Static | ZeroBOX

PE Compile Time

1992-06-20 07:22:17

PE Imphash

9f4693fc0c511135129493f2161d1e86

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
CODE 0x00001000 0x0000722c 0x00007400 6.51167217489
DATA 0x00009000 0x00000218 0x00000400 3.15169834056
BSS 0x0000a000 0x0000a899 0x00000000 0.0
.idata 0x00015000 0x00000864 0x00000a00 4.17385976895
.tls 0x00016000 0x00000008 0x00000000 0.0
.rdata 0x00017000 0x00000018 0x00000200 0.206920017787
.reloc 0x00018000 0x000005cc 0x00000600 6.44309346589
.rsrc 0x00019000 0x00001400 0x00001400 5.48337050826

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00019150 0x000010a8 LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_RCDATA 0x0001a208 0x000000ac LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_RCDATA 0x0001a208 0x000000ac LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0001a2b4 0x00000014 LANG_RUSSIAN SUBLANG_RUSSIAN data

Imports

Library kernel32.dll:
0x4150ec VirtualFree
0x4150f0 VirtualAlloc
0x4150f4 LocalFree
0x4150f8 LocalAlloc
0x4150fc GetVersion
0x415100 GetCurrentThreadId
0x415104 GetThreadLocale
0x415108 GetStartupInfoA
0x41510c GetLocaleInfoA
0x415110 GetCommandLineA
0x415114 FreeLibrary
0x415118 ExitProcess
0x41511c WriteFile
0x415124 RtlUnwind
0x415128 RaiseException
0x41512c GetStdHandle
Library user32.dll:
0x415134 GetKeyboardType
0x415138 MessageBoxA
Library advapi32.dll:
0x415140 RegQueryValueExA
0x415144 RegOpenKeyExA
0x415148 RegCloseKey
Library oleaut32.dll:
0x415150 SysFreeString
0x415154 SysReAllocStringLen
Library kernel32.dll:
0x41515c TlsSetValue
0x415160 TlsGetValue
0x415164 LocalAlloc
0x415168 GetModuleHandleA
Library advapi32.dll:
0x415170 RegSetValueExA
0x415174 RegOpenKeyExA
0x415178 RegCloseKey
Library kernel32.dll:
0x415180 WriteFile
0x415184 WinExec
0x415188 SetFilePointer
0x41518c SetFileAttributesA
0x415190 SetEndOfFile
0x415198 ReleaseMutex
0x41519c ReadFile
0x4151a4 GetTempPathA
0x4151a8 GetShortPathNameA
0x4151ac GetModuleFileNameA
0x4151b4 GetLocalTime
0x4151b8 GetLastError
0x4151bc GetFileSize
0x4151c0 GetFileAttributesA
0x4151c4 GetDriveTypeA
0x4151c8 GetCommandLineA
0x4151cc FreeLibrary
0x4151d0 FindNextFileA
0x4151d4 FindFirstFileA
0x4151d8 FindClose
0x4151dc DeleteFileA
0x4151e0 CreateMutexA
0x4151e4 CreateFileA
0x4151e8 CreateDirectoryA
0x4151ec CloseHandle
Library gdi32.dll:
0x4151f4 StretchDIBits
0x4151f8 SetDIBits
0x4151fc SelectObject
0x415200 GetObjectA
0x415204 GetDIBits
0x415208 DeleteObject
0x41520c DeleteDC
0x415210 CreateSolidBrush
0x415214 CreateDIBSection
0x415218 CreateCompatibleDC
0x415220 BitBlt
Library user32.dll:
0x415228 ReleaseDC
0x41522c GetSysColor
0x415230 GetIconInfo
0x415234 GetDC
0x415238 FillRect
0x41523c DestroyIcon
0x415240 CopyImage
0x415244 CharLowerBuffA
Library shell32.dll:
0x41524c ShellExecuteA
0x415250 ExtractIconA

This program must be run under Win32
.idata
.rdata
P.reloc
P.rsrc
YZ]_^[
YZ]_^[
_^[YY]
YZ]_^[
~KxI[)
SOFTWARE\Borland\Delphi\RTL
FPUMaskValue
_^[YY]
HBITMAP
YXZQRPR
R;P P|
IVXLCDMT
_^[YY]
_^[YY]
XH;XH~
9PD}-RP
PH9PL~
KH+KLQ
;CHRQ~
RP;P ~
tSPRQj
_^[YY]
QQQQQS
\PROGRA~1\
QQQQQQSVW
_^[YY]
QQQQQQS3
QQQQQQ
QQQQQQSV
Runtime error at 00000000
0123456789ABCDEF
kernel32.dll
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
GetThreadLocale
GetStartupInfoA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
user32.dll
GetKeyboardType
MessageBoxA
advapi32.dll
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32.dll
SysFreeString
SysReAllocStringLen
kernel32.dll
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
advapi32.dll
RegSetValueExA
RegOpenKeyExA
RegCloseKey
kernel32.dll
WriteFile
WinExec
SetFilePointer
SetFileAttributesA
SetEndOfFile
SetCurrentDirectoryA
ReleaseMutex
ReadFile
GetWindowsDirectoryA
GetTempPathA
GetShortPathNameA
GetModuleFileNameA
GetLogicalDriveStringsA
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesA
GetDriveTypeA
GetCommandLineA
FreeLibrary
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateMutexA
CreateFileA
CreateDirectoryA
CloseHandle
gdi32.dll
StretchDIBits
SetDIBits
SelectObject
GetObjectA
GetDIBits
DeleteObject
DeleteDC
CreateSolidBrush
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
user32.dll
ReleaseDC
GetSysColor
GetIconInfo
FillRect
DestroyIcon
CopyImage
CharLowerBuffA
shell32.dll
ShellExecuteA
ExtractIconA
0"0*020:0B0J0R0Z0b0j0r0z0
4-595T5
8&8,848F8R8a8m8u8
9/9:9[9s9
<'<0<;<D<K<Z<a<
?2?\?e?u?}?
