Static | ZeroBOX

PE Compile Time

2023-09-21 21:26:07

PE Imphash

b625b0422748e8ddd8a2e69ebe413b45

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000fb748 0x000fb800 6.59377831518
.rdata 0x000fd000 0x000321e8 0x00032200 5.99903636683
.data 0x00130000 0x000035a8 0x00002200 3.47203719999
.rsrc 0x00134000 0x000004e8 0x00000600 3.61257166033
.reloc 0x00135000 0x00007eac 0x00008000 6.50508710962

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x001340a0 0x000002c8 LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_MANIFEST 0x00134368 0x0000017d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library KERNEL32.dll:
0x4fd054 GetLocaleInfoA
0x4fd058 OpenProcess
0x4fd060 MultiByteToWideChar
0x4fd064 Sleep
0x4fd068 GetTempPathA
0x4fd06c GetModuleHandleExA
0x4fd074 GetTickCount64
0x4fd078 CopyFileA
0x4fd07c GetLastError
0x4fd080 GetFileAttributesA
0x4fd088 CreateFileA
0x4fd08c SetEvent
0x4fd090 TerminateThread
0x4fd094 LoadLibraryA
0x4fd098 GetVersionExA
0x4fd09c DeleteFileA
0x4fd0a0 Process32Next
0x4fd0a4 CloseHandle
0x4fd0a8 GetSystemInfo
0x4fd0ac CreateThread
0x4fd0b0 ResetEvent
0x4fd0b8 HeapAlloc
0x4fd0bc SetFileAttributesA
0x4fd0c0 GetLocalTime
0x4fd0c4 GetProcAddress
0x4fd0c8 LocalFree
0x4fd0d0 GetFileSize
0x4fd0d4 RemoveDirectoryA
0x4fd0d8 ExitProcess
0x4fd0dc GetCurrentProcessId
0x4fd0e0 GetProcessHeap
0x4fd0e8 FreeLibrary
0x4fd0ec WideCharToMultiByte
0x4fd0f0 CreateProcessA
0x4fd0f4 CreateDirectoryA
0x4fd0f8 GetSystemTime
0x4fd0fc CreateEventA
0x4fd100 GetModuleHandleA
0x4fd108 IsWow64Process
0x4fd10c IsDebuggerPresent
0x4fd110 GetComputerNameA
0x4fd118 lstrcatA
0x4fd11c lstrcpyA
0x4fd120 lstrcpynA
0x4fd124 SetFilePointer
0x4fd128 lstrlenA
0x4fd12c AreFileApisANSI
0x4fd134 GetFullPathNameW
0x4fd138 GetDiskFreeSpaceW
0x4fd13c LockFile
0x4fd148 GetFullPathNameA
0x4fd14c SetEndOfFile
0x4fd150 GetTempPathW
0x4fd154 GetFileAttributesW
0x4fd158 FormatMessageW
0x4fd15c GetDiskFreeSpaceA
0x4fd160 DeleteFileW
0x4fd164 UnlockFile
0x4fd168 LockFileEx
0x4fd174 FormatMessageA
0x4fd17c GetTickCount
0x4fd180 FlushFileBuffers
0x4fd184 WriteConsoleW
0x4fd188 HeapSize
0x4fd198 GetCommandLineW
0x4fd19c GetCommandLineA
0x4fd1a0 GetOEMCP
0x4fd1a4 GetACP
0x4fd1a8 IsValidCodePage
0x4fd1ac GetCurrentThreadId
0x4fd1b0 LocalAlloc
0x4fd1b4 WaitForSingleObject
0x4fd1bc FindClose
0x4fd1c4 FindNextFileA
0x4fd1cc TerminateProcess
0x4fd1d0 WriteFile
0x4fd1d4 GetCurrentProcess
0x4fd1d8 HeapFree
0x4fd1dc FindFirstFileA
0x4fd1e0 Process32First
0x4fd1e8 SetStdHandle
0x4fd1ec HeapReAlloc
0x4fd1f0 EnumSystemLocalesW
0x4fd1f4 GetUserDefaultLCID
0x4fd1f8 IsValidLocale
0x4fd1fc GetLocaleInfoW
0x4fd200 ReadFile
0x4fd204 LCMapStringW
0x4fd208 CompareStringW
0x4fd20c GetTimeFormatW
0x4fd210 GetDateFormatW
0x4fd214 GetFileSizeEx
0x4fd218 GetConsoleOutputCP
0x4fd21c ReadConsoleW
0x4fd220 GetConsoleMode
0x4fd224 GetStdHandle
0x4fd228 GetModuleFileNameW
0x4fd22c GetModuleHandleExW
0x4fd230 GetFileType
0x4fd234 GetModuleFileNameA
0x4fd238 CreateFileW
0x4fd23c SetFilePointerEx
0x4fd240 LoadLibraryExW
0x4fd244 TlsFree
0x4fd248 TlsSetValue
0x4fd24c TlsGetValue
0x4fd250 TlsAlloc
0x4fd258 SetLastError
0x4fd25c RaiseException
0x4fd260 RtlUnwind
0x4fd264 InitializeSListHead
0x4fd268 GetStartupInfoW
0x4fd270 FindFirstFileW
0x4fd274 FindFirstFileExW
0x4fd278 FindNextFileW
0x4fd284 GetModuleHandleW
0x4fd28c GetLocaleInfoEx
0x4fd290 InitializeSRWLock
0x4fd2a0 LCMapStringEx
0x4fd2a4 EncodePointer
0x4fd2a8 DecodePointer
0x4fd2ac CompareStringEx
0x4fd2b0 GetCPInfo
0x4fd2b4 GetStringTypeW
Library USER32.dll:
0x4fd2e4 GetWindowRect
0x4fd2e8 GetDC
0x4fd2ec GetSystemMetrics
0x4fd2f4 GetDesktopWindow
0x4fd2f8 ReleaseDC
0x4fd2fc EnumDisplayDevicesA
0x4fd300 CharNextA
0x4fd304 wsprintfA
Library GDI32.dll:
0x4fd040 SelectObject
0x4fd044 CreateCompatibleDC
0x4fd048 DeleteObject
0x4fd04c BitBlt
Library ADVAPI32.dll:
0x4fd000 SystemFunction036
0x4fd004 RegOpenKeyExA
0x4fd008 RegSetValueExA
0x4fd00c RegEnumKeyA
0x4fd010 RegCloseKey
0x4fd018 RegQueryValueExA
0x4fd01c CredEnumerateA
0x4fd020 RegCreateKeyExA
0x4fd024 CredFree
0x4fd028 GetUserNameA
0x4fd02c RegEnumKeyExA
Library SHELL32.dll:
0x4fd2d0 SHGetFolderPathA
0x4fd2d4 ShellExecuteA
Library ole32.dll:
0x4fd374 CoUninitialize
0x4fd378 CoCreateInstance
0x4fd37c CoInitializeEx
0x4fd380 CoInitialize
Library WS2_32.dll:
