Static | ZeroBOX

PE Compile Time

2023-09-09 15:27:19

PE Imphash

7244c4b0593c90895b4151a844e951d8

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00116cc8 0x00116e00 6.50830213766
.rdata 0x00118000 0x00031b04 0x00031c00 5.9565169521
.data 0x0014a000 0x00003598 0x00002200 3.47740259949
.rsrc 0x0014e000 0x000004e8 0x00000600 3.61671523323
.reloc 0x0014f000 0x00007d40 0x00007e00 6.49708380982

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0014e0a0 0x000002c8 LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_MANIFEST 0x0014e368 0x0000017d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library KERNEL32.dll:
0x518050 GetModuleHandleA
0x518054 GetLocaleInfoA
0x518058 OpenProcess
0x518060 MultiByteToWideChar
0x518064 Sleep
0x518068 GetTempPathA
0x51806c GetModuleHandleExA
0x518074 GetTickCount64
0x518078 CopyFileA
0x51807c GetLastError
0x518080 GetFileAttributesA
0x518088 CreateFileA
0x51808c SetEvent
0x518090 TerminateThread
0x518094 LoadLibraryA
0x518098 GetVersionExA
0x51809c DeleteFileA
0x5180a0 Process32Next
0x5180a4 CloseHandle
0x5180a8 GetSystemInfo
0x5180ac CreateThread
0x5180b0 ResetEvent
0x5180b8 HeapAlloc
0x5180bc SetFileAttributesA
0x5180c0 GetLocalTime
0x5180c4 GetProcAddress
0x5180c8 LocalFree
0x5180d0 GetFileSize
0x5180d4 RemoveDirectoryA
0x5180d8 ExitProcess
0x5180dc GetCurrentProcessId
0x5180e0 GetProcessHeap
0x5180e8 FreeLibrary
0x5180ec WideCharToMultiByte
0x5180f0 CreateDirectoryA
0x5180f4 GetSystemTime
0x5180f8 CreateEventA
0x5180fc GetCurrentThreadId
0x518104 IsWow64Process
0x518108 IsDebuggerPresent
0x51810c GetComputerNameA
0x518114 lstrcatA
0x518118 lstrcpyA
0x51811c lstrcpynA
0x518120 SetFilePointer
0x518124 AreFileApisANSI
0x51812c GetFullPathNameW
0x518130 GetDiskFreeSpaceW
0x518134 LockFile
0x518140 GetFullPathNameA
0x518144 SetEndOfFile
0x518148 GetTempPathW
0x51814c GetFileAttributesW
0x518150 FormatMessageW
0x518154 GetDiskFreeSpaceA
0x518158 DeleteFileW
0x51815c UnlockFile
0x518160 LockFileEx
0x51816c FormatMessageA
0x518174 GetTickCount
0x518178 FlushFileBuffers
0x51817c WriteConsoleW
0x518180 HeapSize
0x518190 GetCommandLineW
0x518194 GetCommandLineA
0x518198 GetOEMCP
0x51819c GetACP
0x5181a0 IsValidCodePage
0x5181a4 LocalAlloc
0x5181a8 WaitForSingleObject
0x5181b0 FindClose
0x5181b4 lstrlenA
0x5181bc FindNextFileA
0x5181c4 TerminateProcess
0x5181c8 WriteFile
0x5181cc GetCurrentProcess
0x5181d0 HeapFree
0x5181d4 FindFirstFileA
0x5181d8 Process32First
0x5181e0 SetStdHandle
0x5181e4 HeapReAlloc
0x5181e8 EnumSystemLocalesW
0x5181ec GetUserDefaultLCID
0x5181f0 IsValidLocale
0x5181f4 GetLocaleInfoW
0x5181f8 LCMapStringW
0x5181fc ReadFile
0x518200 CompareStringW
0x518204 GetTimeFormatW
0x518208 GetDateFormatW
0x51820c GetFileSizeEx
0x518210 GetConsoleOutputCP
0x518214 ReadConsoleW
0x518218 GetConsoleMode
0x51821c GetStdHandle
0x518220 GetModuleFileNameW
0x518224 GetModuleHandleExW
0x518228 GetFileType
0x51822c GetModuleFileNameA
0x518230 CreateFileW
0x518234 SetFilePointerEx
0x518238 LoadLibraryExW
0x51823c TlsFree
0x518240 TlsSetValue
0x518244 TlsGetValue
0x518248 TlsAlloc
0x518250 SetLastError
0x518254 RaiseException
0x518258 RtlUnwind
0x51825c InitializeSListHead
0x518260 GetStartupInfoW
0x518268 FindFirstFileW
0x51826c FindFirstFileExW
0x518270 FindNextFileW
0x51827c GetModuleHandleW
0x518284 GetLocaleInfoEx
0x518288 InitializeSRWLock
0x518298 LCMapStringEx
0x51829c EncodePointer
0x5182a0 DecodePointer
0x5182a4 CompareStringEx
0x5182a8 GetCPInfo
0x5182ac GetStringTypeW
Library USER32.dll:
0x5182dc GetDC
0x5182e0 GetWindowRect
0x5182e4 EnumDisplayDevicesA
0x5182e8 CharNextA
0x5182ec GetSystemMetrics
0x5182f0 GetDesktopWindow
0x5182f4 ReleaseDC
0x5182fc wsprintfA
Library GDI32.dll:
0x51803c SelectObject
0x518040 CreateCompatibleDC
0x518044 DeleteObject
0x518048 BitBlt
Library ADVAPI32.dll:
0x518000 SystemFunction036
0x518004 RegOpenKeyExA
0x518008 GetUserNameA
0x51800c RegEnumKeyA
0x518010 RegCloseKey
0x518018 RegQueryValueExA
0x51801c CredEnumerateA
0x518020 RegCreateKeyExA
0x518024 CredFree
0x518028 RegEnumKeyExA
Library SHELL32.dll:
0x5182c8 ShellExecuteA
0x5182cc SHGetFolderPathA
Library ole32.dll:
0x51836c CoInitialize
0x518370 CoUninitialize
0x518374 CoCreateInstance
0x518378 CoInitializeEx
Library WS2_32.dll:
0x518304 WSACleanup
0x518308 closesocket
0x51830c shutdown
0x518310 getaddrinfo
0x518314 WSAStartup
0x518318 WSAGetLastError
0x51831c socket
0x518320 connect
0x518324 recv
0x518328 freeaddrinfo
0x51832c setsockopt
0x518330 send
Library CRYPT32.dll:
0x518030 CryptUnprotectData
Library SHLWAPI.dll:
0x5182d4 PathFindExtensionA
Library gdiplus.dll:
0x518338 GdipAlloc
0x51833c GdiplusStartup
0x518340 GdiplusShutdown
0x518344 GdipCloneImage
0x518348 GdipDisposeImage
0x51834c GdipSaveImageToFile
0x518354 GdipFree
Library SETUPAPI.dll:
Library ntdll.dll:

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
D$(Ur1.