0(0@0L0T0k0z0
0,1P1n1~1
2$2u2|2
4#4+4O4o4
8A8Q8g8
9*929H9`9n9
9+:X:a:
< =T=\=g=
>N>R>X>\>a>h>n>v>
?%?/?7?=?K?f?{?
N0W0}0
466?6:7C7
<)<2<><E<
=/=;=B=L=V=m=~=
>/>@>J>R>Z>b>j>
?&?+?0?7?>?H?_?k?x?
0:0B0J0R0Z0b0j0r0z0
1"1*121:1B1J1R1Z1b1j1r1z1
2#202B2J2R2_2k2x2
3 323?3K3X3j3w3
4$4(4,484<4@4L4P4T4`4d4h4t4x4|4
9,;:;A;H;c;o;
:(;=;c;
=*=:=Z=
9_9d9w9
:.:E:c:z:
030F0X0\0`0d0h0l0p0t0x0|0
1%191M1a1
004080
1 1$1(1
$$$n)))
Delphi-the best. Fuck off all the rest. Neshta 1.0 Made in Belarus.
! Best regards 2 Tommy Salo. [Nov-2005] yours [Dziadulja Apanas]
%, O-M
%X %Z2G(
%` *i3P(
%h hN
%y {%\
%tQB(
%tQB(
%Z2G(
%& {Lc
X;R~(
4<Ka8x
eGha8&
h*Z >Do
_s+5Z
_Z {x8ea8r
FZd 56
bzgZa+
?Z {XzGa8
WqFW+
,3Za8J
#TZa8w
f1}%&8i
,B siX
f'oZ $:
xsqZ ^*[
BZ iuq
/6X Z
u i40qa%
R|Ga8X
NHZZa8U
7~OeZ
hh+-Z q
[5a8Z
4%Za8L
1i;a83
_,f 9'
Z 6nfya8
X;R~(
@-kPZ 2Z
Z ;aYKa8Z
X;R~(
Z M{<la8
wDz6Z
Z ;8wa8
<D'+(
NFcaZ
X;R~(
zZ q,F
2VD5
fiS)(
o'?a8g
<"Z {*
$|_W
n5Za8N
bZ hpM
\=ca8J
oz<Za+
,kZa8H
u\Z P
8O0Z w}
d)Z >i
zK?Za8
.Xd,Z
er2Z 5
(#dW%+
O:$F8
qZ \`I
= 06?@a%
7pZ bI
@+]4Z
Z L!>Oa8
xAeZa8
EZ A4{
1ZvZ B}
>Z }79
1Z {Mtja8?
?u;BZ
\GENZ
Z kInva8
~UZ x
f_fZ y
N\Z FB
G620Z rF
Z K)'la8
'[Z !$
@Z 'D#Va8
u^Z S
89Z L:
!>=DZ
y `a8$
p#SZ c
Z Lf6La8,
P)Za8H
8YOZ g9
D/Fa8F
Z cjuqa8
^";SZ
n} a8l
Z >0bCa8
xDj&Z P
j+Ba8m
UrZ C
2Z d}Z
_Z >ww
1:qE%&
,Q Vjv
dZa8"
Z 0cMDa8
J{vM%&8k
u"a8O
dI>a8t
_m%&8W
i3\(%&
u(Pq%&8k
Z pz9ja8
`%&8e
z7#ZZ
'^Z [i
FZ SyP
i"%&8l
NGL%&8G
Ap*6Za8
W*Z e"
^|8a8\
nN0%+
0fvbZa8
C5~%&8
bs;a8w
pL+K8(
W<KZa8
%$,a8I
38*F%+
fUQZa85
9ptLa%
;VjZa8_
0Z r<O+a8
SJL%&+
ht/%(
c<Z Jq
7+Za8E
+3Z K1_Ya8,
Z L&O-a8
k~Za8T
d^Ed
UTZ Q <
LA9C%&
;'Z .B
QLSZ *6
[`c\8
Ys%&8K
;%'a8j
Mz8{%&
m/Pa%
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^l
EEP"%\
ME>#T|=(?
OEJH/h
WIe~u^A
U~u)a6
fb(7uo
T5?ihz
M>U4L3
_}w]m=
~60x1sA^
+4~$d"
k{I{d|
/[47`jp
,OE#%C^e
;qEM`R
DZo*\,
yYsU #
8z9bHk
,7u6'h
=k`~/o
Mzf;~9|r
L?2s,b
Y*RJd)Pt
H_n/aL
n%Pa7Q
Y<pFq
,v%(jc
?*V=J;<
R@7ZU5
1}>Z3}
|9V;8%
+Vqhpm
mQp7X0
S"Y<9>;
_5-[#d9
hB72O*
H[d!WWQ
x{{p_|0
)#uYb-
6^ZJ)
{z2,nl
S#Z@;p
eO,`\T
M?i{<faz
nNZs+(
;/UPK,
?v{7 S
{ B?RB
0yHexh;
0`+;.E
U)t3C{
REbbXAU
rq-q'h
%F&B]JI
'5"}j{G
Ez<$&f
#N@1{d4!