0x4fd30c WSACleanup
0x4fd310 closesocket
0x4fd314 shutdown
0x4fd318 getaddrinfo
0x4fd31c WSAStartup
0x4fd320 WSAGetLastError
0x4fd324 socket
0x4fd328 connect
0x4fd32c recv
0x4fd330 freeaddrinfo
0x4fd334 setsockopt
0x4fd338 send
Library CRYPT32.dll:
0x4fd034 CryptUnprotectData
Library SHLWAPI.dll:
0x4fd2dc PathFindExtensionA
Library gdiplus.dll:
0x4fd340 GdipSaveImageToFile
0x4fd348 GdipFree
0x4fd34c GdipDisposeImage
0x4fd354 GdipAlloc
0x4fd358 GdipCloneImage
0x4fd360 GdiplusShutdown
0x4fd364 GdiplusStartup
Library SETUPAPI.dll:
Library ntdll.dll:

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
SVWu:ff
;E$rjw
D$$PVSf
E P;5X5S
 !!"!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!#!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$%&&&&&&&&&&&&'&&()))*f
+AL+QL;
+qL+yL;
rk9_ vf
+AL+QL;
+qL+yL;
FH<cuP
u4FG;u
F,+N\;
Fl+Fp=
f+NdfI
N0;N,s
qD;p s
qD;p(s
Al;A`s`
Al;A`r
tS9^|vN
t$0OPV
SVW<-u
9N\~33
[ ;~\|
W9S\~,3
;O0s%Rj
C`;C v
u&8FCu
f;F2s+
|$$9D$,u
#Fd_^Y
9^@v'3
AD;C\u
@H:Aos
 !""#$%&&&&'(()*+,--./0012345667889:;<=>>>>>>;????@@@@@ABCDEFFGcHIccJKLcccccMNOPQccRcSTUVWXYZ[\]ccccccccc^_`ab
;F u";V$
D$,;t$
t$HPVj
T$<WjPV
t$8PWjNV
F ;G uO
F$;G$uG
A ;F u
A$;F$t6
VPSSSSh4
BI:AIt
8G|u(P
f!GJ_^
D$(+D$
D\$0VW
;FL~?hh
s 9{$~:
t4< t03
9G ue9W$u`
F$#N #E
F$#N #E
#D$ #T$$
#L$ #D$$
L$8uW;
~D$p!|$
T$D!D$
+2+34+567
+%OPQR
+STUVWX4YZ[
=\]^_`aabc``defghijkkkkkkkklmlm^nopqrsttuv
xyz{|}~
<>to<<u
uuj\Vh
PPPPPWS
3X,3x03p43P83H<
3y03q 3Q
3q43Q$
IL5l>+3
I\5y!~
1P 1H$_^[
QQSVWd
t/hPlP
URPQQh
UQPXY]Y[
PVVVVV
PVVVVV
PWWWWW
PVVVVV
PVVVVV
f9<H_}
PPPPPPPP
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
8^8tb9^4~]
tb9^4~]
PRRRRR
PVVVVV
_PSSSSS
j"_VSSSS
WVVVVV
PVSRSQV
uSSSSj
ARPRQh
jYjf
SWt@jU
_t^PVj@
u/j,Xf;
D8(Ht'
D8(HtU
D8(Ht5F
PVVVVV
PPPPPWV
PP9E uPPSWP
<at.<rt!<wt
<=upG8
M,j"^QRRRRR
Vj0XPW
M$j"^QRRRRR
j"[VWWWW
f95D.S
u kE$<
j-Xf9E
Af95F.S
QQSVj8j@
[PVVVVV
j"[WVVVV
PVVVVV
f9:t!V
C PjPW
C$PjQW
C*PjTW
C+PjUW
C,PjVW
C-PjWW
C.PjRW
C/PjSW
CHPjPW
CLPjQW
u{9^\t/
NX9^`t1
u2Vj@hh
9C`u99C\t4
u29K\t-
^PQQQQQ
E ^PQQQQ
CY<u
PPPPPPPP
bad allocation
bad function call
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_parse)
regex_error(error_syntax)
regex_error
GetTempPath2W
success
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
cross device link
destination address required
device or resource busy
directory not empty
executable format error
file exists
file too large
filename too long
function not supported
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
invalid argument
invalid seek
io error
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no lock available
no message available
no message
no protocol option
no space on device
no stream resources
no such device or address
no such device
no such file or directory
no such process
not a directory
not a socket
not a stream
not connected
not enough memory
not supported
operation canceled
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
permission denied
protocol error
protocol not supported
read only file system
resource deadlock would occur
resource unavailable try again
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many files open
too many links
too many symbolic link levels
value too large
wrong protocol type
0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefghijklmnopqrstuvwxyz
GetCurrentPackageId
GetSystemTimePreciseAsFileTime
LibsodiumDRGsysrandom
bad exception
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
[aOni*{
~ $s%r
@b;zO]
v2!L.2
IND)ind)
(null)
CorExitProcess
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
UTF-16LEUNICODE
AreFileApisANSI
CompareStringEx
EnumSystemLocalesEx
GetDateFormatEx
GetLocaleInfoEx
GetTimeFormatEx
GetUserDefaultLocaleName
IsValidLocaleName
LCMapStringEx
LCIDToLocaleName
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
_hypot
_nextafter
1#QNAN
1#SNAN
]vQ<)8
|)P!?Ua0
Eb2]A=
u?^p?o4
y1~?|"
?x+s7
?5Od%
?|I7Z#
>,'1D=
?g)([|X>=
~U`?K
:h"?bC
@H#?43
Ax#?uN}*
r7Yr7=
F0$?3=1
H`$?h|
&?~YK|
sU0&?W
<8bunz8
?#%X.y
F||<##
<@En[vP
?5Wg4p
%S#[k=
"B <1=
Unknown exception
bad array new length
string too long
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
vector too long
iostream stream error
00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899
Qkkbal
[-&LMb#{'
w+OQvr
INSKyu
)\ZEo^m/
H*0"ZOW
mj>zjZ
IiGM>nw
ewh/?y
OZw3(?
