Static | ZeroBOX

PE Compile Time

2024-10-18 03:06:30

PE Imphash

7e8b0331b68a47254f7000efd39b30a8

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000e2238 0x000e2400 6.61969432274
.rdata 0x000e4000 0x0001a28e 0x0001a400 6.00665970196
.data 0x000ff000 0x00008f6c 0x00002e00 2.73826045897
.rsrc 0x00108000 0x000000f8 0x00000200 2.52591746083
.reloc 0x00109000 0x00006594 0x00006600 6.67565754122

Resources

Name Offset Size Language Sub-language File type
RT_MANIFEST 0x00108060 0x00000091 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library CRYPT32.dll:
0x100e4038 CryptUnprotectData
Library KERNEL32.dll:
0x100e4040 GetFullPathNameA
0x100e4044 SetEndOfFile
0x100e4048 UnlockFileEx
0x100e404c GetTempPathW
0x100e4050 CreateMutexW
0x100e4054 WaitForSingleObject
0x100e4058 CreateFileW
0x100e405c GetFileAttributesW
0x100e4060 GetCurrentThreadId
0x100e4064 UnmapViewOfFile
0x100e4068 HeapValidate
0x100e406c HeapSize
0x100e4070 MultiByteToWideChar
0x100e4074 Sleep
0x100e4078 GetTempPathA
0x100e407c FormatMessageW
0x100e4080 GetDiskFreeSpaceA
0x100e4084 GetLastError
0x100e4088 GetFileAttributesA
0x100e408c GetFileAttributesExW
0x100e4090 OutputDebugStringW
0x100e4094 CreateFileA
0x100e4098 LoadLibraryA
0x100e409c WaitForSingleObjectEx
0x100e40a0 DeleteFileA
0x100e40a4 DeleteFileW
0x100e40a8 HeapReAlloc
0x100e40ac CloseHandle
0x100e40b0 GetSystemInfo
0x100e40b4 LoadLibraryW
0x100e40b8 HeapAlloc
0x100e40bc HeapCompact
0x100e40c0 HeapDestroy
0x100e40c4 UnlockFile
0x100e40c8 GetProcAddress
0x100e40cc CreateFileMappingA
0x100e40d0 LocalFree
0x100e40d4 LockFileEx
0x100e40d8 GetFileSize
0x100e40dc DeleteCriticalSection
0x100e40e0 GetCurrentProcessId
0x100e40e4 GetProcessHeap
0x100e40e8 SystemTimeToFileTime
0x100e40ec FreeLibrary
0x100e40f0 WideCharToMultiByte
0x100e40f8 GetSystemTime
0x100e40fc FormatMessageA
0x100e4100 CreateFileMappingW
0x100e4104 MapViewOfFile
0x100e410c GetTickCount
0x100e4110 FlushFileBuffers
0x100e4114 SetHandleInformation
0x100e4118 FindFirstFileA
0x100e4124 FindNextFileA
0x100e4128 CreatePipe
0x100e412c PeekNamedPipe
0x100e4130 lstrlenA
0x100e4134 FindClose
0x100e4138 GetCurrentDirectoryA
0x100e413c lstrcatA
0x100e4140 OpenProcess
0x100e4144 SetCurrentDirectoryA
0x100e414c ProcessIdToSessionId
0x100e4150 CopyFileA
0x100e4158 Process32NextW
0x100e415c Process32FirstW
0x100e4160 CreateThread
0x100e4164 CreateProcessA
0x100e4168 CreateDirectoryA
0x100e416c ReadConsoleW
0x100e4174 LeaveCriticalSection
0x100e4178 LockFile
0x100e417c OutputDebugStringA
0x100e4180 GetDiskFreeSpaceW
0x100e4184 WriteFile
0x100e4188 GetFullPathNameW
0x100e418c EnterCriticalSection
0x100e4190 HeapFree
0x100e4194 HeapCreate
0x100e419c ReadFile
0x100e41a0 AreFileApisANSI
0x100e41a4 SetFilePointer
0x100e41a8 SetFilePointerEx
0x100e41ac GetConsoleMode
0x100e41b0 GetConsoleOutputCP
0x100e41bc GetEnvironmentStringsW
0x100e41c0 GetCommandLineW
0x100e41c4 GetCommandLineA
0x100e41c8 GetOEMCP
0x100e41cc GetACP
0x100e41d0 IsValidCodePage
0x100e41d4 FindNextFileW
0x100e41d8 FindFirstFileExW
0x100e41dc SetStdHandle
0x100e41e0 GetCurrentDirectoryW
0x100e41e4 GetStdHandle
0x100e41e8 GetTimeZoneInformation
0x100e41f4 GetCurrentProcess
0x100e41f8 TerminateProcess
0x100e4200 IsDebuggerPresent
0x100e4204 GetStartupInfoW
0x100e4208 GetModuleHandleW
0x100e420c InitializeSListHead
0x100e4210 LCMapStringEx
0x100e4218 EncodePointer
0x100e421c DecodePointer
0x100e4220 CompareStringEx
0x100e4224 GetCPInfo
0x100e4228 GetStringTypeW
0x100e422c RaiseException
0x100e4230 InterlockedFlushSList
0x100e4234 RtlUnwind
0x100e4238 SetLastError
0x100e4240 TlsAlloc
0x100e4244 TlsGetValue
0x100e4248 TlsSetValue
0x100e424c TlsFree
0x100e4250 LoadLibraryExW
0x100e4254 ExitThread
0x100e425c GetModuleHandleExW
0x100e4260 GetDriveTypeW
0x100e4268 GetFileType
0x100e4270 FileTimeToSystemTime