D$,Rvaa
SVWu:ff
;E$rjw
D$$t"aa
D$Td"aa
D$$PVSf
C<P;5H
 !!"!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!#!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$%&&&&&&&&&&&&'&&()))*f
+CL+SL;
+sL+KL_;
rk9_ vf
+CL+SL;
+sL+KL_;
FH<cuP
u4FG;u
+~l9Flr'
F,+N\;
Fl+Fp=
f+NdfI
N0;N,s
qD;p s
qD;p(s
Al;A`s`
Al;A`r
tS9^|vN
)~D)~P
t$0OPV
SVW<-u
9N\~33
[ ;~\|
W9S\~,3
;O0s"Vj
C`;C v
u&8FCu
f;F2s$
|$$9D$,u
#Fd_^Y
9^@v'3
AD;C\u
@H:Aos
 !""#$%&&&&'(()*+,--./0012345667889:;<=>>>>>>;????@@@@@ABCDEFFGcHIccJKLcccccMNOPQccRcSTUVWXYZ[\]ccccccccc^_`ab
slh|\S
;F u";V$
D$,;t$
t$HPVj
T$<WjPV
t$8PWjNV
F ;G uO
F$;G$uG
A ;F u
A$;F$t6
PWh(]S
VPSSSSh
th8`S
th\`S
BI:AIt
8G|u(P
f!GJ_^
D$(+D$
t`h,(S
D\$0VW
;FL~?h oS
tCh`oS
s 9{$~:
t4< t03
uWhHsS
9G ua9W$u\
F$#N #E
F$#N #E
#D$ #T$$
#L$ #D$$
L$8uW;
~D$p!|$
T$D!D$
+2+34+567
+%OPQR
+STUVWX4YZ[
=\]^_`aabc``defghijkkkkkkkklmlm^nopqrsttuv
xyz{|}~
<>to<<u
uuj\Vh
t$h`uS
PPPPPWS
3X,3x03p43P83H<
3y03q 3Q
3q43Q$
IL5l>+3
I\5y!~
1P 1H$_^[
QQSVWd
j<hX|T
URPQQh@
UQPXY]Y[
PVVVVV
PVVVVV
PWWWWW
PVVVVV
PVVVVV
f9<H_}
PPPPPPPP
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
8^8tb9^4~]
tb9^4~]
PRRRRR
PVVVVV
_PSSSSS
j"_VSSSS
WVVVVV
PVSRSQV
uSSSSj
ARPRQh
jYjf
WShX>R
WShX>R
WShX>R
WShX>R
VWhd>R
VWhd>R
VWhX>R
SWt@jU
_t^PVj@
u/j,Xf;
D8(Ht'
D8(HtU
D8(Ht5F
PVVVVV
PPPPPWV
PP9E uPPSWP
<at.<rt!<wt
<=upG8
M,j"^QRRRRR
Vj0XPW
M$j"^QRRRRR
j"[VWWWW
u kE$<
j-Xf9E
QQSVj8j@
[PVVVVV
j"[WVVVV
PVVVVV
f9:t!V
C PjPW
C$PjQW
C*PjTW
C+PjUW
C,PjVW
C-PjWW
C.PjRW
C/PjSW
CHPjPW
CLPjQW
u{9^\t/
NX9^`t1
u2Vj@hhQR
9C`u99C\t4
u29K\t-
WHPhxTR
HPhhQR
^PQQQQQ
E ^PQQQQ
CY<u
PPPPPPPP
bad allocation
bad function call
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_parse)
regex_error(error_syntax)
regex_error
GetTempPath2W
success
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
cross device link
destination address required
device or resource busy
directory not empty
executable format error
file exists
file too large
filename too long
function not supported
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
invalid argument
invalid seek
io error
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no lock available
no message available
no message
no protocol option
no space on device
no stream resources
no such device or address
no such device
no such file or directory
no such process
not a directory
not a socket
not a stream
not connected
not enough memory
not supported
operation canceled
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
permission denied
protocol error
protocol not supported
read only file system
resource deadlock would occur
resource unavailable try again
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many files open
too many links
too many symbolic link levels
value too large
wrong protocol type
0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefghijklmnopqrstuvwxyz
GetCurrentPackageId
GetSystemTimePreciseAsFileTime
LibsodiumDRGsysrandom
bad exception
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
[aOni*{
~ $s%r
@b;zO]
v2!L.2
IND)ind)
(null)
CorExitProcess
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
UTF-16LEUNICODE
AreFileApisANSI
CompareStringEx
EnumSystemLocalesEx
GetDateFormatEx
GetLocaleInfoEx
GetTimeFormatEx
GetUserDefaultLocaleName
IsValidLocaleName
LCMapStringEx
LCIDToLocaleName
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
_hypot
_nextafter
1#QNAN
1#SNAN
]vQ<)8
|)P!?Ua0
Eb2]A=
u?^p?o4
y1~?|"
?x+s7
?5Od%
?|I7Z#
>,'1D=
?g)([|X>=
~U`?K
:h"?bC
@H#?43
Ax#?uN}*
r7Yr7=
F0$?3=1
H`$?h|
&?~YK|
sU0&?W
<8bunz8
?#%X.y
F||<##
<@En[vP
?5Wg4p
%S#[k=
"B <1=
Unknown exception
bad array new length
string too long
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
vector too long
generic
iostream
system
bad locale name
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
invalid stoi argument
stoi argument out of range
recursive_directory_iterator::recursive_directory_iterator
recursive_directory_iterator::operator++
exists
status
weakly_canonical
map/set too long
[json.exception.
