Static | ZeroBOX

PE Compile Time

2024-10-28 22:13:17

PE Imphash

7e8b0331b68a47254f7000efd39b30a8

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000e2238 0x000e2400 6.61969432274
.rdata 0x000e4000 0x0001a28e 0x0001a400 6.00685519814
.data 0x000ff000 0x00008f6c 0x00002e00 2.73826045897
.rsrc 0x00108000 0x000000f8 0x00000200 2.52591746083
.reloc 0x00109000 0x00006594 0x00006600 6.67565754122

Resources

Name Offset Size Language Sub-language File type
RT_MANIFEST 0x00108060 0x00000091 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library CRYPT32.dll:
0x100e4038 CryptUnprotectData
Library KERNEL32.dll:
0x100e4040 GetFullPathNameA
0x100e4044 SetEndOfFile
0x100e4048 UnlockFileEx
0x100e404c GetTempPathW
0x100e4050 CreateMutexW
0x100e4054 WaitForSingleObject
0x100e4058 CreateFileW
0x100e405c GetFileAttributesW
0x100e4060 GetCurrentThreadId
0x100e4064 UnmapViewOfFile
0x100e4068 HeapValidate
0x100e406c HeapSize
0x100e4070 MultiByteToWideChar
0x100e4074 Sleep
0x100e4078 GetTempPathA
0x100e407c FormatMessageW
0x100e4080 GetDiskFreeSpaceA
0x100e4084 GetLastError
0x100e4088 GetFileAttributesA
0x100e408c GetFileAttributesExW
0x100e4090 OutputDebugStringW
0x100e4094 CreateFileA
0x100e4098 LoadLibraryA
0x100e409c WaitForSingleObjectEx
0x100e40a0 DeleteFileA
0x100e40a4 DeleteFileW
0x100e40a8 HeapReAlloc
0x100e40ac CloseHandle
0x100e40b0 GetSystemInfo
0x100e40b4 LoadLibraryW
0x100e40b8 HeapAlloc
0x100e40bc HeapCompact
0x100e40c0 HeapDestroy
0x100e40c4 UnlockFile
0x100e40c8 GetProcAddress
0x100e40cc CreateFileMappingA
0x100e40d0 LocalFree
0x100e40d4 LockFileEx
0x100e40d8 GetFileSize
0x100e40dc DeleteCriticalSection
0x100e40e0 GetCurrentProcessId
0x100e40e4 GetProcessHeap
0x100e40e8 SystemTimeToFileTime
0x100e40ec FreeLibrary
0x100e40f0 WideCharToMultiByte
0x100e40f8 GetSystemTime
0x100e40fc FormatMessageA
0x100e4100 CreateFileMappingW
0x100e4104 MapViewOfFile
0x100e410c GetTickCount
0x100e4110 FlushFileBuffers
0x100e4114 SetHandleInformation
0x100e4118 FindFirstFileA
0x100e4124 FindNextFileA
0x100e4128 CreatePipe
0x100e412c PeekNamedPipe
0x100e4130 lstrlenA
0x100e4134 FindClose
0x100e4138 GetCurrentDirectoryA
0x100e413c lstrcatA
0x100e4140 OpenProcess
0x100e4144 SetCurrentDirectoryA
0x100e414c ProcessIdToSessionId
0x100e4150 CopyFileA
0x100e4158 Process32NextW
0x100e415c Process32FirstW
0x100e4160 CreateThread
0x100e4164 CreateProcessA
0x100e4168 CreateDirectoryA
0x100e416c ReadConsoleW
0x100e4174 LeaveCriticalSection
0x100e4178 LockFile
0x100e417c OutputDebugStringA
0x100e4180 GetDiskFreeSpaceW
0x100e4184 WriteFile
0x100e4188 GetFullPathNameW
0x100e418c EnterCriticalSection
0x100e4190 HeapFree
0x100e4194 HeapCreate
0x100e419c ReadFile
0x100e41a0 AreFileApisANSI
0x100e41a4 SetFilePointer
0x100e41a8 SetFilePointerEx
0x100e41ac GetConsoleMode
0x100e41b0 GetConsoleOutputCP
0x100e41bc GetEnvironmentStringsW
0x100e41c0 GetCommandLineW
0x100e41c4 GetCommandLineA
0x100e41c8 GetOEMCP
0x100e41cc GetACP
0x100e41d0 IsValidCodePage
0x100e41d4 FindNextFileW
0x100e41d8 FindFirstFileExW
0x100e41dc SetStdHandle
0x100e41e0 GetCurrentDirectoryW
0x100e41e4 GetStdHandle
0x100e41e8 GetTimeZoneInformation
0x100e41f4 GetCurrentProcess
0x100e41f8 TerminateProcess
0x100e4200 IsDebuggerPresent
0x100e4204 GetStartupInfoW
0x100e4208 GetModuleHandleW
0x100e420c InitializeSListHead
0x100e4210 LCMapStringEx
0x100e4218 EncodePointer
0x100e421c DecodePointer
0x100e4220 CompareStringEx
0x100e4224 GetCPInfo
0x100e4228 GetStringTypeW
0x100e422c RaiseException
0x100e4230 InterlockedFlushSList
0x100e4234 RtlUnwind
0x100e4238 SetLastError
0x100e4240 TlsAlloc
0x100e4244 TlsGetValue
0x100e4248 TlsSetValue
0x100e424c TlsFree
0x100e4250 LoadLibraryExW
0x100e4254 ExitThread
0x100e425c GetModuleHandleExW
0x100e4260 GetDriveTypeW
0x100e4268 GetFileType
0x100e4270 FileTimeToSystemTime