6mRqg7
%}\Dk7
DFa6/t
*|mR^`
{+?okBd
p%8axv
Nw#[]+
Qz3O>&
&8$TNN
xg1o;U
s~=+x
\qE V<
~y~g_8
j]M_rl
O_OgpC
J#wskW
g|`RQ@
R\P(zp(+_
a%)q)@
;ke%df
F(fq>k
+v4w|>
\nM7<m
bt;w^F
XfUn%8_
H]rICo
\Y&[p<
p2*9z#
YzQ)9jW
t7*P[T
4Bs.<7
]5l=v
&"u:'~&8
M;i,?$b
.>(,;\d
B}tJ0U
mG:.m:
ilJhOi3
V@Z$JK
,6G=:m
W\xi@uG
g@]{^B
8`?VU$
3{s7\~k
ZQop.Y
tT`KEdA
/gwVw9
cp=p8'
YY)ny0
AC``fU
W/QdcS
O?vSUmx
*bxNhZe
fpi!x/XsX
fn,4wR
^L%|rI
ZxkpJt;
Xf^K\5
he0q@7
J4{K''
~>W1a
|%_`YU
^wRJl
5A_'\$
_0c/5|
?84Isx
|zP6\0
|1]v,E
@Yf_x
GE&_L^
zxEw!eq
mz1"k{
fVMbxN
Rgu6+(pz
Y6ji}4q
.>0~or vW
O:v$>S
hnA}X(
0OvE8/0W
<.^|@9X
_\~jFA1
mmf&9YZW
+1tccm{9
/(NbL?R
$8f$qhy6
]{UwGa
l%u{OB
oe"J@Q
h%:0
<LY,Ah
g6%/uC%
'P?I3T$
H"+<xt
w,Ws{
^&3P5C
>+\(9Q
,YM!)1
ckw.G?
c->`4/
(G+]H6
qZY&v1
>:U9kYk
ewHn\P
J5-9(q
]8?5&~
@h|E0"
S~Bp;2
cx!]X0
Z?RV@r:?
}4K,B:-KpJ
o=`}OJ
wKW6 [6
\!{}uM
=O\Z;FL
@a$4w~
5V\8W><
I*p 9"
. *SXyA
Z`,Ah$
^16ZFC>
9]qK=_}.m@j
B5+iH
:p:A\k
0~t6} t8=
sk^[MH
UC53Hc
z.a,~u
Wv2_&RY1
*L_2Bu
}a?DcQ
;G_qn_R
(K8&F~
BaWwV=
Uik~R%
>C APA
`QuQ7
!!/ZB?U
:D5Fd"
Gu6%y8
>yWbpD.
[QAo>_QL
(ndl 1
(%IFo_
.FX_m~
V_t2nQ}*C
3iKzeY
+>f(;]~
Y__0>4
.0h. 
=Q%!>/
|D09PO}
$87Q6T
fCuu b
gQ%O^,1
5(HQ3/
A7/i0Q{
'?GJ!jh
"0"||f
>"}^QH}
hDWTNJ>>
@!#PEM
I[|}fx
KUp;sS
G!BG_\
5;&YA4
l[[yr[
=c}+5f
j7;}+#T{
EXKE46
Cxd1R:
}ihn^P
wQN(sd
m%dY3-
/M2/O^
M|0xr
&1I`RF
/^P:qU
y)G<v!
t]{o!f
+$4/']:
I9K8PQ%
\E0A@9
qJNmv
uRoV@F
)#A%Xa
RJ!1p#
,(-h?l
)ynlP\
0E%vNX
fLuWf{o9
sY(1;u'
]:a}08
UEGnl'I
YCRt_|
n",Z62A
??/x&j
vVs|#:
4%xky
yo*p(D
Wl9=E!
w1ROI%m;
p0$8I=}
{"[r(r
~<wSwod
tst"#Rr
@[)!%:
_2.:W$
{[;ME^
0FR>?D6Fb1
o:J']\
2B)+Lr
dtV.LB
TvgqSb
6yt(GG
j]g/sQ
wudGB^
\EdP#G
bI/'56s
*9B(h*
Dk(51
FosD^_
7Swb?O8
hC%+@u
fbJGA_
L(ZSzvy
gaDj{,
LG1*^A
3Z'~T;Be
S;s9vW
^n!?l5q
e^GKk>O-
Nr0_nP
s.c'=gC;
vxXPpAFh8VO
Te'\xW
^.i0}|
.qVkk=
y!0Q<N
CrOLr29
di#RAV
ItZ3d"
mz<]Nw2#s
VX:M^Q:5
Eif@a5
CnAeJk}
b~D[*X
R5$S?uph
6`J@"-
av9e%Y
!!|WEH
uPXqzE
Ws //0si4
EU#-?s{
~qKFYm
:gYU.]
0FZzd;%
`i-mji
@&z{o]z
?6?SE/
U7R|W*r1
Z.nq~ut
=%!E?^
t|g b>s
<SQ'COv
OJGT]T
3k`m=&
;nwhI/
83?VL${Di
!r:4LQi
$i*o^W
b6]=0,
:PhP<wZ
+Ib~,?
A`ckSav,
BS'yf&
(sw},n
oI~~@ O
a#g134'
^Tf_2!