V_:X1:
1.2.11
unzip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll
uLm:.P
)Q+e4"m-.1
r<f`~65k
3b1$ i
tFn,v_1#
;ox=>/p
onoffalseyestruefull
0123456789ABCDEF0123456789abcdef
******""""""""""""""""""""
3.6.20
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
0123456789ABCDEF
naturaleftouterightfullinnercross
RSTUVWXYZ[\
12QRSTUVWXYZ[\XYZ[\DEFGHIJKLMNOP
RSTUVWXYZ[\
RSTUVWXYZ[\
`6mcde
DEFGHIJKLMNOP
RSTUVWXYZ[\
`abcdef^_p
_abcdefVW12<l>
whivDEFGHIJKLMNOP
RSTUVWXYZ[\
bVWXYZ[\
DEFGHIJKLMNOPwRSTUVWXYZ[\
9DEFGHIJKLMNOPCRSTUVWXYZ[\
12s^_GHo
DEFGHIJKLMNOPbRSTUVWXYZ[\
DEFGHIJKLMNOPuRSTUVWXYZ[\
DEFGHIJKLMNOPpRSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
EFGHIJKLMNOP
RSTUVWXYZ[\
FGHIJKLMNOP
RSTUVWXYZ[\
]^_Lvb
SQLite format 3
CREATE TABLE sqlite_master(
type text,
name text,
tbl_name text,
rootpage integer,
sql text
thstndrd
,,,,,,,,,,
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
generic
iostream
system
bad locale name
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
invalid stoi argument
stoi argument out of range
recursive_directory_iterator::recursive_directory_iterator
recursive_directory_iterator::operator++
exists
status
weakly_canonical
map/set too long
[json.exception.
parse error
parse_error
, column
at line
invalid_iterator
type_error
out_of_range
other_error
/************/
/*************************************************************/
/***********************************************************/
/*************/
/**************/
/***************/
/****************/
unknown error
abcdefghijklmnopqrstuvwxyz0123456789_ABCDEFGHIJKLMNOPQRSTUVWXYZ
cannot get value
cannot use push_back() with
cannot use operator[] with a string argument with
"bytes": [
"subtype":
{"bytes":[
],"subtype":
<discarded>
cannot compare iterators of different containers
961c151d2e87f2686a955a9be24d316f1362bf21 3.9.1
object
string
boolean
binary
discarded
number
\u%04x
invalid UTF-8 byte at index
incomplete UTF-8 string; last byte: 0x
invalid string position
list too long
syntax error
while parsing
; last read: '
unexpected
; expected
<U+%.4X>
invalid BOM; must be 0xEF 0xBB 0xBF if given
invalid literal
<uninitialized>
true literal
false literal
null literal
string literal
number literal
<parse error>
end of input
'[', '{', or a literal
unknown token
invalid number; expected digit after '-'
invalid number; expected digit after '.'
invalid number; expected '+', '-', or digit after exponent
invalid number; expected digit after exponent sign
invalid comment; missing closing '*/'
invalid comment; expecting '/' or '*' after '/'
invalid string: missing closing quote
invalid string: '\u' must be followed by 4 hex digits
invalid string: surrogate U+D800..U+DBFF must be followed by U+DC00..U+DFFF
invalid string: surrogate U+DC00..U+DFFF must follow U+D800..U+DBFF
invalid string: forbidden character after backslash
invalid string: control character U+0000 (NUL) must be escaped to \u0000
invalid string: control character U+0001 (SOH) must be escaped to \u0001
invalid string: control character U+0002 (STX) must be escaped to \u0002
invalid string: control character U+0003 (ETX) must be escaped to \u0003
invalid string: control character U+0004 (EOT) must be escaped to \u0004
invalid string: control character U+0005 (ENQ) must be escaped to \u0005
invalid string: control character U+0006 (ACK) must be escaped to \u0006
invalid string: control character U+0007 (BEL) must be escaped to \u0007
invalid string: control character U+0008 (BS) must be escaped to \u0008 or \b
invalid string: control character U+0009 (HT) must be escaped to \u0009 or \t
invalid string: control character U+000A (LF) must be escaped to \u000A or \n
invalid string: control character U+000B (VT) must be escaped to \u000B
invalid string: control character U+000C (FF) must be escaped to \u000C or \f
invalid string: control character U+000D (CR) must be escaped to \u000D or \r
invalid string: control character U+000E (SO) must be escaped to \u000E
invalid string: control character U+000F (SI) must be escaped to \u000F
invalid string: control character U+0010 (DLE) must be escaped to \u0010
invalid string: control character U+0011 (DC1) must be escaped to \u0011
invalid string: control character U+0012 (DC2) must be escaped to \u0012
invalid string: control character U+0013 (DC3) must be escaped to \u0013
invalid string: control character U+0014 (DC4) must be escaped to \u0014
invalid string: control character U+0015 (NAK) must be escaped to \u0015
invalid string: control character U+0016 (SYN) must be escaped to \u0016
invalid string: control character U+0017 (ETB) must be escaped to \u0017
invalid string: control character U+0018 (CAN) must be escaped to \u0018
invalid string: control character U+0019 (EM) must be escaped to \u0019
invalid string: control character U+001A (SUB) must be escaped to \u001A
invalid string: control character U+001B (ESC) must be escaped to \u001B
invalid string: control character U+001C (FS) must be escaped to \u001C
invalid string: control character U+001D (GS) must be escaped to \u001D
invalid string: control character U+001E (RS) must be escaped to \u001E
invalid string: control character U+001F (US) must be escaped to \u001F
invalid string: ill-formed UTF-8 byte
vector<bool> too long
object key
object separator
number overflow parsing '
iterator does not fit current value
iterator out of range
cannot use erase() with
type must be string, but is
type must be boolean, but is
type must be object, but is
type must be number, but is
xdigit
()$^.*+?[]|\-{},:=!
