比较分析...

分析任务

分析类型 虚拟机标签 开始时间 结束时间 持续时间
文件 (Windows) win7-sp1-x64-hpdapp01-1 2019-09-16 15:42:58 2019-09-16 15:45:15 137 秒

魔盾分数

3.5

可疑的

文件详细信息

文件名 Notepad2-mod_4.2.25r998_x64_CN.exe
文件大小 3250480 字节
文件类型 PE32+ executable (GUI) x86-64, for MS Windows
MD5 0bc98e71e1bfed4e2dd6b25b1610c81f
SHA1 960cc16ae84b32bf9d82c0d6fb247c0035e4b3da
SHA256 94908e56b2c641041ec4dc750e5c60793af9355ccc8e7b45f9d0e247f6cc9919
SHA512 dd7e9748ec18e7a19ca5e47b9b0085e9130679f19850a2959fa3ec7a01fd74bdbdcb985630b202c0e8c6bed3c9dc67276e8eff6540100285e8cf9d325f068d2f
CRC32 E7863F4D
Ssdeep 49152:E3tK5KGuGYfjDuScm/PCZqZR/6AMOnOro/Tyh:6qScXFONyh
Yara 登录查看Yara规则
样本下载 提交漏报
登录查看威胁特征

运行截图

访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

域名解析 (可点击查询WPING实时安全评级)

无域名信息.

摘要

登录查看详细行为信息

PE 信息

初始地址 0x140000000
入口地址 0x140145314
声明校验值 0x00328db6
实际校验值 0x00328db6
最低操作系统版本要求 5.2
PDB路径 H:\progs\Compiling\notepad2-mod\bin\VS2017\Release_x64\Notepad2.pdb
编译时间 2017-08-06 16:34:34
载入哈希 c3d1385a8f588bad56cb559a9fe747c4

版本信息

LegalCopyright
InternalName
FileVersion
CompanyName
Comments
ProductName
ProductVersion
FileDescription
OriginalFilename
Translation

微软证书验证 (Sign Tool)

SHA1 时间戳 有效性 错误
abc5c6a0de55d4e8416341aa69e3fabdbe437318 Sun Aug 06 16:34:43 2017
否
 WinVerifyTrust returned error 0x80096010
证书链 Certificate Chain 1
发行给 DigiCert Assured ID Root CA
发行人 DigiCert Assured ID Root CA
有效期 Mon Nov 10 080000 2031
SHA1 哈希 0563b8630d62d75abbc8ab1e4bdfb5a899b24d43
证书链 Certificate Chain 2
发行给 DigiCert SHA2 Assured ID Code Signing CA
发行人 DigiCert Assured ID Root CA
有效期 Sun Oct 22 200000 2028
SHA1 哈希 92c1588e85af2201ce7915e8538b492f605b80c6
证书链 Certificate Chain 3
发行给 Fotis Zafiropoulos
发行人 DigiCert SHA2 Assured ID Code Signing CA
有效期 Tue Jan 29 200000 2019
SHA1 哈希 ac9c620c67f29c882bd1d641916527af5adbbc70
证书链 Timestamp Chain 1
发行给 DigiCert Assured ID Root CA
发行人 DigiCert Assured ID Root CA
有效期 Mon Nov 10 080000 2031
SHA1 哈希 0563b8630d62d75abbc8ab1e4bdfb5a899b24d43
证书链 Timestamp Chain 2
发行给 DigiCert Assured ID CA-1
发行人 DigiCert Assured ID Root CA
有效期 Wed Nov 10 080000 2021
SHA1 哈希 19a09b5a36f4dd99727df783c17a51231a56c117
证书链 Timestamp Chain 3
发行给 DigiCert Timestamp Responder
发行人 DigiCert Assured ID CA-1
有效期 Tue Oct 22 080000 2024
SHA1 哈希 614d271d9102e30169822487fde5de00a352b01d

PE 数据组成

名称 虚拟地址 虚拟大小 原始数据大小 特征 熵(Entropy)
.text 0x00001000 0x001872d4 0x00187400 IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6.56
.data 0x00189000 0x00033e8c 0x0002aa00 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0.86
.pdata 0x001bd000 0x0000c960 0x0000ca00 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6.13
.idata 0x001ca000 0x00003f4c 0x00004000 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4.78
.rsrc 0x001ce000 0x00150e7d 0x00151000 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4.24
.reloc 0x0031f000 0x00002348 0x00002400 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 5.42