0x100e4274 ExitProcess
0x100e4278 GetModuleFileNameW
0x100e427c CompareStringW
0x100e4280 LCMapStringW
0x100e4284 GetLocaleInfoW
0x100e4288 IsValidLocale
0x100e428c GetUserDefaultLCID
0x100e4290 EnumSystemLocalesW
0x100e4294 WriteConsoleW
Library ADVAPI32.dll:
0x100e4000 GetSidSubAuthority
0x100e4004 RegEnumValueW
0x100e4008 RegEnumKeyA
0x100e400c RegCloseKey
0x100e4010 RegQueryInfoKeyW
0x100e4014 RegOpenKeyA
0x100e4018 RegQueryValueExA
0x100e4020 RegOpenKeyExA
0x100e4024 GetUserNameA
0x100e4028 RegEnumKeyExW
0x100e402c LookupAccountNameA
Library SHELL32.dll:
0x100e429c SHFileOperationA
0x100e42a0 SHGetFolderPathA
Library WININET.dll:
0x100e42a8 HttpOpenRequestA
0x100e42ac InternetReadFile
0x100e42b0 InternetConnectA
0x100e42b4 HttpSendRequestA
0x100e42b8 InternetCloseHandle
0x100e42bc InternetOpenA
0x100e42c0 HttpAddRequestHeadersA
0x100e42c4 HttpSendRequestExW
0x100e42c8 HttpEndRequestA
0x100e42cc InternetOpenW
0x100e42d0 InternetWriteFile
Library bcrypt.dll:
0x100e42dc BCryptSetProperty
0x100e42e4 BCryptDecrypt

Exports

Ordinal Address Name
1 0x100afc10 Main
2 0x100045b0 Save
!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
uN8G*tI
L$ <%t
L$ +L$`
*uJ8D$
D$lSPQRVO
D$@+D$0+D$ @
t$0+L$0
F:T$ u
L$t_^[3
L$t_^3
L$t_^[3
9~T~)ff
u<9t$<u69t$@u0
</tA<\t=
D$(SVW
D$$_^[3
G$;G(r
9~`~33
9s`~]W3
W9S`~,3
t58C+tB
u%9GXt
B(;Aht
;C4sj
Fd;^ v
C<90tI
t%9t$,u
T$ ;D$D
L$l_^[3
ur8^+u
tL8^+uG
u|;^Dr
;w,v$hlK
t39xLt
~29~Lu"
t$(f9z,u6
D$$+t$$
D$(;B@~8
u58FIu
DFLf;B
DANf;F
;t$0r#hlK
u/;D$0w;
ML$ F;
2;A$wXV
T$ 9T$H
t$(;\$<|
T$ ;T$|
D$P;T$H
;t$H}V
D$@9D$P~y
G;|$<|
D$@;D$P|
L$,PRV
t$T;t$
D$X;\$(
D^Nf;G
L$,_^[3
|$$9|$(
L$,_^[3
;S,v%hlK
D$ _^[
D$ _^[
|NLf;x
RQVPh(
t19qLt
;|$0wk
;|$0s~j
D$<} j
9BINAu
9D$@t.
u9FPt
&#G8_^[
~89~Dt
t$(;t$0v)hlK
\$4;\$8sa
9D$,}T;t$0wN
f;FD}@3
FX3CX%
f;CF}2f
f;FD}n3
ADf;BDt
Q;D$H|
P;L$H|
L$@A;L$D|
$G<Cr(
@L:AWs
D$,;|$$|
T$<9PT
L$l_^3
u;9|$dt5
8O8u*9O$
L$<_^[3
^ _^[Y]
|$,;G`~%h
D$$98~'3
D$@9D$$u
L$\_^3
u]<&tR<
t<<>t8
T$@9PT
f;9tl@
L$49HT
T$,9QT
L$,9HT
T$<j Q
L$,9HT
L$,9HT
T$,9PT
D$(_^[
D$$9qT
D$$9qT
D$$9qT
D$$9qT
G f;F u
B f;F tB
WPPh(!
t$(hh"
L$4_^[3
u\f9X2uV
AH@PSW
BM:AMt
L$4_^[3
F&@;G`~
D$(SVW
L$4_^[3
f;H&}S
f!HN_^[
Q;t$0|
F;t$,|
P;L$0|
L$4_^[3
D$D9O@
L$$9HT
L$@9xT
L$,9HT
L$$9HT
L$ 9HT
T$`@Pj
D$h@Pj
tB;F }=
|$8H9D$ u
L$L9HT
L$|9HT
T$,9PT
T$,9PT
f;G&}O
{ 9|$,}n
L$,9HT
;L$(|7
9D$$v/
L$|_^[3
xnf;C$th
f;V4s/
f;N&}3
D$0;t$,|
D$<;D$4|
t$h9pT
T$h9PT
T$$9pT
L$,9HT
D$O u\
D$`;D$d}J
f;8tcA
K2f9J2ux
B6:C6up3
K&f;J&
C$f;B$
D$(SVW
D$0hHd
L$4_^[3
|$Lf;H&
t#Vh|&
L$$j6V
L$$9AD}
T$<9PT
T$LQPj
L$@9HT
T$,9PT
L$df;C&
\$P9XT
|$P9PT
\$d9XT
\$t9xT
u)9D$l|#
t09yLt
;N\~/h
A&SVW3
HX_^[]
L$l_^3
x99V v
t++t$8
P;|$$|
|$L u%
L$,_^[3
T$$9PT
L$4f!G
uB;F }=
|$(H9D$
T$$9PT
F H9D$
H0f;J*}
D$,9D$ vb
9} t#9y
L$\_^[3
D$0Phh@
D$ SVW
u#8F@u
un9W$ui;}
tP;_ }7
f;A&}w
f;A&}:
f;P&}n3
f;H&}q
L$ 9HT
L$\_^[3
8G>u%h
x<f;H&
ts< to
tM8^@uH9X
L$<SVW
H91t7@
|$8!\$
H91t8@
L$X#L$
D$\#O #G$
f#D$hf;
D$`#D$8f
#D$d#T$`
F$#N #E
G$#O #E
f;B&}#
FD#J(#B,
Q;D$8|
Q;D$8|
9t$(v5
F;t$(|
D$,A?>@P
+D$$Hj
L$|9HT
t$|9pT
t$D9pT
_*_^[]
_*_^[]
#8;8u";
#K #C$
f;A4s"
#N #F$
#x@#XD
B0f;A*
#AH#QL
@~$j@h8I
\$,90~
L$D9HT
H0;|$4
SD9K4tB3
!"#$%&
.6.78.9:;
<=>?.@
B.CDEFFG
.(YZ[\
.]^_`a8b
Gcdefghhijggklmnopqqqqqqqqrstuvwxyzz{|
<>to<<u
D$ SVW
L$,_^[3
9 u(HI
9}(t&j
PPPhP}
A8#A4Y]
|$ ;L$$}
lhos;J
t$(hdO
t$(hxO
Fu0hlK
u PPPhP}
t$ h 3
L$$_^[3
<=t`<+|Z<z
SVWj8h
SVWjKh
SVWj8h
SVWjKh
SVWj8h
SVWjKh
8Hostu
8Useru
8Passu
SVWj)h
CD$pPj
CD$pPj
CD$pPj
D$(9D$Lt3
D$H_^[
9D$\t/
9D$\t3
L$@^[3
L$@^[3
D$$9D$
L$@^[3
D$$9D$
L$@^[3
D$49D$
L$@^[3
L$,QR;
L$(QR;
CD$8Pj
D$L9D$(t
L$h^[3
u%QWRVS
;|$@t-
0O;|$@u
:D$wuW
:D$vuM
:D$ytB
:D$xuc
;L$(s_
:D$|uZ
sn;\$4}
:D$|uY
CT$$9L$
D$,_^[3
8\u,@;
9Vhvl3
8\u,@;
8\u,@;
~HBu^j
8\u,@;
8\u,@;
8\u,@;
8\u,@;
7+t$09t$
8\u,@;
8\u,@;
W9shvS3
+KL+SL;
8\u,@;
u>FG;u
<xt><Xu=
<xt <Xt
<xt"<Xu!