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36
0123456789abcdef
out of memory
invalid block type
invalid stored block lengths
too many length or distance symbols
invalid code lengths set
invalid bit length repeat
invalid code -- missing end-of-block
invalid literal/lengths set
invalid distances set
invalid literal/length code
invalid distance code
invalid distance too far back
incorrect header check
unknown compression method
invalid window size
unknown header flags set
header crc mismatch
incorrect data check
incorrect length check
need dictionary
stream end
file error
stream error
data error
insufficient memory
buffer error
incompatible version
%H:%M:%S
current_time
%Y-%m-%d
current_timestamp
%Y-%m-%d %H:%M:%S
current_date
(NULL)
922337203685477580
%s\etilqs_
OsError 0x%x (%u)
%!.15g
%s-mj%08X
string or blob too big
unable to use function %s in the requested context
cannot open savepoint - SQL statements in progress
no such savepoint: %s
rollback
release
cannot %s savepoint - SQL statements in progress
cannot rollback transaction - SQL statements in progress
cannot commit transaction - SQL statements in progress
cannot start a transaction within a transaction
cannot rollback - no transaction is active
cannot commit - no transaction is active
database schema has changed
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s
integer
misuse of aliased aggregate %s
no such column
ambiguous column name
%s: %s.%s.%s
%s: %s.%s
%s: %s
misuse of aggregate function %.*s()
no such function: %.*s
wrong number of arguments to function %.*s()
%r %s BY term out of range - should be between 1 and %d
too many terms in ORDER BY clause
%r ORDER BY term does not match any column in the result set
too many terms in %s BY clause
a GROUP BY clause is required before HAVING
aggregate functions are not allowed in the GROUP BY clause
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
too many SQL variables
too many columns in %s
_ROWID_
misuse of aggregate: %s()
unknown function: %.*s()
%.*s"%w"%s
sqlite_rename_table
tbl_name=%Q
there is already another table or index with this name: %s
sqlite_
table %s may not be altered
UPDATE %Q.%s SET sql = sqlite_rename_table(sql, %Q), tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
Cannot add a PRIMARY KEY column
Cannot add a UNIQUE column
Cannot add a REFERENCES column with non-NULL default value
Cannot add a NOT NULL column with default value NULL
Cannot add a column with non-constant default
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
virtual tables may not be altered
Cannot add a column to a view
sqlite_altertab_%s
invalid name: "%s"
too many attached databases - max %d
cannot ATTACH database within transaction
database %s is already in use
database is already attached
attached databases must use the same text encoding as main database
unable to open database: %s
no such database: %s
cannot detach database %s
cannot DETACH database within transaction
database %s is locked
sqlite_detach
sqlite_attach
%s %T cannot reference objects in database %s
no such view
no such table
corrupt database
unknown database %T
object name reserved for internal use: %s
table %T already exists
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
INTEGER
no such collation sequence: %s
CREATE TABLE
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
tbl_name='%q'
table %s may not be dropped
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
sqlite_stat1
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
indexed columns are not unique
table %s may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
table %s has no column named %s
conflicting ON CONFLICT clauses specified
UNIQUE
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
name='%q'
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
a JOIN clause is required before %s
unable to open a temporary database file for storing temporary tables
table %s may not be modified
rows deleted
integer overflow
LIKE or GLOB pattern too complex
ESCAPE expression must be a single character
2009-11-04 13:30:02 eb7a544fe49d1626bacecfe53ddc03fe082e3243
typeof
length
substr
coalesce
ifnull
random
randomblob
nullif
sqlite_version
sqlite_source_id
last_insert_rowid
changes
total_changes
replace
zeroblob
group_concat
table %S has %d columns but %d values were supplied
%d values for %d columns
table %S has no column named %s
rows inserted
%s.%s may not be NULL
PRIMARY KEY must be unique
columns
column
are not unique
is not unique
WITHOUT ROWID
automatic extension loading failed: %s
exclusive
normal
memory
temporary storage cannot be changed from within a transaction
full_column_names
short_column_names
count_changes
empty_result_callbacks
legacy_file_format
fullfsync
reverse_unordered_selects
writable_schema
omit_readlock
read_uncommitted
recursive_triggers
default_cache_size
cache_size
page_size
max_page_count
page_count
locking_mode
journal_mode
delete
persist
truncate
journal_size_limit
temp_store
temp_store_directory
not a writable directory
synchronous
Safety level may not be changed inside a transaction
table_info
notnull
dflt_value
index_info
index_list
unique
database_list
collation_list
case_sensitive_like
encoding
UTF-16le
UTF-16be
UTF16le
UTF16be
UTF-16
unsupported encoding: %s
schema_version
user_version
freelist_count
malformed database schema (%s)
%s - %s
invalid rootpage
BINARY
unsupported file format
SELECT name, rootpage, sql FROM '%q'.%s
database schema is locked: %s
statement too long
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
only a single result allowed for a SELECT that is part of an expression
UNION ALL
INTERSECT
EXCEPT
ORDER BY clause should come after %s not before
LIMIT clause should come after %s not before
SELECTs to the left and right of %s do not have the same number of result columns
no such index: %s
sqlite_subquery_%p_
no such table: %s
no tables specified
too many columns in result set
DISTINCT aggregates must have exactly one argument
too many terms in compound SELECT
no such column: %s
rows updated
_rowid_
CREATE VIRTUAL TABLE %T
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
vtable constructor failed: %s
vtable constructor did not declare schema: %s
hidden
hidden
no such module: %s
table %s: xBestIndex returned an invalid plan
at most %d tables in a join
cannot use index: %s
parser stack overflow
set list
near "%T": syntax error
too many arguments on function %T
qualified table names are not allowed on INSERT, UPDATE, and DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
interrupt
unrecognized token: "%T"
unable to close due to unfinalised statements
unable to close due to unfinished backup operation
not an error
SQL logic error or missing database
access permission denied
callback requested query abort
database is locked
database table is locked
attempt to write a readonly database
interrupted
disk I/O error
database disk image is malformed