K/f7[`
jB:]S]z8
:w)w_W
7-uH5r
{V}=nX
qN"0<m
MoLq77l
GzL&ax
GT<8Wx
qweE)UI
:+p*jv
^'C^p\
Y>(?4yv
r\M8N=4c
?SkM+yM
'_ko~v&
u_a:An
6}QH+T
(c4e"<
ykd|IS
L._I7r
xD&pES
t@;$cx=i
?{g5]r
IXIL@&PF4
X(d{u"
35jegR
G]3$t
SmW"mOW
Z!pS=
8LU'u:beI,
q+sA;9
N^Nc)gy
q\-{+O
#d;qso
yFY38N
11$vEE
D+{__h
69(5vkZ
vD}`/a
rtf*=m
Se?_]*
WIKu!)
HOZIg/
FGL}a/
Ma;K%7
BS&82a4
,hA0@P
R0=2_!!
&1#WqW
3q"Zu<D
30>p_D9
WJ).OC
|`2TCN
Qd$B2Gc;
>VJRn<
\Ip`&o
7*%e<Us*
]=bu|!
riiX|=lwr
Sz5Wg0~
+jnHl>
+`_EjX
5Gcm)^}g
W9Q_(o0
id!:u%QL
c";cBoi
!Jn5H*2FEGhn
@JFmfs
pa.-=-&
Kt;sq~
Q<9"a\
/\(/D
<Q.8l
/BOaQ
~EF$GH
@#0Nij
~%IU.mR
Yc["2f
**6->R4z
7.6'GE
gq;wnW
;bJ}2a
0pC%-"
qr,3ELO
Q`p5@^y
<N8/:p
@am^XN
&i*!qR
k:%kEw
@8ApA`b
hm}~Tr+C
HZ=QBl
s)Y%qd$
bRz`.kX
JQI[\B$
-6VST=
>x|]@MZ
;!4 @1
Bj)%[K
@{r8chk`}
{zvuxq
qMfUQ`
,nOu/g-
8,t O#
\`CFJ
<P1B a
9wmDGwm
bO$fS^
Ke__pz
$EQ0EE
bdxH<q
JMqXdXN
ER_s E
zEU"3Z
|q/{3w
}RNpYP
*s0_t
@FP1wKH
'zRl0:h
=;FJx
qJ8f:e
Lyh"do
sQS'PiLU
Dunju&
,I~}yn
\A,?Nd
fZUE92F,\6
`+\lSV
B0Y&rs
5LQ_#T
{f7^U;
F(l@U
7\|yLr
x;vvSj
`990?9
GzX<S#}
hU!.U?
s S#}'=
eXu^z=a
V#oOe7?
'.9~_F
G%v&Fa6
v`{gf97
"3RggY
LQyw+}'
|T64&E}[
1bEy`Mn
eVC?rI
cCR^?%
W`{z2~
wXW[?',
ct.c?G
`B"?5'
*ByCBhG`
Z"C3.P
FK&2Rx
'+SvIZ
F1|<A)
vx}N$a_
N|Y^_e
]i^v<b
|fTo?C
vomlLwJ~%
/,c!db3w
;`nD:v
9[Tb4o
(R"Ee+
8!Dp3'
\?}!/.d
;:%?eB
P)/Wlt
{~bLG_
~juUJ_
~zl9Rq5
RGvpO.
j4o#-
PqAXB5H
d LW?h
bn]Qlx
g._~-2r
4(;Ivg
5I'_IU
}x!@L*~
N5N>wp
:I.n]p
MPKu]"
[~hp2[Oo
Z3y=sT
QChr>h
0hHa0m'
,B+>Ov
q2FZ\e
u6~x/P
~UaY2e
M5F3^.
L_7ta^
I}H8vW
3Y9/%SK
'feDa{
-S `aY
o*;F~z
F8>#}*`S
jHr>up
~0.+=#]
`t+TlP
rNu8e
%Z0I_k)
6Etk`'R*
B'|g.w
.fV--x
Be*Va/
`_s6n{
H[`!EX
uHTEh
V@+-0
.3)?2k
L,b,B
dxzqqS
%z^^lGdy
Oouu]A/
*/y&e;
9KC+~D
?:9ACs
(wt,9'
u;\HeX\
v:EOx
U;:%s4
IDATTuw
eGcfmH
L#MAez
w=.ncW
~GZ_~/wz/
iWXopCK*
|uNO5L
nF4{k+
wS4rb-
&%X$(:
1rad+P
^hs"B?
i.B]WH
Kcs|tO
Jyu?; [
,"t{&1a
2sw[@Nb
#q. zk
M_J`JAwp
~X_f7
Qf4-T~
}*l.5;
2WD._J
$"_ t\
@yIFt#
X`$//j
3Fs2Z&
A0.8Nx
~cxsRV
if57gx+
MAd/^e
%*>n@
:qU_Jrw
m>-IK4
{=Q3/l
oq4E h_
1E0i<TE
q8-]~k#r$V
d3qJ=4
t47/3(
OFKW[:
Zg?KVq
kEl3LXm
>eT)R{8
?>ew#|
:Q"j7C
6),Y!{
@soXgDQ
~Ti%Ty
sTie0.&(
_4W-4g
|-gpbz
j9<`O\
0<SVm<n
Y>p:*7
t(inGO
A~E{|a
A0Wd-w@
y&1U$g|
lHh{0U!