PPPPPWS
QQSVWd
URPQQh`
UQPXY]Y[
F4_^[]
<ItC<Lt3<Tt#<h
A<lt'<tt
SVWj03
WWWSHSh
WPWWWS
:u"f9z
t#Vh,u
ARPRQh
PPPPPPPP
u kE$<
j-Xf9E
SWt@jU
_tqPVj@
<at.<rt!<wt
<=upG8
xE;5H)
PPPPPWS
PP9E u:PPVWP
u,PQRS
Wj0XPV
SPjdVQ
QQSVj8j@
xi;5H)
xg;5H)
zSSSSj
f9:t!V
NX9^`t1
;V\uYW
u2Vj@h
9C`u99C\t4
u29K\t-
xE;5H)
CY<u
PPPPPPPP
D8(Ht'
f-00f=
f-00f=
bad allocation
0123456789abcdefghijklmnopqrstuvwxyz
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_parse)
regex_error(error_syntax)
regex_error
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
cross device link
destination address required
device or resource busy
directory not empty
executable format error
file exists
file too large
filename too long
function not supported
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
invalid argument
invalid seek
io error
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no lock available
no message available
no message
no protocol option
no space on device
no stream resources
no such device or address
no such device
no such file or directory
no such process
not a directory
not a socket
not a stream
not connected
not enough memory
not supported
operation canceled
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
permission denied
protocol error
protocol not supported
read only file system
resource deadlock would occur
resource unavailable try again
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many files open
too many links
too many symbolic link levels
value too large
wrong protocol type
0123456789abcdefghijklmnopqrstuvwxyz
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
bad exception
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
[aOni*{
~ $s%r
@b;zO]
v2!L.2
IND)ind)
(null)
CorExitProcess
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
CompareStringEx
EnumSystemLocalesEx
GetDateFormatEx
GetLocaleInfoEx
GetTimeFormatEx
GetUserDefaultLocaleName
IsValidLocaleName
LCMapStringEx
LCIDToLocaleName
LocaleNameToLCID
RoInitialize
RoUninitialize
AppPolicyGetProcessTerminationMethod
AppPolicyGetThreadInitializationType
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
UTF-16LEUNICODE
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
_hypot
_nextafter
1#QNAN
1#SNAN
]vQ<)8
|)P!?Ua0
Eb2]A=
u?^p?o4
y1~?|"
?x+s7
?5Od%
?|I7Z#
>,'1D=
?g)([|X>=
~U`?K
:h"?bC
@H#?43
Ax#?uN}*
r7Yr7=
F0$?3=1
H`$?h|
&?~YK|
sU0&?W
<8bunz8
?#%X.y
F||<##
<@En[vP
b<log10
?5Wg4p
%S#[k=
"B <1=
SYSTEM_MALLOC
THREADSAFE=1
SQLITE_
local time unavailable
localtime
unixepoch
weekday
start of
minute
second
%04d-%02d-%02d %02d:%02d:%02d
%02d:%02d:%02d
%04d-%02d-%02d
%06.3f
julianday
datetime
strftime
current_time
current_timestamp
current_date
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
(NULL)
922337203685477580
API call with %s database connection pointer
unopened
invalid
Function
Savepoint
AutoCommit
Transaction
SorterNext
PrevIfOpen
NextIfOpen
AggStep
Checkpoint
JournalMode
Vacuum
VFilter
VUpdate
Return
InitCoroutine
EndCoroutine
HaltIfNull
Integer
String
SoftNull
Variable
ResultRow
CollSeq
AddImm
MustBeInt
RealAffinity
Permutation
Compare
Column
Affinity
MakeRecord
ReadCookie
SetCookie
ReopenIdx
OpenRead
OpenWrite
OpenAutoindex
OpenEphemeral
SorterOpen
SequenceTest
OpenPseudo
SeekLT
SeekLE
SeekGE
SeekGT
NoConflict
NotFound
NotExists
Sequence
NewRowid
Insert
IsNull
NotNull
InsertInt
BitAnd
ShiftLeft
ShiftRight
Subtract
Multiply
Divide
Remainder
Concat
Delete
BitNot
String8
ResetCount
SorterCompare
SorterData
RowKey
RowData
NullRow
SorterSort
Rewind
SorterInsert
IdxInsert
IdxDelete
IdxRowid
Destroy
ResetSorter
CreateIndex
CreateTable
ParseSchema
LoadAnalysis
DropTable
DropIndex
DropTrigger
IntegrityCk
RowSetAdd
RowSetRead
RowSetTest
Program
FkCounter
FkIfZero
MemMax
IfZero
AggFinal
IncrVacuum
Expire
TableLock
VBegin
VCreate
VDestroy
VColumn
VRename
Pagecount
MaxPgcnt
Explain
AreFileApisANSI
CharLowerW
CharUpperW
CloseHandle
CreateFileA
CreateFileW
CreateFileMappingA
CreateFileMappingW
CreateMutexW
DeleteFileA
DeleteFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentProcessId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesW
GetFileAttributesExW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetProcAddressA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
SystemTimeToFileTime
UnlockFile
UnlockFileEx
UnmapViewOfFile
WideCharToMultiByte
WriteFile
CreateEventExW
WaitForSingleObject
WaitForSingleObjectEx
SetFilePointerEx
GetFileInformationByHandleEx
MapViewOfFileFromApp
CreateFile2
LoadPackagedLibrary
GetTickCount64
GetNativeSystemInfo
OutputDebugStringA
OutputDebugStringW
GetProcessHeap
CreateFileMappingFromApp
InterlockedCompareExchange
OsError 0x%lx (%lu)
os_win.c:%d: (%lu) %s(%s) - %s
delayed %dms for lock/sharing conflict
winSeekFile
winClose
winRead
winWrite1
winWrite2
winTruncate1
winTruncate2
winSync
winFileSize
winUnlockReadLock
winUnlock
%s-shm
winOpenShm
winShmMap1
winShmMap2
winShmMap3
winUnmapfile1
winUnmapfile2
winMapfile1
winMapfile2
etilqs_
winGetTempname1
winGetTempname2
winGetTempname4
winGetTempname5
winOpen
winDelete
winAccess
%s%c%s
winFullPathname1
winFullPathname2
win32-longpath
recovered %d pages from %s
-journal
nolock
immutable
recovered %d frames from WAL file %s
cannot limit WAL size: %s
:memory:
invalid page number %d
2nd reference to page %d