database or disk is full
unable to open database file
table contains no data
constraint failed
datatype mismatch
library routine called out of sequence
large file support is disabled
authorization denied
auxiliary database format error
bind or column index out of range
file is encrypted or is not a database
unable to delete/modify user-function due to active statements
unable to delete/modify collation sequence due to active statements
no such vfs: %s
NOCASE
.text$di
.text$mn
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCC
.CRT$XCL
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$r
.rdata$voltmd
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.data$rs
.rsrc$01
.rsrc$02
ReadFile
GetModuleFileNameA
GetPrivateProfileSectionNamesA
Process32First
FindFirstFileA
HeapFree
GetCurrentProcess
WriteFile
TerminateProcess
GetUserDefaultLocaleName
FindNextFileA
InitializeCriticalSectionEx
lstrlenA
FindClose
GetVolumeInformationA
WaitForSingleObject
LocalAlloc
GetCurrentThreadId
GetModuleHandleA
GetLocaleInfoA
OpenProcess
CreateToolhelp32Snapshot
MultiByteToWideChar
GetTempPathA
GetModuleHandleExA
GetTimeZoneInformation
GetTickCount64
CopyFileA
GetLastError
GetFileAttributesA
TzSpecificLocalTimeToSystemTime
CreateFileA
SetEvent
TerminateThread
LoadLibraryA
GetVersionExA
DeleteFileA
Process32Next
CloseHandle
GetSystemInfo
CreateThread
ResetEvent
GetWindowsDirectoryA
HeapAlloc
SetFileAttributesA
GetLocalTime
GetProcAddress
LocalFree
IsProcessorFeaturePresent
GetFileSize
RemoveDirectoryA
ExitProcess
GetCurrentProcessId
GetProcessHeap
GlobalMemoryStatusEx
FreeLibrary
WideCharToMultiByte
CreateProcessA
CreateDirectoryA
GetSystemTime
CreateEventA
GetPrivateProfileStringA
IsWow64Process
IsDebuggerPresent
GetComputerNameA
SetUnhandledExceptionFilter
lstrcatA
lstrcpyA
lstrcpynA
SetFilePointer
CreateFileW
AreFileApisANSI
EnterCriticalSection
GetFullPathNameW
GetDiskFreeSpaceW
LockFile
LeaveCriticalSection
InitializeCriticalSection
GetFullPathNameA
SetEndOfFile
GetTempPathW
GetFileAttributesW
FormatMessageW
GetDiskFreeSpaceA
DeleteFileW
UnlockFile
LockFileEx
DeleteCriticalSection
GetSystemTimeAsFileTime
FormatMessageA
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
KERNEL32.dll
ReleaseDC
GetDesktopWindow
GetKeyboardLayoutList
wsprintfA
GetSystemMetrics
GetWindowRect
EnumDisplayDevicesA
CharNextA
USER32.dll
DeleteObject
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
GDI32.dll
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA
GetUserNameA
CredFree
RegCreateKeyExA
CredEnumerateA
RegQueryValueExA
GetCurrentHwProfileA
RegCloseKey
RegEnumKeyA
ADVAPI32.dll
ShellExecuteA
SHGetFolderPathA
SHELL32.dll
CoInitialize
CoUninitialize
CoCreateInstance
CoInitializeEx
ole32.dll
freeaddrinfo
getaddrinfo
WS2_32.dll
CryptUnprotectData
CRYPT32.dll
PathFindExtensionA
SHLWAPI.dll
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipFree
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipAlloc
GdipCloneImage
GdipGetImageEncoders
GdiplusShutdown
GdiplusStartup
gdiplus.dll
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInfo
SETUPAPI.dll
RtlUnicodeStringToAnsiString
ntdll.dll
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFinalPathNameByHandleW
GetModuleHandleW
GetFileInformationByHandleEx
GetLocaleInfoEx
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
LCMapStringEx
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
GetStringTypeW
UnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
RtlUnwind
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
SetFilePointerEx
GetFileType
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
GetFileSizeEx
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
SetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
HeapSize
WriteConsoleW
SystemFunction036
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVinvalid_argument@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVbad_function_call@std@@
.?AVregex_error@std@@
.?AVbad_exception@std@@
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVbad_array_new_length@std@@
.?AVfailure@ios_base@std@@
.?AVruntime_error@std@@
.?AVother_error@detail@nlohmann@@
.?AVexception@detail@nlohmann@@
.?AVsystem_error@std@@
.?AVinvalid_iterator@detail@nlohmann@@
.?AU?$default_delete@$$BY0A@D@std@@
.?AVtype_error@detail@nlohmann@@
.?AVout_of_range@detail@nlohmann@@
.?AVparse_error@detail@nlohmann@@
.?AVfilesystem_error@filesystem@std@@
.?AV_System_error@std@@
.?AV_Locimp@locale@std@@
.?AVstl_critical_section_interface@details@Concurrency@@
.?AVstl_critical_section_win7@details@Concurrency@@
.?AVtype_info@@
.?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
.?AV?$_Ref_count_resource@PADU?$default_delete@$$BY0A@D@std@@@std@@
.?AV?$codecvt@DDU_Mbstatet@@@std@@
.?AV?$basic_ifstream@DU?$char_traits@D@std@@@std@@
.?AV_Node_if@std@@
.?AV?$collate@D@std@@
.?AV?$_Node_str@D@std@@
.?AVios_base@std@@
.?AVerror_category@std@@
.?AV?$ctype@D@std@@
.?AV_Node_end_rep@std@@
.?AV_System_error_category@std@@
.?AV_Node_end_group@std@@
.?AV_Node_back@std@@
.?AVcodecvt_base@std@@
.?AVGdiplusBase@Gdiplus@@
.?AV_Facet_base@std@@
.?AV_Generic_error_category@std@@
.?AU_Crt_new_delete@std@@
.?AV?$_Iosb@H@std@@
.?AV_Iostream_error_category2@std@@
.?AV?$_Ref_count_obj2@V?$output_string_adapter@DV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@detail@nlohmann@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV_Node_base@std@@
.?AVImage@Gdiplus@@
.?AUctype_base@std@@
.?AV?$output_string_adapter@DV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@detail@nlohmann@@
.?AV_Root_node@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AVfacet@locale@std@@
.?AV_Node_assert@std@@
.?AV?$_Ref_count_obj2@U_Recursive_dir_enum_impl@filesystem@std@@@std@@
.?AV_Ref_count_base@std@@
.?AVBitmap@Gdiplus@@
.?AV_Node_rep@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AU?$output_adapter_protocol@D@detail@nlohmann@@
.?AV?$_Node_class@DV?$regex_traits@D@std@@@std@@
.?AV_Node_capture@std@@
.?AV_Node_endif@std@@
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
00+020=0H0a0|0
1:1A1\1
1J2W2b2
3:3B3L3R3[3e3p3|3
41494>4D4J4O4T4\4a4z4
55-565i5
6-6j6w6
7A7Q7a7q7
8"8@8w8
9'929O9a9s9
:::A:\:
:*;1;L;z;
<!<<<j<q<
=0=4=>=L=V=`=l=x=
0'0V0|0
1&1H1h1u1
595F5_5
9':F:f;~;
>V>q>~>
?1?>?O?
2h2r2w2
5-535V5~5
7&8B8x8
:A;H;T;X;#<
819A9w9
< <'<&>A>
!0(0C0
1$2>2v2
2<3S3R4e4j4
667d7~7
7&8q8 9f9
:6;\;i;*<y<
566=6V6
8'9Y9q9
<<(<=<F<R<
2+2\2m2|2
273O3V3
4"5V5]5
8.9Q9v9
8-9C9S9Y9w9
;0t1@3f4
8I9P9j9y9
:6:Q:]:l:
?,?D?o?
2M2s2O3&4-4G4
=9=B=H=X=
0)030=0N0v0
2)2F2*3
8$9Y9b9
7:;&=Z=
>%>d>z>
1A1W1n1
2"353y4
5!5/5=5
646K6/:n:
:;-;r;
>,>@>Y>_>t>
7%7M7{7
;9;S;^;i;
>7>E>d>
3G4R4Z4`4h4
479=:F:V:
-060F0v0
6&666f6
7!7(707L7
60/1V1
6F9W9m9
{0X2r2
2)3L3{3
34,576
6;6I6P6~6
828:8E8K8f8+:7:
9":E:t:
:$:C:^>
=k=q=b>
0p1i2P394 5
1p2Y3P4@506
O0_0?1S1F2n2t2
=;>F>p>
0:1G1V1
2+2F2T2b2p2~2
454f4y4
979`97:P:s:
>A>N?_?
0=2R2{2
6(6Q6^7s7
:2:[:b;w;
>->d?y?
