Static | ZeroBOX

PE Compile Time

1992-06-20 07:22:17

PE Imphash

9f4693fc0c511135129493f2161d1e86

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
CODE 0x00001000 0x0000722c 0x00007400 6.51167217489
DATA 0x00009000 0x00000218 0x00000400 3.15169834056
BSS 0x0000a000 0x0000a899 0x00000000 0.0
.idata 0x00015000 0x00000864 0x00000a00 4.17385976895
.tls 0x00016000 0x00000008 0x00000000 0.0
.rdata 0x00017000 0x00000018 0x00000200 0.206920017787
.reloc 0x00018000 0x000005cc 0x00000600 6.44309346589
.rsrc 0x00019000 0x00001400 0x00001400 4.26247501636

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00019150 0x000010a8 LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_RCDATA 0x0001a208 0x000000ac LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_RCDATA 0x0001a208 0x000000ac LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0001a2b4 0x00000014 LANG_RUSSIAN SUBLANG_RUSSIAN data

Imports

Library kernel32.dll:
0x4150ec VirtualFree
0x4150f0 VirtualAlloc
0x4150f4 LocalFree
0x4150f8 LocalAlloc
0x4150fc GetVersion
0x415100 GetCurrentThreadId
0x415104 GetThreadLocale
0x415108 GetStartupInfoA
0x41510c GetLocaleInfoA
0x415110 GetCommandLineA
0x415114 FreeLibrary
0x415118 ExitProcess
0x41511c WriteFile
0x415124 RtlUnwind
0x415128 RaiseException
0x41512c GetStdHandle
Library user32.dll:
0x415134 GetKeyboardType
0x415138 MessageBoxA
Library advapi32.dll:
0x415140 RegQueryValueExA
0x415144 RegOpenKeyExA
0x415148 RegCloseKey
Library oleaut32.dll:
0x415150 SysFreeString
0x415154 SysReAllocStringLen
Library kernel32.dll:
0x41515c TlsSetValue
0x415160 TlsGetValue
0x415164 LocalAlloc
0x415168 GetModuleHandleA
Library advapi32.dll:
0x415170 RegSetValueExA
0x415174 RegOpenKeyExA
0x415178 RegCloseKey
Library kernel32.dll:
0x415180 WriteFile
0x415184 WinExec
0x415188 SetFilePointer
0x41518c SetFileAttributesA
0x415190 SetEndOfFile
0x415198 ReleaseMutex
0x41519c ReadFile
0x4151a4 GetTempPathA
0x4151a8 GetShortPathNameA
0x4151ac GetModuleFileNameA
0x4151b4 GetLocalTime
0x4151b8 GetLastError
0x4151bc GetFileSize
0x4151c0 GetFileAttributesA
0x4151c4 GetDriveTypeA
0x4151c8 GetCommandLineA
0x4151cc FreeLibrary
0x4151d0 FindNextFileA
0x4151d4 FindFirstFileA
0x4151d8 FindClose
0x4151dc DeleteFileA
0x4151e0 CreateMutexA
0x4151e4 CreateFileA
0x4151e8 CreateDirectoryA
0x4151ec CloseHandle
Library gdi32.dll:
0x4151f4 StretchDIBits
0x4151f8 SetDIBits
0x4151fc SelectObject
0x415200 GetObjectA
0x415204 GetDIBits
0x415208 DeleteObject
0x41520c DeleteDC
0x415210 CreateSolidBrush
0x415214 CreateDIBSection
0x415218 CreateCompatibleDC
0x415220 BitBlt
Library user32.dll:
0x415228 ReleaseDC
0x41522c GetSysColor
0x415230 GetIconInfo
0x415234 GetDC
0x415238 FillRect
0x41523c DestroyIcon
0x415240 CopyImage
0x415244 CharLowerBuffA
Library shell32.dll:
0x41524c ShellExecuteA
0x415250 ExtractIconA

This program must be run under Win32
.idata
.rdata
P.reloc
P.rsrc
YZ]_^[
YZ]_^[
_^[YY]
YZ]_^[
~KxI[)
SOFTWARE\Borland\Delphi\RTL
FPUMaskValue
_^[YY]
HBITMAP
YXZQRPR
R;P P|
IVXLCDMT
_^[YY]
_^[YY]
XH;XH~
9PD}-RP
PH9PL~
KH+KLQ
;CHRQ~
RP;P ~
tSPRQj
_^[YY]
QQQQQS
\PROGRA~1\
QQQQQQSVW
_^[YY]
QQQQQQS3
QQQQQQ
QQQQQQSV
Runtime error at 00000000
0123456789ABCDEF
kernel32.dll
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
GetThreadLocale
GetStartupInfoA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
user32.dll
GetKeyboardType
MessageBoxA
advapi32.dll
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32.dll
SysFreeString
SysReAllocStringLen
kernel32.dll
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
advapi32.dll
RegSetValueExA
RegOpenKeyExA
RegCloseKey
kernel32.dll
WriteFile
WinExec
SetFilePointer
SetFileAttributesA
SetEndOfFile
SetCurrentDirectoryA
ReleaseMutex
ReadFile
GetWindowsDirectoryA
GetTempPathA
GetShortPathNameA
GetModuleFileNameA
GetLogicalDriveStringsA
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesA
GetDriveTypeA
GetCommandLineA
FreeLibrary
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateMutexA
CreateFileA
CreateDirectoryA
CloseHandle
gdi32.dll
StretchDIBits
SetDIBits
SelectObject
GetObjectA
GetDIBits
DeleteObject
DeleteDC
CreateSolidBrush
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
user32.dll
ReleaseDC
GetSysColor
GetIconInfo
FillRect
DestroyIcon
CopyImage
CharLowerBuffA
shell32.dll
ShellExecuteA
ExtractIconA
0"0*020:0B0J0R0Z0b0j0r0z0
4-595T5
8&8,848F8R8a8m8u8
9/9:9[9s9
<'<0<;<D<K<Z<a<
?2?\?e?u?}?