0x100e4274 ExitProcess
0x100e4278 GetModuleFileNameW
0x100e427c CompareStringW
0x100e4280 LCMapStringW
0x100e4284 GetLocaleInfoW
0x100e4288 IsValidLocale
0x100e428c GetUserDefaultLCID
0x100e4290 EnumSystemLocalesW
0x100e4294 WriteConsoleW
Library ADVAPI32.dll:
0x100e4000 GetSidSubAuthority
0x100e4004 RegEnumValueW
0x100e4008 RegEnumKeyA
0x100e400c RegCloseKey
0x100e4010 RegQueryInfoKeyW
0x100e4014 RegOpenKeyA
0x100e4018 RegQueryValueExA
0x100e4020 RegOpenKeyExA
0x100e4024 GetUserNameA
0x100e4028 RegEnumKeyExW
0x100e402c LookupAccountNameA
Library SHELL32.dll:
0x100e429c SHFileOperationA
0x100e42a0 SHGetFolderPathA
Library WININET.dll:
0x100e42a8 HttpOpenRequestA
0x100e42ac InternetReadFile
0x100e42b0 InternetConnectA
0x100e42b4 HttpSendRequestA
0x100e42b8 InternetCloseHandle
0x100e42bc InternetOpenA
0x100e42c0 HttpAddRequestHeadersA
0x100e42c4 HttpSendRequestExW
0x100e42c8 HttpEndRequestA
0x100e42cc InternetOpenW
0x100e42d0 InternetWriteFile
Library bcrypt.dll:
0x100e42dc BCryptSetProperty
0x100e42e4 BCryptDecrypt

Exports

Ordinal Address Name
1 0x100afc10 Main
2 0x100045b0 Save
!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
uN8G*tI
L$ <%t
L$ +L$`
*uJ8D$
D$lSPQRVO
D$@+D$0+D$ @
t$0+L$0
F:T$ u
L$t_^[3
L$t_^3
L$t_^[3
9~T~)ff
u<9t$<u69t$@u0
</tA<\t=
D$(SVW
D$$_^[3
G$;G(r
9~`~33
9s`~]W3
W9S`~,3
t58C+tB
u%9GXt
B(;Aht
;C4sj
Fd;^ v
C<90tI
t%9t$,u
T$ ;D$D
L$l_^[3
ur8^+u
tL8^+uG
u|;^Dr
;w,v$hlK
t39xLt
~29~Lu"
t$(f9z,u6
D$$+t$$
D$(;B@~8
u58FIu
DFLf;B
DANf;F
;t$0r#hlK
u/;D$0w;
ML$ F;
2;A$wXV
T$ 9T$H
t$(;\$<|
T$ ;T$|
D$P;T$H
;t$H}V
D$@9D$P~y
G;|$<|
D$@;D$P|
L$,PRV
t$T;t$
D$X;\$(
D^Nf;G
L$,_^[3
|$$9|$(
L$,_^[3
;S,v%hlK
D$ _^[
D$ _^[
|NLf;x
RQVPh(
t19qLt
;|$0wk
;|$0s~j
D$<} j
9BINAu
9D$@t.
u9FPt
&#G8_^[
~89~Dt
t$(;t$0v)hlK
\$4;\$8sa
9D$,}T;t$0wN
f;FD}@3
FX3CX%
f;CF}2f
f;FD}n3
ADf;BDt
Q;D$H|
P;L$H|
L$@A;L$D|
$G<Cr(
@L:AWs
D$,;|$$|
T$<9PT
L$l_^3
u;9|$dt5
8O8u*9O$
L$<_^[3
^ _^[Y]
|$,;G`~%h
D$$98~'3
D$@9D$$u
L$\_^3
u]<&tR<
t<<>t8
T$@9PT
f;9tl@
L$49HT
T$,9QT
L$,9HT
T$<j Q
L$,9HT
L$,9HT
T$,9PT
D$(_^[
D$$9qT
D$$9qT
D$$9qT
D$$9qT
G f;F u
B f;F tB
WPPh(!
t$(hh"
L$4_^[3
u\f9X2uV
AH@PSW
BM:AMt
L$4_^[3
F&@;G`~
D$(SVW
L$4_^[3
f;H&}S
f!HN_^[
Q;t$0|
F;t$,|
P;L$0|
L$4_^[3
D$D9O@
L$$9HT
L$@9xT
L$,9HT
L$$9HT
L$ 9HT
T$`@Pj
D$h@Pj
tB;F }=
|$8H9D$ u
L$L9HT
L$|9HT
T$,9PT
T$,9PT
f;G&}O
{ 9|$,}n
L$,9HT
;L$(|7
9D$$v/
L$|_^[3
xnf;C$th
f;V4s/
f;N&}3
D$0;t$,|
D$<;D$4|
t$h9pT
T$h9PT
T$$9pT
L$,9HT
D$O u\
D$`;D$d}J
f;8tcA
K2f9J2ux
B6:C6up3
K&f;J&
C$f;B$
D$(SVW
D$0hHd
L$4_^[3
|$Lf;H&
t#Vh|&
L$$j6V
L$$9AD}
T$<9PT
T$LQPj
L$@9HT
T$,9PT
L$df;C&
\$P9XT
|$P9PT
\$d9XT
\$t9xT
u)9D$l|#
t09yLt
;N\~/h
A&SVW3
HX_^[]
L$l_^3
x99V v
t++t$8
P;|$$|
|$L u%
L$,_^[3
T$$9PT
L$4f!G
uB;F }=
|$(H9D$
T$$9PT
F H9D$
H0f;J*}
D$,9D$ vb
9} t#9y
L$\_^[3
D$0Phh@
D$ SVW
u#8F@u
un9W$ui;}
tP;_ }7
f;A&}w
f;A&}:
f;P&}n3
f;H&}q
L$ 9HT
L$\_^[3
8G>u%h
x<f;H&
ts< to
tM8^@uH9X
L$<SVW
H91t7@
|$8!\$
H91t8@
L$X#L$
D$\#O #G$
f#D$hf;
D$`#D$8f
#D$d#T$`
F$#N #E
G$#O #E
f;B&}#
FD#J(#B,
Q;D$8|
Q;D$8|
9t$(v5
F;t$(|
D$,A?>@P
+D$$Hj
L$|9HT
t$|9pT
t$D9pT
_*_^[]
_*_^[]
#8;8u";
#K #C$
f;A4s"
#N #F$
#x@#XD
B0f;A*
#AH#QL
@~$j@h8I
\$,90~
L$D9HT
H0;|$4
SD9K4tB3
!"#$%&
.6.78.9:;
<=>?.@
B.CDEFFG
.(YZ[\
.]^_`a8b
Gcdefghhijggklmnopqqqqqqqqrstuvwxyzz{|
<>to<<u
D$ SVW
L$,_^[3
9 u(HI
9}(t&j
PPPhP}
A8#A4Y]
|$ ;L$$}
lhos;J
t$(hdO
t$(hxO
Fu0hlK
u PPPhP}
t$ h 3
L$$_^[3
<=t`<+|Z<z
SVWj8h
SVWjKh
SVWj8h
SVWjKh
SVWj8h
SVWjKh
8Hostu
8Useru
8Passu
SVWj)h
CD$pPj
CD$pPj
CD$pPj
D$(9D$Lt3
D$H_^[
9D$\t/
9D$\t3
L$@^[3
L$@^[3
D$$9D$
L$@^[3
D$$9D$
L$@^[3
D$49D$
L$@^[3
L$,QR;
L$(QR;
CD$8Pj
D$L9D$(t
L$h^[3
u%QWRVS
;|$@t-
0O;|$@u
:D$wuW
:D$vuM
:D$ytB
:D$xuc
;L$(s_
:D$|uZ
sn;\$4}
:D$|uY
CT$$9L$
D$,_^[3
8\u,@;
9Vhvl3
8\u,@;
8\u,@;
~HBu^j
8\u,@;
8\u,@;
8\u,@;
8\u,@;
7+t$09t$
8\u,@;
8\u,@;
W9shvS3
+KL+SL;
8\u,@;
u>FG;u
<xt><Xu=
<xt <Xt
<xt"<Xu!