导入

库: COMCTL32.dll:
• 0x1401ca020 ImageList_Destroy
• 0x1401ca028 None
• 0x1401ca030 ImageList_Create
• 0x1401ca038 CreateStatusWindowW
• 0x1401ca040 InitCommonControlsEx
• 0x1401ca048 ImageList_AddMasked
库: SHLWAPI.dll:
• 0x1401ca798 StrCpyW
• 0x1401ca7a0 UrlEscapeW
• 0x1401ca7a8 StrNCatW
• 0x1401ca7b0 StrDupA
• 0x1401ca7b8 PathGetDriveNumberW
• 0x1401ca7c0 StrCmpNIW
• 0x1401ca7c8 PathRelativePathToW
• 0x1401ca7d0 PathIsPrefixW
• 0x1401ca7d8 PathUnExpandEnvStringsW
• 0x1401ca7e0 PathIsRootW
• 0x1401ca7e8 PathCanonicalizeW
• 0x1401ca7f0 PathIsRelativeW
• 0x1401ca7f8 PathAppendW
• 0x1401ca800 StrChrIW
• 0x1401ca808 PathFindExtensionW
• 0x1401ca810 PathCommonPrefixW
• 0x1401ca818 StrCmpNIA
• 0x1401ca820 StrStrW
• 0x1401ca828 PathStripToRootW
• 0x1401ca830 PathCompactPathExW
• 0x1401ca838 StrFormatByteSizeW
• 0x1401ca840 StrRChrW
• 0x1401ca848 PathRenameExtensionW
• 0x1401ca850 StrStrIW
• 0x1401ca858 StrCatBuffW
• 0x1401ca860 PathIsUNCW
• 0x1401ca868 StrChrW
• 0x1401ca870 StrTrimW
• 0x1401ca878 PathFileExistsW
• 0x1401ca880 SHAutoComplete
• 0x1401ca888 PathRemoveFileSpecW
• 0x1401ca890 PathFindFileNameW
• 0x1401ca898 PathQuoteSpacesW
• 0x1401ca8a0 StrTrimA
• 0x1401ca8a8 StrCatW
• 0x1401ca8b0 StrStrA
• 0x1401ca8b8 StrCatBuffA
• 0x1401ca8c0 StrCmpNA
• 0x1401ca8c8 UrlUnescapeW
• 0x1401ca8d0 StrChrA
• 0x1401ca8d8 StrStrIA
• 0x1401ca8e0 StrDupW
• 0x1401ca8e8 StrCmpW
• 0x1401ca8f0 StrCpyNW
• 0x1401ca8f8 StrCmpIW
• 0x1401ca900 StrChrIA
• 0x1401ca908 StrRetToBufW
• 0x1401ca910 PathMatchSpecW
• 0x1401ca918 PathIsDirectoryW
• 0x1401ca920 PathUnquoteSpacesW
库: KERNEL32.dll:
• 0x1401ca258 CloseHandle
• 0x1401ca260 CreateThread
• 0x1401ca268 ResetEvent
• 0x1401ca270 GetCurrentDirectoryW
• 0x1401ca278 LocalFree
• 0x1401ca280 lstrcpyW
• 0x1401ca288 lstrcmpiW
• 0x1401ca290 lstrcmpW
• 0x1401ca298 ReadFile
• 0x1401ca2a0 GetOEMCP
• 0x1401ca2a8 GetCPInfo
• 0x1401ca2b0 WriteFile
• 0x1401ca2b8 SetEndOfFile
• 0x1401ca2c0 lstrlenA
• 0x1401ca2c8 CreateFileW
• 0x1401ca2d0 lstrcmpA
• 0x1401ca2d8 lstrcatA
• 0x1401ca2e0 GetACP
• 0x1401ca2e8 IsValidCodePage
• 0x1401ca2f0 MultiByteToWideChar
• 0x1401ca2f8 GetLastError
• 0x1401ca300 GlobalSize
• 0x1401ca308 lstrcpyA
• 0x1401ca310 LocalSize
• 0x1401ca318 GetProcAddress
• 0x1401ca320 GlobalLock
• 0x1401ca328 GetFileSize
• 0x1401ca330 LCMapStringW
• 0x1401ca338 lstrcpynA
• 0x1401ca340 GetModuleHandleW
• 0x1401ca348 WideCharToMultiByte
• 0x1401ca350 lstrcmpiA
• 0x1401ca358 GetTickCount
• 0x1401ca360 GlobalUnlock
• 0x1401ca368 SizeofResource
• 0x1401ca370 GetLongPathNameW
• 0x1401ca378 GetCurrentProcess
• 0x1401ca390 GetLocaleInfoW
• 0x1401ca398 GetModuleHandleA
• 0x1401ca3a0 FreeResource
• 0x1401ca3a8 GetModuleFileNameW
• 0x1401ca3b0 LoadResource
• 0x1401ca3b8 FindResourceW
• 0x1401ca3c0 GetWindowsDirectoryW
• 0x1401ca3d0 MulDiv
• 0x1401ca3d8 GetStartupInfoW
• 0x1401ca3e0 CompareFileTime
• 0x1401ca3e8 FindFirstFileW
• 0x1401ca3f0 SearchPathW
• 0x1401ca3f8 GetCommandLineW
• 0x1401ca400 SetErrorMode
• 0x1401ca408 FindClose
• 0x1401ca410 GlobalFree
• 0x1401ca418 GetVersion
• 0x1401ca420 SetFileAttributesW
• 0x1401ca428 GetPrivateProfileStringW
• 0x1401ca438 LoadLibraryW
• 0x1401ca440 GetLocalTime
• 0x1401ca450 SetCurrentDirectoryW
• 0x1401ca458 GetTimeFormatW
• 0x1401ca460 CreateProcessW
• 0x1401ca468 FreeLibrary
• 0x1401ca470 GetDateFormatW
• 0x1401ca478 ExitProcess
• 0x1401ca480 GetModuleFileNameA
• 0x1401ca488 GetStdHandle
• 0x1401ca490 RaiseException
• 0x1401ca498 RtlPcToFileHeader
• 0x1401ca4a0 RtlUnwindEx
• 0x1401ca4a8 TlsFree
• 0x1401ca4b0 TlsSetValue
• 0x1401ca4b8 TlsGetValue
• 0x1401ca4c0 TlsAlloc
• 0x1401ca4d0 SetLastError
• 0x1401ca4d8 CompareStringW
• 0x1401ca4e0 DecodePointer
• 0x1401ca4e8 EncodePointer
• 0x1401ca4f0 GetStringTypeW
• 0x1401ca4f8 IsDebuggerPresent
• 0x1401ca500 InitializeSListHead
• 0x1401ca508 GetSystemTimeAsFileTime
• 0x1401ca510 GetCurrentThreadId
• 0x1401ca518 GetCurrentProcessId
• 0x1401ca528 TerminateProcess
• 0x1401ca538 UnhandledExceptionFilter
• 0x1401ca540 RtlVirtualUnwind
• 0x1401ca548 RtlLookupFunctionEntry
• 0x1401ca550 RtlCaptureContext
• 0x1401ca558 LoadLibraryExW
• 0x1401ca560 QueryPerformanceCounter
• 0x1401ca568 DeleteCriticalSection
• 0x1401ca578 LoadLibraryA
• 0x1401ca588 LeaveCriticalSection
• 0x1401ca590 EnterCriticalSection
• 0x1401ca598 Sleep
• 0x1401ca5a0 GetLocaleInfoA
• 0x1401ca5a8 WriteConsoleW
• 0x1401ca5b0 SetFilePointerEx
• 0x1401ca5b8 GlobalAlloc
• 0x1401ca5c0 lstrcatW
• 0x1401ca5c8 SetEvent
• 0x1401ca5d0 FormatMessageW
• 0x1401ca5d8 CreateEventW
• 0x1401ca5e0 ExitThread
• 0x1401ca5e8 GetFileAttributesW
• 0x1401ca5f0 LocalAlloc
• 0x1401ca600 WaitForSingleObject
• 0x1401ca608 GetPrivateProfileIntW
• 0x1401ca610 lstrcpynW
• 0x1401ca618 lstrlenW
• 0x1401ca628 GetModuleHandleExW
• 0x1401ca630 HeapAlloc
• 0x1401ca638 HeapFree
• 0x1401ca640 HeapReAlloc
• 0x1401ca648 GetFileType
• 0x1401ca650 GetTimeZoneInformation
• 0x1401ca658 IsValidLocale
• 0x1401ca660 GetUserDefaultLCID
• 0x1401ca668 EnumSystemLocalesW
• 0x1401ca670 FindFirstFileExA
• 0x1401ca678 FindNextFileA
• 0x1401ca680 GetCommandLineA
• 0x1401ca688 GetEnvironmentStringsW
• 0x1401ca690 FreeEnvironmentStringsW
• 0x1401ca698 SetEnvironmentVariableA
• 0x1401ca6a0 SetStdHandle
• 0x1401ca6a8 GetProcessHeap
• 0x1401ca6b0 HeapSize
• 0x1401ca6b8 GetConsoleMode
• 0x1401ca6c0 FlushFileBuffers
• 0x1401ca6c8 GetConsoleCP
• 0x1401ca6d0 LockResource
库: USER32.dll:
• 0x1401ca930 InvalidateRect
• 0x1401ca938 ReleaseDC
• 0x1401ca940 GetWindowLongW
• 0x1401ca948 IsCharLowerW
• 0x1401ca950 GetSystemMenu
• 0x1401ca958 GetKeyState
• 0x1401ca960 CharUpperW
• 0x1401ca968 CharLowerW
• 0x1401ca970 DestroyWindow
• 0x1401ca978 CreateWindowExW
• 0x1401ca980 wsprintfA
• 0x1401ca988 GetActiveWindow
• 0x1401ca990 OpenClipboard
• 0x1401ca998 GetCapture
• 0x1401ca9a0 CloseClipboard
• 0x1401ca9a8 IsCharLowerA
• 0x1401ca9b0 EmptyClipboard
• 0x1401ca9b8 SetForegroundWindow
• 0x1401ca9c0 SystemParametersInfoW
• 0x1401ca9d0 SetRect
• 0x1401ca9d8 CharUpperBuffW
• 0x1401ca9e0 GetClientRect
• 0x1401ca9e8 GetMenuStringW
• 0x1401ca9f0 IsWindowEnabled
• 0x1401ca9f8 DialogBoxIndirectParamW
• 0x1401caa00 MapWindowPoints
• 0x1401caa08 GetMonitorInfoW
• 0x1401caa10 SetWindowTextW
• 0x1401caa18 GetSystemMetrics
• 0x1401caa20 SetActiveWindow
• 0x1401caa28 MonitorFromRect
• 0x1401caa30 SetWindowPos
• 0x1401caa38 GetDC
• 0x1401caa40 GetMenu
• 0x1401caa48 GetWindowRect
• 0x1401caa50 FindWindowExW
• 0x1401caa58 AdjustWindowRectEx
• 0x1401caa60 DestroyCursor
• 0x1401caa68 SetCapture
• 0x1401caa70 GetCaretBlinkTime
• 0x1401caa78 GetMessageW
• 0x1401caa80 DefWindowProcW
• 0x1401caa88 GetSysColor
• 0x1401caa90 SetFocus
• 0x1401caa98 CharNextW
• 0x1401caaa0 GetClipboardData
• 0x1401caaa8 LoadCursorW
• 0x1401caab0 InsertMenuW
• 0x1401caab8 SetClipboardData
• 0x1401caac0 LoadMenuW
• 0x1401caad0 GetSysColorBrush
• 0x1401caad8 CharLowerA
• 0x1401caae0 IsCharAlphaNumericA
• 0x1401caae8 ReleaseCapture
• 0x1401caaf0 SetCursorPos