0(0@0L0T0k0z0
0,1P1n1~1
2$2u2|2
4#4+4O4o4
8A8Q8g8
9*929H9`9n9
9+:X:a:
< =T=\=g=
>N>R>X>\>a>h>n>v>
?%?/?7?=?K?f?{?
N0W0}0
466?6:7C7
<)<2<><E<
=/=;=B=L=V=m=~=
>/>@>J>R>Z>b>j>
?&?+?0?7?>?H?_?k?x?
0:0B0J0R0Z0b0j0r0z0
1"1*121:1B1J1R1Z1b1j1r1z1
2#202B2J2R2_2k2x2
3 323?3K3X3j3w3
4$4(4,484<4@4L4P4T4`4d4h4t4x4|4
9,;:;A;H;c;o;
:(;=;c;
=*=:=Z=
9_9d9w9
:.:E:c:z:
030F0X0\0`0d0h0l0p0t0x0|0
1%191M1a1
004080
1 1$1(1
Delphi-the best. Fuck off all the rest. Neshta 1.0 Made in Belarus.
! Best regards 2 Tommy Salo. [Nov-2005] yours [Dziadulja Apanas]
uj*Xf;
<j*Xf;
Tt)jhZf;
JjlZf;
V.jx_f;
~ +~4+
F.jgYf;
PRRRRR
uSSSSj
f9:t!V
QQSVj8j@
M,j"^QRRRRR
Vj0XPW
r!SSPVQ
dr#SSjdVQ
M$j"^QRRRRR
PPPPPPPP
PPPPPVW
PP9E u!PPSVP
^PQQQQQ
E ^PQQQQ
CY<u
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
Unknown exception
bad exception
CorExitProcess
(null)
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
AreFileApisANSI
LCMapStringEx
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
[aOni*{
~ $s%r
@b;zO]
v2!L.2
1#QNAN
1#SNAN
?5Wg4p
%S#[k=
"B <1=
_hypot
_nextafter
bad allocation
bad array new length
SetDefaultDllDirectories
Gact2.0Omaha
TEST_mi_exe_stub.pdb
.text$di
.text$mn
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCL
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$r
.rdata$sxdata
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.rsrc$01
.rsrc$02
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
OutputDebugStringW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
ReadFile
CreateFileW
CloseHandle
WriteConsoleW
DecodePointer
KERNEL32.dll
PathQuoteSpacesW
PathCanonicalizeW
PathAppendW
SHLWAPI.dll
CreateDirectoryW
SizeofResource
RemoveDirectoryW
GetEnvironmentVariableW
GetTempPathW
FormatMessageW
GetFileAttributesExW
LockResource
DeleteFileW
FindResourceExW
LoadResource
FindResourceW
HeapDestroy
LocalFree
VerSetConditionMask
CopyFileW
VerifyVersionInfoW
GetTempFileNameW
lstrcmpiW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
VirtualQuery
SetFilePointer
WaitForSingleObject
CreateProcessW
GetExitCodeProcess
CoUninitialize
CoInitializeEx
ole32.dll
SHGetFolderPathW
SHELL32.dll
CharLowerBuffW
MessageBoxW
USER32.dll
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_exception@std@@
.?AVexception@std@@
.?AVbad_alloc@std@@
.?AVtype_info@@
.?AVbad_array_new_length@std@@
~K@S<@,0t
N7&@Cn
Q7]mb=p
gKOjIO{
d:7Ms5
I=<) %
38"2(
>dZ|~+
*Eh(Ei
ms>C&\
"SwiV(
%2YC;G
pIK_.T
RzLtT@P
7{L_~{
7a&+ fW
UvTZRvvu
=q{+1H8 AZ
F|=i:P
C(c>F-
_%3fffS
n4<O1&
uziRvTG
.WL<N>
JbqR|2
te}MGX
-qcy{>
yCnVI]
t,xJnS^
cLzuM<D7
X'$#gg
JYT5E@
3e0u#"
2oBAnGQ
Opr2y3ok
W ZL/G>
Z=[(S-v^
cJE+IM
oc8kTs
}(MR%I
]'$ >]
PQuHs%
[~i&*>
gOw\cVw
OMfa1)
g%k}^4
P9@$Gd
;o4Yy:<
v!Tw/47
fL%s_
UIX68w
kL{u=3
G6}0vg
B jSD_0Q+
XGgvm.R"
F`gp8p
8$/4tUY
*a*hCO
T/'3//
;K{KiP
(g32x9
#Q8OYmq
'53Vq"
Cr*_x\
gaCpl8
#,g`d'y
h`W$pn#
gb:>265T
3[zJRiG4
i|#*WQ
uUpMi
JGibo[B[
KB>jxD
'K?Xsw
i+{(D
Vhw/J[q
pX_Vfh/
z~Hyfy
%]wBh`
Ed</1N:sT
:#p-3|
`6RR/}
VZ~)Gt
o8 Evy7g
9+*.q?