PPPPPWS
QQSVWd
URPQQh`
UQPXY]Y[
F4_^[]
<ItC<Lt3<Tt#<h
A<lt'<tt
SVWj03
WWWSHSh
WPWWWS
:u"f9z
t#Vh,u
ARPRQh
PPPPPPPP
u kE$<
j-Xf9E
SWt@jU
_tqPVj@
<at.<rt!<wt
<=upG8
xE;5H)
PPPPPWS
PP9E u:PPVWP
u,PQRS
Wj0XPV
SPjdVQ
QQSVj8j@
xi;5H)
xg;5H)
zSSSSj
f9:t!V
NX9^`t1
;V\uYW
u2Vj@h
9C`u99C\t4
u29K\t-
xE;5H)
CY<u
PPPPPPPP
D8(Ht'
f-00f=
f-00f=
bad allocation
0123456789abcdefghijklmnopqrstuvwxyz
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_parse)
regex_error(error_syntax)
regex_error
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
cross device link
destination address required
device or resource busy
directory not empty
executable format error
file exists
file too large
filename too long
function not supported
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
invalid argument
invalid seek
io error
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no lock available
no message available
no message
no protocol option
no space on device
no stream resources
no such device or address
no such device
no such file or directory
no such process
not a directory
not a socket
not a stream
not connected
not enough memory
not supported
operation canceled
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
permission denied
protocol error
protocol not supported
read only file system
resource deadlock would occur
resource unavailable try again
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many files open
too many links
too many symbolic link levels
value too large
wrong protocol type
0123456789abcdefghijklmnopqrstuvwxyz
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
bad exception
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
[aOni*{
~ $s%r
@b;zO]
v2!L.2
IND)ind)
(null)
CorExitProcess
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
CompareStringEx
EnumSystemLocalesEx
GetDateFormatEx
GetLocaleInfoEx
GetTimeFormatEx
GetUserDefaultLocaleName
IsValidLocaleName
LCMapStringEx
LCIDToLocaleName
LocaleNameToLCID
RoInitialize
RoUninitialize
AppPolicyGetProcessTerminationMethod
AppPolicyGetThreadInitializationType
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
UTF-16LEUNICODE
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
_hypot
_nextafter
1#QNAN
1#SNAN
]vQ<)8
|)P!?Ua0
Eb2]A=
u?^p?o4
y1~?|"
?x+s7
?5Od%
?|I7Z#
>,'1D=
?g)([|X>=
~U`?K
:h"?bC
@H#?43
Ax#?uN}*
r7Yr7=
F0$?3=1
H`$?h|
&?~YK|
sU0&?W
<8bunz8
?#%X.y
F||<##
<@En[vP
b<log10
?5Wg4p
%S#[k=
"B <1=
SYSTEM_MALLOC
THREADSAFE=1
SQLITE_
local time unavailable
localtime
unixepoch
weekday
start of
minute
second
%04d-%02d-%02d %02d:%02d:%02d
%02d:%02d:%02d
%04d-%02d-%02d
%06.3f
julianday
datetime
strftime
current_time
current_timestamp
current_date
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
(NULL)
922337203685477580
API call with %s database connection pointer
unopened
invalid
Function
Savepoint
AutoCommit
Transaction
SorterNext
PrevIfOpen
NextIfOpen
AggStep
Checkpoint
JournalMode
Vacuum
VFilter
VUpdate
Return
InitCoroutine
EndCoroutine
HaltIfNull
Integer
String
SoftNull
Variable
ResultRow
CollSeq
AddImm
MustBeInt
RealAffinity
Permutation
Compare
Column
Affinity
MakeRecord
ReadCookie
SetCookie
ReopenIdx
OpenRead
OpenWrite
OpenAutoindex
OpenEphemeral
SorterOpen
SequenceTest
OpenPseudo
SeekLT
SeekLE
SeekGE
SeekGT
NoConflict
NotFound
NotExists
Sequence
NewRowid
Insert
IsNull
NotNull
InsertInt
BitAnd
ShiftLeft
ShiftRight
Subtract
Multiply
Divide
Remainder
Concat
Delete
BitNot
String8
ResetCount
SorterCompare
SorterData
RowKey
RowData
NullRow
SorterSort
Rewind
SorterInsert
IdxInsert
IdxDelete
IdxRowid
Destroy
ResetSorter
CreateIndex
CreateTable
ParseSchema
LoadAnalysis
DropTable
DropIndex
DropTrigger
IntegrityCk
RowSetAdd
RowSetRead
RowSetTest
Program
FkCounter
FkIfZero
MemMax
IfZero
AggFinal
IncrVacuum
Expire
TableLock
VBegin
VCreate
VDestroy
VColumn
VRename
Pagecount
MaxPgcnt
Explain
AreFileApisANSI
CharLowerW
CharUpperW
CloseHandle
CreateFileA
CreateFileW
CreateFileMappingA
CreateFileMappingW
CreateMutexW
DeleteFileA
DeleteFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentProcessId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesW
GetFileAttributesExW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetProcAddressA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
SystemTimeToFileTime
UnlockFile
UnlockFileEx
UnmapViewOfFile
WideCharToMultiByte
WriteFile
CreateEventExW
WaitForSingleObject
WaitForSingleObjectEx
SetFilePointerEx
GetFileInformationByHandleEx
MapViewOfFileFromApp
CreateFile2
LoadPackagedLibrary
GetTickCount64
GetNativeSystemInfo
OutputDebugStringA
OutputDebugStringW
GetProcessHeap
CreateFileMappingFromApp
InterlockedCompareExchange
OsError 0x%lx (%lu)
os_win.c:%d: (%lu) %s(%s) - %s
delayed %dms for lock/sharing conflict
winSeekFile
winClose
winRead
winWrite1
winWrite2
winTruncate1
winTruncate2
winSync
winFileSize
winUnlockReadLock
winUnlock
%s-shm
winOpenShm
winShmMap1
winShmMap2
winShmMap3
winUnmapfile1
winUnmapfile2
winMapfile1
winMapfile2
etilqs_
winGetTempname1
winGetTempname2
winGetTempname4
winGetTempname5
winOpen
winDelete
winAccess
%s%c%s
winFullPathname1
winFullPathname2
win32-longpath
recovered %d pages from %s
-journal
nolock
immutable
recovered %d frames from WAL file %s
cannot limit WAL size: %s
:memory:
invalid page number %d
2nd reference to page %d