• 0x1401caaf8 ChildWindowFromPoint
• 0x1401cab00 IsCharUpperW
• 0x1401cab08 GetCursorPos
• 0x1401cab10 GetParent
• 0x1401cab18 GetWindowTextLengthW
• 0x1401cab20 PostMessageW
• 0x1401cab28 GetFocus
• 0x1401cab30 CheckRadioButton
• 0x1401cab38 GetPropW
• 0x1401cab40 MessageBoxExW
• 0x1401cab48 SetWindowLongPtrW
• 0x1401cab50 SendMessageW
• 0x1401cab58 EndDialog
• 0x1401cab60 RemovePropW
• 0x1401cab68 MessageBeep
• 0x1401cab70 GetWindowLongPtrW
• 0x1401cab78 LoadStringW
• 0x1401cab80 ShowWindow
• 0x1401cab88 BeginDeferWindowPos
• 0x1401cab90 DispatchMessageW
• 0x1401cab98 wvsprintfW
• 0x1401caba0 CharPrevW
• 0x1401caba8 PeekMessageW
• 0x1401cabb0 SetDlgItemTextW
• 0x1401cabb8 GetDlgItemTextW
• 0x1401cabc0 SendDlgItemMessageW
• 0x1401cabc8 MessageBoxIndirectW
• 0x1401cabd0 IsDlgButtonChecked
• 0x1401cabd8 IsCharAlphaNumericW
• 0x1401cabe0 SetPropW
• 0x1401cabe8 TranslateMessage
• 0x1401cabf0 LoadIconW
• 0x1401cabf8 EndDeferWindowPos
• 0x1401cac00 wsprintfW
• 0x1401cac08 GetDlgItemInt
• 0x1401cac10 GetDlgItem
• 0x1401cac18 CheckDlgButton
• 0x1401cac20 SetDlgItemInt
• 0x1401cac28 LoadImageW
• 0x1401cac30 EnableWindow
• 0x1401cac38 ShowWindowAsync
• 0x1401cac40 CheckMenuRadioItem
• 0x1401cac48 IsWindowVisible
• 0x1401cac50 EqualRect
• 0x1401cac58 SetClipboardViewer
• 0x1401cac60 MessageBoxW
• 0x1401cac68 CopyImage
• 0x1401cac70 ShowOwnedPopups
• 0x1401cac78 ScreenToClient
• 0x1401cac80 UnregisterClassW
• 0x1401cac88 GetWindowPlacement
• 0x1401cac90 LoadAcceleratorsW
• 0x1401cac98 TrackPopupMenu
• 0x1401caca0 GetSubMenu
• 0x1401caca8 IsWindow
• 0x1401cacb0 OffsetRect
• 0x1401cacb8 SetTimer
• 0x1401cacc0 IsDialogMessageW
• 0x1401cacc8 ChangeClipboardChain
• 0x1401cacd0 GetDlgCtrlID
• 0x1401cacd8 ClientToScreen
• 0x1401cace0 IsChild
• 0x1401cace8 RegisterClassW
• 0x1401cacf0 SetWindowPlacement
• 0x1401cacf8 CountClipboardFormats
• 0x1401cad00 GetDoubleClickTime
• 0x1401cad08 SetMenuDefaultItem
• 0x1401cad10 GetForegroundWindow
• 0x1401cad18 EnumWindows
• 0x1401cad20 DestroyMenu
• 0x1401cad28 IntersectRect
• 0x1401cad30 EndPaint
• 0x1401cad38 BeginPaint
• 0x1401cad40 PtInRect
• 0x1401cad48 ShowCaret
• 0x1401cad50 AppendMenuA
• 0x1401cad58 SetWindowLongW
• 0x1401cad60 DestroyCaret
• 0x1401cad68 GetMessageTime
• 0x1401cad70 GetKeyboardLayout
• 0x1401cad78 TrackMouseEvent
• 0x1401cad80 CreateCaret
• 0x1401cad88 SetCaretPos
• 0x1401cad90 RegisterClassExW
• 0x1401cada0 GetScrollInfo
• 0x1401cada8 NotifyWinEvent
• 0x1401cadb0 HideCaret
• 0x1401cadb8 GetUpdateRgn
• 0x1401cadc0 RegisterClipboardFormatW
• 0x1401cadc8 SetScrollInfo
• 0x1401cadd0 DrawTextW
• 0x1401cadd8 SystemParametersInfoA
• 0x1401cade0 FrameRect
• 0x1401cade8 CreateIconIndirect
• 0x1401cadf0 DrawTextA
• 0x1401cadf8 CreatePopupMenu
• 0x1401cae00 GetIconInfo
• 0x1401cae08 FillRect
• 0x1401cae10 InflateRect
• 0x1401cae18 MonitorFromPoint
• 0x1401cae20 CallWindowProcW
• 0x1401cae28 TranslateAcceleratorW
• 0x1401cae30 GetMenuState
• 0x1401cae38 TrackPopupMenuEx
• 0x1401cae40 CheckMenuItem
• 0x1401cae48 IsZoomed
• 0x1401cae50 KillTimer
• 0x1401cae58 PostQuitMessage
• 0x1401cae60 EnableMenuItem
• 0x1401cae68 RegisterWindowMessageW
• 0x1401cae70 UpdateWindow
• 0x1401cae78 IsIconic
• 0x1401cae80 DrawAnimatedRects
• 0x1401cae88 SetCursor
• 0x1401cae90 DeferWindowPos
• 0x1401cae98 GetClassNameW
库: GDI32.dll:
• 0x1401ca090 GetTextExtentExPointA
• 0x1401ca098 CreatePatternBrush
• 0x1401ca0a0 Rectangle
• 0x1401ca0a8 Polygon
• 0x1401ca0b0 Ellipse
• 0x1401ca0b8 CreateSolidBrush
• 0x1401ca0c0 RoundRect
• 0x1401ca0c8 IntersectClipRect
• 0x1401ca0d0 CreateRectRgn
• 0x1401ca0d8 CreateBitmap
• 0x1401ca0e0 CombineRgn
• 0x1401ca0e8 GetStockObject
• 0x1401ca0f0 SetBkMode
• 0x1401ca0f8 SetTextColor
• 0x1401ca100 BitBlt
• 0x1401ca108 TranslateCharsetInfo
• 0x1401ca110 SetMapMode
• 0x1401ca118 StretchBlt
• 0x1401ca120 GetDeviceCaps
• 0x1401ca128 EnumFontsW
• 0x1401ca130 EndPage
• 0x1401ca138 DPtoLP
• 0x1401ca140 StartDocW
• 0x1401ca148 ExtTextOutW
• 0x1401ca150 SetTextAlign
• 0x1401ca158 SetBkColor
• 0x1401ca160 MoveToEx
• 0x1401ca168 CreatePen
• 0x1401ca170 LineTo
• 0x1401ca178 DeleteDC
• 0x1401ca180 GetTextMetricsW
• 0x1401ca188 CreateFontW
• 0x1401ca190 EndDoc
• 0x1401ca198 StartPage
• 0x1401ca1a0 GetTextExtentExPointW
• 0x1401ca1a8 CreateCompatibleDC
• 0x1401ca1b0 GetTextExtentPoint32A
• 0x1401ca1b8 CreateDIBSection
• 0x1401ca1c0 ExtTextOutA
• 0x1401ca1c8 GetTextExtentPoint32W
• 0x1401ca1d0 CreateCompatibleBitmap
• 0x1401ca1d8 GetNearestColor
• 0x1401ca1e0 GetObjectW
• 0x1401ca1e8 DeleteObject
• 0x1401ca1f0 SelectObject
• 0x1401ca1f8 CreateFontIndirectW
库: COMDLG32.dll:
• 0x1401ca058 ChooseFontW
• 0x1401ca060 PageSetupDlgW
• 0x1401ca068 PrintDlgW
• 0x1401ca070 GetSaveFileNameW
• 0x1401ca078 GetOpenFileNameW
• 0x1401ca080 ChooseColorW
库: ADVAPI32.dll:
• 0x1401ca000 GetTokenInformation
• 0x1401ca008 OpenProcessToken
• 0x1401ca010 IsTextUnicode
库: SHELL32.dll:
• 0x1401ca708 ShellExecuteW
• 0x1401ca710 SHBrowseForFolderW
• 0x1401ca718 ShellExecuteExW
• 0x1401ca720 SHGetPathFromIDListW
• 0x1401ca728 SHGetDataFromIDListW
• 0x1401ca730 SHGetDesktopFolder
• 0x1401ca738 None
• 0x1401ca740 SHAppBarMessage
• 0x1401ca748 SHGetFolderPathW
• 0x1401ca750 SHAddToRecentDocs
• 0x1401ca758 SHGetSpecialFolderPathW
• 0x1401ca760 DragQueryFileW
• 0x1401ca768 Shell_NotifyIconW
• 0x1401ca770 SHCreateDirectoryExW
• 0x1401ca778 DragAcceptFiles
• 0x1401ca780 DragFinish
• 0x1401ca788 SHGetFileInfoW
库: ole32.dll:
• 0x1401caea8 OleInitialize
• 0x1401caeb0 OleUninitialize
• 0x1401caeb8 CoCreateInstance
• 0x1401caec0 CoTaskMemAlloc
• 0x1401caec8 CoTaskMemFree
• 0x1401caed0 DoDragDrop
• 0x1401caed8 RegisterDragDrop
• 0x1401caee0 RevokeDragDrop
• 0x1401caee8 CLSIDFromProgID
• 0x1401caef0 CoUninitialize
• 0x1401caef8 CoInitialize
库: IMM32.dll:
• 0x1401ca208 ImmNotifyIME
• 0x1401ca210 ImmSetCompositionStringW
• 0x1401ca218 ImmEscapeW
• 0x1401ca220 ImmGetCompositionStringW
• 0x1401ca228 ImmSetCompositionWindow
• 0x1401ca230 ImmSetCompositionFontW
• 0x1401ca238 ImmReleaseContext
• 0x1401ca240 ImmGetContext
• 0x1401ca248 ImmSetCandidateWindow
库: MSIMG32.dll:
• 0x1401ca6e0 AlphaBlend
库: OLEAUT32.dll:
• 0x1401ca6f0 SysFreeString
• 0x1401ca6f8 SysAllocString
.text
`.data
.pdata
@.idata
@.rsrc
@.reloc
bad allocation
bad array new length
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_parse)
regex_error(error_syntax)
regex_error
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
InitOnceExecuteOnce
CreateEventExW
CreateSemaphoreW
CreateSemaphoreExW
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
CreateSymbolicLinkW
GetCurrentPackageId
GetTickCount64
GetFileInformationByHandleEx
SetFileInformationByHandle
GetSystemTimePreciseAsFileTime
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
InitializeSRWLock
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
SleepConditionVariableSRW
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CompareStringEx
GetLocaleInfoEx
LCMapStringEx
0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefghijklmnopqrstuvwxyz
bad exception
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
delete
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`RTTI
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
Type Descriptor'
INITY
inity
SNAN)
snan)
IND)ind)
`h````
(null)
CorExitProcess
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
March
April
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
EnumSystemLocalesEx
GetDateFormatEx
GetTimeFormatEx
GetUserDefaultLocaleName
IsValidLocaleName
LCIDToLocaleName
LocaleNameToLCID
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
e+000
log10
9>powf
1#INF
1#QNAN
1#SNAN
1#IND
ansi,ansi,ascii,
oem,oem,
utf-16,utf16,unicode,
utf-16be,utf16be,unicodebe,
utf-8,utf8,
utf-7,utf7,
DOS-720,dos720,
iso-8859-6,iso88596,arabic,csisolatinarabic,ecma114,isoir127,
x-mac-arabic,xmacarabic,
windows-1256,windows1256,cp1256
ibm775,ibm775,cp500,
iso-8859-4,iso88594,csisolatin4,isoir110,l4,latin4,
windows-1257,windows1257,
ibm852,ibm852,cp852,
iso-8859-2,iso88592,csisolatin2,isoir101,latin2,l2,
x-mac-ce,xmacce,
windows-1250,windows1250,xcp1250,
gb2312,gb2312,chinese,cngb,csgb2312,csgb231280,gb231280,gbk,
x-mac-chinesesimp,xmacchinesesimp,
big5,big5,cnbig5,csbig5,xxbig5,
x-mac-chinesetrad,xmacchinesetrad,
x-mac-croatian,xmaccroatian,
cp866,cp866,ibm866,
iso-8859-5,iso88595,csisolatin5,csisolatincyrillic,cyrillic,isoir144,
koi8-r,koi8r,cskoi8r,koi,koi8,
koi8-u,koi8u,koi8ru,
x-mac-cyrillic,xmaccyrillic,
windows-1251,windows1251,xcp1251,
iso-8859-13,iso885913,
ibm863,ibm863,
ibm737,ibm737,
iso-8859-7,iso88597,csisolatingreek,ecma118,elot928,greek,greek8,isoir126,
x-mac-greek,xmacgreek,
windows-1253,windows1253,
ibm869,ibm869,
DOS-862,dos862,
iso-8859-8-i,iso88598i,logical,
iso-8859-8,iso88598,csisolatinhebrew,hebrew,isoir138,visual,
x-mac-hebrew,xmachebrew,
windows-1255,windows1255,
ibm861,ibm861,
x-mac-icelandic,xmacicelandic,
x-mac-japanese,xmacjapanese,
shift_jis,shiftjis,shiftjs,csshiftjis,cswindows31j,mskanji,xmscp932,xsjis,
x-mac-korean,xmackorean,
windows-949,windows949,ksc56011987,csksc5601,euckr,isoir149,korean,ksc56011989
iso-8859-3,iso88593,latin3,isoir109,l3,
iso-8859-15,iso885915,latin9,l9,
ibm865,ibm865,
ibm437,ibm437,437,cp437,cspc8,codepage437,
ibm858,ibm858,ibm00858,
ibm860,ibm860,
x-mac-romanian,xmacromanian,
x-mac-thai,xmacthai,
windows-874,windows874,dos874,iso885911,tis620,
ibm857,ibm857,
iso-8859-9,iso88599,latin5,isoir148,l5,
x-mac-turkish,xmacturkish,
windows-1254,windows1254,
x-mac-ukrainian,xmacukrainian,
windows-1258,windows-258,
ibm850,ibm850,
iso-8859-1,iso88591,cp819,latin1,ibm819,isoir100,latin1,l1,
macintosh,macintosh,
windows-1252,windows1252,cp367,cp819,ibm367,us,xansi,
ebcdic-cp-us,ebcdiccpus,ebcdiccpca,ebcdiccpwt,ebcdiccpnl,ibm037,cp037,
x-ebcdic-international,xebcdicinternational,
x-EBCDIC-GreekModern,xebcdicgreekmodern,
CP1026,cp1026,csibm1026,ibm1026,
gb18030,gb18030,
\x%02X
\u%04X
%%0%ii
%%#0%iX
%%#0%ix
$(0I)
$(0N)
$(0L)
%%%s%ii
StrCmpLogicalW
@#$%^&*~-=+()[]{}\/.,:;'"!?<>`|
@#$%^&*~-=+()[]{}\/:;'"
enable-local-variables
tab-width
c-basic-indent
indent-tabs-mode
c-tab-always-indent
truncate-lines
fill-column
encoding
charset
coding
utf-8
IsAppThemed
SetCurrentProcessExplicitAppUserModelID
shell32.dll
SetLayeredWindowAttributes
OpenThemeData
GetThemeSysFont
CloseThemeData
11 11 44 1
c #EBE9ED
c #E5E3E7
c #767C6D
c #2A3120
c #1B2312
c #333B28
c #E3E1E5
c #D8D6DA
c #444D38
c #3F5C19
c #63AD00
c #73C900
c #64AF00
c #3D5718
c #3E4634
c #7B8172
c #42601A
c #74CB00
c #71C600
c #3A5317
c #707668
c #3F4931
c #262C1D
c #2F3A1E
c #72C700
c #74CA00
c #0E1109
c #3C462F
c #62AC00
c #21271A
c #7A8071
c #405D19
c #3D5A18
c #D9D7DB
c #4E5841
c #72C800
c #63AC00
c #3F5B19
c #3D4533
c #DFDDE0
c #353E29
c #29331B
c #7B8272
c #DDDBDF
.+@#$+%
&*=-;>,'
)!~~~~{]^
/-~~~~~>(
_:~~~~~<[
}|~~~~~|1
23~~~~;4+
56=|7890
a2bc}de
()[]{}
</base>
</bgsound>
</br>
</embed>
</hr>
</img>
</input>
</link>
</meta>
!doctype ^aria- ^data- a abbr accept accept-charset accesskey acronym action address align alink alt and applet archive area article aside async audio autocomplete autofocus autoplay axis b background base basefont bb bdi bdo bgcolor big blockquote body border bordercolor br buffered button canvas caption cellpadding cellspacing center challenge char charoff charset checkbox checked cite class classid clear code codebase codetype col colgroup color cols colspan command compact content contenteditable contextmenu controls coords crossorigin data datafld dataformatas datagrid datalist datapagesize datasrc datetime dd declare default defer del details dfn dialog dir dirname disabled div dl download draggable dropzone dt em embed enctype event eventsource face fieldset figcaption figure file font footer for form formaction formenctype formmethod formnovalidate formtarget frame frameborder frameset h1 h2 h3 h4 h5 h6 head header headers height hgroup hidden high hr href hreflang hspace html http-equiv i icon id iframe image img input ins integrity isindex ismap itemprop itemscope itemtype kbd keygen keytype kind label lang language leftmargin legend li link list longdesc loop low main manifest map marginheight marginwidth mark max maxlength media mediagroup menu menuitem meta meter method min multiple muted name nav noframes nohref noresize noscript noshade novalidate nowrap object ol onabort onafterprint onbeforeprint onbeforeunload onblur oncancel oncanplay oncanplaythrough onchange onclick onclose oncontextmenu oncuechange ondblclick ondrag ondragend ondragenter ondragleave ondragover ondragstart ondrop ondurationchange onemptied onended onerror onfocus onformchange onforminput onhashchange oninput oninvalid onkeydown onkeypress onkeyup onload onloadeddata onloadedmetadata onloadstart onmessage onmousedown onmousemove onmouseout onmouseover onmouseup onmousewheel onoffline ononline onpagehide onpageshow onpause onplay onplaying onpopstate onprogress onratechange onreadystatechange onredo onreset onresize onscroll onseeked onseeking onselect onshow onstalled onstorage onsubmit onsuspend ontimeupdate onundo onunload onvolumechange onwaiting open optgroup optimum option output p param password pattern ping placeholder poster pre prefix preload profile progress prompt property pubdate public q radio radiogroup readonly rel required reset rev reversed role rows rowspan rp rt ruby rules s samp sandbox scheme scope scoped script scrolling seamless section select selected shape size sizes small source span spellcheck src srcdoc srclang standby start step strike strong style sub submit summary sup tabindex table target tbody td text textarea tfoot th thead time title topmargin tr track translate tt type typemustmatch u ul usemap valign value valuetype var version video vlink vspace wbr width wrap xml xmlns