7V@C%5
+S(-rJ,
prcdn,I
_P4@WM
}nH6.'
%kA/K& :
c"MNH3Xf
CrudUg
I,P[;j
&eeE8=
[)VMQ*i
[o~Kta
L'E{2~
JIo?4k
=|)D[-)
8c@2\[
7}x<MN
tx^B=V
6]<7W$
9B>7kvE~
XEe:a$\N
]9q{IHkY
9)%c=y
EmAP>Q]
p?uOzo#
m>RV)j
"9zONp
:VJT[qlxk
t<Ev^2G
I$<^WN
9\I04U
MOm8l
t]0z0f
?_ef$
o9!}g"
ZoDJ w,K
#ObJ~*,:
w?X=iR
#vuIRH
`j@X<'
wH-4W]
H#6Zhr
AKN(:`{
*uXf!_
#o:;*T!
(b_:#Ox
r@qh|]}XS
*`JE*x
MKG['DT
A>V3?V
D/R}G1
zZ?m|1
0vh]%@
tVAP-u=l
{U<1iC#
JjFQ(auRx
*.GCZK
8B{373O
1PpN$:5
){[U$%
uo3Q:yt
wtc:`n
1Kn3==
Z,1bNB
1J]4Q.
4/|nzwv
FH&5o'
wtL-!D
bWL;$3z
5T[Qg
:n1Q?B
TDzBb$
"mD.P[K
,7OD@b
uwc'q"ZIZs>
g==HL5
e%ER!0
gMa\z
:E`;EQ
Z1U(:[
M,8t=Sv
Bv(#X
94!M<U
[^EFe Z
tKAK.n$
zdIb!;
`RZV!\n
W'ZQlg8
le(bN-
s8K@jv
;Wd;,KQ
0%kI>h
hfo(Q!
;>$ScP
R,<xs5%
xl3k\&
-UL0q"sWi
doxP<p1
-Q#5_dj
Jme=[F
>8W5M4
5;msu8+
Zp[2s
]fuw3V:5
ptIAE>h
:52_Ke
_"!(0o
,"g+[!eI@
MA^:Y9
8%p<,g
7]x{!K-5
#uy;6f
!SI t1
pgmpD$
+oI{ebF
+9DLhu
$74=2r+
{\ ijCt
fbF'hY
CZQ]B{
r6DF\m
gn9*|e
T 2V@jF
">/87f"
<Id5:0D
*bA?^\
W*4iSV
C;\.lF
B\' 'Nj
-k6K(.1
^7[B/N
{jQsNn
#p<0E0
-I Q\f
Wob*"/
:jQ3n]
?<`G=oN
kvJV+LV]
WW~UW"
Pw)n.+
Js%m0D~
OhNtpu
PSKBE{7z
\gFF3sv
<*nHd@"
8[]G+/
$Ui!e[
xz*eGKN
(5!q6k9O
+f|~0-
Xnd%hv~D
< 8DYj
I0CS9cR
uUN2buo
FM2%,d
aCf]H~
*R7"5;
7'vqZ=B
j:N3z`
N+B(&A
\(Prlh4y
!&/=WLH
[$.ic^Vc
ubb4F{
X]|VA)C
CM9Z:S
~p$MkB
Kty.od
]?q*:4:
@KBn5>Ic_
{FiV586sNi
FY@sLwwG
e#TZpz
FY4b+A
x=H_Ne
.z~/+@
uBy8P_
y{0B<=O
n7c9I"
+UF"Q8v*
iQ9tpF
}#:t-k
}%}_7F
%LeCgk
z/{F.]
U\E2M0ey
t!%<F`
)v8;;Z
B|z.H
;AH#$#
*|Jh3)
=O:t51>G
;JM"9z
6j7lX1
`1B5RX
,H<r|_MKO
B\/dp42
m]zat>>
6)o6%-}vBg
QT#OtG
F>fT\J
6< 6"#B
X4v4o>
1eZWrv$
VB7M_U
?tz$jT?
Bhyk-h
N;H]<$
Qphv>0
Cx9~OJ
@Q"!3k
t{uj|(
\CluTaXP
jf+))`
[lm)I;
$u@D +
Nuh2WO
-_`5eu2Z
Od>k}Hp
oIGo~8
f-E^le
oacSp&
H`iJv^
tM-!oL
V$D~fU
@e><!:
*v1WN#5
/!N0Ah
jQ1-S@
2"%"?t
.&mxB9
/4+H(!
*.[4Np&
k$vQ5]H_
wMTW'I.
k#\4<$T{
+<`ich
O+=!F,
uE+$N~C
Cbv/>Si
2H.=u^
ZB&(zA
}GS[U3Z
w$9FJ}v6X
w^r6ytC
";CxJ)
p!rR;@;
.1P8p~$H
s;\2Ag
2g4MW8
U&aW B |
||[c6p
Vudd,K8o
J-USB3
MMlvOq
deH)<D
Q/p,V_
*C|(fa
3}ZT2gq
UGE-cU
zB-;&!/
o\@+.a1
j/nB[q
%#5Xt'
D+,7E"`
I/FZ1f+
#0d(l^
e\]95m
).BPF8
NW`4/_
%KPm&<
|y.1H%
:&Z"'|
{?qwL)
n`M~-nc
wL@.T7B"b
D$L'#Ptl
,J^yZ3
6ARaX-{
|a riVq
x\r>*U
Sxa'IIn;=x
{{/GRk
)j;l<
jf7TP
Eq:ddW
Q`6IQn
7:+yHn_
wV`""T
IZSqgV
a%mG!/@~
>z?hjl>q
~n({XfY3
QsmHM'.
