU6b"l%
l26((i
f@{E,!)B)l9k}iq
Zg%-{4T
A54&#"
#"&5463
"&&5546632
'266554&#"
xHE6*<U
l26((i
f@{E,!)B+n9k}iq
#"&'663
=26((i
E{E,!) ,
e6i}iq
#'26'6&'7"&&'56632
6_;61R
#"&&546632
326754&&
XGyL"EdSG`
#"&&546632
326754&&%
XGyL"EdSG`
"&5546632
'2675&&#"
4d#`;VV
`PGZaw\
A"&'56632
32675#5!
A#'326'6&##
#&&'56&
'6654&#"
h,R_@v
a\`c0()C
}G2#(
#"&&53
Mw=9.'
A"&'5>
'2675&&#"
`U4Zq<d=
"&&'5>
'26554&#"
M>@NKH
\zeVGQ_
#"&&57
32654&##
##53267&&#"
p_KPXE>0
2JL7UD
k@I0GJI
A"&55!
326554&#"
jCCQ>`W9`"j&
Ul(*{2Ve
#"&&#"
#"&&#"
TB2NH(
UE&QP&
TB2NH(
UE&QP&
"?d2
"&&554632
'2675&&#"
#"&&'5>
326554&
^RG\_z\
#"&%4632
#"&5463
DF5:DD:6E
E89EE98E)5524
zHD6(*C%0
,1?A/0AA0/A?11@@
>16((i
L{G*!),
e6i}iq
#"&%4632
"&&55&632
'2675&&#"
F79FAv
,1?A/0AA01??11@@
#"&%6632
,/A?11@@11?A/1@@
$YT78UY"\
'46632
'46632
]CbRU80E
]K{xG0F
]CbRU80E
]K{xH/F2
3266'6&&
326654&&
26654&#"
9\6vU;\6u
d0^Dfl0^Dfl
2667&&#"
tT<_7{L
.[Eim0`Fgg
=iCv*0
=iCv*0
A'4672
FdRJ+:=
JeLH-4@
#"&%4632
qa^ss^_s
r`^uu^`ru
d7VIJ-(3
f-SPR+$9
.KiiKLggLLggLKgg
>uSo9:
>uSn8;
=kEuB+
=kEuB+
f7TGJ.*4
f-RPP+(7iuZq<#
(f#o9i
f7TGJ.*4
f.QPP+(7iuZp<"
(f#o9i
f7TGJ.*4
f-RPP+(7
Coi9o#f&
f7TGJ.*4
f.QPP+(7
Coi9o#f&
"&54632
%"&54632
4_sqa^ss
9`rr`^uu
gLKiiKLg
gKLggLKg
#"&%4632
qa^ss^_s
r`^uu^`r
.KiiKLggLLggLKgg
A $$'7
SssSRqq
UqqUTqs
QuSnSG
%"&54632
!"&54632
"&54632
!"&54632
^]ss]]r
C]ss]]r
r]]ss]]r
]ss]]r
@nXVjjVXnnXVjjVXn
nWWjjWWnnWWjjWWn
#"&&55!
3266554&#"
6656&#"
326'6&'
IO}1M3
HTszV`
%4&&'&$&546$32
!"$$&'7
;b:GfM"@
!"&54$32
g&<J4N\5
~CW18:/
k8GG8k
k6IG8k
k8GI6k
#73266554&##532
#73266554&##532
pBh<umy
pBh<vmx
3266'54&&#"
@qMvw(
$#!5!
554&&#!5!2
53266554&##532
$#!5!
53266554&##532
554&&#!5!2
#"&&5546633
/Z:2X:
#546332
#54&##"
"&7546632
fE~U.9?`1
{'c]>>]c'h
!66$$Y
$$&'!
!52$66
#"&&'.
";L(oU
#"$&&54>
3+:+E
E+7+ 3
z4/=. P
36Xj4Bzx|
>.TsFZ
8lONo:QM
554&&#"
!5&&#!"
!54&#!"
'?EMWY[]}
' _ q y
!#!&!+!.!2!;!M!O!S!{!
"+"H"`"e#
&<&a&e&
 (@HPY[]_
/ p t z
!&!*!.!2!;!M!O!S!Z!|!