2gekk{-
).X{8<B
l}~s aNCD
$=pSN$
lb#{J{
Mc}_Tex
0$2c$
=^S|w
XO8BiK
nve*-)
p)XiAi
c]g0vv
E&oex6
aOkn%4
8+o@KZ
^T|6~:
:5y1h6
;ja6*g
~fxEd|(->%q
[<>0K(Bh
}Y'g`v
|qUNJ8-
Sv;ot.
]{`}HE
`&j8_p
Tl[8fz
@:"2AvP]}
T~0|l%
U0_exV
wV|u{*sg
*QC Z>
Xax.4gB
CEv T?
}O#wHs
S!UWz%
>(&]rD
aR93(rn
s"_#Z.z`
*i%8&l
&D.a4m
GU}vG8
m_/afV
VQIT|v
IkGzmfL
DN\;n7
R~##%;Ww
VR*\q?
6N_S8>
7<)}BGM|
EJ]q{M
vK[><XgyUK?
zCF.5cx
"6mD>,
oxMK7.
d@QW9z
>Ho!&i?
1O/p<
.7u^",|
.l\W'`2g
c.{5dg
YZPmL4
`a-Ugy
CyH3>%_b
*Fa-'}|+
o3o@Z`
*v+qH
h+xtLR
//._u>B4#
!gNY)B^
JW@P%"V
/Ia\5ih
fOYU-G
y& mH>P
AUJ'fx49Aw
`3ix9L
ppg'3c
3}F+{eBC
@h!@YW
~sijkQ"G
3 Hk^r
bv"~y
9F!4!`1
lK/x (
E]8Cww
K8u]@
hh#580?
#?d"|p
"q&^#>aO
C)+-%a
|_rn8jQ
uKTh!Z
o{omfXtusj
>x7Fj8
G"k?u*
bbACrI
f)t6L
<}Hzs:/
1U%t|a
}rb"SW
uvE5Ba
y^|$iXh
azhn:T
>LvlK6
w?rF4l
Th45z
_{HE:|
m)P~G%
,Xs`AN
k]wdNgzN
padpCv
hA*PwZ
Bm*">AP
Vvl-$,
l.' k!
{q_%<trK
$eVcWi
ZfQ9}?
!af^ya
]r[>N+7
OR?N-J~
"OW0Evg
kjnuzT
Q'igR9R
tofZ;
Rp-X&p
u,3c/4D
B3/Tu6
W?eU!PW
Tbv*5T
k,=([v
|v8Gmv
=BO6q.
mjt{#<
?'zHw)B7
3O7 *!
zh55t
TRC; @
5c4rb}
kd>a;5
|nZyW
B{\1TF
Rr4B=WP
Kz$< (
RsL)N'
b|F1S{
}bWs/D
BYLABX
omJQ]jVa
>Sj{~>
4JdRv\
IDAT}5
N%dCS/
l)_whG
prV92=
ULm[O
{d__wG"
lk<raB
6'^:Vm`x
wn=}u#
?\,xIV
9axt8m
e0s0ls
HOwQtcB@l
<G`?!p@
QT/Jp
!@iB_b
Mp!]a`
A:8`[7
<ui|.)
'.<?#g(>
n;ls?4
c+'_8b8
z %Bi`
.|*L)H
a0JWq,M9N
?hZTQs
V;psp9
qAWKQg
D5%*GR"K
a4/g}D)
>9c?s~
|7rMv=D
^,6}HDox
=6G/~>@
S>DAX2
@8oay8}
J}%AC9
pvvCt{
:+w;Wm
:6[}rg
dm"t\H
(Kfa]QA
(}Jy`3J
l1v.1{
Z/u%v^#
mNO7f|]
lyV&YQHF
c*`qnh
"O4P9J
`}`Csv
]ns{7O
"K,s}*O
qD&Pwp
9-1;01x8
1B-/4a8u;.
s<GqG,
@*p(i1q5<
S"* @S
s*pWcG
DsuJ
jjz_Gx;
{1NxaZVj^
(;TOLRSp
$t=;p}<
=GYRgxu
lYR^6N
x0iIh]Z
CqB2Z.
g_Sop
8\oWXo
POv}*1
I9"Tja
bVhCl
P~}2p;
45#5=J
Ol)nB(7
JekC~y
@ , P!`
bkkBaR~
6NN<v
EYp1q2|
H{|qbCM
73/3O.
.'hUlE%
7rcL\
fRwKzg
pp"A
[3^~;<@
\PEz|"
l_zc5f
x/4I^k
xOCe*E&
Xa5!F4/
ba$o#y
#QoJVn
WS$>?Q
[Iw_@$qE
U.4ACe
i|~q,q
:?"{Ra
xlId-.ZbG@S
P2a>P8)
xBS2S&$D
L@J`40
#?zyS!
-.s|lk
<W.Wl?<q
GvmAq0m
&_bgP0
N2>]~}=
2A8aAF
B&P*eotB
.Rc'j#
v!KiC4=
B#4W2
h)gZT%K
<ThA`;
?"/4G7
Z%R!<q
|#>*S
N>:%3\tPL
!0!x ,
<h\Si%
k[9v`
=Ma4=!m)
n9HoPq
y'jP|u>
Uc`[pr
+Va1@i:Uk
Y]Ny6]C1
}!.d|X/
E+R<by
V"O7K+
N|$651
(S<2d|
7iQul}
wG~>x|
"olf^=q?"|
o3%/3J
e]yc)+
-l8Ub+
nz0k[E
c}cZ}J
2."*23
QXq{Ov
4n_!2o
bg=HF@]
vpmJg
\bCZwe
AA-8%K
>]uv ok
LnUVj<~zo
$XdaE4@
Sj3)c?