3<3e3<4U4x4
8,8U8,9E9h9
3%3H3q3H4a4
888a889Q9t9
=(=Q=(>A>d>
6 7L7&8?8b8
<.<Z<:=Y=|=
0D0$1C1f1
5-5P5|5\6{6
99K9`:{:
;<A<M<
&;K;Q;|;
;6<A<k<
6R7f7z7
=]=k=y=
(0<0P0d0x0
+0p0v0
5$6i6o6
0*010J0S0l0r0x0
0>1D1L1R1
2"2(2n2t2|2
3E4K4S4Y4
6'6.646
77)7/7
9,959N9
:":3:::E:O:^:g:
1'1,11171[1n1
2+2F2q2v2
858F8u8
99*959F9Z9
:[>f>w>
9P9K:u:
:`;h;n;t;z;
T0X0\0`0d0h0l0p0
f0v1=2
404V465\5n5|5
6,6>6L6
94:H:e:
1D2S2I3W3
4,4@4D4H4L4P4T4X4\4`4d4
: :O:u:
<+=0=6=<=B=H=N=T=Z=`=d=h=l=p=t=x=|=
<!=?=Y=
8!8'8,8>8
4F5x5}5
596S6`6t6
6+=9=j=u=
6&7X7]7w7~7
7:8G8[8
1h3w3,4F4?7N7
1 1$1(1,1014181<1&2
8 8$8(8,8084888<8
;D;K;s;z;
<C<J<o<t=
>T>X>\>p>
>'?.?H?O?
3 333F3e3x3
4#464I4\4o4
5-5@5S5f5y5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
:4:^:";,;5;>;O;T;l;v;
<6=V?s?
0"141?1
5G5N5L7P7T7X7\7`7d7h7V9
>*>5>C>I>
?#?F?r?
=0G0P0Y0j0o0
9e:{:4;N;
> >$>(>,>0>4>8><>@>D>x>
3^4t4-5G5
5H6b657D7
8U8e8 9:9
=6=R=a=
f1,2@2
3<4I6t6
><>v>\?
3 3$3(3,3034383<3
8"8M8X8\8`8d8h8l8p8t8
6L7D8j8
3,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
63,8f9
5"5.5|5
:P:T:X:\:
1B1O1&2
0&1S1Y1l1
8?9I9Z9a9l9v9
:/;6;a;h;
;";;;B;N;X;r;y;
< <'<3<?<[<b<n<x<
3]6s6~6
2S3a3#5!6
9 ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
?#?,?3?<?S?Z?c?
"030A0
3L3W3]3e3i3
3Q4b4k4
5'575H5M5Y5b5p5y5
6*6H6j6p6
7%727F7P7X7`7j7t7
8'8?8E8N8j8x8~8
9S9\9q9
93:E:Q:[:u:
;9;?;P;
=(=<=_=u=
1%191J1[1S2Z2
3.4}4&646O6
?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?
3&3-353B3G3N3X3^3e3k3r3y3
;O<j<{<
A0L0t0~0
8!8S8m8Q9Y9
93:::G:]:f:m:z:
=7=L=c=
7#787C7W7_7m7
7?8_8u8
:Q:W:b:z:
<%<4<U<
>!>*>8>>>G>a>u>
?%?@?I?T?
0p0t0x0|0
>1B2s4@7
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
2 3$3(3,3034383<3@3D3H3L3P3f5t5%;-;B;p;
;q=x=a>
>T?X?\?`?d?
;a<h<B=R=b=
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9
;_<l=s=
3 3$3(3
9W:B;V;1<9<X<
6m7?;D;S;p;
:U;];e;m;
<P=X=(>X>`>
F2N2d2z2
2P3T3X3\3
3N7X8q8
0!1*1G1
<:=L=Q=
> >$>(>,>0>4>8><>@>
8%9-9K9m9
3/3C3m3
<<=@=D=
:/:7:F:
0,3034383<3@3D3H3L3P3
4`6d6h6l6
2 2$2(2
303A3R3]3h3t3
44[4b4
8T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
;-=i>p>
212B2X2x2
4/4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
9(9;9P9V9\9j9t9~9
:":,:@:K:S:_:l:u:
;#;0;8;C;Q;^;j;t;
6!7,787B7|7
:4:O:n:
;D;I;P;W;^;e;l;s;z;
<"<B<b<
>%>K>W>t>
484G4a4t4
5E5]5p5
6'6C6X6e6n6s6
8)8/838;8A8F8O8u8
:B;I;W;c;
=-=?=V=
5"5)565
90969<9B9H9N9T9i9~9
='>8>B>K>
?A?K?T?]?r?{?
3.383k3
3+4A4^4
5$5*5q5z5
6 6&6,62686>6E6L6S6Z6a6h6o6w6
7&7,72787>7D7K7R7Y7`7g7n7u7}7
8)8Y8_8
9":,:<:W:1;A;Q;l;t;
<"<&<5<9<B<F<U<Y<a<p<
=!=+=/=]='>
=$=M>A?c?
2%3.3Y4m4
>5???S?d?u?
<%=9=r>
0*131Z2k2
5/6G6{7
7-8>8@9k9
< =B=`>z>
5@5M5a6y6
7"7O8l8
=0=P=o=V>
2$31354Y4
7L7Y7V8k8
=#=`=i=Q>r>
3 3O3X3:4M4
959X9-:M:u:
:;;S;X;
4"4&4*4.42464:4>4B4F4J4N4R4V4Z4^4b4f4j4n4r4v4z4~4
797Z7h7n7
8"8,8:8U8f8r8
1J1b1h1p1?3
6+6K6Y6`6f6
8/8A8l8v8
979A9M9R9W9r9|9
===p=^>h>u>
?4?>?J?
6M7U7\7
85:a:[;
8V8[8`8{8
5P9W<_<
2>4P6?7
[0_0c0g0k0o0s0w063x6
4*464D4T4i4
5^5r5f6o9
21=1P1Z1x1
8%8=8B8N8S8g8
8P9W9i9
:R:X:l:
:+;&>->
J0K1p4z4
4%5,575E5L5R5m5t5
93:Q:|:
010[0:1G1
6!6%6s7c9
5O5V5p5
999G9Z9e9p9
=;=P=[=c=n=t=
>">(>1>F>S>Z>c>x>
1*1/181
3$333;3C3:4
0.0F0k0
7+7N7b7
8@8R8\8~8
929Y9z9
4E4T4f4y4
5B5I5h5
6;6P6`6m6
7A7K7r7|7
;@<F<h<
1s214d4y4
5k6q6G7]7
8$8)8.8>8C8H8X8]8b8r8w8|8
9@9Y9g9s9
:B:Z:j:~:
<1<@<K<P<U<s<
=C=X=|=
>0?9?P?b?n?