"+"H"`"d#
&<&a&e&
uni0041
uni00C4
uni00C3
uni00C0
uni00C1
uni00C2
uni00C5
uni01FA
uniEE02
uni0100
uni0102
uni0104
uni01CD
uni01DE
uni01E0
uni0200
uni0202
uni0226
uni1E00
uni1EA0
uni1EA2
uni1EA4
uni1EA6
uni1EA8
uni1EAA
uni1EAC
uni1EAE
uni1EB0
uni1EB2
uni1EB4
uni1EB6
uni0391
uni0386
uni1F08
uni1F09
uni1F0A
uni1F0B
uni1F0C
uni1F0D
uni1F0E
uni1F0F
uni1FB8
uni1FB9
uni1FBA
uni023A
uni1FBB
uni0410
uni04D0
uni04D2
uni1F88
uni1F89
uni1F8A
uni1F8B
uni1F8C
uni1F8D
uni1F8E
uni1F8F
uni1FBC
uni039B
uni00C6
uni01E2
uni01FC
uni04D4
uni0042
uni1E02
uni1E04
uni1E06
uni0243
uni0181
uni0412
uni0392
uni0043
uni0187
uni00C7
uni0106
uni0108
uni010A
uni010C
uni1E08
uni023B
uni0186
uni03F9
uni0044
uni018A
uni010E
uni1E0A
uni1E0C
uni1E0E
uni1E10
uni1E12
uni0189
uni01F2
uni01C5
uni0045
uni00C8
uni00C9
uni00CA
uni00CB
uni0112
uni0114
uni0116
uni0118
uni011A
uni0204
uni0206
uni0228
uni1E14
uni1E16
uni1E18
uni1E1A
uni1E1C
uni1EB8
uni1EBA
uni1EBC
uni1EBE
uni1EC0
uni1EC2
uni1EC4
uni1EC6
uni0246
uni018E
uni0395
uni0388
uni1F18
uni1F19
uni1F1A
uni1F1B
uni1F1C
uni1F1D
uni1FC8
uni1FC9
uni0415
uni0400
uni0401
uni04D6
uni0046
uni0191
uni1E1E
uni2132
uni0047
uni01E4
uni0193
uni011C
uni011E
uni0120
uni0122
uni01E6
uni01F4
uni1E20
uniE002
uniE003
uniE004
uniE005
uniE006
uniE007
uniE008
uniE009
uniE00A
uniE00B
uni0048
uni1E28
uni0124
uni021E
uni1E22
uni1E24
uni1E26
uni1E2A
uni0126
uni04C7
uni04A2
uni04C9
uni04A4
uni01F6
uni0397
uni0389
uni1F28
uni1F29
uni1F2A
uni1F2B
uni1F2C
uni1F2D
uni1F2E
uni1F2F
uni1FCA
uni1FCB
uni041D
uni1F98
uni1F99
uni1F9A
uni1F9B
uni1F9C
uni1F9D
uni1F9E
uni1F9F
uni1FCC
uni0049
uni00CF
uni1E2E
uni0197
uni1E2C
uni00CC
uni00CD
uni00CE
uni0128
uni012A
uni012C
uni012E
uni0130
uni01CF
uni0208
uni020A
uni1EC8
uni1ECA
uni0196
uni0399
uni038A
uni03AA
uni1F38
uni1F39
uni1F3A
uni1F3B
uni1F3C
uni1F3D
uni1F3E
uni1F3F
uni1FD8
uni1FD9
uni1FDA
uni1FDB
uni0406
uni0407
uniE00C
uniE00D
uniE00E
uniE00F
uniE010
uniE011
uniE012
uniE013
uniE014
uniE015
uniE016
uniE017
uniE018
uniE019
uniE01A
uniE01B
uniE01C
uniE01D
uniE01E
uniE01F
uniE020
uniE021
uniE022
uniE023
uniE024
uniE025
uniE026
uniE027
uniE028
uniE029
uniE02A
uniE02B
uni004A
uni0134
uni0248
uni037F
uni0408
uni004B
uni0136
uni01E8
uni1E30
uni1E32
uni1E34
uni04A0
uni049A
uni0198
uni039A
uni004C
uni0139
uni013B
uni013D
uni1E36
uni1E38
uni1E3A
uni1E3C
uni0141
uni023D
uni01C8
uni004D
uni1E3E
uni1E40
uni1E42
uni04CD
uni039C
uni03FA
uni041C
uni004E
uni00D1
uni0143
uni0145
uni0147
uni01F8
uni1E44
uni1E46
uni1E48
uni1E4A
uni019D
uni014A
uni0418
uni040D
uni0419
uni04E2
uni04E4
uni048A
uni0376
uni039D
uni01CB
uni004F
uni00D6
uni00D5
uni00D8