'|B{O%)
*E\iLe:T
=|Kgv
3o~__rP
E(uk/B
</*8`Ok5Ugpl5
8!Jd<^
=G!\`A{
Ptp44'M}t7_
X^qnxz
=>:!=2(y
q|^kcY
g6v$6q
\`|kMbb
'+i4X;
3}@!,C
X*&6q
tf,]j&n
c{2 [#
5o_b`m
*y}V6H
5d 908
P%2UlK
+8;hK
/c7h*4
R&s-^wr
?1v4scAc
M[1}65
69UCR'
5w1s-<
;)f[p&
rx{IS3_
kQ^v1s
$=r"OJ
'f#,3H
{!Qg|G
fR)x`=
cIbQ~6B
b!|(sQ
&r-<iw
Z+g11%#
{0pB(B
&gp?Xq
ajL.X$5
6J_~6
IXogmJ
w r;>m
*OxOx/x
`{r$W)
WiO.nR
IB(~Iq
/|Gk&hP
I{dvS(G
b:|j<v
^Rw2uFON
wY9=9O
yEn[wq
:w<4.l
.mR\n"d
H,z>'\?:
)J/RBIBW
smuRo\
lfxHeP
E6Z1*g
M_nxo
DP*\?+\
v5l:b9h
@RRF!}
~'ew7a
J&WkW|`/N|N
LKP%'2
-9$509@
qL\qR(
<*x?Xx
2-nB-~
p5Gh'K|
=<9`bz
,ilc/
To_#j;'
3=E!0@
9aXfaB
39`B3K
+[wBz)
%,u T
Q%(I<}
e?.JVA8k
Z_2KZO
:&)DA2-
@*G!"3
k>W2W#
Z[B}EVW
nTfpgxm
8VNO04myB}
{3{t7\
I_m'P<
uBOSwb
C)WrI~
nBHGGy
3:T{0C!
VPS8PxW
?p|Ca#
j#v9t#I
3:u]VN
ea'4!C
&xDaF
_DoV}z|
BS*N,E
u vzWLQ
*TLQB
8=9/)V
q(i^t*
FK/t>)
}=u_n.i
7Ql/R&
9Ty4{x
YR7%<4
%[84nf
!)mO>.
BQ,"tF\
~Wj|2dsm
T+8w8
#a(Hr|3&
Q} ouN
a\6Js}
sApnR$
IC6nD%
GCcg$}
}*sfRPnn
VlJ:PP.
`_6T
5;D6Y"_S
Lm=0+X`h
U5^yUkt
{7<M_g
=B\0M&
iT)B318
krqz6|?
*aa\[
qo?|Mf
[~m,I9
jrQ~Ru
7rjKdji_0M{
W\%5B'
-=Hqmv
4XTd#TF
8T>8:0
*&902&
BrkGo8
{7c2 D
$n&6*i
"!%y7%
ivZcZQN
96#IWp
?|Ouww
S%uH_7
R xrCw
WTXy|=
r\5)~5xT_
C18A1N
~&b RKx
!=Mu`N|-~z
zR,XCY
Du,a{"
^NbwP0
>9r1Mo
0UK M)|
(HrTB
;#o"{i
]Uh4o,
+1wlv
AU14O_
7,I[%W
RgT(+V
Ls@|~Y1
,U&ubQ
cx$7(A
K0LysJ
Y4NpcP
~Dxabz
)e>8`e
fa*lp>
2\o&/]t
94kc e
n_|Irm
uHO|g\
oJH[~)x
(o'3R8
B a@5f
:G9rZc
r~sG/N
t~_L>s
ogT\bG
}~HAtnp
/[0~crS
,%*"WyM
I>s?P7
,Xi9&(Y
psK75^
<13/Psc
?JP8X~WD
Q^'cQJ
|Pa}<'O
Fs4=*[
1|S'~'J
b0^&\%
jp`5[!
2%4!(=
4YW%^q
}nEc]<
>V/C_1
{ukdeS
-@:+Jd?
-|0`> p
[Gxn~k
S7201L?G
fM9LAB(
NfKI_4,
-},qY@J
S]^@J^
s@^7:[
w[,.Wu{
+_A&-k
WSu*R:
w2V;`-
[{n[<0-
jo)US]O
iah.'
J:pNX
5Cc#Ce#
YUc^
Lb>S<z
oaz`l)g
?9WY<.
%|Q^]$a
1t[cha\GL>4
iu[o($i
l<V9~JH
U%;a$a
_=S^Jm
A#w!d``
TU#YX~e"
"1zOR!h
<B #&@
Mh~y'bo
i5imJV
7{'*%y
^ @h?
Hplj5P
Y0m(-
:n~&+55
r~">71
;kE-m1
fLjTR
l76^?|
/6?}mu9
O~*w\.e
Nm%#E>
<%G602
?g(Nf0
WOEoc+
$OJhz3
~5_Y2Lxj
Jeqx{T
hZ)(os
~nni>=({
x#c-;Y
UF~R85
)G8t~`
Kx[Nk!