parse error
parse_error
, column
at line
invalid_iterator
type_error
out_of_range
other_error
/************/
/*************************************************************/
/***********************************************************/
/*************/
/**************/
/***************/
abcdefghijklmnopqrstuvwxyz0123456789_ABCDEFGHIJKLMNOPQRSTUVWXYZ
cannot get value
cannot use push_back() with
cannot use operator[] with a string argument with
"bytes": [
"subtype":
{"bytes":[
],"subtype":
<discarded>
cannot compare iterators of different containers
961c151d2e87f2686a955a9be24d316f1362bf21 3.9.1
object
string
boolean
binary
discarded
number
\u%04x
invalid UTF-8 byte at index
incomplete UTF-8 string; last byte: 0x
invalid string position
list too long
syntax error
while parsing
; last read: '
unexpected
; expected
<U+%.4X>
invalid BOM; must be 0xEF 0xBB 0xBF if given
invalid literal
<uninitialized>
true literal
false literal
null literal
string literal
number literal
<parse error>
end of input
'[', '{', or a literal
unknown token
invalid number; expected digit after '-'
invalid number; expected digit after '.'
invalid number; expected '+', '-', or digit after exponent
invalid number; expected digit after exponent sign
invalid comment; missing closing '*/'
invalid comment; expecting '/' or '*' after '/'
invalid string: missing closing quote
invalid string: '\u' must be followed by 4 hex digits
invalid string: surrogate U+D800..U+DBFF must be followed by U+DC00..U+DFFF
invalid string: surrogate U+DC00..U+DFFF must follow U+D800..U+DBFF
invalid string: forbidden character after backslash
invalid string: control character U+0000 (NUL) must be escaped to \u0000
invalid string: control character U+0001 (SOH) must be escaped to \u0001
invalid string: control character U+0002 (STX) must be escaped to \u0002
invalid string: control character U+0003 (ETX) must be escaped to \u0003
invalid string: control character U+0004 (EOT) must be escaped to \u0004
invalid string: control character U+0005 (ENQ) must be escaped to \u0005
invalid string: control character U+0006 (ACK) must be escaped to \u0006
invalid string: control character U+0007 (BEL) must be escaped to \u0007
invalid string: control character U+0008 (BS) must be escaped to \u0008 or \b
invalid string: control character U+0009 (HT) must be escaped to \u0009 or \t
invalid string: control character U+000A (LF) must be escaped to \u000A or \n
invalid string: control character U+000B (VT) must be escaped to \u000B
invalid string: control character U+000C (FF) must be escaped to \u000C or \f
invalid string: control character U+000D (CR) must be escaped to \u000D or \r
invalid string: control character U+000E (SO) must be escaped to \u000E
invalid string: control character U+000F (SI) must be escaped to \u000F
invalid string: control character U+0010 (DLE) must be escaped to \u0010
invalid string: control character U+0011 (DC1) must be escaped to \u0011
invalid string: control character U+0012 (DC2) must be escaped to \u0012
invalid string: control character U+0013 (DC3) must be escaped to \u0013
invalid string: control character U+0014 (DC4) must be escaped to \u0014
invalid string: control character U+0015 (NAK) must be escaped to \u0015
invalid string: control character U+0016 (SYN) must be escaped to \u0016
invalid string: control character U+0017 (ETB) must be escaped to \u0017
invalid string: control character U+0018 (CAN) must be escaped to \u0018
invalid string: control character U+0019 (EM) must be escaped to \u0019
invalid string: control character U+001A (SUB) must be escaped to \u001A
invalid string: control character U+001B (ESC) must be escaped to \u001B
invalid string: control character U+001C (FS) must be escaped to \u001C
invalid string: control character U+001D (GS) must be escaped to \u001D
invalid string: control character U+001E (RS) must be escaped to \u001E
invalid string: control character U+001F (US) must be escaped to \u001F
invalid string: ill-formed UTF-8 byte
vector<bool> too long
object key
object separator
number overflow parsing '
iterator does not fit current value
iterator out of range
cannot use erase() with
type must be string, but is
type must be boolean, but is
type must be object, but is
type must be number, but is
xdigit
iostream stream error
00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899
Qkkbal
[-&LMb#{'
w+OQvr
INSKyu
)\ZEo^m/
H*0"ZOW
mj>zjZ
IiGM>nw
ewh/?y
OZw3(?
V_:X1:
1.2.11
unzip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll
uLm:.P
)Q+e4"m-.1
r<f`~65k
3b1$ i
tFn,v_1#
;ox=>/p
onoffalseyestruefull
0123456789ABCDEF0123456789abcdef
******""""""""""""""""""""
3.6.20
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
0123456789ABCDEF
naturaleftouterightfullinnercross
RSTUVWXYZ[\
12QRSTUVWXYZ[\XYZ[\DEFGHIJKLMNOP
RSTUVWXYZ[\
RSTUVWXYZ[\
`6mcde
DEFGHIJKLMNOP
RSTUVWXYZ[\
`abcdef^_p
_abcdefVW12<l>
whivDEFGHIJKLMNOP
RSTUVWXYZ[\
bVWXYZ[\
DEFGHIJKLMNOPwRSTUVWXYZ[\
9DEFGHIJKLMNOPCRSTUVWXYZ[\
12s^_GHo
DEFGHIJKLMNOPbRSTUVWXYZ[\
DEFGHIJKLMNOPuRSTUVWXYZ[\
DEFGHIJKLMNOPpRSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
EFGHIJKLMNOP
RSTUVWXYZ[\
FGHIJKLMNOP
RSTUVWXYZ[\
]^_Lvb
SQLite format 3
CREATE TABLE sqlite_master(
type text,
name text,
tbl_name text,
rootpage integer,
sql text
thstndrd
,,,,,,,,,,
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
unknown error
()$^.*+?[]|\-{},:=!