uni01A0
uni00D2
uni00D3
uni00D4
uni014C
uni014E
uni0150
uni01D1
uni01EA
uni01EC
uni020C
uni020E
uni022A
uni022C
uni022E
uni0230
uni1E4C
uni1E4E
uni1E50
uni1E52
uni1ECC
uni1ECE
uni1ED0
uni1ED2
uni1ED4
uni1ED6
uni1ED8
uni1EDA
uni1EDC
uni1EDE
uni1EE0
uni1EE2
uni01FE
uni039F
uni038C
uni1F48
uni1F49
uni1F4A
uni1F4B
uni1F4C
uni1F4D
uni1FF8
uni03F4
uni1FF9
uni041E
uni04E6
uni019F
uni04E8
uni04EA
uni0152
uni0050
uni1E54
uni1E56
uni048E
uni01A4
uni03A1
uni1FEC
uni0051
uni0052
uni0154
uni0156
uni0158
uni0210
uni0212
uni1E58
uni1E5A
uni1E5C
uni1E5E
uni211F
uni211E
uni024C
uni0053
uni015A
uni015C
uni015E
uni0160
uni0218
uni1E60
uni1E62
uni1E64
uni1E66
uni1E68
uni0405
uni01A7
uni1E9E
uni0054
uni0162
uni0164
uni021A
uni1E6A
uni1E6C
uni1E6E
uni1E70
uni01AC
uni01AE
uni023E
uni03A4
uni0055
uni01AF
uni00D9
uni00DA
uni00DB
uni00DC
uni0168
uni016A
uni016C
uni016E
uni0170
uni0172
uni01D3
uni01D5
uni01D7
uni01D9
uni01DB
uni0214
uni0216
uni1E72
uni1E74
uni1E76
uni1E78
uni1E7A
uni1EE4
uni1EE6
uni1EE8
uni1EEA
uni1EEC
uni1EEE
uni1EF0
uni0244
uni0056
uni1E7C
uni1E7E
uni0057
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.Generic.4!c
Elastic malicious (high confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win32.Generic.bc
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Msil.Agent.Vsjc
CrowdStrike win/malicious_confidence_90% (D)
Alibaba Clean
K7GW Clean
K7AntiVirus Clean
huorong Clean
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 Clean
APEX Malicious
Avast MalwareX-gen [Trj]
Cynet Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Trojan.GenericKD.74487891
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.74487891
Tencent Clean
Sophos Clean
F-Secure Clean
DrWeb Clean
VIPRE Gen:Heur.MSIL.Krypt.!cdmip!.2
TrendMicro Clean
McAfeeD ti!7B827FB44A58
Trapmine Clean
CTX exe.trojan.msil
Emsisoft Gen:Heur.MSIL.Krypt.!cdmip!.2 (B)
Ikarus Gen.MSIL.Krypt
FireEye Trojan.GenericKD.74487891
Jiangmin Clean
Varist W32/ABApplication.OBAS-8092
Avira Clean
Fortinet PossibleThreat
Antiy-AVL Trojan/Win32.Agent
Kingsoft Win32.Troj.Unknown.a
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.MSIL.Krypt.!cdmip!.2
SUPERAntiSpyware Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
Microsoft Program:Win32/Wacapew.C!ml
Google Detected
AhnLab-V3 Malware/Win.Generic.C5688173
Acronis Clean
McAfee Artemis!58D65F5FCA31
TACHYON Clean
VBA32 Clean
Malwarebytes Trojan.MalPack
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
GData Gen:Heur.MSIL.Krypt.!cdmip!.2
AVG MalwareX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan:MSIL/Krypt.!zhlYV7
No IRMA results available.