Failed to read ptrmap key=%d
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
%d of %d pages missing from overflow list starting at %d
failed to get page %d
freelist leaf count too big on page %d
Page %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
On tree page %d cell %d:
Rowid %lld out of order (previous was %lld)
Child page depth differs
On page %d at right child:
Rowid %lld out of order (max larger than parent min of %lld)
Rowid %lld out of order (min less than parent min of %lld)
Rowid %lld out of order (max larger than parent max of %lld)
Rowid %lld out of order (min less than parent max of %lld)
Corruption detected in cell %d on page %d
Multiple uses for byte %d of page %d
Fragmentation of %d bytes reported as %d on page %d
Main freelist:
List of tree roots:
Page %d is never used
Pointer map page %d is referenced
Outstanding page count goes from %d to %d during this analysis
out of memory
unknown database %s
source and destination must be distinct
%!.15g
BINARY
(%.20s)
%s(%d)
(blob)
vtab:%p:%p
intarray
program
%s-mjXXXXXX9XXz
MJ delete: %s
MJ collide: %s
-mj%06X9%02X
FOREIGN KEY constraint failed
API called with finalized prepared statement
API called with NULL prepared statement
string or blob too big
unable to use function %s in the requested context
bind on a busy prepared statement: [%s]
'%.*q'
zeroblob(%d)
NOT NULL
UNIQUE
FOREIGN KEY
abort at %d in [%s]: %s
%s constraint failed: %s
%s constraint failed
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot release savepoint - SQL statements in progress
cannot commit transaction - SQL statements in progress
cannot start a transaction within a transaction
cannot rollback - no transaction is active
cannot commit - no transaction is active
database schema has changed
sqlite_temp_master
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
too many levels of trigger recursion
out of
cannot change %s wal mode from within a transaction
database table is locked: %s
statement aborts at %d: [%s] %s
integer
cannot open value of type %s
no such rowid: %lld
cannot open virtual table: %s
cannot open table without rowid: %s
cannot open view: %s
no such column: "%s"
foreign key
indexed
cannot open %s column for writing
misuse of aliased aggregate %s
no such column
ambiguous column name
%s: %s.%s.%s
%s: %s.%s
%s: %s
%s prohibited in partial index WHERE clauses
%s prohibited in CHECK constraints
functions
second argument to likelihood() must be a constant between 0.0 and 1.0
not authorized to use function: %s
misuse of aggregate function %.*s()
no such function: %.*s
wrong number of arguments to function %.*s()
subqueries
parameters
%r %s BY term out of range - should be between 1 and %d
too many terms in ORDER BY clause
%r ORDER BY term does not match any column in the result set
too many terms in %s BY clause
a GROUP BY clause is required before HAVING
aggregate functions are not allowed in the GROUP BY clause
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
too many SQL variables
too many columns in %s
_ROWID_
SCALAR
CORRELATED
EXECUTE %s%s SUBQUERY %d
hex literal too big: %s
misuse of aggregate: %s()
unknown function: %.*s()
RAISE() may only be used within a trigger-program
%.*s"%w"%s
%s%.*s"%w"
sqlite_rename_table
sqlite_rename_trigger
sqlite_rename_parent
name=%Q
%s OR name=%Q
type='trigger' AND (%s)
tbl_name=%Q
sqlite_
table %s may not be altered
there is already another table or index with this name: %s
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
sqlite_sequence
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Cannot add a PRIMARY KEY column
Cannot add a UNIQUE column
Cannot add a REFERENCES column with non-NULL default value
Cannot add a NOT NULL column with default value NULL
Cannot add a column with non-constant default
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
virtual tables may not be altered
Cannot add a column to a view
sqlite_altertab_%s
sqlite_stat1
tbl,idx,stat
sqlite_stat3
sqlite_stat4
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE %s=%Q
stat_init
stat_push
stat_get
unordered*
sz=[0-9]*
SELECT tbl,idx,stat FROM %Q.sqlite_stat1
too many attached databases - max %d
cannot ATTACH database within transaction
database %s is already in use
database is already attached
attached databases must use the same text encoding as main database
unable to open database: %s
no such database: %s
cannot detach database %s
cannot DETACH database within transaction
database %s is locked
sqlite_detach
sqlite_attach
%s %T cannot reference objects in database %s
%s cannot use variables
authorizer malfunction
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
not authorized
no such view
no such table
corrupt database
unknown database %T
object name reserved for internal use: %s
temporary table name must be unqualified
table %T already exists
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
INTEGER
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
CREATE TABLE
AUTOINCREMENT not allowed on WITHOUT ROWID tables
PRIMARY KEY missing on table %s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE TABLE %Q.sqlite_sequence(name,seq)
tbl_name='%q' AND type!='trigger'
parameters are not allowed in views
view %s is circularly defined
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