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
0123456789abcdef
out of memory
invalid block type
invalid stored block lengths
too many length or distance symbols
invalid code lengths set
invalid bit length repeat
invalid code -- missing end-of-block
invalid literal/lengths set
invalid distances set
invalid literal/length code
invalid distance code
invalid distance too far back
incorrect header check
unknown compression method
invalid window size
unknown header flags set
header crc mismatch
incorrect data check
incorrect length check
need dictionary
stream end
file error
stream error
data error
insufficient memory
buffer error
incompatible version
%H:%M:%S
current_time
%Y-%m-%d
current_timestamp
%Y-%m-%d %H:%M:%S
current_date
(NULL)
922337203685477580
%s\etilqs_
OsError 0x%x (%u)
%!.15g
%s-mj%08X
string or blob too big
unable to use function %s in the requested context
cannot open savepoint - SQL statements in progress
no such savepoint: %s
rollback
release
cannot %s savepoint - SQL statements in progress
cannot rollback transaction - SQL statements in progress
cannot commit transaction - SQL statements in progress
cannot start a transaction within a transaction
cannot rollback - no transaction is active
cannot commit - no transaction is active
database schema has changed
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s
integer
misuse of aliased aggregate %s
no such column
ambiguous column name
%s: %s.%s.%s
%s: %s.%s
%s: %s
misuse of aggregate function %.*s()
no such function: %.*s
wrong number of arguments to function %.*s()
%r %s BY term out of range - should be between 1 and %d
too many terms in ORDER BY clause
%r ORDER BY term does not match any column in the result set
too many terms in %s BY clause
a GROUP BY clause is required before HAVING
aggregate functions are not allowed in the GROUP BY clause
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
too many SQL variables
too many columns in %s
_ROWID_
misuse of aggregate: %s()
unknown function: %.*s()
%.*s"%w"%s
sqlite_rename_table
tbl_name=%Q
there is already another table or index with this name: %s
sqlite_
table %s may not be altered
UPDATE %Q.%s SET sql = sqlite_rename_table(sql, %Q), tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
Cannot add a PRIMARY KEY column
Cannot add a UNIQUE column
Cannot add a REFERENCES column with non-NULL default value
Cannot add a NOT NULL column with default value NULL
Cannot add a column with non-constant default
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
virtual tables may not be altered
Cannot add a column to a view
sqlite_altertab_%s
invalid name: "%s"
too many attached databases - max %d
cannot ATTACH database within transaction
database %s is already in use
database is already attached
attached databases must use the same text encoding as main database
unable to open database: %s
no such database: %s
cannot detach database %s
cannot DETACH database within transaction
database %s is locked
sqlite_detach
sqlite_attach
%s %T cannot reference objects in database %s
no such view
no such table
corrupt database
unknown database %T
object name reserved for internal use: %s
table %T already exists
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
INTEGER
no such collation sequence: %s
CREATE TABLE
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
tbl_name='%q'
table %s may not be dropped
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
sqlite_stat1
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
indexed columns are not unique
table %s may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
table %s has no column named %s
conflicting ON CONFLICT clauses specified
UNIQUE
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
name='%q'
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
a JOIN clause is required before %s
unable to open a temporary database file for storing temporary tables
table %s may not be modified
rows deleted
integer overflow
LIKE or GLOB pattern too complex
ESCAPE expression must be a single character
2009-11-04 13:30:02 eb7a544fe49d1626bacecfe53ddc03fe082e3243
typeof
length
substr
coalesce
ifnull
random
randomblob
nullif
sqlite_version
sqlite_source_id
last_insert_rowid
changes
total_changes
replace
zeroblob
group_concat
table %S has %d columns but %d values were supplied
%d values for %d columns
table %S has no column named %s
rows inserted
%s.%s may not be NULL
PRIMARY KEY must be unique
columns
column
are not unique
is not unique
WITHOUT ROWID
automatic extension loading failed: %s
exclusive
normal
memory
temporary storage cannot be changed from within a transaction
full_column_names
short_column_names
count_changes
empty_result_callbacks
legacy_file_format
fullfsync
reverse_unordered_selects
writable_schema
omit_readlock
read_uncommitted
recursive_triggers
default_cache_size
cache_size
page_size
max_page_count
page_count
locking_mode
journal_mode
delete
persist
truncate
journal_size_limit
temp_store
temp_store_directory
not a writable directory
synchronous
Safety level may not be changed inside a transaction
table_info
notnull
dflt_value
index_info
index_list
unique
database_list
collation_list
case_sensitive_like
encoding
UTF-16le
UTF-16be
UTF16le
UTF16be
UTF-16
unsupported encoding: %s
schema_version
user_version
freelist_count
malformed database schema (%s)
%s - %s
invalid rootpage
BINARY
unsupported file format
SELECT name, rootpage, sql FROM '%q'.%s
database schema is locked: %s
statement too long
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
only a single result allowed for a SELECT that is part of an expression
UNION ALL
INTERSECT
EXCEPT
ORDER BY clause should come after %s not before
LIMIT clause should come after %s not before
SELECTs to the left and right of %s do not have the same number of result columns
no such index: %s
sqlite_subquery_%p_
no such table: %s
no tables specified
too many columns in result set
DISTINCT aggregates must have exactly one argument
too many terms in compound SELECT
no such column: %s
rows updated
_rowid_
CREATE VIRTUAL TABLE %T
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
vtable constructor failed: %s
vtable constructor did not declare schema: %s
hidden
hidden
no such module: %s
table %s: xBestIndex returned an invalid plan
at most %d tables in a join
cannot use index: %s
parser stack overflow
set list
near "%T": syntax error
too many arguments on function %T
qualified table names are not allowed on INSERT, UPDATE, and DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
interrupt
unrecognized token: "%T"
unable to close due to unfinalised statements
unable to close due to unfinished backup operation
not an error
SQL logic error or missing database
access permission denied
callback requested query abort
database is locked