~+;/\|
"Dy2BH
/,:x.h
>$;ie[
/x MX4
fAS-Fr
1Kkg}U
r%HC9&
u`,2X6
}(5G#/
>P_rKB
-lOENhSI
u=`y_]/6
bv\Pks
Q$+d:*Q
Tv2X!{
M7{zZT
<e_]"D
]Sm-TR
a$soz5
i(1`2{f
T,x,L[6
W{G\Ho
:b/{Uq
a^r@w5'Y
)>*1}?
M%_VLf
1U^AN/
?suW9#
M|Z%KV
m;N97o
zQDoEV
3uFgiF
/0nlOS
3u8^0&AL
p|1CYF
6!];aq
z!iER
7R(cf<
{Ey_q^mK
5?M$7
V)x)K
&D%0_)
}'+bO|
cV@BP.
iz":2%
pNp<P52#z
O(F|:-
Sq58^z
'ig/t
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
AV{,eR
5vj[E
5rv]E
5rvQE
5vgAE
5t1SE
?z!gE
#t1}E
~}}5vi
5p9CE
5vIGS?
7^PIE&
5pvqE
?^RIE&
5t9iF
?^[IE*
3^\IE*
5vi&z
IEh\dV
5tvpE
5tvrE
E^&IE*
5|9GE
5vW[S
I}C]dV
5tvrE
5vP6j
5|1E
#tbFE
"^QIE&
5v9HE
4^GIE&
?|9OE
5NnIE
5rg[E
7v1sE
5^~IE*
#v1 E
3N/IE
5P9IE
<gXM(
5v!8E
:v13E
'w12E
5p9LE
5|1sE
5va7
5v9JE
1v11E
5tb^E
|'g5vIo
5|9NE
1t9KM
7`dPE
*Uj5E
5pk:D
5|9YE
*cj5E
.^#IE*
5pk>D
5|9BE
.^#IE*
#i:VN?
&z9NE
*G1sE
?i::9
.i`t5v
.^#IE*
,i3Vo?
IE ,`V9
IE (fV9
5v1sE
.i'j5vIm
5^#IE*
*Uj5E
~'c5v:
#^fIE&
5NKIE
?VIE
5p9IE0
?tbSE
5|dQE
5|9LE
5r!cE
5p#tE
5r!cE
5N'IE
5r!cE
5NzIE
5|dTE
5p SE
5P9KE
5v\OE
5N3IE
5v1sE
t'O5v:
.i`w5v
3v!IE
5NQIE
,^~IE&
5NcIE
5v! E
IEE\dV
*[1sE
j'S5v:
)i)Vu?
L'S5v:
4vikE
I}b\dV
5NQIE
5p# E
5P9JE
5|9LE
~',5vs
i',5vs
IE cdV9
5v!BE
3qYCE
5NrIE
9teoE
IE 2dV9sa
5v?iG
.i`t5v
5v!:F
?l1.E
.i`w5v
}S4vikE
IE 3`V9
7v1sE
5N?IE
5v?i@
5P9ME
5tb`E
5N:IE
5v0IE cdV9
5v IE
1t1ID
1t1ID
5N=IE
5NLIE
5v!mE
5v9JE
5v_m'
3t1OD
5N!IE
5v\@E
4vIT$
!^#IE*
,i7Vk?
3NJIE
4vIE
5P9LE
5N.IE
5N9IE
1|9LE
5p E
5tbxE
4vIo
*D1sE
#t1jD
3O(IE
$r1#E
5|1nD
4vI`7
5|9@E
-^~IE&
5NIIE
4va{!
5v?iA
"^'HE&
5` RE
5v\OE
3^$HE&
5NVIE
4vq}
7z!gE
=q1ME
5N1IE
&r9LE
@|O\dV
5tb~E
5v*IE
5vOIE
5^'HE&
4vZB1
?v<^ml
5w<_CO
5p ;E
5v9ME
5v!IG
3tbpE
1^yHE&
7^gIE*
4vIAOX
?r1*D
't13E
't12E
?^EHE&
3svMD
5|vOD
IEH\dV
IEe\dV
5v\AE
4vIG7
5p#;G
'r1GD
5v!+D
,^~IE&
7i%Vy?
2i4Vh?
5|vXD
5v9KE
5|9ME
7v1sE
:w13E
4^cIE*u
4^cIE*u
<:w12E
4va>!
4vqk
'w12E
4^bIE*u
4^cIE*
4^bIE*u
4^cIE*
4^bIE*u
3^eHE&
5NoIE
4viG
-^MIE*
*^1sE
5v12D
a-x'e4vB7[
*D1sE
7^;HE*
;^>HE*
"i1Vm?
I}S^dV
2t1`D
t'i4vAe
2t1`D
t'i4vAe
&^cIE*
&^gIE*
.i't4vI`7
*b1sE
~'u4vqo
IE DeV9
5v!BE
v'r4v[M
=^bIE*
=^fIE*
'~1lD
'~1lD
'~1}D
{'n4vZK2
0^?HE*
$s1oD
7v1sE
7v1 E
5P9JE
5N[IE
5N+IE
5tbrE
~'J4vp
3}9ME
5|![G
3OvHE
&s9@E
7v1sE
t?_E"/
5vjWE
5S1hE
$rvkE
5^2IE*
5v1SE
5t1bE
t?_E"/
5tbeE
%v)IC
3vhI!
v}IC ^
?v|K+"
2uI`#
#vmN['
*~}IW
QvI0*
|PKC B
{}IW
}f}IC
'v0ZB#
'v#_B#
3vySu
3v.R!
5vPIB
=v?IE!
5v}JE
LueJ
Pv+In!