abstract boolean break byte case catch char class const continue debugger default delete do double else enum export extends false final finally float for function goto if implements import in instanceof int interface long native new null package private protected public return short static super switch synchronized this throw throws transient true try typeof var void volatile while with
alias and as attribute begin boolean byref byte byval call case class compare const continue currency date declare dim do double each else elseif empty end enum eqv erase error event exit explicit false for friend function get global gosub goto if imp implement in integer is let lib load long loop lset me mid mod module new next not nothing null object on option optional or preserve private property public raiseevent redim rem resume return rset select set single static stop string sub then to true type unload until variant wend while with withevents xor
__callstatic __class__ __compiler_halt_offset__ __dir__ __file__ __function__ __get __halt_compiler __isset __line__ __method__ __namespace__ __set __sleep __trait__ __unset __wakeup abstract and argc argv array as break callable case catch cfunction class clone closure const continue declare default define die directory do e_all e_compile_error e_compile_warning e_core_error e_core_warning e_deprecated e_error e_fatal e_notice e_parse e_strict e_user_deprecated e_user_error e_user_notice e_user_warning e_warning echo else elseif empty enddeclare endfor endforeach endif endswitch endwhile eval exception exit extends false final for foreach function global goto http_cookie_vars http_env_vars http_get_vars http_post_files http_post_vars http_server_vars if implements include include_once instanceof insteadof interface isset list namespace new not null old_function or parent php_self print private protected public require require_once return static stdclass switch this throw trait true try unset use var virtual while xor
align-content align-items align-self alignment-adjust alignment-baseline animation animation-delay animation-direction animation-duration animation-fill-mode animation-iteration-count animation-name animation-play-state animation-timing-function appearance ascent azimuth backface-visibility background background-attachment background-blend-mode background-break background-clip background-color background-image background-origin background-position background-repeat background-size baseline baseline-shift bbox binding bleed bookmark-label bookmark-level bookmark-state bookmark-target border border-bottom border-bottom-color border-bottom-left-radius border-bottom-right-radius border-bottom-style border-bottom-width border-collapse border-color border-image border-image-outset border-image-repeat border-image-slice border-image-source border-image-width border-left border-left-color border-left-style border-left-width border-length border-radius border-right border-right-color border-right-style border-right-width border-spacing border-style border-top border-top-color border-top-left-radius border-top-right-radius border-top-style border-top-width border-width bottom box-align box-decoration-break box-direction box-flex box-flex-group box-lines box-ordinal-group box-orient box-pack box-shadow box-sizing break-after break-before break-inside cap-height caption-side centerline change-bar change-bar-class change-bar-offset change-bar-side clear clip clip-path clip-rule color color-profile column-count column-fill column-gap column-rule column-rule-color column-rule-style column-rule-width columns column-span column-width content counter-increment counter-reset crop cue cue-after cue-before cursor definition-src descent direction display dominant-baseline drop-initial-after-adjust drop-initial-after-align drop-initial-before-adjust drop-initial-before-align drop-initial-size drop-initial-value elevation empty-cells fill fit fit-position flex flex-basis flex-direction flex-flow flex-grow flex-shrink flex-wrap float float-offset flow-from flow-into font font-family font-feature-settings font-kerning font-size font-size-adjust font-stretch font-style font-synthesis font-variant font-weight grid-columns grid-rows hanging-punctuation height hyphenate-after hyphenate-before hyphenate-character hyphenate-limit-chars hyphenate-limit-last hyphenate-limit-zone hyphenate-lines hyphenate-resource hyphens icon image-orientation image-resolution ime-mode inline-box-align insert-position interpret-as justify-content left letter-spacing line-height line-stacking line-stacking-ruby line-stacking-shift line-stacking-strategy list-style list-style-image list-style-position list-style-type make-element margin margin-bottom margin-left margin-right margin-top mark mark-after mark-before marker-offset marks marquee-direction marquee-play-count marquee-speed marquee-style mask mask-type mathline max-height max-width media min-height min-width move-to nav-down nav-index nav-left nav-right nav-up object-fit object-position opacity order orphans outline outline-color outline-offset outline-style outline-width overflow overflow-style overflow-wrap overflow-x overflow-y padding padding-bottom padding-left padding-right padding-top page page-break-after page-break-before page-break-inside page-policy panose-1 pause pause-after pause-before perspective perspective-origin phonemes pitch pitch-range play-during pointer-events position presentation-level prototype prototype-insert-policy prototype-insert-position punctuation-trim quotes region-overflow rendering-intent resize rest rest-after rest-before richness right rotation rotation-point ruby-align ruby-overhang ruby-position ruby-span shape-image-threshold shape-inside shape-outside size slope speak speak-header speak-numeral speak-punctuation speech-rate src stemh stemv stress string-set tab-size table-layout target target-name target-new target-position text-align text-align-last text-decoration text-decoration-color text-decoration-line text-decoration-style text-emphasis text-height text-indent text-justify text-outline text-overflow text-rendering text-replace text-shadow text-transform text-underline-position text-wrap top topline transform transform-origin transform-style transition transition-delay transition-duration transition-property transition-timing-function unicode-bidi unicode-range units-per-em vertical-align visibility voice-balance voice-duration voice-family voice-pitch voice-pitch-range voice-rate voice-stress voice-volume volume white-space white-space-collapse widows width widths will-change word-break word-spacing word-wrap wrap wrap-flow wrap-margin wrap-padding wrap-through writing-mode x-height z-index
active after before checked choices default disabled empty enabled first first-child first-letter first-line first-of-type focus hover indeterminate in-range invalid lang last-child last-of-type left link not nth-child nth-last-child nth-last-of-type nth-of-type only-child only-of-type optional out-of-range read-only read-write repeat-index repeat-item required right root target valid visited