database table is locked
attempt to write a readonly database
interrupted
disk I/O error
database disk image is malformed
database or disk is full
unable to open database file
table contains no data
constraint failed
datatype mismatch
library routine called out of sequence
large file support is disabled
authorization denied
auxiliary database format error
bind or column index out of range
file is encrypted or is not a database
unable to delete/modify user-function due to active statements
unable to delete/modify collation sequence due to active statements
no such vfs: %s
NOCASE
2Ur1.RvA
.text$di
.text$mn
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCC
.CRT$XCL
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$r
.rdata$voltmd
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.data$rs
.rsrc$01
.rsrc$02
ReadFile
GetModuleFileNameA
GetPrivateProfileSectionNamesA
Process32First
FindFirstFileA
HeapFree
GetCurrentProcess
WriteFile
TerminateProcess
GetUserDefaultLocaleName
FindNextFileA
InitializeCriticalSectionEx
lstrlenA
FindClose
GetVolumeInformationA
WaitForSingleObject
LocalAlloc
GetCurrentThreadId
GetModuleHandleA
GetLocaleInfoA
OpenProcess
CreateToolhelp32Snapshot
MultiByteToWideChar
GetTempPathA
GetModuleHandleExA
GetTimeZoneInformation
GetTickCount64
CopyFileA
GetLastError
GetFileAttributesA
TzSpecificLocalTimeToSystemTime
CreateFileA
SetEvent
TerminateThread
LoadLibraryA
GetVersionExA
DeleteFileA
Process32Next
CloseHandle
GetSystemInfo
CreateThread
ResetEvent
GetWindowsDirectoryA
HeapAlloc
SetFileAttributesA
GetLocalTime
GetProcAddress
LocalFree
IsProcessorFeaturePresent
GetFileSize
RemoveDirectoryA
ExitProcess
GetCurrentProcessId
GetProcessHeap
GlobalMemoryStatusEx
FreeLibrary
WideCharToMultiByte
CreateDirectoryA
GetSystemTime
CreateEventA
GetPrivateProfileStringA
IsWow64Process
IsDebuggerPresent
GetComputerNameA
SetUnhandledExceptionFilter
lstrcatA
lstrcpyA
lstrcpynA
SetFilePointer
CreateFileW
AreFileApisANSI
EnterCriticalSection
GetFullPathNameW
GetDiskFreeSpaceW
LockFile
LeaveCriticalSection
InitializeCriticalSection
GetFullPathNameA
SetEndOfFile
GetTempPathW
GetFileAttributesW
FormatMessageW
GetDiskFreeSpaceA
DeleteFileW
UnlockFile
LockFileEx
DeleteCriticalSection
GetSystemTimeAsFileTime
FormatMessageA
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
KERNEL32.dll
ReleaseDC
GetDesktopWindow
GetKeyboardLayoutList
wsprintfA
GetSystemMetrics
GetWindowRect
EnumDisplayDevicesA
CharNextA
USER32.dll
DeleteObject
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
GDI32.dll
RegEnumKeyExA
RegOpenKeyExA
GetUserNameA
CredFree
RegCreateKeyExA
CredEnumerateA
RegQueryValueExA
GetCurrentHwProfileA
RegCloseKey
RegEnumKeyA
ADVAPI32.dll
ShellExecuteA
SHGetFolderPathA
SHELL32.dll
CoInitialize
CoUninitialize
CoCreateInstance
CoInitializeEx
ole32.dll
freeaddrinfo
getaddrinfo
WS2_32.dll
CryptUnprotectData
CRYPT32.dll
PathFindExtensionA
SHLWAPI.dll
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipFree
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipAlloc
GdipCloneImage
GdipGetImageEncoders
GdiplusShutdown
GdiplusStartup
gdiplus.dll
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInfo
SETUPAPI.dll
RtlUnicodeStringToAnsiString
ntdll.dll
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFinalPathNameByHandleW
GetModuleHandleW
GetFileInformationByHandleEx
GetLocaleInfoEx
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
LCMapStringEx
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
GetStringTypeW
UnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
RtlUnwind
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
SetFilePointerEx
GetFileType
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
GetFileSizeEx
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
SetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
HeapSize
WriteConsoleW
SystemFunction036
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVinvalid_argument@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVbad_function_call@std@@
.?AVregex_error@std@@
.?AVbad_exception@std@@
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVbad_array_new_length@std@@
.?AVfailure@ios_base@std@@
.?AVruntime_error@std@@
.?AVother_error@detail@nlohmann@@
.?AVexception@detail@nlohmann@@
.?AVsystem_error@std@@
.?AVinvalid_iterator@detail@nlohmann@@
.?AU?$default_delete@$$BY0A@D@std@@
.?AVtype_error@detail@nlohmann@@
.?AVout_of_range@detail@nlohmann@@
.?AVparse_error@detail@nlohmann@@
.?AVfilesystem_error@filesystem@std@@
.?AV_System_error@std@@
.?AV_Locimp@locale@std@@
.?AVstl_critical_section_interface@details@Concurrency@@
.?AVstl_critical_section_win7@details@Concurrency@@
.?AVtype_info@@
.?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
.?AV?$_Ref_count_resource@PADU?$default_delete@$$BY0A@D@std@@@std@@
.?AV?$codecvt@DDU_Mbstatet@@@std@@
.?AV?$basic_ifstream@DU?$char_traits@D@std@@@std@@
.?AV_Node_if@std@@
.?AV?$collate@D@std@@
.?AV?$_Node_str@D@std@@
.?AVios_base@std@@
.?AVerror_category@std@@
.?AV?$ctype@D@std@@
.?AV_Node_end_rep@std@@
.?AV_System_error_category@std@@
.?AV_Node_end_group@std@@
.?AV_Node_back@std@@
.?AVcodecvt_base@std@@
.?AVGdiplusBase@Gdiplus@@
.?AV_Facet_base@std@@
.?AV_Generic_error_category@std@@
.?AU_Crt_new_delete@std@@
.?AV?$_Iosb@H@std@@
.?AV_Iostream_error_category2@std@@
.?AV?$_Ref_count_obj2@V?$output_string_adapter@DV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@detail@nlohmann@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV_Node_base@std@@
.?AVImage@Gdiplus@@
.?AUctype_base@std@@
.?AV?$output_string_adapter@DV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@detail@nlohmann@@
.?AV_Root_node@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AVfacet@locale@std@@
.?AV_Node_assert@std@@
.?AV?$_Ref_count_obj2@U_Recursive_dir_enum_impl@filesystem@std@@@std@@
.?AV_Ref_count_base@std@@
.?AVBitmap@Gdiplus@@
.?AV_Node_rep@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AU?$output_adapter_protocol@D@detail@nlohmann@@
.?AV?$_Node_class@DV?$regex_traits@D@std@@@std@@
.?AV_Node_capture@std@@
.?AV_Node_endif@std@@
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
00+020=0H0a0|0
1:1A1\1
3"313:3A3j3r3|3
3B4H4R4j4z4
55%5/5<5D5}5
82989B9Z9j9
:!:1:Y:v<|<
4'484j4q4
5,5Z5a5|5
6J6Q6l6
7'7,767L7`7d7n7|7
8!8-878C8_8t8
:1:=:J:W:
;?;V;x;
<A<V<"=(=4=
?<?Y?f?
8.8;8H8
9(9F9a9n9
;,;i;#<0<
>L?]?c?
0;0A0S0
2,2V2r2
0 1:1<2O2T2
899`9m91:
3%3M3b3
3r4~4{5
2-262B2
566k6y7
<O=g=W?
%1Y1I2
5_6v6r7
0o1z1j3
5M7n7t7|7)8Y8
9 :H:w:
=M>T>z>
3y4)6|6
O0\0s0
7/:B:c:
8"8+81868=8C8K8U8
131F1L1
4=5H5k5
6(6T6^6
>)?T?e?v?
4)5T5e5v5
:);T;e;v;
0)1T1e1v1
0)2`2l2w2
2233859
I3q4F7W7m7
0R0y0
52696H6
1]2k2r2
3H3u3{3
C0a0~0
5'636?6E6`6i6
y39?`?f?
5U6_7m7
6(929W9
;H>R>w>
6'6h8r8
0+0O0z0p2
7*7N7y7o9
>)>M>x>
131)393]3
828(:8:\:
'171[1
606&868Z8
=/=%?5?Y?