F0O0D1e1l1
2"2(2.242:2a2
3'303@3Q3[3e3o3
>6>L>b>j>
3[5f5v5
5%676I6
<,<:<W<_<
<==D=M=w=
>0><>n>
*141f2x2b4t4Y5u7W8
< <[<q<
=9>E>]>e>
213`3-4A4Y4a4
5(606=6M7~7
>N?U?\?c?p?
4]6C778^8v8
;];d;k;r;
; <3<X<
>/?I?[?
0'050K0{0
8{8G:M:[:a:g:u:
>,>>>P>b>t>
1,2>2P2b2t2
2#4*424:4B4<8
o2A3w3
=)=>=T=
;{< =/>b>
282?2F2i2
<+<7<F<Y<x<
="=M=o=
:=;W;d;
?*?2?O?_?k?z?
89(9C9`9
9!:Y:s:
>0>P>p>
1"111B1Q1b1q1
4.4s487
=!=)=/=
<8<s<;=
>1>;>E>V>E?
="=1=B=Q=b=q=
; ;H;x;
=0>P>{>
> ?C?`?
3=4q485p5
4#4@4S4c4s4
5#535C5S5c5s5
000P0c0s0
8#838C8`8
:;G;g;
?9?V?s?
0!010L0`0
1!111A1Q1a1q1
3!313L3`3
4)444u4
4#5(5C5H5c5h5
6#626P6V6
7!7+757?7
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4t4x4|4
5(5,505H5L5P5T5X5\5`5d5h5l5p5t5x5|5
5@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
>$>,>4><>D>L>T>\>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0 9$9(9,9094989X9\9`9d9h9l9p9t9x9|9
P<T<X<\<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
? ?(?0?8?@?H?P?X?`?h?p?x?
? ?(?,?0?4?8?<?@?D?L?P?T?X?\?`?d?h?t?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2
6 6$6(6,6064686<6h<l<p<t<x<|<
<<=D=L=T=\=d=l=t=|=
0$1(1,101h1t1
2(242@2L2X2d2p2|2
3$303<3H3T3`3l3x3
4 4,484D4P4\4h4x4
5 5,585D5P5\5h5t5
5<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6
X0`0h0p0x0
1 1(10181@1H1P1X1`1h1p1x1
2 2(20282@2H2P2X2`2h2p2x2
3 3(30383@3H3P3X3`3h3p3x3
4 4(40484@4H4P4X4`4h4p4x4
5 5(50585@5H5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
7 7(70787@7H7P7X7`7h7p7
2 5$5(5,5054585<5@5D5H5L5P5T5X5`5d5
7(747@7L7X7d7
<4@4D4H4L4P4T4X4\4`4
7 7(707
,0004080<0d1h1l1p1t1x1|1
4 4(40484@4H4P4X4`4
84<4@4D4H4L4P4T4X4\4`4
= =$=0=4=@=D=P=T=`=d=p=t=
>$>(>8><>@>D>L>d>t>x>
?(?,?0?4?<?T?d?h?x?|?
0(080<0L0P0X0p0
1$1(1<1L1P1`1p1
2,2<2@2P2`2d2h2p2
3(383<3@3X3h3x3
4(484<4L4P4T4X4l4p4t4
50545L5P5h5x5|5
6 6064686<6D6\6`6d6l6
7,70747H7L7d7t7x7
8 8$8(8,80848H8L8P8d8t8x8
9 9$9(9,949L9P9T9X9\9`9h9
:4:D:H:L:d:t:x:|:
;4;8;@;X;\;t;
<$<4<D<T<X<h<l<
=(=,=0=4=8=<=@=H=`=d=|=
>,><>@>D>H>\>`>d>|>
? ?0?4?L?P?d?h?
0 0$080<0T0X0p0
1 1$1,1D1H1P1h1x1|1
9(909<9\9d9p9
:8:H:T:t:
;8;@;H;T;t;|;
< <(<0<8<@<L<l<t<|<
=0=8=D=d=l=t=
>(>4>T>`>
?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$404P4X4d4
5,545<5H5h5p5x5
6(6H6P6X6h6
7$7,747<7D7L7X7x7
8(8H8P8\8|8
989D9d9p9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
=0=8=@=L=l=t=|=
>$>,>4><>D>L>T>\>d>l>t>|>
?$?,?4?<?H?h?p?x?
0(0H0T0t0
1<1D1L1T1\1d1l1t1|1
282@2H2P2X2d2
383@3L3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5h5
6$606T6\6d6l6t6|6
7,747<7D7L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
=(=0=8=@=L=l=t=|=
>$>,>4><>D>L>T>\>d>l>x>
?,?8?X?`?h?t?
0(000<0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,3D3L3T3\3d3l3t3|3
4$4,444<4D4\4d4l4t4|4
5 5(505@5H5P5`5h5p5
6 6(686@6d6l6|6
7$747<7L7X7|7
8$8,848<8D8P8t8|8
9$9,949<9D9L9T9\9d9l9x9
:$:,:4:@:`:h:p:x:
;$;,;4;<;D;L;T;\;d;l;x;
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1X1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6\6d6l6t6|6
7$7,747<7D7L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8p8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>h>
?$?,?4?<?D?P?t?|?
080@0L0l0t0
1$1,141<1D1L1T1`1
2$2,242<2D2L2T2\2d2l2t2|2
343<3D3L3T3\3d3l3x3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6,646<6D6L6T6\6d6l6t6|6
7$7,747<7D7L7X7|7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9X9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<p<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>d>l>t>|>
?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242@2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4,444<4D4L4T4\4d4l4t4|4
5,545<5D5L5T5\5d5l5t5|5
6(6H6P6\6|6
7$7,747<7D7L7T7\7d7l7t7
8 8@8H8P8`8
9<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
<(<H<T<t<|<
=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4,484X4d4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6\6d6l6t6|6
7$747<7D7T7`7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
343D3L3T3\3d3l3t3|3
4$444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6,6<6D6L6T6\6d6l6t6|6
7 7D7T7\7d7l7t7|7
8$848<8L8X8`8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:l:t:
;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
=4=<=D=L=T=\=l=x=
>4><>H>h>p>
?8?H?l?t?|?
0$000P0\0|0
1<1D1P1X1p1x1
2 2@2L2l2t2|2
343@3`3l3
4(4L4T4\4d4l4t4|4
50585@5L5l5t5|5
6<6L6X6
7$7,747<7D7L7T7`7
8$8,848<8D8L8T8\8d8l8t8|8
9 9D9L9T9\9d9l9t9|9
:,:4:<:D:L:T:\:d:l:t:|:
; ;,;L;T;`;
<$<,<4<<<D<L<T<`<
=(=4=T=\=h=
>,>4><>H>h>p>x>
?(?H?P?X?d?