/gB[*r
#28[IKw
UhWI7M
HK1l;ZxTt
\4&{RNke+
V4T2"9
:[Ide!
36 0&
*y4Qm/
UhWS13
pehn3{
wKYbeU
tOw15~'x
|M7/BB
Y%HGb|E
<qaY
~</TL7
9BB3% "
Escj"u
TdI\"c
vW>M$/
C6-MK{n
"&:}T.
n~ZsE[4
\8Rf0*7
\"0^*ey
-XD\61
)v.g[>
Ym\<r?
j(wBP-
5m\(sD
EP`P+*D
l&<zY{
C@<r0?
>7])-
p+o++&
FKL.W@
j~|7Q
7g1/vS7
H(+gzw
L{wqNjn
N7=tA*
LKISFL
|93.)]
YbV*ZK38
:wo+)_
>/Sv{Gu
4]Cb`W
j skj!
V\_8%
i#QObb
09ek#\e
cbf6Cc
uq,(XR
-Ebqh>
N}0/E$c
W0)UQ@
CI#VK}
eZ;[19+5
?[?L2WdQ
7 oc&4)
p#o22g
QW4zJF$
"5\fV5
bB`h Y
_ pWU>
zQ=R/
DAP{;}Ws
b'6oZ+
y4n`U~
moPhA
Fo0(V?
}(w(ZL,
fl8AD"
/Z_@ua
0Bz!G
/qi6yc
o0En.=
^41|d]R
z?/5H`
eYOGO[
iD!|dm
7@`'`<!
cscb! t
zi-[/^u
+OiEh$?`
B9I2Ti
It!\Ya
!8ACUV
A*H;2d
/c#2bzn
vmm^<gD
/sY[pX
|UBu~+
Ow?on.}
^%wh=:
[5MdR
Ci]6lv
j#Xrlb
^?kI'Q)
zOx0Udc
|FTJB
r{,ZNSs
:blJ|'
/YB_VJ*
Yw!N6x
-zx-c$&
k.(Jc1
wtWm0z
V)}z:m
iCeI=+
\7#5k_
x&Ejx
\6n{=v
^,<xdyY
-,rN(^
nW$[7D
c+.A,k
2Yd])s
vIJjB~
@^>[KF:
zY- +n
{KK04N
Hj+bujT
:we!pv
Mg)F^B
Ja08M
(n3R!W.m
4l5'lq
;b+!&"
M$yIFMP
?W2;f0
[LIZy@o
GU{l6FN
9f-C'N
I/?ZS`e2lU
6#&-C1At
Yw|3&g
0qB+xm^N
-V,5]/
L!G=~7@
'Rn5dS
:$01xp$
i&9y]!
hKT\vG
>id6]"
'Z{MN0k
+{T0lBL
nEYhLGU*RPv
[}.9ZoD/\
^g@nRp
V$7X%]
hEUnQ\c
}_26oILr
:$I)(d
""+!{?W+h5
:23.id
oP./H.]
%0p@
P%Rxm>h
|JYx-}yo
A&0mTZ
@ xi4E
+<>lAt
B$"(Y\
QQ0-J?Y$2
PYN}Rk
':K{^S
N13P)Q
'NSrn~
V.%/n)
E\,E:e
]RqYcG
SlQx(|N
v}@jY`U
,gT~%|
M&Qgd(
3r\O:_D/
qn/tdy
/w{-X8
;a-2OQ
d3TLA 6
p;PVhH
+, b+Tf
11^7S7
8:QZQwA
oscsn%
Elx>Wh
Fb&qr@
a1S,~5
B-"9Q#e
]tK3.Wa
ExkH|I
TZ]nOU
"@W VvW
}(<-X(
#Aq+A{
4N]M:ny,[
\NNhIh9
03 n>JB`
xARIK'+
oS3HCO}
7Wx+M-^+
{cS4*tM'=
gFDb7Y
c&X;p6
$\NF4wtC
LEgjJv
0p-TM0
YV>jCT~#-|
Hs1j?oqo
Zq^P-s
0t5Oh
+]2=WKDD
l)pv_
"z/UA7
X}<Bo\
'zeCEj
O DzC#HL
4#>I.q
aU+ain>C}
8Sp<D*
83(GyZ5
&Y7;%{
bphB1H,
N@e:'zl
-\X}Ry
A7-@%WE
ytCNSS
PoN %&
7kTz%g
pop$(x
bW/M=<
YgOh2l
AOPx)b
bpS E&
.AtkObq
k+2":,(k
]^&y"Y
-<cX]s
q}=dq3pEu
|*8r2g
7k53Zg
j(a2.nh
A&JS<V
JaS8[B{
QC)JO-}
bNE66c
c^u!N{
6/fihB2
" c'ztQ
"knE@l2
d8H7R
HBS3U=
3(=kjF
"(g ]}Bw
1f#5.=
z,G8rES
iNCS|K
X[otRd<
j})5t;
KK1a/P
CN(CT,,
}.z"A&
u.2xej
`kNEY|I(
(*w~:;
lGAfhz
Ar2hPq
M!(,|80j
sS97}c?
oCE))5V3
q?#88aa
0d!Nwt
37K.5B
zz"J6\
i*KRJsSKZ^.2
8{4[iI
/WP J`
F2ae.S
3K`d+?