4.4$646X6
;-;)=9=]=
2A2:4J4n4
2&2J2x2
59527B7j7,:6:^:
4"4.4y4
? ?(?7?M?
2G2M2U2
=%>7>M>
5!636I6m8H:\:p:
606J6_<
=2=L=f=
>a?g?o?u?
>0J0S0Y0
152;2C2I2f2l2}2
2N4e4o4v4|4*5Y5c5o5y5
516$7:7n7y7
9'9@9M9^9=>T?
0!0'0K0^0r0
161a1f1
<)<8<B<M<X<i<
3)3:3Q3h3
030I0_0u0
1"1*1F1
6-7X7c7
8<9e9|9,:U:
<0B0_0V3
32465F6
565\5z5
7&8L8^8l8
0#1L1z1
1#2W2v2
;#<I<T<X<\<`<d<h<l<p<t<
<~<.=~=
>I>T>X>\>`>d>h>l>p>
5F618A8Q8y8
0f1F4a4
8Y8z8@9
6\7l7p7
7H8M8S8Y8_8e8k8q8w8}8
8.:g:n:
<9<@<b<i<p<
> >$>`>p>t>x>
2$2-262n2
3%383K3^3q3
4/4B4U4h4{4
5&595L5P5T5X5\5`5d5h5l5p5t5x5|5
:&:@:F:
>#>?>i>!?-?6???P?X?p?{?
869F;c;
;[<g<p<y<
2-3C3u3
;3;R;q;
< <$<(<,<0<4<
;O<x?|?
0>0E0,1014181<1@1D1H1L1P1v2
4@4L4P4T4X4\4`4d4h4v467
2O3K4t4
9&<W<}<
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2&5
9N9,<6>
5064686<6
:_:i:z:
=L=?>x>&?
?(?2?U?\?h?r?
00070F0P0p0w0
=L?Z?h?v?
=5V5l5R7W7i7
0 0$0(0,0004080<0a2i2x2
2.3B3!6-676"7)70777>7E7L7a7|7
6N:S:j; <:<
a3s3|3
4%7F7R7
8 929?9W9g9w9
:(:2:Y:z:
; ;+;2;:;K;P;Z;e;u;
<&<.<4<:<F<L<V<`<w<
=#=3=B=R=
>">->7>B>O>
?+?1?=?K?X?f?
0&0D0J0[0
1+1P1Z1i1x1
5J5U5]5e5m5u5
213H3L3P3T3X3\3`3x3|3
7"7:7@7H7T7[7a7g7v7}7
7D8o92:w>
?\?`?d?
0%0C0N0
0 111|1
152F2[2
303[3t3
6<6K6r6
;0<T<k<q<
616?6E6
67>7p7
;>;U;g;m;s;
;)<1<C<K<
><>F>L>V>
>E?S?`?h?
0?0R0`0u0
1V1h1n1
252O2U2\2h2q2z2
2#353\3u3
8<;@;D;H;L;P;T;X;\;`;d;h;
;;$;A=
6%606a6
4(5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
*111D5
599t=x=|=
=7?>?d?h?l?
X0\0`0
7o<v<2>D>e>j>
2-3L3T3
8 9-9:9
4F5M5a5
V0^0o0
0l5s5|5
7 767H7L7P7T7y7
0D1S1}1
5"5<5@5D5H5
0"0/0A0H0Z0a0f0v0
0"131A1 7
V1r1~1
=H>h>s>|>
2>2\2T3
5,555H5y5
7!8<8G8X8
8;9\9t9
<*=]=~=
+0C0T0e0
1,252T2
3)41494n4
>$>>>p>
g<{<>=*>
l102D2
22h2p2
4=5f5^6
:@:p:|:
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0
3 3)3<3Q3
626H6]6x6
6F7X7p7
9 9$9(9,9
==5=;=Y=n=y=
>>*>X>t>z>
? ?1?;?L?Y?a?i?v?~?
0 0$0(0,0004080<0@0D0H0L0P0T0X0*3#5
:a;l;x;
< <'<F<Z<a<
>1>L>k>
?"?9?f?
00#0'0+0/03070;0?0C0G0Z0w0
1&191^1
202<2n2z2
3.3H3T3o3
4 4+474
6:6@6b6u6
8<8U8]8m8
9*909S9f9
:A:R:Y:a:w:
<"<:<U<`<v<|<
=9=?=o=}=
?e?l?z?
0C1S1e1|1
9+9;9A9H9O9\9
=0=?=V=\=b=h=n=t=z=
=5>B>j>|>
13181E1
1M2^2h2q2
3#3+3g3q3z3
4L6b6.7N7X7
7K8a8~8
8.979D9J9
::2:@:F:L:R:X:^:e:l:s:z:
;8;F;L;R;X;^;d;k;r;y;
;7<I<y<
=B>L>\>w>Q?a?q?
0%0)02060B0F0U0Y0b0f0u0y0
1+1/1=1A1K1O1}1G2'9
031D1m2a3
35(5t5
7E7N7y8
3U3_3s3
4'4<4C4
>%>V>~>
4J5S5z6
7*7K8`8
;M<^<`=
3-354G4y4
5(6<6W7`7
8#9`9m9
:*;B;o<
<'=%><>
B0Z0;1P1p1
6D7Q7U8y8
;';l;y;v<
>0K061C1
6?6H637@7o7x7Z8m8
=*=U=x=M>m>
3-3J3i3
?[?s?x?
3:3_3@4
:8>8B8F8J8N8R8V8Z8^8b8f8j8n8r8v8z8~8
: ;Y;z;
< <1<B<L<Z<u<
:/:K:k:y:
<;<O<a<
=)=2=7=<=W=a=m=r=w=
>!>9>s>
2;3T3^3j3
:m;u;|;
<<#<'<+</<3<7<;<v<{<
4"4Y4`4
6^8p:_;
>">&>*>.>2>
5!6)606]6
8!808>8J8V8d8t8
9;:H:s:?;
9$929E9N9[9j9~9
;*;C;K;T;];n;
6.6K6l6
2+4]4c5
4X4a4M6W6p6z6
:#:6:A:L:k:
>,>7>?>J>P>[>a>o>
?"?/?6???T?m?~?
7I<O<a<l<
1"1G1e1y1
4V4`4{4
9.989Z9{9
5$565I5c5w5
686f6u6
7 707=7a7k7
545I5S5
8-8W8^8d8k8p8
9(9-929B9G9L9\9a9f9v9{9
:):7:C:O:c:y:
;*;:;N;S;X;u;
;'<^<c<h<
= =%=C=R=
>(>L>^>t>y>~>
0 020>0S0]0
>M?_?e?