Failed to read ptrmap key=%d
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
%d of %d pages missing from overflow list starting at %d
failed to get page %d
freelist leaf count too big on page %d
Page %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
On tree page %d cell %d:
Rowid %lld out of order (previous was %lld)
Child page depth differs
On page %d at right child:
Rowid %lld out of order (max larger than parent min of %lld)
Rowid %lld out of order (min less than parent min of %lld)
Rowid %lld out of order (max larger than parent max of %lld)
Rowid %lld out of order (min less than parent max of %lld)
Corruption detected in cell %d on page %d
Multiple uses for byte %d of page %d
Fragmentation of %d bytes reported as %d on page %d
Main freelist:
List of tree roots:
Page %d is never used
Pointer map page %d is referenced
Outstanding page count goes from %d to %d during this analysis
out of memory
unknown database %s
source and destination must be distinct
%!.15g
BINARY
(%.20s)
%s(%d)
(blob)
vtab:%p:%p
intarray
program
%s-mjXXXXXX9XXz
MJ delete: %s
MJ collide: %s
-mj%06X9%02X
FOREIGN KEY constraint failed
API called with finalized prepared statement
API called with NULL prepared statement
string or blob too big
unable to use function %s in the requested context
bind on a busy prepared statement: [%s]
'%.*q'
zeroblob(%d)
NOT NULL
UNIQUE
FOREIGN KEY
abort at %d in [%s]: %s
%s constraint failed: %s
%s constraint failed
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot release savepoint - SQL statements in progress
cannot commit transaction - SQL statements in progress
cannot start a transaction within a transaction
cannot rollback - no transaction is active
cannot commit - no transaction is active
database schema has changed
sqlite_temp_master
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
too many levels of trigger recursion
out of
cannot change %s wal mode from within a transaction
database table is locked: %s
statement aborts at %d: [%s] %s
integer
cannot open value of type %s
no such rowid: %lld
cannot open virtual table: %s
cannot open table without rowid: %s
cannot open view: %s
no such column: "%s"
foreign key
indexed
cannot open %s column for writing
misuse of aliased aggregate %s
no such column
ambiguous column name
%s: %s.%s.%s
%s: %s.%s
%s: %s
%s prohibited in partial index WHERE clauses
%s prohibited in CHECK constraints
functions
second argument to likelihood() must be a constant between 0.0 and 1.0
not authorized to use function: %s
misuse of aggregate function %.*s()
no such function: %.*s
wrong number of arguments to function %.*s()
subqueries
parameters
%r %s BY term out of range - should be between 1 and %d
too many terms in ORDER BY clause
%r ORDER BY term does not match any column in the result set
too many terms in %s BY clause
a GROUP BY clause is required before HAVING
aggregate functions are not allowed in the GROUP BY clause
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
too many SQL variables
too many columns in %s
_ROWID_
SCALAR
CORRELATED
EXECUTE %s%s SUBQUERY %d
hex literal too big: %s
misuse of aggregate: %s()
unknown function: %.*s()
RAISE() may only be used within a trigger-program
%.*s"%w"%s
%s%.*s"%w"
sqlite_rename_table
sqlite_rename_trigger
sqlite_rename_parent
name=%Q
%s OR name=%Q
type='trigger' AND (%s)
tbl_name=%Q
sqlite_
table %s may not be altered
there is already another table or index with this name: %s
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
sqlite_sequence
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Cannot add a PRIMARY KEY column
Cannot add a UNIQUE column
Cannot add a REFERENCES column with non-NULL default value
Cannot add a NOT NULL column with default value NULL
Cannot add a column with non-constant default
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
virtual tables may not be altered
Cannot add a column to a view
sqlite_altertab_%s
sqlite_stat1
tbl,idx,stat
sqlite_stat3
sqlite_stat4
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE %s=%Q
stat_init
stat_push
stat_get
unordered*
sz=[0-9]*
SELECT tbl,idx,stat FROM %Q.sqlite_stat1
too many attached databases - max %d
cannot ATTACH database within transaction
database %s is already in use
database is already attached
attached databases must use the same text encoding as main database
unable to open database: %s
no such database: %s
cannot detach database %s
cannot DETACH database within transaction
database %s is locked
sqlite_detach
sqlite_attach
%s %T cannot reference objects in database %s
%s cannot use variables
authorizer malfunction
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
not authorized
no such view
no such table
corrupt database
unknown database %T
object name reserved for internal use: %s
temporary table name must be unqualified
table %T already exists
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
INTEGER
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
CREATE TABLE
AUTOINCREMENT not allowed on WITHOUT ROWID tables
PRIMARY KEY missing on table %s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE TABLE %Q.sqlite_sequence(name,seq)
tbl_name='%q' AND type!='trigger'
parameters are not allowed in views
view %s is circularly defined
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