!*T9[h
c;8y0Z
a3D}:'>
u}e+;9
_K%E:RR
~V`5J2
Z9mUmz|H
'cf+2J
0_AmI)
- zA}g
62)_|s{U
`,[ad%
+R6#Y*
O_D"H[
Hr:xl`
m[,e[Y
jyoOGx6c7
@I^.;N
6#'zHlz^
>m!o*)
~>68Pa42
0EWA>C
mz>5 o
mNeZ~fN
2^)H)6
BL7>ZN
;WoE_o
8r.8{ua)
:vw?-"
!5P]Q>+t
;sg,L*
%euyDg
9?~6S,e
u!x>9jR
nb.#yj
`-.W{)
6)OY G7
ksx#3On
~-Px:u
U oe-iW%
0B.*!=
w_#^qR
\S"BMv
l"1t[$
_X1JL
?in-oA
Nr},Ta
%\,Rb<
u28}!7
!$/g 4
0@>+G
T)>@kyS
` Io9b
!p<%4+
z!aT8U
GUQi*b
MF;|Y1
KAE6!r
6{S1i6G
9@Y=[]
/(]prh
3ex+~[
@U]g;Q
3CT&T/M
n$mF-@
l}'cqw
N66Ng>
-loBT`
yBMJZ>
B<x_v(>!j
%1;&f!
<&gby:5
h U#V%_
G7BnXo
nS%_dh=
wd&;)3
WNcz/aX
[xXb8.
|RQT)$
K4n[A
aJ&i@L
3hkJx4
;97$o
jQ+3
'7<t/j5Eh
\]:v16(P
e#Ac5s
KELcx
q*&hG,W
=>DN=U
ZcI>DTP
-Nv/ue
C3D|$8
siB{ZR
$s!I%T
7r3fq1:
w}FAOB
!PFsV
AF6xb-
R%$|kn8
!=$X}k
[y-b83A
pgeo?N
~2_h/"
F&iE]t
8k5v:^
.GCfhu
444]5~
/R}/O7h
@!<(v%#
b3A^5Q
Dg3%Bw
O2w2Ew
qnKw$[
^g/tyy
!}nLU`
)!c!U.
b@Y>ic
KQssH#^
ClRQ4Wd4
){flCU
31-OiP
_$At*v
gA}cg
so|=-K
+uq[p,F~
ng!hsr
2v+v/$
+9~4Ox
m'$h`~
gT6ml
>|8!J3
|4m$<:n
!nQ'\5
[^"pyoI
fVfbEf
9~@oQ:
+8#8.u
AJe`jhO
{;mR+r
5F*Tz1]
\r.}T`
7-$@)X6'S
g lMn'K(
d>pw2B
-#d<9Im
8G.2{:
L-^]V73w=~
6A{V\vFZ
2M|u ~1
UQe*ez
REzvlr`
I='99B
wrTMV$y
o6B0eo
z59u^,|
CyLd)>x~
n,6*avD
lNfFEO
u#\&t+
8g\Hn"
YvQ)0W
$U2<~Ue
=Y,qY`E
@43;y:
!#^lxQL
95pFL"=
{DkS"{
$uEe#LB%E
:^:\1Q
+D/{,_jg
\f)I4(
CY+$~sL
>%?-H\
?L%NW
6oB>+*
:ZNq-3
3I9!{J
w})9I
e"uo~,^
X4)&nb
cRkkGX
)OQNB~
s=%P0*
vYT.]M
So0IUjd:
=4jAY0r
h- q-s{
5U\#L9
O pDiEk]
U?5^;B
Qhm=6'
A)!,na
`vsVmh
tmiL~b
f[RV8`
.VGhaq}@A
,WHFhm
WJZ>e*
UIAuQ$
XR{DJc
^D&$Hn
YrdB 4
jzRcy<
b{dEsO
{YoaP~s
sAI`Mn
]gM~:s
UOgI}[\
4.lVu`
]>CLYE
AUDF}a-
Ai"EqCRi
4Q&C
7x';(I\
cAXsu1_
GDrU,N
s]-Cj]vk*M:C5
s}zyi*cB
%Et"P>
wqa \(8`
[6.;n-;FI
<0vV3S
-#A*6tZO
dqzdVuE
'hXtx9
Lo-x81
rZb=R7
i4i[cW
86iOSc
[+hsov
K{?cmj
19fd!Yk
n\3%Dd
<lr4at)
`o%Nfi
b71UpROBe
Z-f`nuu
,c]?m%O
Q Q>:O6
Npm WK(
dMXR-=D<
s|m~$18
3bcaCho
?KcSfI
T55@"
+.U;UA^
RRMS[q
}5PY(rB
H~/~pf
o5zzR?
d$hLm"|
doHx0;&
n_d.uiu
^/ Oy
rfxL_KN%#
P7)s`]
NdI)b@
{`8Sas0
k3haLx
TF0Z2
cz%OP:
V!VrFe?U8m
>>3Nwg
Zt0!Bv<
{^BCM=
&"6IJM
'V9vLZ
$(uA?F
6`rw#!