3n@Ir
lv.ID
=vAjE
=vymE
TuNJT
vmdE
#v%fE
Fp*I=q
wvI!E
su&Xc(
~vU E
3~Q[V
hvy<E
m~cg5v
lv.I+
d~gl5v
6v_Jz1
s~'i5v
=vAw6
3~/_E#!
=vIq7,
=vAT9
3n@Ir 9
4v<LE
7v<LE
7v<LE
0v<LE
4v<LE
7v<LE
4v<LE
4v<LE
7vtXE
4v<LE
4v<LE
4v<LE
4v<LE
7v<LE
4v<LE
3v<LE
7v<LE
4v<LE
4v<LE
6vgXE
<v@IV
lvGI$
lv.II
)v@Ir
u2HQ j
uxHq)$
lv.I$!
Lt@Ir "
v.Er j
uNQj+B
lr@Ir
4v7Iv
}pIF*d
}zHN*>
Wt{HE ,
5v)J<"
4v1IJ
4v%I\
5v$PE
5vI@
5Xz=*R
5$l'1I
Gw.Ea
PvX:6E
L7m=7I
G~!1a
Q7m=7I
Yz(1I
5;p*7O
Y4x:,C
cj<$L
X'yxEJ
Aw.6
Xv\.EC
Z4v1Ei
\vs0Eu
P>x'!L
57z=,V
P?w:1A
A2x=$
Gw.Ek
A x%0E
L%|;3I
j x%0E
TvK,6O
GvJ06T
57j: M
|5v'1A
PvJ<6P
Bw.EG
50k&(a
^v]&&K
j%p3
fc,ES
^5v%*R
Qw.ES
5%p3 f
A)X%,G
Y~'(E
X%p3
C$HI=r
C$*I0r
Ev[01E
ZvW,=T
Qv^,1t
55q(7
FvH%Ea
[z&!E
ea,)
A3o,+T
G1k(!I
5$|*1A
Rv_ )L
GvP'1E
SvZ&+V
XvZ%*S
[;v<6E
j;v<6E
E)\15L
ww-,N
A)J$*O
F3JI2e
P3a*-A
5&v +T
R'l()I
AvM,=T
[vj*p
VvM,=T
P5v%*R
A)_&7E
54v;!E
5&o+ER
5.\{Ej
YvS?$
A3w<(E
X3o,+T
j2x:-s
B0v*0S
XXZ&)L
`v];$W
Pvx?6
Vvnx3
rvJxr
Q?w- X
5?t("E
j0v'1f
5#(>Eq
58(zEb
5.(1EA
5?(Eo
5#X?EX
P7m=7I
Antivirus Signature
Bkav W32.NeshtaB.PE
Elastic malicious (high confidence)
MicroWorld-eScan Win32.Neshta.A
FireEye Generic.mg.0941a59548b4f950
CAT-QuickHeal W32.Neshta.C8
ALYac Win32.Neshta.A
Cylance Unsafe
Zillya Clean
K7AntiVirus Virus ( 00556e571 )
BitDefender Win32.Neshta.A
K7GW Virus ( 00556e571 )
Cybereason malicious.548b4f
BitDefenderTheta AI:FileInfector.D5C3B0640E
Cyren W32/Neshta.OBIX-2981
Symantec W32.Neshuta
ESET-NOD32 Win32/Neshta.A
APEX Malicious
Paloalto Clean
ClamAV Win.Trojan.Neshuta-1
Kaspersky Virus.Win32.Neshta.a
Alibaba Clean
NANO-Antivirus Trojan.Win32.Winlock.fmobyw
ViRobot Win32.Neshta.Gen.A
Tencent Virus.Win32.Neshta.a
Ad-Aware Win32.Neshta.A
Sophos ML/PE-A + W32/Neshta-D
Comodo Win32.Neshta.A@3ypg
F-Secure Clean
DrWeb Win32.HLLP.Neshta
VIPRE Virus.Win32.Neshta.a (v)
TrendMicro PE_NESHTA.A
McAfee-GW-Edition BehavesLike.Win32.HLLP.tc
CMC Clean
Emsisoft Win32.Neshta.A (B)
SentinelOne Static AI - Malicious PE
GData Win32.Virus.Neshta.D
Jiangmin Virus.Neshta.a
MaxSecure Clean
Avira W32/Neshta.A
MAX malware (ai score=83)
Antiy-AVL Trojan/Generic.ASVirus.20D
Kingsoft Clean
Gridinsoft Virus.Neshta.A.sd!yf
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Virus:Win32/Neshta.A
Cynet Malicious (score: 100)
AhnLab-V3 Win32/Neshta
Acronis suspicious
McAfee W32/HLLP.41472.e
TACHYON Virus/W32.Neshta
VBA32 Virus.Win32.Neshta.a
Malwarebytes Neshta.Virus.FileInfector.DDS
Panda W32/Neshta.A
Zoner Virus.Win32.19514
TrendMicro-HouseCall PE_NESHTA.A
Rising Win32.Neshta.a (CLASSIC)
Yandex Trojan.GenAsa!Mo0tdcmmg3o
Ikarus Virus.Win32.Neshta
eGambit Unsafe.AI_Score_100%
Fortinet W32/Generic.AC.171!tr
Webroot Clean
AVG Win32:Apanas [Trj]
Avast Win32:Apanas [Trj]
CrowdStrike win/malicious_confidence_100% (D)
Qihoo-360 Virus.Win32.Neshta.B
No IRMA results available.