sqlite_stat%d
DELETE FROM %Q.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
sqlite_stat
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
cannot create a TEMP index on non-TEMP table "%s"
altertab_
table %s may not be indexed
views may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
table %s has no column named %s
conflicting ON CONFLICT clauses specified
UNIQUE
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
name='%q' AND type='index'
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
a JOIN clause is required before %s
COMMIT
ROLLBACK
RELEASE
unable to open a temporary database file for storing temporary tables
%s.rowid
unable to identify the object to be reindexed
duplicate WITH table name: %s
no such collation sequence: %s
table %s may not be modified
cannot modify %s because it is a view
rows deleted
integer overflow
LIKE or GLOB pattern too complex
ESCAPE expression must be a single character
%!.20e
typeof
length
substr
printf
unicode
coalesce
ifnull
unlikely
likelihood
likely
random
randomblob
nullif
sqlite_version
sqlite_source_id
sqlite_log
sqlite_compileoption_used
sqlite_compileoption_get
last_insert_rowid
changes
total_changes
replace
zeroblob
load_extension
group_concat
foreign key mismatch - "%w" referencing "%w"
table %S has no column named %s
table %S has %d columns but %d values were supplied
%d values for %d columns
rows inserted
sqlite3_extension_init
unable to open shared library [%s]
no entry point [%s] in shared library [%s]
error during initialization: %s
automatic extension loading failed: %s
application_id
auto_vacuum
automatic_index
busy_timeout
cache_size
cache_spill
case_sensitive_like
checkpoint_fullfsync
collation_list
compile_options
count_changes
data_store_directory
database_list
default_cache_size
defer_foreign_keys
empty_result_callbacks
encoding
foreign_key_check
foreign_key_list
foreign_keys
freelist_count
full_column_names
fullfsync
ignore_check_constraints
incremental_vacuum
index_info
index_list
integrity_check
journal_mode
journal_size_limit
legacy_file_format
locking_mode
max_page_count
mmap_size
page_count
page_size
query_only
quick_check
read_uncommitted
recursive_triggers
reverse_unordered_selects
schema_version
secure_delete
short_column_names
shrink_memory
soft_heap_limit
synchronous
table_info
temp_store
temp_store_directory
threads
user_version
wal_autocheckpoint
wal_checkpoint
writable_schema
exclusive
normal
incremental
memory
temporary storage cannot be changed from within a transaction
SET NULL
SET DEFAULT
CASCADE
RESTRICT
NO ACTION
delete
persist
truncate
result
not a writable directory
Safety level may not be changed inside a transaction
notnull
dflt_value
height
unique
on_update
on_delete
parent
*** in database %s ***
NULL value in %s.%s
missing from index
non-unique entry in index
wrong # of entries in index
UTF-16le
UTF-16be
UTF16le
UTF16be
UTF-16
unsupported encoding: %s
compile_option
restart
checkpointed
timeout
malformed database schema (%s)
%s - %s
invalid rootpage
unsupported file format
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
database schema is locked: %s
statement too long
opcode
comment
selectid
detail
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
only a single result allowed for a SELECT that is part of an expression
UNION ALL
INTERSECT
EXCEPT
USE TEMP B-TREE FOR %s
USING TEMP B-TREE
COMPOUND SUBQUERIES %d AND %d %s(%s)
column%d
ORDER BY clause should come after %s not before
LIMIT clause should come after %s not before
all VALUES must have the same number of terms
SELECTs to the left and right of %s do not have the same number of result columns
no such index: %s
multiple references to recursive table: %s
circular reference: %s
table %s has %d values for %d columns
multiple recursive references: %s
recursive reference in a subquery: %s
sqlite_sq_%p
too many references to "%s": max 65535
%s.%s.%s
no such table: %s
no tables specified
too many columns in result set
DISTINCT aggregates must have exactly one argument
USING COVERING INDEX
SCAN TABLE %s%s%s
DISTINCT
GROUP BY
RIGHT PART OF ORDER BY
ORDER BY
sqlite3_get_table() called with two or more incompatible queries
temporary trigger may not have qualified name
trigger
cannot create triggers on virtual tables
trigger %T already exists
cannot create trigger on system table
BEFORE
cannot create %s trigger on view: %S
cannot create INSTEAD OF trigger on table: %S
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
type='trigger' AND name='%q'
no such trigger: %S
-- TRIGGER %s
no such column: %s
rows updated
_rowid_
cannot VACUUM from within a transaction
cannot VACUUM - SQL statements in progress
ATTACH ':memory:' AS vacuum_db;
ATTACH '' AS vacuum_db;
PRAGMA vacuum_db.synchronous=OFF
BEGIN;
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
CREATE VIRTUAL TABLE %T
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
name='%q' AND type='table'
vtable constructor failed: %s
vtable constructor did not declare schema: %s
hidden
hidden
no such module: %s
NOCASE
automatic index on %s(%s)
auto-index
table %s: xBestIndex returned an invalid plan
ANY(%s)
SEARCH
SUBQUERY %d
TABLE %s
AS %s
PRIMARY KEY
AUTOMATIC COVERING INDEX
COVERING INDEX %s
INDEX %s
USING
(rowid=?)
(rowid>? AND rowid<?)
(rowid>?)
(rowid<?)