2|i,;[_Ra
]W@hKSy[5.
m,y.h;"
\UCf'^&<3
wLT<:KH
xw/$@g
d2[,<-
GMb8kw
7BUCrv
:p(#5z'
:!$7(
kon-A{
udU?21
7S|>/W
<+x#[o
:9=_>H
u*]p{p
0CwblZ
Y7=I9K
/X,V#&
?+?p^Zl
2R>wE(e
)sNFn0
D"W{JD
iW~(|J:
]MLZ?
qHo56y
*6BK3xB
uNUzCx
.{P~{S
*1 q\
R@W wEk
$f/"6*J
zCGEcb
=x5hx&
"T&ygn^
G#JeSc
IX'+w@
z|@QOpO
=?6pOQ
gXT%*k4S
9&9ZfD
Nje-Ap
fvmLf;
"Fo9G5S0
@,-(wQ
<VPDqw,
m5NG)
i[B8{i4
)nHUb-
33>B?e
:$*(@d
&@RT.'
0jAH!T
&]V7Q(
v=gfw3
y5104'+
yLIgd+S
7?kbZY#!!
&M:-~<
K_J,'e
YOAj9{:gj
Y@xP?4m"
v2%wdyU
N^A}(I
vn_aa<
H^<0gJ
"V}xjL
-RUiWu
im+%+I
q&f~m-
E+MMPO
s~(0!c
HhneX2
dj063>
mBBz-f(S:
_z@`S4
e<KVx[!
M@*9uU)
#LgrN]
DoG2,a
UH R=)
KFNxNM
Tm@@$-
-DB7p=/
;USTkD0t)wC
sZ`1x.
O@p@NW
8'dqfn
{+Sedh
;wqi}-M
Zqfg:O%#t&#
2[ufZJ
Uz[C:bn
kt>d7
1npp|0
XZS$D3
%$,& T
|T5v*I
`(s9E
J@2PSm
;`0H!=
eLK#bx
/60i_>
;UH&,`
e8.@"B'
f{&K,N
#/0YZc
\6\`JAW
%z`DW:
$,dQm2
2I9RA2
S<$(^c
=}Ax`{
8af6AP
zL rY
2+awFF%
2<R|"TLZ
E{<L^>
ph4YOc~
W# .aL
1'iKCr9
BMdk#"
u<G?1A}A
>zWsdF
G}"gpxLj3
w? 6ERpZ
wgp.M+
NbvY(d
e&Vr&^
ohCyQC
Vt:D*u
^W+`q|
}n~r@s
onf1Z"
'!df)A'.
|"ofd1
+#\j(Q
/G=du
Lwgi}l
!t4WZ8!
?1fOVT
,*1Ft O
lzMgf5
RAd{)r
\%2(K7
r(/-YHP
x'`pD0
@kS*E`kq/
+gfl7f
?,"iZ-"H
\q,E(&
s3$m".
QZ)8D>
KzSoS0^
>$0%90
+<P@i0
0.4FvY
;vi:=sn=
^46G"N
At>xRSZ0
w*<<v-
|C+,>:T
%RMZGC
Qje(4!*dc
ZtHOp+
h7( rQ
'wI2}!
SM,kS,
'#-'Y3
O8=el
{.VI/W94CY
^Zf.Yd
B?43c?g
hK~)u+
m>p~Ss
9:x9&(
?WSi!(
{nMd|z
dU@jkh2L#
>TQI\[%
;Tu]&:
V)v o+v
`^3bDO
Fue8:\
j@..Z}
T[3`-&O
@L(`sc
+V9F0kqs
eX89YO
<Ja&MjD
NX!uSf
zFG]O;
w-$&xjOfqg
[wMk`,hj
1iEgT[\
Fpjx6l
CFV=(7
2xq_i^
.dUZrJ
SQ1?5jn
;Yun*S,qa\
a.SCY.
HUf gV
HkIOOZ
ga>f$VfV
A\a\R=
tE\^4$K
~<H?rp'
3PjD2p}
W43g4H6I
ds#6EpgS
lg%=_h$
lrMv'V
S0Y&x!