sqlite_stat%d
DELETE FROM %Q.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
sqlite_stat
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
cannot create a TEMP index on non-TEMP table "%s"
altertab_
table %s may not be indexed
views may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
table %s has no column named %s
conflicting ON CONFLICT clauses specified
UNIQUE
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
name='%q' AND type='index'
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
a JOIN clause is required before %s
COMMIT
ROLLBACK
RELEASE
unable to open a temporary database file for storing temporary tables
%s.rowid
unable to identify the object to be reindexed
duplicate WITH table name: %s
no such collation sequence: %s
table %s may not be modified
cannot modify %s because it is a view
rows deleted
integer overflow
LIKE or GLOB pattern too complex
ESCAPE expression must be a single character
%!.20e
typeof
length
substr
printf
unicode
coalesce
ifnull
unlikely
likelihood
likely
random
randomblob
nullif
sqlite_version
sqlite_source_id
sqlite_log
sqlite_compileoption_used
sqlite_compileoption_get
last_insert_rowid
changes
total_changes
replace
zeroblob
load_extension
group_concat
foreign key mismatch - "%w" referencing "%w"
table %S has no column named %s
table %S has %d columns but %d values were supplied
%d values for %d columns
rows inserted
sqlite3_extension_init
unable to open shared library [%s]
no entry point [%s] in shared library [%s]
error during initialization: %s
automatic extension loading failed: %s
application_id
auto_vacuum
automatic_index
busy_timeout
cache_size
cache_spill
case_sensitive_like
checkpoint_fullfsync
collation_list
compile_options
count_changes
data_store_directory
database_list
default_cache_size
defer_foreign_keys
empty_result_callbacks
encoding
foreign_key_check
foreign_key_list
foreign_keys
freelist_count
full_column_names
fullfsync
ignore_check_constraints
incremental_vacuum
index_info
index_list
integrity_check
journal_mode
journal_size_limit
legacy_file_format
locking_mode
max_page_count
mmap_size
page_count
page_size
query_only
quick_check
read_uncommitted
recursive_triggers
reverse_unordered_selects
schema_version
secure_delete
short_column_names
shrink_memory
soft_heap_limit
synchronous
table_info
temp_store
temp_store_directory
threads
user_version
wal_autocheckpoint
wal_checkpoint
writable_schema
exclusive
normal
incremental
memory
temporary storage cannot be changed from within a transaction
SET NULL
SET DEFAULT
CASCADE
RESTRICT
NO ACTION
delete
persist
truncate
result
not a writable directory
Safety level may not be changed inside a transaction
notnull
dflt_value
height
unique
on_update
on_delete
parent
*** in database %s ***
NULL value in %s.%s
missing from index
non-unique entry in index
wrong # of entries in index
UTF-16le
UTF-16be
UTF16le
UTF16be
UTF-16
unsupported encoding: %s
compile_option
restart
checkpointed
timeout
malformed database schema (%s)
%s - %s
invalid rootpage
unsupported file format
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
database schema is locked: %s
statement too long
opcode
comment
selectid
detail
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
only a single result allowed for a SELECT that is part of an expression
UNION ALL
INTERSECT
EXCEPT
USE TEMP B-TREE FOR %s
USING TEMP B-TREE
COMPOUND SUBQUERIES %d AND %d %s(%s)
column%d
ORDER BY clause should come after %s not before
LIMIT clause should come after %s not before
all VALUES must have the same number of terms
SELECTs to the left and right of %s do not have the same number of result columns
no such index: %s
multiple references to recursive table: %s
circular reference: %s
table %s has %d values for %d columns
multiple recursive references: %s
recursive reference in a subquery: %s
sqlite_sq_%p
too many references to "%s": max 65535
%s.%s.%s
no such table: %s
no tables specified
too many columns in result set
DISTINCT aggregates must have exactly one argument
USING COVERING INDEX
SCAN TABLE %s%s%s
DISTINCT
GROUP BY
RIGHT PART OF ORDER BY
ORDER BY
sqlite3_get_table() called with two or more incompatible queries
temporary trigger may not have qualified name
trigger
cannot create triggers on virtual tables
trigger %T already exists
cannot create trigger on system table
BEFORE
cannot create %s trigger on view: %S
cannot create INSTEAD OF trigger on table: %S
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
type='trigger' AND name='%q'
no such trigger: %S
-- TRIGGER %s
no such column: %s
rows updated
_rowid_
cannot VACUUM from within a transaction
cannot VACUUM - SQL statements in progress
ATTACH ':memory:' AS vacuum_db;
ATTACH '' AS vacuum_db;
PRAGMA vacuum_db.synchronous=OFF
BEGIN;
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
CREATE VIRTUAL TABLE %T
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
name='%q' AND type='table'
vtable constructor failed: %s
vtable constructor did not declare schema: %s
hidden
hidden
no such module: %s
NOCASE
automatic index on %s(%s)
auto-index
table %s: xBestIndex returned an invalid plan
ANY(%s)
SEARCH
SUBQUERY %d
TABLE %s
AS %s
PRIMARY KEY
AUTOMATIC COVERING INDEX
COVERING INDEX %s
INDEX %s
USING
(rowid=?)
(rowid>? AND rowid<?)
(rowid>?)
(rowid<?)