USING INTEGER PRIMARY KEY
VIRTUAL TABLE INDEX %d:%s
%s.xBestIndex() malfunction
no query solution
at most %d tables in a join
parser stack overflow
unknown table option: %.*s
too many terms in compound SELECT
set list
near "%T": syntax error
too many arguments on function %T
qualified table names are not allowed on INSERT, UPDATE, and DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
interrupt
unrecognized token: "%T"
create
temporary
explain
2014-12-09 01:34:36 f66f7a17b78ba617acde90fc810107f34f1a1f2e
unable to close due to unfinalized statements or unfinished backups
not an error
SQL logic error or missing database
access permission denied
callback requested query abort
database is locked
database table is locked
attempt to write a readonly database
interrupted
disk I/O error
database disk image is malformed
unknown operation
database or disk is full
unable to open database file
locking protocol
table contains no data
constraint failed
datatype mismatch
library routine called out of sequence
large file support is disabled
authorization denied
auxiliary database format error
bind or column index out of range
file is encrypted or is not a database
unknown error
abort due to ROLLBACK
unable to delete/modify user-function due to active statements
unknown database: %s
unable to delete/modify collation sequence due to active statements
invalid uri authority: %.*s
shared
private
access
no such %s mode: %s
%s mode not allowed: %s
no such vfs: %s
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
xPq>.T
*T,h5#q./2
4e2%!m
D;Hdj
yIr-{b2$
=s}?@0t
CREATE TEMP TABLE sqlite_temp_master(
type text,
name text,
tbl_name text,
rootpage integer,
sql text
liA>@?onoffalseyestruefull
0123456789ABCDEF0123456789abcdef
******""""""""""""""""""""
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@3.8.7.4
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
0123456789ABCDEF
naturaleftouterightfullinnercross
LLLLLLLLLL
PQRSTUVWXYZ[\]^_lmn
23PQRSzUVWXYZ[\]^_
GHIJKLMNOPQRSzUVWXYZ[\]^_
a[\]^_
UVWXYZ[\]^_
YZ[\]^_
GHIJKLMNOPQRS3UVWXYZ[\]^_
23cdefghi
pAEGHIJKLMNOPQRS
UVWXYZ[\]^_
cgpfgh
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_B
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
HIJKLMNOPQRS
UVWXYZ[\]^_
IJKLMNOPQRS
UVWXYZ[\]^_
CREATE TABLE sqlite_master(
type text,
name text,
tbl_name text,
rootpage integer,
sql text
SQLite format 3
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
thstndrd
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYWITHOUTERELEASEATTACHAVINGROUPDATEBEGINNERECURSIVEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTRIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
?456789:;<=
 !"#$%&'()*+,-./0123
Unknown exception
bad array new length
string too long
iostream
bad cast
bad locale name
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
c1e30d1fa9143cb8f5474173ce558d33
43266f2abbf198987ad62d4962cf7134
8b937c
4cef64043f3223939105ffd26ec8bd05
OJgUAmuCMQUqFBRrRNJs
NTUXNpHvWlDFEk mggKh8s1ocLu=
PI8oBz==
Wo4d1KKy
LI5k3T==
NIZk3T==
Zu5n4pbxbEv6Jomv4QSr8vtIeq3g8ZpdeRA=
ZwBnO5bzcwVj54 r
TNlnOKLEXELX44SYhsYZRMtk11L7
ZQZW15H6cu==
Ndth2D==
ZQZkOZD5clLmCC==
MI9Y00q=
TMBdN6HDdUQ=
VwcbNZmlU0LT6Imr4XG9NS5efL8b pN5VMpb2pZEb0PTPHemggKr7TJ5W6bf9Jp5VNZhF5voaEK=
1MBdN6HDdUR9RIGX3PqZRMtk11Lt
WQcyKI4GUiL6LYmghg2v5SVSZJ8j9pJnfTR5F6LDckLn6H0ihhGl5S15T1bq9J1q1NN5GpLmdFLrRXWw3Q7hQuBoeJHX80JbcwZc
TMBdN6HDdUQnRZii
TMBdN6HDdUR664GpgAOW6m==
SNNl16z Xy==
ZQJq1ZZDeO==
XwJr05jubEm D2mKNyyu5M5qgZzUIpNW1IEnGj==
TwcfOZDAaUV6
ZQVnO5Lob0bn
M99cN0G=
VwpSOZDAaUV664GpgAOW6m==
ZQBh3JLob0bn
XwJr05jubEm D2mKNAql7wRbd6foI0xSNcZWOVqARe==
TwJr0HDAckL664GpgAOW6Rs=
ZQV 258ob1ze
XwJr05jubEm D2mKNAKd6Scle1KoW0 dKscy
ZRVd1JLsckvmCC==
fwV 3Ju=
ZwZl15fu
ZxZrO0zkZEvTQS==
ZwVhN6Hub0Va5omihq==
cSZXM5HmdEvs
fwV 3Jvha0LYP4SeiAyv
fwV 3Jvh
XwZkOZ4DYUQ=
XwZkOZ4DYUQnRZii
ZQVd25j5b1qn7omt
ZQ3h1JLEXZm=
1wcb4D==
gwBr4D==
0NVn1ZboXCnoQ4GpNzGW5TF 16P7