252<2S2i2v2{2
4!4+454?4c4m4w4
5C6L6s6x6~6
;U<_<u<
3364f4+666F6
:%:k:z:
;B<O<~<
=d=x=x?
9#:+:\:e:p:
;3;<;E;
>/>_>g>
?!?,?o?
6G6d6x6
8F9f9v9+:,;<;M;U;e;v;
=0=9=?=
> >)>F?O?g?
::&:@:O:Y:f:p:
0d1i1o1t1
383V3d3k3
9919C9U9g9y9
<U=g=y=
=L?S?[?c?k?
708G8g8
7)8R8g8}8
:f<*=`=g=n=
4B5M5S5\5
798A8I8Q8Y8w8
<+<?<E<r>
31393H3P3b3
:0:<?k?
;!;2;A;R;a;r;
3'4@4Q4b4
6Y6q6y6
9+9i9a:
:;z;}<
<5=A=R=
=&>K>p>6?
7l8G:;
;,=A=R=
4"414B4Q4b4
505S5p5
=9=W>x>
9 9::S:p:
; ;3;C;`;s;
334P4p4
505P5x5
: ;3;C;~;
>8>o>!?Z?
5 5=5Z5
6!63686S6X6s6x6
7!717A7Q7a7v7
8&808\8p8
9$9b9l9v9
:!:*:L:`:e:m:z:
;#;(;C;H;c;h;
<#<-<A<Q<[<e<o<y<
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4h4l4p4t4x4|4
5(5,505H5L5P5T5X5\5`5d5h5l5p5t5x5|5
5@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
2 9$9(9,9094989X9\9`9d9h9l9p9x9|9
: :$:(:,:0:4:
P<T<X<\<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
? ?(?0?8?@?H?P?X?`?h?p?x?
? ?(?,?0?4?8?<?@?D?L?P?T?X?\?`?d?h?t?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2
6 6$6(6,6064686<6h<l<p<t<x<|<
<<=D=L=T=\=d=l=t=|=
0$1(1,101h1t1
2(242@2L2X2d2p2|2
3$303<3H3T3`3l3x3
4 4,484D4P4\4h4x4
5 5,585D5P5\5h5t5
5<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6
X0`0h0p0x0
1 1(10181@1H1P1X1`1h1p1x1
2 2(20282@2H2P2X2`2h2p2x2
3 3(30383@3H3P3X3`3h3p3x3
4 4(40484@4H4P4X4`4h4p4x4
5 5(50585@5H5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
7 7(70787@7H7P7X7`7h7p7
,9094989<9@9D9
;h=l=p=
;$;(;,;0;4;8;<;@;D;L;P;X;\;`;d;h;l;p;t;x;|;
;h<l<p<t<x<
8 8$8(8
D;H;L;P;T;X;\;
:,;0;4;8;<;@<D<H<L<P<T<X<\<`<l<p<|<
= =$=0=4=@=D=P=T=`=d=p=t=
?,?0?4?<?T?d?h?x?|?
0 0$0,0D0T0X0h0l0p0t0|0
1,101@1D1H1P1h1x1|1
2$2(202H2L2d2h2|2
3$3(3,3034383L3P3T3l3|3
4 4$484<4L4P4h4x4|4
50545L5P5h5x5|5
6$6<6@6D6L6P6X6p6t6
7,70747L7\7`7p7t7x7|7
8 8$8(8<8@8D8X8\8l8p8t8
9(9,9<9@9P9`9d9h9l9p9t9
: :$:<:@:D:H:L:`:d:h:l:t:
; ;$;(;,;0;8;<;@;D;H;P;T;\;t;
< <$<<<@<X<\<t<x<
= =$=8=<=@=D=L=d=t=
>$>4>D>T>X>h>l>p>t>x>|>
? ?0?4?8?<?P?T?X?l?|?
0 040D0H0`0p0t0
1 1(1@1P1T1\1`1d1x1|1
2 2$2(2,2@2D2H2L2P2X2\2`2d2l2
2$:D:P:p:x:
;0;8;D;L;
<$<D<L<T<`<
=$=,=8=X=`=h=p=x=
><>D>L>X>x>
?,?4?<?D?P?p?|?
0 0,0L0T0`0
1(1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4T4\4d4l4t4|4
5$5,545<5D5L5T5d5l5x5
6 6(60686@6H6T6t6|6
7$7,747<7D7L7T7\7d7p7
8 8@8L8l8t8|8
9 9(949T9\9d9p9
:<:D:L:T:`:
;$;,;4;<;D;L;T;\;d;l;t;|;
<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>D>L>T>`>
? ?0?T?\?d?l?t?|?
0 0(000<0\0d0l0t0|0
1<1H1h1t1
2,242<2D2L2T2\2d2l2t2|2
3(30383@3H3T3t3|3
4(404<4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6X6|6
7 7D7L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5P5p5x5
6(6L6T6\6d6l6t6|6
787@7H7T7t7|7
8$8D8L8X8`8|8
9$9,949<9D9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:t:|:
; ;(;0;@;H;P;`;h;p;
<$<,<<<D<L<T<\<d<l<t<|<
=<=D=L=T=\=d=l=t=
>4><>D>L>T>\>d>l>t>|>
?$?,?8?X?h?
0 0(00080@0L0l0t0
1$1,141<1D1L1T1\1h1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6 6D6L6T6\6d6l6t6|6
7$7,747<7D7L7T7\7d7p7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;8;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4>L>T>\>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040@0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5h5
6$6,646<6D6L6T6\6d6l6t6|6
7 707T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9\9d9l9t9|9
: :(:0:8:D:d:l:x:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
= =@=H=P=`=
>$>,>4><>D>L>T>\>d>l>t>|>
?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3p3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6\6t6|6
7$7,747<7D7L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9\9d9l9t9|9
:$:0:T:\:d:l:t:|:
;$;,;4;<;T;\;d;l;t;|;
<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=
>$>,>4><>D>L>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0,040@0`0h0p0
1$101T1\1d1l1t1|1
242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,686\6d6l6t6|6
7$7,747<7D7L7T7\7d7l7t7|7
8$8,888X8h8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<
=$=,=8=X=d=
>4>@>`>l>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0
141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6\6d6l6t6|6
7$7,747<7D7L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>d>l>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2(202P2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,4<4D4T4`4h4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6\6d6l6t6|6
7$7,7<7H7h7p7x7
8 8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9`9
:8:D:L:d:|:
; ;4;D;P;p;|;
<8<@<L<l<x<
=(=H=P=X=`=l=
>$>0>P>\>
?$?0?P?\?|?