after before first-letter first-line selection
^-moz- ^-ms- ^-o- ^-webkit-
__abstract __alignof __asm __assume __based __box __cdecl __declspec __delegate __event __except __except__try __fastcall __finally __forceinline __gc __hook __identifier __if_exists __if_not_exists __inline __int16 __int32 __int64 __int8 __interface __leave __m128 __m128d __m128i __m64 __multiple_inheritance __nogc __noop __pin __property __raise __sealed __single_inheritance __stdcall __super __try __try_cast __unhook __uuidof __value __virtual_inheritance __wchar_t auto bool break case catch char class const const_cast continue default defined delete do double dynamic_cast else enum explicit extern false float for friend goto if inline int long mutable naked namespace new operator private protected public register reinterpret_cast return short signed size_t sizeof static static_cast struct switch template this throw true try typedef typeid typename union unsigned using uuid virtual void volatile wchar_t while
abstract add alias as ascending async await base bool break by byte case catch char checked class const continue decimal default delegate descending do double dynamic else enum equals event explicit extern false finally fixed float for foreach from get global goto group if implicit in int interface internal into is join lock let long namespace new null object on operator orderby out override params partial private protected public readonly ref remove return sbyte sealed select set short sizeof stackalloc static string struct switch this throw true try typeof uint ulong unchecked unsafe ushort using value var virtual void volatile where while yield
ions FileShare FileStream FileStyleUriParser FileSystemEventArgs FileSystemEventHandler FileSystemInfo FileSystemWatcher Flags FlagsAttribute FormatException Formatter FormatterConverter FormatterServices Formatting FtpStyleUriParser Func GC GCCollectionMode GCNotificationStatus GenericUriParser GenericUriParserOptions GopherStyleUriParser Guid HandleInheritability HashSet Hashtable HttpStyleUriParser IAppDomainSetup IAsyncResult ICloneable ICollection IComparable IComparer IConvertible ICustomFormatter IDataContractSurrogate IDeserializationCallback IDictionary IDictionaryEnumerator IDisposable IEnumerable IEnumerator IEqualityComparer IEquatable IExtensibleDataObject IFormatProvider IFormattable IFormatter IFormatterConverter IFragmentCapableXmlDictionaryWriter IgnoreDataMember IgnoreDataMemberAttribute IHashCodeProvider IHasXmlNode IList ImportOptions IndexOutOfRangeException InsufficientExecutionStackException InsufficientMemoryException Int16 Int32 Int64 InternalBufferOverflowException IntPtr InvalidCastException InvalidDataContractException InvalidDataException InvalidOperationException InvalidProgramException InvalidTimeZoneException IObjectReference IObservable IObserver IODescription IODescriptionAttribute IOException IProducerConsumerCollection ISafeSerializationData ISerializable ISerializationSurrogate IServiceProvider ISet IStreamProvider IStructuralComparable IStructuralEquatable ISurrogateSelector IXmlBinaryReaderInitializer IXmlBinaryWriterInitializer IXmlDictionary IXmlLineInfo IXmlMtomReaderInitializer IXmlMtomWriterInitializer IXmlNamespaceResolver IXmlSchemaInfo IXmlTextReaderInitializer IXmlTextWriterInitializer IXPathNavigable IXsltContextFunction IXsltContextVariable KeyedByTypeCollection KeyNotFoundException KeyValuePair KnownType KnownTypeAttribute Lazy LdapStyleUriParser LinkedList LinkedListNode List LoaderOptimization LoaderOptimizationAttribute LoadOptions LocalDataStoreSlot MarshalByRefObject Math MemberAccessException MemoryStream MethodAccessException MidpointRounding MissingFieldException MissingMemberException MissingMethodException ModuleHandle MTAThread MTAThreadAttribute MulticastDelegate MulticastNotSupportedException NamespaceHandling NameTable NetDataContractSerializer NetPipeStyleUriParser NetTcpStyleUriParser NewLineHandling NewsStyleUriParser NonSerialized NonSerializedAttribute NotFiniteNumberException NotifyFilters NotImplementedException NotSupportedException Nullable NullReferenceException Object ObjectDisposedException ObjectIDGenerator ObjectManager Obsolete ObsoleteAttribute OnDeserialized OnDeserializedAttribute OnDeserializing OnDeserializingAttribute OnSerialized OnSerializedAttribute OnSerializing OnSerializingAttribute OnXmlDictionaryReaderClose OperatingSystem OperationCanceledException OptionalField OptionalFieldAttribute OrderablePartitioner OutOfMemoryException OverflowException ParamArray ParamArrayAttribute Partitioner Path PathTooLongException PipeException PlatformID PlatformNotSupportedException Predicate Queue Random RankException ReaderOptions ReadOnlyCollectionBase ReadState RenamedEventArgs RenamedEventHandler ResolveEventArgs ResolveEventHandler RuntimeArgumentHandle RuntimeFieldHandle RuntimeMethodHandle RuntimeTypeHandle SafeSerializationEventArgs SaveOptions SByte SearchOption SeekOrigin Serializable SerializableAttribute SerializationBinder SerializationEntry SerializationException SerializationInfo SerializationInfoEnumerator SerializationObjectManager Single SortedDictionary SortedList SortedSet Stack StackOverflowException STAThread STAThreadAttribute Stream StreamingContext StreamingContextStates StreamReader StreamWriter String StringBuilder StringComparer StringComparison StringReader StringSplitOptions StringWriter StructuralComparisons SurrogateSelector SynchronizedCollection SynchronizedKeyedCollection SynchronizedReadOnlyCollection SystemException TextReader TextWriter ThreadStatic ThreadStaticAttribute TimeoutException TimeSpan TimeZone TimeZoneInfo TimeZoneNotFoundException Tuple Type TypeAccessException TypeCode TypedReference TypeInitializationException TypeLoadException TypeUnloadedException UInt16 UInt32 UInt64 UIntPtr UnauthorizedAccessException UnhandledExceptionEventArgs UnhandledExceptionEventHandler UniqueId UnmanagedMemoryAccessor UnmanagedMemoryStream Uri UriBuilder UriComponents UriFormat UriFormatException UriHostNameType UriIdnScope UriKind UriParser UriPartial UriTemplate UriTemplateEquivalenceComparer UriTemplateMatch UriTemplateMatchException UriTemplateTable UriTypeConverter ValidationEventArgs ValidationEventHandler ValidationType ValueType Version Void WaitForChangedResult WatcherChangeTypes WeakReference WhitespaceHandling WriteState XAttribute XCData XComment XContainer XDeclaration XDocument XDocumentType XElement XmlAtomicValue XmlAttribute XmlAttributeCollection XmlBinaryReaderSession XmlBinaryWriterSession XmlCaseOrder XmlCDataSection XmlCharacterData XmlComment XmlConvert XmlDataDocument XmlDataType XmlDateTimeSerializationMode XmlDeclaration XmlDictionary XmlDictionaryReader XmlDictionaryReaderQuotas XmlDictionaryString XmlDictionaryWriter XmlDocument XmlDocumentFragment XmlDocumentType XmlElement XmlEntity XmlEntityReference XmlException