USING INTEGER PRIMARY KEY
VIRTUAL TABLE INDEX %d:%s
%s.xBestIndex() malfunction
no query solution
at most %d tables in a join
parser stack overflow
unknown table option: %.*s
too many terms in compound SELECT
set list
near "%T": syntax error
too many arguments on function %T
qualified table names are not allowed on INSERT, UPDATE, and DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
interrupt
unrecognized token: "%T"
create
temporary
explain
2014-12-09 01:34:36 f66f7a17b78ba617acde90fc810107f34f1a1f2e
unable to close due to unfinalized statements or unfinished backups
not an error
SQL logic error or missing database
access permission denied
callback requested query abort
database is locked
database table is locked
attempt to write a readonly database
interrupted
disk I/O error
database disk image is malformed
unknown operation
database or disk is full
unable to open database file
locking protocol
table contains no data
constraint failed
datatype mismatch
library routine called out of sequence
large file support is disabled
authorization denied
auxiliary database format error
bind or column index out of range
file is encrypted or is not a database
unknown error
abort due to ROLLBACK
unable to delete/modify user-function due to active statements
unknown database: %s
unable to delete/modify collation sequence due to active statements
invalid uri authority: %.*s
shared
private
access
no such %s mode: %s
%s mode not allowed: %s
no such vfs: %s
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
xPq>.T
*T,h5#q./2
4e2%!m
D;Hdj
yIr-{b2$
=s}?@0t
CREATE TEMP TABLE sqlite_temp_master(
type text,
name text,
tbl_name text,
rootpage integer,
sql text
liA>@?onoffalseyestruefull
0123456789ABCDEF0123456789abcdef
******""""""""""""""""""""
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@3.8.7.4
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
0123456789ABCDEF
naturaleftouterightfullinnercross
LLLLLLLLLL
PQRSTUVWXYZ[\]^_lmn
23PQRSzUVWXYZ[\]^_
GHIJKLMNOPQRSzUVWXYZ[\]^_
a[\]^_
UVWXYZ[\]^_
YZ[\]^_
GHIJKLMNOPQRS3UVWXYZ[\]^_
23cdefghi
pAEGHIJKLMNOPQRS
UVWXYZ[\]^_
cgpfgh
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_B
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
GHIJKLMNOPQRS
UVWXYZ[\]^_
HIJKLMNOPQRS
UVWXYZ[\]^_
IJKLMNOPQRS
UVWXYZ[\]^_
CREATE TABLE sqlite_master(
type text,
name text,
tbl_name text,
rootpage integer,
sql text
SQLite format 3
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
thstndrd
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYWITHOUTERELEASEATTACHAVINGROUPDATEBEGINNERECURSIVEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTRIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
?456789:;<=
 !"#$%&'()*+,-./0123
Unknown exception
bad array new length
string too long
iostream
bad cast
bad locale name
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
83eb0804ff3941a2b466480b042dce0d
52516e506fff8737248fd9aeb78014fe
ec25c1
cefe478bc92a76257ed1b02bc24e528d
JLk2AgxpTHWvGJklNMDs
Irll0jedR6FmS ImbP0fSU6v2z9z
KK8xCx==
Rq4m1EJm
GK5t3N==
IKZt3N==
Uw5w4jalgLxaKclp0PUq8CmR2f0pc0mo TA=
UyBwOZanhDXo6S9l
OPlwOEKs2LN25SRSdr0YRTmtOQIf
USZ51ZGUhB==
Iftq2x==
USZtOTCThsNrDq==
HK970Up=
OOBmN0Gri1S=
QyckNTl Z7NY7wll0WI8NZYn3A5keqKfQOpk2jYsg7RYQvdgcfMq70CdJV9odKmfQPZqFZucfLM=
WOBmN0Gri1TdSwFRZOsYRTmtOQIC
RScHKC3uZpNaMMladf4u5ZO1My5sdqGyaVRdF0KrhrNs7vZcdgIk5ZUdGQ9zdKYBWPNdGjKaiMNwSLVqZP9gQBux2yE6c1Gm8yZl
OOBmN0Gri1SsSNhc
OOBmN0Gri1Ta7SFjczQV6t==
NPNu10yY2F==
USJz1TYrjV==
SyJA0ZiigLoeEQlEJxAt5TYz4Ow3NqK7WKEwGd==
OycoOTCof1Xa
USVwOZKcg7ds
Ha9lNUF=
Qyp1OTCof1Xa7SFjczQV6t==
USBq3DKcg7ds
SyJA0ZiigLoeEQlEJzsk7DKk1VcxN1u3IeZ5OPpoWl==
OyJA0BCohrNa7SFjczQV6Yl=
USVi2Z7cg8Bj
SyJA0ZiigLoeEQlEJzMc6Z6u2QHx117oFucH
UTVm1DKghrxrDq==
ayVi3Dt=
UyZu1Zei
UzZAOUy94LxYRG==
UyVqN0Gig7Xf6clcdp==
8UZ6MZGaiLxx
ayVi3Du6f7N3QSR9ezAu
ayVi3Du6
SyZtOT3r31S=
SyZtOT3r31SsSNhc
USVm2ZiTg8ss8cln
US3q1DKs26o=
Wyck4x==
byBA4x==