0 0@0H0P0X0d0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3<3H3P3h3p3
484H4l4t4|4
5$5,545<5D5L5T5\5d5l5x5
6$6,646<6D6L6T6\6d6l6t6|6
7 7D7L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
9(9H9T9\9
:@:P:\:d:
;$;,;`;p;|;
<(<4<<<p<
< =0=<=D=x=
=(>8>D>L>
?$?,?4?<?D?l?t?|?
1$1,141<1t1|1
1$2,242<2D2L2T2\2
3T3\3d3l3t3|3
344<4D4L4T4\4d4l4t4
445<5D5L5T5\5d5l5
6$6,6D6L6T6\6d6l6t6|6
7$7,747<7D7L7h7
8$8D8L8T8`8
9$9D9L9X9x9
:$:0:P:\:|:
;$;,;4;<;H;h;t;
<(<4<<<p<
< =0=<=\=d=l=t=
>$>,>8>X>`>h>p>x>
?4?<?D?P?p?x?
0 0@0H0P0X0`0l0
1 1D1L1T1\1d1l1t1|1
2(2H2P2X2`2l2
383@3t3
4 4,4L4T4`4
5d5l5t5|5
6$6,6D6L6T6`6h6
7L7\7h7p7
8 8T8d8p8x8
9$949@9`9h9t9
:$:,:8:X:`:h:x:
<$<0<P<X<d<
= =,=L=X=x=
>,>4><>D>L>X>x>
?$?D?L?T?\?h?
0$0,04080@0H0P0T0X0`0t0|0
1 1$1,1@1H1P1X1\1`1h1|1
2<2@2`2|2
3$3H3T3\3
4 4@4`4
5 5@5`5
6 6@6H6T6
7$7D7P7
8(8H8h8
9(9H9h9
:(:H:h:
;0;8;@;H;\;d;x;
<$<(<,<4<<<D<L<T<X<`<t<|<
=$=(=,=0=4=<=@=D=H=L=T=X=\=d=x=
t0x0|0
24282<2H3x3
>4>@>T>`>t>
? ?8?<?@?T?`?
0 040@0T0`0t0
1 141@1T1`1t1
2 242@2T2`2t2
3 383<3@3X3\3`3x3|3
4 4H4T4p4x4|4
545T5t5
686\6|6
6 7L7x7
:0:L:p:
?$?@?|?
jjjjjj
jjjjjjj
jjjjjjj
rkernel32.dll
!x-sys-default-locale
Papi-ms-win-core-fibers-l1-1-1
api-ms-win-core-synch-l1-2-0
kernel32
api-ms-
minkernel\crts\ucrt\inc\corecrt_internal_strtox.h
__crt_strtox::floating_point_value::as_double
_is_double
__crt_strtox::floating_point_value::as_float
!_is_double
(null)
mscoree.dll
((((( H
((((( H
(
NLC_ALL
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
Papi-ms-win-core-datetime-l1-1-1
api-ms-win-core-file-l1-2-4
api-ms-win-core-file-l1-2-2
api-ms-win-core-localization-l1-2-1
api-ms-win-core-localization-obsolete-l1-2-0
api-ms-win-core-processthreads-l1-1-2
api-ms-win-core-string-l1-1-0
api-ms-win-core-sysinfo-l1-2-1
api-ms-win-core-winrt-l1-1-0
api-ms-win-core-xstate-l2-1-0
api-ms-win-rtcore-ntuser-window-l1-1-0
api-ms-win-security-systemfunctions-l1-1-0
ext-ms-win-ntuser-dialogbox-l1-1-0
ext-ms-win-ntuser-windowstation-l1-1-0
advapi32
kernelbase
api-ms-win-appmodel-runtime-l1-1-2
user32
api-ms-win-core-fibers-l1-1-0
ext-ms-
Pja-JP
american
american english
american-english
australian
belgian
canadian
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
dutch-belgian
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
french-belgian
french-canadian
french-luxembourg
french-swiss
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
irish-english
italian-swiss
norwegian
norwegian-bokmal
norwegian-nynorsk
portuguese-brazilian
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.RisePro.4!c
tehtris Clean
MicroWorld-eScan Gen:Variant.Doina.61108
FireEye Gen:Variant.Doina.61108
CAT-QuickHeal Clean
McAfee Artemis!E6692C8FEF58
Malwarebytes Spyware.PasswordStealer
VIPRE Gen:Variant.Doina.61108
Sangfor Infostealer.Win32.Risepro.V5om
K7AntiVirus Trojan ( 005969e31 )
BitDefender Gen:Variant.Doina.61108
K7GW Trojan ( 005969e31 )
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Gen:NN.ZexaF.36722.ov0@a8wRi2ok
VirIT Trojan.Win32.Genus.THX
Cyren W32/ABRisk.BOAK-7046
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/Agent.ADVG
Cynet Malicious (score: 100)
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky Trojan-PSW.Win32.RisePro.cb
Alibaba TrojanPSW:Win32/RisePro.e97310ac
NANO-Antivirus Clean
ViRobot Clean
Rising Downloader.Agent!1.D93C (CLASSIC)
TACHYON Clean
Sophos Mal/Generic-S
Baidu Clean
F-Secure Trojan.TR/Agent.elloe
DrWeb Clean
Zillya Clean
TrendMicro Trojan.Win32.PRIVATELOADER.YXDI1Z
McAfee-GW-Edition BehavesLike.Win32.Dropper.th
Trapmine suspicious.low.ml.score
CMC Clean
Emsisoft Gen:Variant.Doina.61108 (B)
Ikarus Trojan.Win32.Agent
GData Gen:Variant.Doina.61108
Jiangmin Trojan.PSW.RisePro.w
Webroot W32.Malware.Gen
Avira TR/Agent.elloe
Antiy-AVL GrayWare/Win32.Wacapew
Kingsoft Win32.Troj.Unknown.a
Gridinsoft Malware.Win32.Gen.bot
Xcitium Clean
Arcabit Trojan.Doina.DEEB4
SUPERAntiSpyware Clean
ZoneAlarm Trojan-PSW.Win32.RisePro.cb
Microsoft Trojan:Win32/Znyonm
Google Detected
AhnLab-V3 Trojan/Win.Generic.R606193
Acronis Clean
VBA32 BScope.Trojan.Agent
ALYac Gen:Variant.Doina.61108
MAX malware (ai score=84)
DeepInstinct MALICIOUS
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.PRIVATELOADER.YXDI1Z
Tencent Malware.Win32.Gencirc.13f02975
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.218612066.susgen
Fortinet W32/Agent.ADVG!tr
AVG Win32:MalwareX-gen [Trj]
Cybereason malicious.366bdd
Avast Win32:MalwareX-gen [Trj]
No IRMA results available.