XmlImplementation XmlLinkedNode XmlNamedNodeMap XmlNamespaceManager XmlNamespaceScope XmlNameTable XmlNode XmlNodeChangedAction XmlNodeChangedEventArgs XmlNodeChangedEventHandler XmlNodeList XmlNodeOrder XmlNodeReader XmlNodeType XmlNotation XmlObjectSerializer XmlOutputMethod XmlParserContext XmlProcessingInstruction XmlQualifiedName XmlReader XmlReaderSettings XmlResolver XmlSchema XmlSchemaAll XmlSchemaAnnotated XmlSchemaAnnotation XmlSchemaAny XmlSchemaAnyAttribute XmlSchemaAppInfo XmlSchemaAttribute XmlSchemaAttributeGroup XmlSchemaAttributeGroupRef XmlSchemaChoice XmlSchemaCollection XmlSchemaCollectionEnumerator XmlSchemaCompilationSettings XmlSchemaComplexContent XmlSchemaComplexContentExtension XmlSchemaComplexContentRestriction XmlSchemaComplexType XmlSchemaContent XmlSchemaContentModel XmlSchemaContentProcessing XmlSchemaContentType XmlSchemaDatatype XmlSchemaDatatypeVariety XmlSchemaDerivationMethod XmlSchemaDocumentation XmlSchemaElement XmlSchemaEnumerationFacet XmlSchemaException XmlSchemaExternal XmlSchemaFacet XmlSchemaForm XmlSchemaFractionDigitsFacet XmlSchemaGroup XmlSchemaGroupBase XmlSchemaGroupRef XmlSchemaIdentityConstraint XmlSchemaImport XmlSchemaInclude XmlSchemaInference XmlSchemaInference.InferenceOption XmlSchemaInferenceException XmlSchemaInfo XmlSchemaKey XmlSchemaKeyref XmlSchemaLengthFacet XmlSchemaMaxExclusiveFacet XmlSchemaMaxInclusiveFacet XmlSchemaMaxLengthFacet XmlSchemaMinExclusiveFacet XmlSchemaMinInclusiveFacet XmlSchemaMinLengthFacet XmlSchemaNotation XmlSchemaNumericFacet XmlSchemaObject XmlSchemaObjectCollection XmlSchemaObjectEnumerator XmlSchemaObjectTable XmlSchemaParticle XmlSchemaPatternFacet XmlSchemaRedefine XmlSchemaSequence XmlSchemaSet XmlSchemaSimpleContent XmlSchemaSimpleContentExtension XmlSchemaSimpleContentRestriction XmlSchemaSimpleType XmlSchemaSimpleTypeContent XmlSchemaSimpleTypeList XmlSchemaSimpleTypeRestriction XmlSchemaSimpleTypeUnion XmlSchemaTotalDigitsFacet XmlSchemaType XmlSchemaUnique XmlSchemaUse XmlSchemaValidationException XmlSchemaValidationFlags XmlSchemaValidator XmlSchemaValidity XmlSchemaWhiteSpaceFacet XmlSchemaXPath XmlSecureResolver XmlSerializableServices XmlSeverityType XmlSignificantWhitespace XmlSortOrder XmlSpace XmlText XmlTextReader XmlTextWriter XmlTokenizedType XmlTypeCode XmlUrlResolver XmlValidatingReader XmlValueGetter XmlWhitespace XmlWriter XmlWriterSettings XName XNamespace XNode XNodeDocumentOrderComparer XNodeEqualityComparer XObject XObjectChange XObjectChangeEventArgs XPathDocument XPathException XPathExpression XPathItem XPathNamespaceScope XPathNavigator XPathNodeIterator XPathNodeType XPathQueryGenerator XPathResultType XProcessingInstruction XsdDataContractExporter XsdDataContractImporter XslCompiledTransform XsltArgumentList XsltCompileException XsltContext XsltException XsltMessageEncounteredEventArgs XsltMessageEncounteredEventHandler XslTransform XsltSettings XStreamingElement XText
ACCELERATORS ALT AUTO3STATE AUTOCHECKBOX AUTORADIOBUTTON BEGIN BITMAP BLOCK BUTTON CAPTION CHARACTERISTICS CHECKBOX CLASS COMBOBOX CONTROL CTEXT CURSOR DEFPUSHBUTTON DIALOG DIALOGEX DISCARDABLE EDITTEXT END EXSTYLE FONT GROUPBOX ICON LANGUAGE LISTBOX LTEXT MENU MENUEX MENUITEM MESSAGETABLE POPUP PUSHBUTTON RADIOBUTTON RCDATA RTEXT SCROLLBAR SEPARATOR SHIFT STATE3 STRINGTABLE STYLE TEXTINCLUDE VALUE VERSION VERSIONINFO VIRTKEY
addhandler addressof alias and andalso ansi any as assembly auto boolean byref byte byval call case catch cbool cbyte cchar cdate cdbl cdec char cint class clng cobj compare const cshort csng cstr ctype date decimal declare default delegate dim directcast do double each else elseif end enum erase error event exit explicit externalsource false finally for friend function get gettype gosub goto handles if implements imports in inherits integer interface is let lib like long loop me mid mod module mustinherit mustoverride mybase myclass namespace new next not nothing notinheritable notoverridable object on option optional or orelse overloads overridable overrides paramarray preserve private property protected public raiseevent randomize readonly redim rem removehandler resume return select set shadows shared short single static step stop strict string structure sub synclock then throw to true try typeof unicode until variant when while with withevents writeonly xor
abstract boolean break byte case catch char class const continue debugger default delete do double else enum export extends false final finally float for function goto if implements import in instanceof int interface let long native new null package private protected public return short static super switch synchronized this throw throws transient true try typeof var void volatile while with
@interface abstract assert boolean break byte case catch char class const continue default do double else enum extends final finally float for future generic goto if implements import inner instanceof int interface long native new null outer package private protected public rest return short static super switch synchronized this throw throws transient try var void volatile while @Deprecated @Documented @FlaskyTest @Inherited @JavascriptInterface @LargeTest @MediumTest @Override @Retention @SmallTest @Smoke @Supress @SupressLint @SupressWarnings @Target @TargetApi @TestTarget @TestTargetClass @UiThreadTest
absolute abstract alias and array as asm assembler begin break case cdecl class const constructor continue cppdecl default destructor dispose div do downto else end end. except exit export exports external false far far16 file finalization finally for forward function goto if implementation in index inherited initialization inline interface is label library local message mod name near new nil nostackframe not object of oldfpccall on operator or out overload override packed pascal private procedure program property protected public published raise read record register reintroduce repeat resourcestring safecall self set shl shr softfloat stdcall stored string then threadvar to true try type unit until uses var virtual while with write xor
aaa aad aam aas adc add and arpl bound bsf bsr bswap bt btc btr bts call cbw cdq cflush clc cld cli clts cmc cmova cmovae cmovb cmovbe cmovc cmove cmovg cmovge cmovl cmovle cmovna cmovnae cmovnb cmovnbe cmovnc cmovne cmovng cmovnge cmovnl cmovnle cmovno cmovnp cmovns cmovnz cmovo cmovp cmovpe cmovpo cmovs cmovz cmp cmps cmpsb cmpsd cmpsq cmpsw cmpxchg cmpxchg486 cmpxchg8b cpuid cwd cwde daa das dec div emms enter esc femms hlt ibts icebp idiv imul in inc ins insb insd insw int int01 int03 int1 int3 into invd invlpg iret iretd iretdf iretf iretw ja jae jb jbe jc jcxz je jecxz jg jge jl jle jmp jna jnae jnb jnbe jnc jne jng jnge jnl jnle jno jnp jns jnz jo jp jpe jpo js jz lahf lar lds lea leave les lfs lgdt lgs lidt lldt lmsw loadall loadall286 lock lods lodsb lodsd lodsq lodsw loop loopd loope looped loopew loopne loopned loopnew loopnz loopnzd loopnzw loopw loopz loopzd loopzw lsl lss ltr mov movs movsb movsd movsq movsw movsx movsxd movzx mul neg nop not or out outs outsb outsd outsw pop popa popad popaw popf popfd popfw push pusha pushad pushaw pushd pushf pushfd pushfw pushw rcl rcr rdmsr rdpmc rdshr rdtsc rep repe repne repnz repz ret retf retn rol ror rsdc rsldt rsm rsts sahf sal salc sar sbb scas scasb scasd scasq scasw seta setae setb setbe setc sete setg setge setl setle setna setnae setnb setnbe setnc setne setng setnge setnl setnle setno setnp setns setnz seto setp setpe setpo sets setz sgdt shl shld shr shrd sidt sldt smi smint smintold smsw stc std sti stos stosb stosd stosq stosw str sub svdc svldt svts syscall sysenter sysexit sysret test ud0 ud1 ud2 umov verr verw wait wbinvd wrmsr wrshr xadd xbts xchg xlat xlatb xor