VPVw1Tac2JptRSFjJyIV50yiOVMf
USJ11ZQi3B==
SyJA0ZiigLoeEQlEJvEw7DYu0PDjX6uv9yZ1AjKX4XAeEQY=
VUcvOjaghB==
9OJx2t==
NUlz1ZQe
Uwhw1Z3l40pB4xJmcPQ8OUCm2bsH01GkUwVmOjuUgMJaMw9ebPZbKDu1NJ==
Uwhw1Z3l40pB4xJmcPQ8OUCm2bsH01GkUwBwNZulNKFYRNRc
QVFm2jt=
UwcxOUyaNKFtSdRUZQEgQBYxOQAkKJC3VONtOSmFg76n59BvZQMc
UwcxOUyaNKFtSdRUZQEgQBYxOQAkKJC3VONtOSmFg7Ff5sBKezAVSN==
OOVoON==
Uw5qN0yoh71k7vxw0z9gQCKAOQzjTKu3VNBFOTOai1pYQuxm0VgpBBGi3zv=
Uw5qN0yoh71k7vxw0z9gQCKAOQzjTKu3VNBN1ZCagHtR7wFR0J==
RVF23DUifB==
UxRx3UGnf1lKRMJ4VWwW7DUq0UoYe6KBFwVi3Du6WLNkRNVjeysH5Z3q1bsH01Gk
UxRx3UGnf1lKRMJ4VWwW7DUq0UoYe6KBFwVi3Du6YL1hRMw8VWMc7DJ=
NUlz1ZQii1S=
UwRp2jYmf2NrQvVq0QDbKDu1NOoH10OkaOB1MBmo47dsBuR9ezz=
UwRp2jYmf2NrQvVq0QDbKDu1NOoPd6Ck9uFU3DuT4V==
QVNj0UGUgV==
UwczNjaTi1TaONNcdbwzRUGiMxIo1qu49zVdIDYgf1WeKwFRZJ==
UwczNjaTi1TaONNcdbwzRUGiMxoy06uvFxR1NUGe
Sep3NTmdfV==
Ux3q3jul4LdaONNcdbwzRUGiMxIo1qu49zVdIDYgf1WeKwFRZJ==
Ux3q3jul4LdaONNcdbwzRUGiMxoy06uvFxR1NUGe
NUcu1ZGo
UwRw1TYdg6pC6cFecV08OUCm2bsH01GkUwVmOjuUgMJaMw9ebPZbKDu1NJ==
UwRw1TYdg6pC6cFecV08OUCm2bsH01GkUwBwNZulNKFYRNRc
NUckFZYc
UwRwNXCo36pA6c9UdVQtQCKAOQzjTKu3VNBFOTOai1pYQuxm0VgpBBGi3zv=
UwRwNXCo36pA6c9UdVQtQCKAOQzjTKu3VNBN1ZCagHtR7wFR0J==
NUlmODYT
UwRpOTGoiKpT6SVpJxMc7DudGzMp01KvaxBN1Z3igntCRNR9
UwRpOTGoiKpT6SVpJxMc7DudIz0m00ljRVVi3DJ=
NUZv3Byrg86xSNI=
UwRm1kGvhr116SVpYyQuSUxhGzw30ZmHWO3i3TmT2JptSSllJxMc7Dt=
UwRm1kGvhr116SVpYyQuSUxhGzw30ZmP9URi1zqMiLxYSG==
RSZNGRCNNL1w4Mdgce4W6jltxAMC11yxVO5mM0OagMNjEsBnZQIu7ZYzOy0500m4WKFHJhYGNLptSSlldp==
9eZ12Z6 i7pf59BcfAwq6kFh2AAy1qavWKFvNTQeUV==
Fy3w1DGehoS=
Fyxm4QQcgLNf67==
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
Content-Type: application/x-www-form-urlencoded
Content-Type: multipart/form-data; boundary=----
Content-Type: application/octet-stream
Content-Disposition: form-data; name="data"; filename="
------
------
' -CompressionLevel Optimal
' -DestinationPath '
powershell -Command Compress-Archive -Path '
?wal=1
NSS_Init
PL_Base64Decode
PK11SDR_Decrypt
PK11_Authenticate
PK11_GetInternalKeySlot
PK11_FreeSlot
NSS_Shutdown
\logins.json
nss3.dll
"hostname":"([^"]+)"
"encryptedUsername":"([^"]+)"
"encryptedPassword":"([^"]+)"
397a1dad0e0212119274178e7e4cc080
chrome://
web|Firefox|
firefox.exe
Mozilla Firefox
Local Settings\Software\Microsoft\Windows\Shell\MuiCache
SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\firefox.exe
\Mozilla Firefox
Firefox (
\Thunderbird\Profiles\
oauth://
mail|Thunderbird|
Thunderbird.exe
thunderbird.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Thunderbird.exe
\Mozilla Thunderbird
Thunderbird (
web|TorBrowser|
\TorBrowser\Data\Browser\profile.default
TorBrowser (
<name>
</name>
<password>
</password>
558a8f02be63d149ebdfd34ec94bdd31
im|Pidgin|
.purple\accounts.xml
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched
\.purple\accounts.xml
Pidgin (
"hostname":
"name":
"password":
"password": "
im|Gajim|
\UserData\Settings.sqlite
\Gajim\Settings.sqlite
Gajim (
<jid type="QString">
<password type="QString">
im|Psi|
Psi\profiles\default\accounts.xml
Psi+ (
0123456789ABCDEF
WinSCP.ini
WinSCP
WinSCP.exe
SOFTWARE\Martin Prikryl\WinSCP 2\Sessions
HostName
SOFTWARE\Martin Prikryl\WinSCP 2\Sessions\
UserName
Password
ssh|WinSCP|
WinSCP (
FileZilla\sitemanager.xml
<Host>
</Host>
<Port>
</Port>
<User>
</User>
<Pass encoding="base64">
</Pass>
ftp|FileZilla|
FileZilla (
SMTP Server
IMAP Password
POP3 Password
HTTP Password
SMTP Password
9375CFF0413111d3B88A00104B2A6676
mail|Outlook|
Software\Microsoft\Office
Software\Microsoft\Windows Messaging Subsystem\Profiles
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles
Outlook (
Wi-Fi-
<keyMaterial>
</keyMaterial>
wifi|WiFi||
netsh wlan show profiles
profiles
WiFi (
Monero\wallets\
_Monero
&cred=
invalid string position
vector too long
vector<bool> too long
xdigit
iostream stream error
0123456789ABCDEFabcdef-+Xx
0123456789ABCDEFabcdef-+XxPp
0123456789-+Ee
()$^.*+?[]|\-{},:=!