$O8~5R1g
{4^bHi
p54hO{
#E%R.h
{D($ph
a*@tnfL
sg;~^n
]CHmUx
2'Ur$j
%QB/6:
]IvhP`
5&~oC]~
M#:N]Jp
rz#mfQ
(<m8|g
o/mseh
#&=\h7
UR\Z+R
3~RRWb
}-&2,u
$<kD,uD
TMPg-(
v9aNw$
!/s<*+
w^ibCp
a|Gu2R
EWjnnD
T?B--,
Jke^i@#
T$}i%7
Yz9hP]u
ZyAGZZd-
v<_#gF
Ig\J2x
>Qo[&{
mJ[/C6
*?, #r#
_N7Vjx
)!HdMJ
>,>GlV
(}2"ok>
VlqXr(
U_GSo_E
Y0$'dQ
"NXZ(6x{
hydJI#k
wkE.ik
*\p^T
+-m4|+
}?`dp
_<!ZsEb
;N6Dpoe
or>PW+O
,uqqgG`G
oVJ{f
..L2Fls
*pA^BI
Of/-PC~'
_Vf/^&
FWZH&i
&kCAq~
UJ? mL'?XA
Pt~#tIc
Q@S#e^
z/(OUa,c
U/1bqWN
8`6@0nv_
BB/\d
|*d#@M
GEA3C_
hj+V-T|:}
TZo#b_
MKoP4@
>&v@pF
-`Ej`L"G|
'JYN&)
uN*FTJ
/)qQS~
`j+Rj4
{2#n-
y_H%<N
o\p?1_
F#G!p[
b$p+HG
O|cfsa]
"+X1uS
U9YLvy
(8CP%F
{g(NGa
H*!V+P-
*L;l-}
[\mjB\
XqD[}4
ECCR/>
>BEZ5*
)(DCe>U
x)TiZb
n5([B8
1Q~P'
]N-v1]cf
h%i'"`
ig1$A>}R
AC`/;W1T
{NT8@G~
V;owBM
mL| }\
<R^NAu
ZN,EDU
qO4Z]X
OJ%N4M
%8!gFI
J3mEF@!
6|d1fk
R!FA1qv
tZmyH%
Y2~%qY
q'7uq99
713O<=
$#Ij1m-=}"
m~,,47
3|.=;'
7LDTw(h?
j[g`k-Z
d1lAu!,
qCBjD3
NZ)T'-
x<JiH]l8
aqXfd!
mG]cZ[
txd"l(P!8,
.1=PbO
+!xzc#
NGc9yS
5ww$8R
kw[Qd%
bbKYo7
?jj@NS
E[b::cE
ytEUh%
F~PO6TUX
= uxi
bu&mm\
]3;luc
*P#c*?
YcwP@o
D.un<k%
3&gwo8
jP EBs
ygHdws
*:]d8y
|A$U"v
`a>aL!;
9xWnf;
pm('__
&O$xu1
jnzfOu",P
wK@CnIN,.-DZ%
?gTMWfvE
i"\l?p
;w]d>
<mmYv(
hmt3#0
EP`2&y
;Rmi+R
_e>gd%
L"Fpt{
9|I)7L
/7_2Ie:
+%aT&g
o8AV.!)
$`G.\K
%_i-"s
bPu4@4
VuZ9G\
=;nN9p
Snk/,)o
[Kjgt?nXzR>
6Q/qd,
.;~LT6|z
OyoUA2
X@Lx/duM
A%8IW$u
b<L,'(-$
EcIelW>$o
coE%HC
r|=kQ:
aNVQ3Z
00,'2No
>\q-/P
{6w6`9
O*1ZV'
B"}-?yY&X
DVOq 4
&{g_vX
FcW~:M
i@UF[@k
vq6;m"
Y/LfvC
|QR|b?I
4Kg`Fw
;$p3AC
/G9?Svd
%98HEHU
q\,0ajk
?^n&88
q,Ji5f
_+7X^R@g
^(=IlW
}L7;-U
[[N#MpG
Bu6*cC
7*yiE>
yNXu$P
7H"$"B
R%<QV0pK
Q>M j>x
WV{$&'
['h2L18
h0|vqasQm
jN_sF^
[k.BP]SP
Z.{1?"
m+"Jn6
'xLl]1
}70t~?
3$-j;<
q2P]1j
1jU0$3
_W%otX=
8s:IpBkbz
xF@,2nLs
RnH7&&
#1Azb$e
R2t8@]
fHP6@t
6>p;`j
\uoPs`
J`PzJDY
!WH8 %
LsuhX'
~cKbcG
5PKWYuZH
#s6"%5
y8Jn@K
m~y^+p
J{{gZ?geR
1/wEA`
50&y+l
xf:vN7
p{4{jY
c Nm/a
;Y%h!SbE1
%|}g&/
J(Lo"(
<Kk0dp
~ph]8
[2M)Hzn
6Yr~ms`P
K!mUs-z
14vS}X
b2TuS?3(i
o<,&,
FuaO9{
jgB5qOM
xkx:V5
KP_F +
fvA"MV
\xA{0`
-4ng;B.
S6b"{'|
j7tmj2
L]3/#+
> OZ<q
xA9go~
Up4`F$
{|o-3zS
dS(8iK
t~#On
v$0;?d
8o<u!a:
6,bJCNC
<GR& `
w/Zt/b
8(s'M5
V%rBnw
OP_`l:
YPsg5h
&97UEgVM
(osoT"
1{|*N_
'<GTSn
6SugyE
{8*'(e8
^?#6\$
:4>1,\7"T
T_LM ET
)OAL _
n]x-uQ
wp!-ib
\4@tt!=1
u/xk&F
DM`~/-$\-
Tm'weM
5"m]94
JR+v#
BN!Y_R
J(Fejo
T,nneA
qm_7z=Ny
0I+M_'
BTL.(o
$EdxQ41)W
Ftb|l
S|"3/p
~_@.|O
A}e2f}
eW]qNrugR
u-_p<3zf
atb`}j
J3i6_D
GiJi"!HC|2
R!#us0~
\2S-MS
uK:AR@
'y[El7
UIL,>=
*POcSH
{^PuMsf
Qe@n2w
UY^\\Y
dtlTnu
f04<BM
ni88X7
ga:np$
C=[s2c
({"fG=2!