0<0H0P0
101<1\1d1p1
2$2,242<2D2L2T2`2
3$3,343<3D3P3t3|3
4<4D4L4T4\4d4l4t4|4
505<5\5d5p5
6$6,646<6D6L6T6\6d6p6
787D7d7l7x7
8<8D8L8X8x8
9$9,989X9`9h9t9
:$:0:P:X:`:h:t:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
=(=8=D=d=l=x=
>$>,>4><>H>h>x>
? ?,?L?X?|?
0$0,040<0D0L0T0\0d0l0x0
1(1H1X1|1
2$2,242<2D2L2X2`2
3(343<3p3
3 404<4\4h4
5$50585l5|5
5$646@6H6|6
6,7<7H7P7
8$8,8d8l8t8|8
8D9L9T9\9d9l9t9|9
:$:,:4:<:D:\:d:l:t:|:
;$;,;4;<;D;L;T;|;
<$<@<d<l<t<
=$=,=4=<=D=
>$>,>4>
?L?T?\?d?l?t?|?
0$0,040\0d0l0t0|0
1$1,141<1H1h1p1|1
2$202P2X2`2h2p2|2
383@3L3l3t3|3
4,484\4d4l4t4|4
5 545T5`5
5 606<6D6x6
7(7L7T7\7d7l7t7|7
8 8@8H8P8\8|8
9(9H9P9X9`9h9t9
:0:<:\:d:l:t:|:
;0;8;@;H;P;X;d;
<(<8<\<d<l<t<|<
=4=D=P=p=x=
>$>,>4><>D>P>t>
?(?L?T?\?d?l?t?|?
0 0(0\0l0x0
1(101d1t1
2,282@2X2`2h2
343<3D3L3T3\3d3l3t3|3
5$505P5X5d5
6 6,6L6X6x6
7$707P7X7`7h7t7
8$808P8X8`8h8p8x8
9$9,989X9d9
: :4:<:D:L:P:T:\:p:x:
;$;h;t;
<$<(<H<P<T<p<x<|<
= =(=,=4=H=h=
>(>H>h>
?(?H?h?p?|?
00080@0L0l0x0
101P1p1
202P2p2
303P3p3
4,40484<4@4H4\4d4x4
5(5054585@5D5H5P5d5l5p5t5|5
6 6(606D6L6T6\6d6l6p6t6x6|6
2 2$2(2D2H2L2X3
>,>8>L>X>l>x>
?0?4?8?L?X?x?
0,080L0X0l0x0
1,181L1X1l1x1
2,282L2X2l2x2
3034383P3T3X3p3t3x3
4@4L4h4p4t4x4|4
5$5D5d5
6(6L6l6
: :<:`:|:
;,;P;p;
jjjjjj
jjjjjjj
jjjjjjj
rkernel32.dll
!x-sys-default-locale
Rapi-ms-win-core-fibers-l1-1-1
api-ms-win-core-synch-l1-2-0
kernel32
api-ms-
minkernel\crts\ucrt\inc\corecrt_internal_strtox.h
__crt_strtox::floating_point_value::as_double
_is_double
__crt_strtox::floating_point_value::as_float
!_is_double
(null)
mscoree.dll
((((( H
((((( H
(
PLC_ALL
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
Rapi-ms-win-core-datetime-l1-1-1
api-ms-win-core-file-l1-2-4
api-ms-win-core-file-l1-2-2
api-ms-win-core-localization-l1-2-1
api-ms-win-core-localization-obsolete-l1-2-0
api-ms-win-core-processthreads-l1-1-2
api-ms-win-core-string-l1-1-0
api-ms-win-core-sysinfo-l1-2-1
api-ms-win-core-winrt-l1-1-0
api-ms-win-core-xstate-l2-1-0
api-ms-win-rtcore-ntuser-window-l1-1-0
api-ms-win-security-systemfunctions-l1-1-0
ext-ms-win-ntuser-dialogbox-l1-1-0
ext-ms-win-ntuser-windowstation-l1-1-0
advapi32
kernelbase
api-ms-win-appmodel-runtime-l1-1-2
user32
api-ms-win-core-fibers-l1-1-0
ext-ms-
Rja-JP
american
american english
american-english
australian
belgian
canadian
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
dutch-belgian
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
french-belgian
french-canadian
french-luxembourg
french-swiss
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
irish-english
italian-swiss
norwegian
norwegian-bokmal
norwegian-nynorsk
portuguese-brazilian
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.RisePro.4!c
tehtris Clean
MicroWorld-eScan Gen:Variant.Lazy.391192
CMC Clean
CAT-QuickHeal Clean
ALYac Gen:Variant.Doris.15071
Malwarebytes Spyware.PasswordStealer
Sangfor Infostealer.Win32.Agent.Vs1f
K7AntiVirus Trojan ( 005956e81 )
BitDefender Gen:Variant.Lazy.391192
K7GW Trojan ( 005956e81 )
Cybereason Clean
Arcabit Trojan.Doris.D3ADF
Baidu Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/Agent.ADVG
Cynet Malicious (score: 100)
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan-PSW.Win32.RisePro.gen
Alibaba Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
Avast Win32:PWSX-gen [Trj]
Rising Downloader.Agent!1.D93C (CLASSIC)
Emsisoft Gen:Variant.Doris.15071 (B)
F-Secure Trojan.TR/Agent.rapml
DrWeb Trojan.Siggen21.28024
VIPRE Gen:Variant.Doris.15071
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Dropper.th
Trapmine suspicious.low.ml.score
FireEye Generic.mg.a2a68318da5737ff
Sophos Mal/Generic-S
SentinelOne Clean
Jiangmin Clean
Webroot Clean
Avira TR/Agent.rapml
MAX malware (ai score=84)
Antiy-AVL Trojan/Win32.Agent
Gridinsoft Clean
Xcitium Clean
Microsoft Trojan:Win32/Casdet!rfn
ViRobot Clean
ZoneAlarm HEUR:Trojan-PSW.Win32.RisePro.gen
GData Gen:Variant.Doris.15071
Google Clean
AhnLab-V3 Trojan/Win.Generic.C5471974
Acronis Clean
McAfee Artemis!A2A68318DA57
TACHYON Clean
VBA32 TrojanPSW.RisePro
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Malware.Win32.Gencirc.13eeea47
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/Agent.GOC!tr
BitDefenderTheta Gen:NN.ZexaF.36662.uv0@a8760bok
AVG Win32:PWSX-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_90% (D)
No IRMA results available.