ZQJS15RuYu==
XwJr05jubEm D2mKNwCx7w5lc0GaS5xkdwZSApL9ZQy D2Z=
0ScmOpbscu==
dMJo2z==
SSlq15Rq
Zuhn154xZTnw3JKsgQO9ONJdemvyV0J ZuVdOpv6bFH6LI kfQXcKwBS0U==
Zuhn154xZTnw3JKsgQO9ONJdemvyV0J ZuBnN5vxIDDTQZSi
VTFd2pu=
ZucoO0zmIDDoRpS03RChQu5o11DbFIFS0MNkOYnRb04i4kCB3RKd
ZucoO0zmIDDoRpS03RChQu5o11DbFIFS0MNkOYnRb0Da4ECQiAyWSG==
TMVfOT==
Zu5hN6zAc0Zf6HyC4A7hQvRr11CaOJxS0LBwOZPmdUnTPGys4WeqBuN fKy=
Zu5hN6zAc0Zf6HyC4A7hQvRr11CaOJxS0LBE15DmbArM6IGX4K==
WTFT3JVuau==
ZvRo30HzaUjFQYK ZXuX7w1hc5rP 5NqKuV 3JvhRELfQZWpizqI5S hdmvyV0J
ZvRo30HzaUjFQYK ZXuX7w1hc5rP 5NqKuV 3JvhTEZcQYxdZXKd7wQ=
SSlq15RudUQ=
ZuRg2pZyaVLmPHWw4RBcKwBS0ZryWZR fMBSMHnAZ0bnAGSeiAx=
ZuRg2pZyaVLmPHWw4RBcKwBS0ZrG95F dsFL3Jv5ZO==
VTNa00H6bO==
ZucqNpb5dUR6NZOihcuARNN ZILfWpxTdxV5IJZsaUU JIGX3K==
ZucqNpb5dUR6NZOihcuARNN ZIrpV5xkKvRSN0Hq
XcpUNZnpaO==
Zv3h3pvxZEb6NZOihcuARNN ZILfWpxTdxV5IJZsaUU JIGX3K==
Zv3h3pvxZEb6NZOihcuARNN ZIrpV5xkKvRSN0Hq
SScl15HA
ZuRn1ZZpbZnx5oGkgWY9ONJdemvyV0J ZuVdOpv6bFH6LI kfQXcKwBS0U==
ZuRn1ZZpbZnx5oGkgWY9ONJdemvyV0J ZuBnN5vxIDDTQZSi
SScbF5Zo
ZuRnN3DAYZnv5o 0hWOuQvRr11CaOJxS0LBwOZPmdUnTPGys4WeqBuN fKy=
ZuRnN3DAYZnv5o 0hWOuQvRr11CaOJxS0LBE15DmbArM6IGX4K==
SSldOJZ5
ZuRgOZHAdDnO54WvNyKd7wB5TKPgV0NkfvBE154ubgrxQZSe
ZuRgOZHAdDnO54WvNyKd7wB5VK3dVZo9WTV 3JK=
SSZm3HzDb14sRZJ=
ZuRd1qHHckZW54Wv2zOvSNE9TKzUVYpw1M3 3Zn5XCnoR4mrNyKd7wA=
ZuRd1qHHckZW54Wv2zOvSNE9TKzUVYpEdSR 1FrYdEvTRS==
WQZEGXDZIEZr3Yemgf2X6cskKLPtW0Bm0M5dM6PmbFLeDECt3RGv7S5q1J3WVZpT1IFyJnZSIEnoR4mrhq==
dcZS257ld0na4kCijBur6dM9eLDpWpdk1IFmNZRqPO==
Kw3n1JHqchQ=
Kwxd4WRobELa5i==
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
Content-Type: application/x-www-form-urlencoded
Content-Type: multipart/form-data; boundary=----
Content-Type: application/octet-stream
Content-Disposition: form-data; name="data"; filename="
------
------
' -CompressionLevel Optimal
' -DestinationPath '
powershell -Command Compress-Archive -Path '
?wal=1
NSS_Init
PL_Base64Decode
PK11SDR_Decrypt
PK11_Authenticate
PK11_GetInternalKeySlot
PK11_FreeSlot
NSS_Shutdown
\logins.json
nss3.dll
"hostname":"([^"]+)"
"encryptedUsername":"([^"]+)"
"encryptedPassword":"([^"]+)"
397a1dad0e0212119274178e7e4cc080
chrome://
web|Firefox|
firefox.exe
Mozilla Firefox
Local Settings\Software\Microsoft\Windows\Shell\MuiCache
SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\firefox.exe
\Mozilla Firefox
Firefox (
\Thunderbird\Profiles\
oauth://
mail|Thunderbird|
Thunderbird.exe
thunderbird.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Thunderbird.exe
\Mozilla Thunderbird
Thunderbird (
web|TorBrowser|
\TorBrowser\Data\Browser\profile.default
TorBrowser (
<name>
</name>
<password>
</password>
558a8f02be63d149ebdfd34ec94bdd31
im|Pidgin|
.purple\accounts.xml
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched
\.purple\accounts.xml
Pidgin (
"hostname":
"name":
"password":
"password": "
im|Gajim|
\UserData\Settings.sqlite
\Gajim\Settings.sqlite
Gajim (
<jid type="QString">
<password type="QString">
im|Psi|
Psi\profiles\default\accounts.xml
Psi+ (
0123456789ABCDEF
WinSCP.ini
WinSCP
WinSCP.exe
SOFTWARE\Martin Prikryl\WinSCP 2\Sessions
HostName
SOFTWARE\Martin Prikryl\WinSCP 2\Sessions\
UserName
Password
ssh|WinSCP|
WinSCP (
FileZilla\sitemanager.xml
<Host>
</Host>
<Port>
</Port>
<User>
</User>
<Pass encoding="base64">
</Pass>
ftp|FileZilla|
FileZilla (
SMTP Server
IMAP Password
POP3 Password
HTTP Password
SMTP Password
9375CFF0413111d3B88A00104B2A6676
mail|Outlook|
Software\Microsoft\Office
Software\Microsoft\Windows Messaging Subsystem\Profiles
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles
Outlook (
Wi-Fi-
<keyMaterial>
</keyMaterial>
wifi|WiFi||
netsh wlan show profiles
profiles
WiFi (
Monero\wallets\
_Monero
&cred=
invalid string position
vector too long
vector<bool> too long
xdigit
iostream stream error
0123456789ABCDEFabcdef-+Xx
0123456789ABCDEFabcdef-+XxPp
0123456789-+Ee
()$^.*+?[]|\-{},:=!