K/G$5}
98f?-O2J]
i6H0oy(
7\Dqa>
akC0J2
ya#;,H_5
X`QdJ/
1s*[]L
A,$Lp\},L01
{>D-lF"
Hrvr
@2=(\+
Yhg=CP
:/.Q&
W=0e.X
{:[NoT
F./z8#
pnh2S0
0Q7c[8
X.s&mi
SQo;$w[
?#_m<l
P:%^-o
Q|}YV
Rr;sC~
i%2YzZ
IT07d2
N-2dp`
0$|u(J
6aT.$O
6}0g&
Ij,&U>T
f1j 5n
#V^;==
$;F9l\Z
1dm#]|9
7nZ@;}Y
TG#G;_
`Ef!7nI
+hLQCX
#_{p<T&
^uG+{u
X|~!?M
[}3-zL
N$ZZ%I
g':kUpt
3X}&!Pd
P1{>XH
AaYsLlf
lE$ji"
,DR]I@MJ2
ih~}i~.
IXc\?r8
TuV95
2K$Khx>cEU
Y]?MDG
R;k/=&
!G,y@_
v;jIyu
?2`5]t
{pH `w
%)eUBL
:s\nw/
#}[Cn>
Q>"OgZVf
eE<q|&).
Y)*$|=O
GYCB9y
<}HCVO
X^D^t&
$afjs\
g9*D+F
0[e}|]
vkajC(
Ud3=84
3L/dHJ
]lGGD'
ReSJAV<
hLWp4
QtGvRv-?8g`
B>?(~PjG
TF<--VH
DM~wXZQ
QDO;p'
!izP8x!
QJQ4aC.
U@>_UG
Gg46P"
g>EDK%
Q|LITh
wW@hwm
-Kvcg;
Idv~}H
e1tdj#
sfN+\W
!$hV,("E
&9DwPF
23!}`*0
9@~#^ek
5kmrjI85
o$z~I}
?Bf5<<]
lG8ps>
]X5e&Xf
8P#KI
?R5y$n@
~:tj$G
(##4H
H[\Wg
Y ul&7
Antivirus Signature
Bkav W32.NeshtaB.PE
Lionic Virus.Win32.Neshta.n!c
tehtris Generic.Malware
ClamAV Win.Trojan.Neshuta-1
CMC Clean
CAT-QuickHeal W32.Neshta.C8
Skyhigh BehavesLike.Win32.HLLP.tc
ALYac Win32.Neshta.A
Cylance Unsafe
Zillya Virus.Neshta.Win32.1
Sangfor Virus.Win32.Neshta.a
K7AntiVirus Virus ( 00556e571 )
Alibaba Virus:Win32/Neshta.3bb
K7GW Virus ( 00556e571 )
Cybereason malicious.26c89f
huorong Virus/Neshta.c
Baidu Win32.Virus.Neshta.a
VirIT Win32.Delf.FE
Paloalto Clean
Symantec W32.Neshuta
Elastic Windows.Virus.Neshta
ESET-NOD32 Win32/Neshta.A
APEX Malicious
Avast Win32:Apanas [Trj]
Cynet Malicious (score: 100)
Kaspersky Virus.Win32.Neshta.a
BitDefender Win32.Neshta.A
NANO-Antivirus Trojan.Win32.Winlock.fmobyw
ViRobot Win32.Neshta.Gen.A
MicroWorld-eScan Win32.Neshta.A
Tencent Virus.Win32.Neshta.a
TACHYON Virus/W32.Neshta
Sophos W32/Neshta-D
F-Secure Malware.W32/Neshta.A
DrWeb Win32.HLLP.Neshta
VIPRE Win32.Neshta.A
TrendMicro PE_NESHTA.A
McAfeeD Real Protect-LS!E963C6226C89
Trapmine malicious.high.ml.score
FireEye Generic.mg.e963c6226c89fbe3
Emsisoft Win32.Neshta.A (B)
Ikarus Virus.Win32.Neshta
GData Win32.Virus.Neshta.D
Jiangmin Virus.Neshta.a
Webroot Clean
Varist W32/Neshta.OBIX-2981
Avira W32/Neshta.A
Antiy-AVL Virus/Win32.Neshta.a
Kingsoft Win32.Neshta.nl.30720
Gridinsoft Virus.Neshta.A.sd!yf
Xcitium Win32.Neshta.A@3ypg
Arcabit Win32.Neshta.A
SUPERAntiSpyware Clean
ZoneAlarm Virus.Win32.Neshta.a
Microsoft Virus:Win32/Neshta.A
Google Detected
AhnLab-V3 Win32/Neshta.Gen
Acronis suspicious
McAfee W32/HLLP.41472.e
MAX malware (ai score=89)
VBA32 Virus.Win32.Neshta.a
Malwarebytes Generic.Malware.AI.DDS
Panda W32/Neshta.A
Zoner Virus.Win32.19514
TrendMicro-HouseCall PE_NESHTA.A
Rising Virus.Neshta!1.EFA5 (CLASSIC)
Yandex Trojan.GenAsa!Mo0tdcmmg3o
SentinelOne Static AI - Malicious PE
MaxSecure Virus.Infector.Gen9
Fortinet W32/Generic.AC.171!tr
BitDefenderTheta AI:FileInfector.D5C3B0640E
AVG Win32:Apanas [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (W)
alibabacloud Virus:Win/Neshta.B
No IRMA results available.