>@aTR'
M@fffff
0000000000000000
UUUUUU
?UUUUUU
?uZEeu
?uZEeu
?UUUUUU
?UUUUUU
.text$di
.text$mn
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCC
.CRT$XCL
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$r
.rdata$sxdata
.rdata$voltmd
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata$x
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.data$rs
.rsrc$01
.rsrc$02
STEALERDLL.dll
CryptUnprotectData
CRYPT32.dll
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
SetHandleInformation
FindFirstFileA
Wow64DisableWow64FsRedirection
K32GetModuleFileNameExW
FindNextFileA
CreatePipe
PeekNamedPipe
lstrlenA
FindClose
GetCurrentDirectoryA
lstrcatA
OpenProcess
SetCurrentDirectoryA
CreateToolhelp32Snapshot
ProcessIdToSessionId
CopyFileA
Wow64RevertWow64FsRedirection
Process32NextW
Process32FirstW
CreateThread
CreateProcessA
CreateDirectoryA
KERNEL32.dll
GetSidIdentifierAuthority
RegEnumValueW
RegOpenKeyExA
LookupAccountNameA
RegEnumKeyExW
GetUserNameA
GetSidSubAuthority
GetSidSubAuthorityCount
RegQueryValueExA
RegOpenKeyA
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyA
ADVAPI32.dll
SHGetFolderPathA
SHFileOperationA
SHELL32.dll
HttpOpenRequestA
InternetWriteFile
InternetOpenW
HttpEndRequestA
HttpSendRequestExW
HttpAddRequestHeadersA
InternetOpenA
InternetCloseHandle
HttpSendRequestA
InternetConnectA
InternetReadFile
WININET.dll
BCryptDecrypt
BCryptOpenAlgorithmProvider
BCryptSetProperty
BCryptGenerateSymmetricKey
bcrypt.dll
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InitializeSListHead
LCMapStringEx
InitializeCriticalSectionEx
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
GetStringTypeW
RaiseException
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleFileNameW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
GetStdHandle
GetCurrentDirectoryW
SetStdHandle
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
WriteConsoleW
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVregex_error@std@@
.?AVbad_exception@std@@
.?AVfailure@ios_base@std@@
.?AVruntime_error@std@@
.?AVbad_alloc@std@@
.?AVsystem_error@std@@
.?AVbad_cast@std@@
.?AV_System_error@std@@
.?AVexception@std@@
.?AVbad_array_new_length@std@@
.?AVtype_info@@
.?AV_Locimp@locale@std@@
.?AV?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV_Node_if@std@@
.?AV?$collate@D@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$_Node_str@D@std@@
.?AVios_base@std@@
.?AVerror_category@std@@
.?AV?$ctype@D@std@@
.?AV_Node_end_rep@std@@
.?AV_Node_end_group@std@@
.?AV?$basic_iostream@DU?$char_traits@D@std@@@std@@
.?AV_Node_back@std@@
.?AV_Facet_base@std@@
.?AU_Crt_new_delete@std@@
.?AV?$_Iosb@H@std@@
.?AV_Iostream_error_category2@std@@
.?AV?$numpunct@D@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV_Node_base@std@@
.?AUctype_base@std@@
.?AV_Root_node@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AVfacet@locale@std@@
.?AV_Node_assert@std@@
.?AV_Node_rep@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$_Node_class@DV?$regex_traits@D@std@@@std@@
.?AV_Node_capture@std@@
.?AV_Node_endif@std@@
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
</assembly>
0#0(020C0H0R0c0h0r0
1#1(121C1H1R1c1h1r1
2#2(222C2H2R2c2h2r2
3#3(323C3H3R3c3h3r3
4#4(424C4H4R4c4h4r4
5#5(525C5H5R5c5h5r5
6#6(626C6H6R6c6h6r6
7#7(727C7H7R7c7h7r7
8#8(828C8H8R8c8h8r8
9#9(929C9H9R9c9h9r9
:#:(:2:C:H:R:c:h:r:
;#;(;2;C;H;R;c;h;r;
<#<(<2<C<H<R<c<h<r<
=!=1=A=Q=a=s=x=
>=>Q>}>
?!?1?A?Q?a?q?}?
0(020_0
0'1.1>1I1S1w1
3 3,383
5 5$5(5,5i5
5?6J6S6[6{6
6N7`7d8l8
<A<I<s<
5?5r5y5
637;7l7p7t7x7|7
=H>O>\>
2`2d2h2l2p2t2x2|2
223C3S3\3
4U4`4u4
606P6v6
818<8B8J8P8_8e8
9"9g9w9
:M:Y:d:n:t:
;$;);4;D;
<#<)<0<9<D<Z<r<~<
=#=+=4=9=>=M=X=g=m=}=
>(>Q>Y>d>n>t>}>
0!010:0X0g0z0
506M6^6o6
:X:\:`:d:h:l:p:
3$393A3N3S3Y3`3j3p3w3}3
4_5/6A9
;7=>=t=x=|=
>1>7>U>`>'?
=D=K=Q=
4%50575J5r5
8'9:9C9b9h9
9_:m:x:~:
;W;2<<<B<{<
<!=N=z=
>#>->F>
0)060o0
2/2=2j2t2
4!4N4e4
4<5C5c6
888Y8e8
9*:0:G:Q:s:|:
;1;7;X;
<$<@<x<
</=g=p={=
0$0/0=0
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Amadey.l!c
Elastic malicious (high confidence)
ClamAV Win.Keylogger.Zusy-10017136-0
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Gen:Variant.Lazy.492566
Cylance Unsafe
Zillya Trojan.Stealer.Win32.177453
CrowdStrike win/malicious_confidence_90% (D)
Alibaba TrojanDownloader:Win32/Amadey.b3ba5e82
K7GW Trojan-Downloader ( 005a0ec91 )
K7AntiVirus Trojan-Downloader ( 005a0ec91 )
huorong TrojanSpy/Stealer.hk
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win32/TrojanDownloader.Amadey.G
APEX Clean
Avast Win32:BotX-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky Trojan-Spy.Win32.Stealer.fjxb
BitDefender Gen:Variant.Lazy.492566
NANO-Antivirus Clean
ViRobot Trojan.Win.Z.Lazy.1073664.JU
MicroWorld-eScan Gen:Variant.Lazy.492566
Tencent Malware.Win32.Gencirc.11c9f7e6
Sophos Troj/Steal-DCI
F-Secure Heuristic.HEUR/AGEN.1374093
DrWeb Clean
VIPRE Gen:Variant.Lazy.492566
TrendMicro TROJ_GEN.R014C0DK124
McAfeeD ti!DDB899DC62BC
Trapmine Clean
CTX dll.trojan.amadey
Emsisoft Gen:Variant.Lazy.492566 (B)
Ikarus Trojan-PSW.Agent
FireEye Generic.mg.207a4671cc25f330
Jiangmin Clean
Webroot Clean
Varist W32/ABTrojan.BKBQ-6099
Avira HEUR/AGEN.1374093
Fortinet W32/Amadey.G!tr.dldr
Antiy-AVL Trojan[Spy]/Win32.Stealer
Kingsoft Win32.Trojan-Spy.Stealer.fjxb
Gridinsoft Trojan.Win32.Downloader.sa
Xcitium Clean
Arcabit Trojan.Lazy.D78416
SUPERAntiSpyware Clean
ZoneAlarm UDS:Trojan-Spy.Win32.Stealer.fjxb
Microsoft Trojan:Win32/Amadey.CCJC!MTB
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5684584
Acronis Clean
McAfee Artemis!207A4671CC25
TACHYON Clean
VBA32 TrojanDownloader.Deyma
Malwarebytes Malware.AI.4291765326
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R014C0DK124
Rising Spyware.Convagent!8.12330 (TFE:5:N0KQWaSVbJ)
Yandex Clean
SentinelOne Clean
MaxSecure Clean
GData Gen:Variant.Lazy.492566
AVG Win32:BotX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan[Spy]:Win/Amadey.G
No IRMA results available.