>@aTR'
M@fffff
0000000000000000
UUUUUU
?UUUUUU
?uZEeu
?uZEeu
?UUUUUU
?UUUUUU
.text$di
.text$mn
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCC
.CRT$XCL
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$r
.rdata$sxdata
.rdata$voltmd
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata$x
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.data$rs
.rsrc$01
.rsrc$02
STEALERDLL.dll
CryptUnprotectData
CRYPT32.dll
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
SetHandleInformation
FindFirstFileA
Wow64DisableWow64FsRedirection
K32GetModuleFileNameExW
FindNextFileA
CreatePipe
PeekNamedPipe
lstrlenA
FindClose
GetCurrentDirectoryA
lstrcatA
OpenProcess
SetCurrentDirectoryA
CreateToolhelp32Snapshot
ProcessIdToSessionId
CopyFileA
Wow64RevertWow64FsRedirection
Process32NextW
Process32FirstW
CreateThread
CreateProcessA
CreateDirectoryA
KERNEL32.dll
GetSidIdentifierAuthority
RegEnumValueW
RegOpenKeyExA
LookupAccountNameA
RegEnumKeyExW
GetUserNameA
GetSidSubAuthority
GetSidSubAuthorityCount
RegQueryValueExA
RegOpenKeyA
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyA
ADVAPI32.dll
SHGetFolderPathA
SHFileOperationA
SHELL32.dll
HttpOpenRequestA
InternetWriteFile
InternetOpenW
HttpEndRequestA
HttpSendRequestExW
HttpAddRequestHeadersA
InternetOpenA
InternetCloseHandle
HttpSendRequestA
InternetConnectA
InternetReadFile
WININET.dll
BCryptDecrypt
BCryptOpenAlgorithmProvider
BCryptSetProperty
BCryptGenerateSymmetricKey
bcrypt.dll
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InitializeSListHead
LCMapStringEx
InitializeCriticalSectionEx
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
GetStringTypeW
RaiseException
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleFileNameW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
GetStdHandle
GetCurrentDirectoryW
SetStdHandle
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
WriteConsoleW
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVregex_error@std@@
.?AVbad_exception@std@@
.?AVfailure@ios_base@std@@
.?AVruntime_error@std@@
.?AVbad_alloc@std@@
.?AVsystem_error@std@@
.?AVbad_cast@std@@
.?AV_System_error@std@@
.?AVexception@std@@
.?AVbad_array_new_length@std@@
.?AVtype_info@@
.?AV_Locimp@locale@std@@
.?AV?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV_Node_if@std@@
.?AV?$collate@D@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$_Node_str@D@std@@
.?AVios_base@std@@
.?AVerror_category@std@@
.?AV?$ctype@D@std@@
.?AV_Node_end_rep@std@@
.?AV_Node_end_group@std@@
.?AV?$basic_iostream@DU?$char_traits@D@std@@@std@@
.?AV_Node_back@std@@
.?AV_Facet_base@std@@
.?AU_Crt_new_delete@std@@
.?AV?$_Iosb@H@std@@
.?AV_Iostream_error_category2@std@@
.?AV?$numpunct@D@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV_Node_base@std@@
.?AUctype_base@std@@
.?AV_Root_node@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AVfacet@locale@std@@
.?AV_Node_assert@std@@
.?AV_Node_rep@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$_Node_class@DV?$regex_traits@D@std@@@std@@
.?AV_Node_capture@std@@
.?AV_Node_endif@std@@
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
</assembly>
0#0(020C0H0R0c0h0r0
1#1(121C1H1R1c1h1r1
2#2(222C2H2R2c2h2r2
3#3(323C3H3R3c3h3r3
4#4(424C4H4R4c4h4r4
5#5(525C5H5R5c5h5r5
6#6(626C6H6R6c6h6r6
7#7(727C7H7R7c7h7r7
8#8(828C8H8R8c8h8r8
9#9(929C9H9R9c9h9r9
:#:(:2:C:H:R:c:h:r:
;#;(;2;C;H;R;c;h;r;
<#<(<2<C<H<R<c<h<r<
=!=1=A=Q=a=s=x=
>=>Q>}>
?!?1?A?Q?a?q?}?
0(020_0
0'1.1>1I1S1w1
3 3,383
5 5$5(5,5i5
5?6J6S6[6{6
6N7`7d8l8
<A<I<s<
5?5r5y5
637;7l7p7t7x7|7
=H>O>\>
2`2d2h2l2p2t2x2|2
223C3S3\3
4U4`4u4
606P6v6
818<8B8J8P8_8e8
9"9g9w9
:M:Y:d:n:t:
;$;);4;D;
<#<)<0<9<D<Z<r<~<
=#=+=4=9=>=M=X=g=m=}=
>(>Q>Y>d>n>t>}>
0!010:0X0g0z0
506M6^6o6
:X:\:`:d:h:l:p:
3$393A3N3S3Y3`3j3p3w3}3
4_5/6A9
;7=>=t=x=|=
>1>7>U>`>'?
=D=K=Q=
4%50575J5r5
8'9:9C9b9h9
9_:m:x:~:
;W;2<<<B<{<
<!=N=z=
>#>->F>
0)060o0
2/2=2j2t2
4!4N4e4
4<5C5c6
888Y8e8
9*:0:G:Q:s:|:
;1;7;X;
<$<@<x<
</=g=p={=
0$0/0=0
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Amadey.l!c
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Lazy.492566
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win32.Dropper.th
ALYac Gen:Variant.Lazy.492566
Cylance Unsafe
Zillya Clean
Sangfor Downloader.Win32.Amadey.Vkni
CrowdStrike win/malicious_confidence_90% (D)
Alibaba TrojanSpy:Win32/Stealer.7182ec47
K7GW Trojan-Downloader ( 005a0ec91 )
K7AntiVirus Trojan-Downloader ( 005a0ec91 )
huorong TrojanSpy/Stealer.hk
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win32/TrojanDownloader.Amadey.G
APEX Clean
Avast Win32:BotX-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky Trojan-Spy.Win32.Stealer.fjoi
BitDefender Gen:Variant.Lazy.492566
NANO-Antivirus Clean
ViRobot Clean
Tencent Malware.Win32.Gencirc.141e009c
Sophos Troj/Steal-DCI
F-Secure Heuristic.HEUR/AGEN.1374093
DrWeb Clean
VIPRE Gen:Variant.Lazy.492566
TrendMicro Trojan.Win32.AMADEY.YXEJSZ
McAfeeD ti!AE7BC7520447
Trapmine Clean
CTX dll.trojan.amadey
Emsisoft Gen:Variant.Lazy.492566 (B)
Ikarus Trojan-PSW.Agent
FireEye Generic.mg.4e1394044881a2fc
Jiangmin Clean
Webroot W32.AMADEY.YXEJSZ
Varist W32/ABTrojan.SKTQ-0578
Avira HEUR/AGEN.1374093
Fortinet W32/Amadey.G!tr.dldr
Antiy-AVL Trojan[Spy]/Win32.Stealer
Kingsoft Win32.Trojan-Spy.Stealer.fjoi
Gridinsoft Trojan.Win32.Amadey.tr
Xcitium Clean
Arcabit Trojan.Lazy.D78416
SUPERAntiSpyware Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
Microsoft Trojan:Win32/Wacatac.B!ml
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5684584
Acronis Clean
McAfee Artemis!4E1394044881
TACHYON Clean
VBA32 Clean
Panda Trj/Genetic.gen
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.AMADEY.YXEJSZ
Rising Clean
Yandex Clean
SentinelOne Clean
GData Gen:Variant.Lazy.492566
AVG Win32:BotX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan[downloader]:Win/Amadey.G
No IRMA results available.