f2xm1 fabs fadd faddp fbld fbstp fchs fclex fcmovb fcmovbe fcmove fcmovnb fcmovnbe fcmovne fcmovnu fcmovu fcom fcomi fcomip fcomp fcompp fcos fdecstp fdisi fdiv fdivp fdivr fdivrp feni ffree ffreep fiadd ficom ficomp fidiv fidivr fild fimul fincstp finit fist fistp fisub fisubr fld fld1 fldcw fldenv fldenvd fldenvw fldl2e fldl2t fldlg2 fldln2 fldpi fldz fmul fmulp fnclex fndisi fneni fninit fnop fnsave fnsaved fnsavew fnstcw fnstenv fnstenvd fnstenvw fnstsw fpatan fprem fprem1 fptan frndint frstor frstord frstorw fsave fsaved fsavew fscale fsetpm fsin fsincos fsqrt fst fstcw fstenv fstenvd fstenvw fstp fstsw fsub fsubp fsubr fsubrp ftst fucom fucomp fucompp fwait fxam fxch fxtract fyl2x fyl2xp1
ah al ax bh bl bp bx ch cl cr0 cr2 cr3 cr4 cs cx dh di dl dr0 dr1 dr2 dr3 dr6 dr7 ds dx eax ebp ebx ecx edi edx eip es esi esp fs gs mm0 mm1 mm2 mm3 mm4 mm5 mm6 mm7 r10 r10b r10d r10w r11 r11b r11d r11w r12 r12b r12d r12w r13 r13b r13d r13w r14 r14b r14d r14w r15 r15b r15d r15w r8 r8b r8d r8w r9 r9b r9d r9w rax rbp rbx rcx rdi rdx rip rsi rsp si sp ss st st0 st1 st2 st3 st4 st5 st6 st7 tr3 tr4 tr5 tr6 tr7 xmm0 xmm1 xmm10 xmm11 xmm12 xmm13 xmm14 xmm15 xmm2 xmm3 xmm4 xmm5 xmm6 xmm7 xmm8 xmm9 ymm0 ymm1 ymm10 ymm11 ymm12 ymm13 ymm14 ymm15 ymm2 ymm3 ymm4 ymm5 ymm6 ymm7 ymm8 ymm9
zh-CHS
ar-SA
bg-BG
ca-ES
zh-TW
cs-CZ
da-DK
de-DE
el-GR
en-US
fi-FI
fr-FR
he-IL
hu-HU
is-IS
it-IT
ja-JP
ko-KR
nl-NL
nb-NO
pl-PL
pt-BR
ro-RO
ru-RU
hr-HR
sk-SK
sq-AL
sv-SE
th-TH
tr-TR
ur-PK
id-ID
uk-UA
be-BY
sl-SI
et-EE
lv-LV
lt-LT
fa-IR
vi-VN
hy-AM
az-AZ-Latn
eu-ES
mk-MK
tn-ZA
xh-ZA
zu-ZA
af-ZA
ka-GE
fo-FO
hi-IN
mt-MT
se-NO
ms-MY
kk-KZ
ky-KG
sw-KE
uz-UZ-Latn
tt-RU
bn-IN
pa-IN
gu-IN
ta-IN
te-IN
kn-IN
ml-IN
mr-IN
sa-IN
mn-MN
cy-GB
gl-ES
kok-IN
syr-SY
div-MV
quz-BO
ns-ZA
mi-NZ
ar-IQ
zh-CN
de-CH
en-GB
es-MX
fr-BE
it-CH
nl-BE
nn-NO
pt-PT
sr-SP-Latn
sv-FI
az-AZ-Cyrl
se-SE
ms-BN
uz-UZ-Cyrl
quz-EC
ar-EG
zh-HK
de-AT
en-AU
es-ES
fr-CA
sr-SP-Cyrl
se-FI
quz-PE
ar-LY
zh-SG
de-LU
en-CA
es-GT
fr-CH
hr-BA
smj-NO
ar-DZ
zh-MO
de-LI
en-NZ
es-CR
fr-LU
bs-BA-Latn
smj-SE
ar-MA
en-IE
es-PA
fr-MC
sr-BA-Latn
sma-NO
ar-TN
en-ZA
es-DO
sr-BA-Cyrl
sma-SE
ar-OM
en-JM
es-VE
sms-FI
ar-YE
en-CB
es-CO
smn-FI
ar-SY
en-BZ
es-PE
ar-JO
en-TT
es-AR
ar-LB
en-ZW
es-EC
ar-KW
en-PH
es-CL
ar-AE
es-UY
ar-BH
es-PY
ar-QA
es-BO
es-SV
es-HN
es-NI
es-PR
zh-CHT
af-za
ar-ae
ar-bh
ar-dz
ar-eg
ar-iq
ar-jo
ar-kw
ar-lb
ar-ly
ar-ma
ar-om
ar-qa
ar-sa
ar-sy
ar-tn
ar-ye
az-az-cyrl
az-az-latn
be-by
bg-bg
bn-in
bs-ba-latn
ca-es
cs-cz
cy-gb
da-dk
de-at
de-ch
de-de
de-li
de-lu
div-mv
el-gr
en-au
en-bz
en-ca
en-cb
en-gb
en-ie
en-jm
en-nz
en-ph
en-tt
en-za
en-zw
es-ar
es-bo
es-cl
es-co
es-cr
es-do
es-ec
es-es
es-gt
es-hn
es-mx
es-ni
es-pa
es-pe
es-pr
es-py
es-sv
es-uy
es-ve
et-ee
eu-es
fa-ir
fi-fi
fo-fo
fr-be
fr-ca
fr-ch
fr-fr
fr-lu
fr-mc
gl-es
gu-in
he-il
hi-in
hr-ba
hr-hr
hu-hu
hy-am
id-id
is-is
it-ch
it-it
ja-jp
ka-ge
kk-kz
kn-in
ko-kr
kok-in
ky-kg
lt-lt
lv-lv
mi-nz
mk-mk
ml-in
mn-mn
mr-in
ms-bn
ms-my
mt-mt
nb-no
nl-be
nl-nl
nn-no
ns-za
pa-in
pl-pl
pt-br
pt-pt
quz-bo
quz-ec
quz-pe
ro-ro
ru-ru
sa-in
se-fi
se-no
se-se
sk-sk
sl-si
sma-no
sma-se
smj-no
smj-se
smn-fi
sms-fi
sq-al
sr-ba-cyrl
sr-ba-latn
sr-sp-cyrl
sr-sp-latn
sv-fi
sv-se
sw-ke
syr-sy
ta-in
te-in
th-th
tn-za
tr-tr
tt-ru
uk-ua
ur-pk
uz-uz-cyrl
uz-uz-latn
vi-vn
xh-za
zh-chs
zh-cht
zh-cn
zh-hk
zh-mo
zh-sg
zh-tw
zu-za
api-ms-win-core-fibers-l1-1-1
api-ms-win-core-synch-l1-2-0
kernel32
api-ms-
ext-ms-
minkernel\crts\ucrt\inc\corecrt_internal_strtox.h
__crt_strtox::floating_point_value::as_double
_is_double
__crt_strtox::floating_point_value::as_float
!_is_double
INITY
inity
SNAN)
snan)
IND)ind)am/pm
(null)
mscoree.dll
LC_ALL
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
March
April
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
api-ms-win-appmodel-runtime-l1-1-1
api-ms-win-core-datetime-l1-1-1
api-ms-win-core-file-l2-1-1
api-ms-win-core-localization-l1-2-1
api-ms-win-core-localization-obsolete-l1-2-0
api-ms-win-core-processthreads-l1-1-2
api-ms-win-core-string-l1-1-0
api-ms-win-core-sysinfo-l1-2-1
api-ms-win-core-winrt-l1-1-0
api-ms-win-core-xstate-l2-1-0
api-ms-win-rtcore-ntuser-window-l1-1-0
api-ms-win-security-systemfunctions-l1-1-0
ext-ms-win-kernel32-package-current-l1-1-0
ext-ms-win-ntuser-dialogbox-l1-1-0
ext-ms-win-ntuser-windowstation-l1-1-0
advapi32
user32
american
american english
american-english
australian
belgian
canadian
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
dutch-belgian
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
french-belgian
french-canadian
french-luxembourg
french-swiss
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
irish-english
italian-swiss
norwegian
norwegian-bokmal
norwegian-nynorsk
portuguese-brazilian
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
swedish-finland
swiss
america
britain
china
czech
england
great britain
holland
hong-kong
new-zealand
pr china
pr-china
puerto-rico
slovak
south africa
south korea
south-africa
south-korea
trinidad & tobago
united-kingdom
united-states
CONOUT$
Notepad2-mod (64-bit) 4.2.25 r998 (62db550)
2004-2017
Florian Balmer
MSVC 2017
flo's freeware - http://www.flos-freeware.ch
<A>%s</A>
florian.balmer@gmail.com
https://xhmikosr.github.io/notepad2-mod/
http://www.flos-freeware.ch
mailto:florian.balmer@gmail.com
notepad2
notepad2.exe
Suppressed Messages
DirListData
ListBoxX
CallTip
Scintilla
MsgConv2
MsgConv1
(%i)
FileLoadWarningMB
Settings2
MsgFileSizeWarning
MsgConv3
[](){}
shlwapi
...
MsgNotFound
MsgFindWrap1
MsgFindWrap2
MsgReplaceCount
<tag>
</tag>
</base>
</bgsound>
</br>
</embed>
</hr>
</img>
</input>
</link>
</meta>
%s=%s
(default)
User32
OpacityLevel
ResizeDlg
%CSIDL:MYDOCUMENTS%
uxtheme.dll
WINDOWSTYLE;WINDOW
Shell_TrayWnd
TrayNotifyWnd
Notepad2-mod
TaskbarCreated
Notepad2
SysListView32
Static
Recent Files
Recent Find
Recent Replace
ToolbarWindow32
Toolbar Labels
ReBarWindow32
Toolbar
Ln 9'999'999 : 9'999'999 Col 9'999'999 : 999 Sel 9'999'999
9'999'999 Bytes
Unicode BE BOM
CR+LF
ReuseWindow
SingleFileInstance
StickyWindowPosition
filebrowser.exe
metapath.exe
"-appid=%s"
"-sysmru=%i"
-pos %i,%i,%i,%i,%i
properties
DateTimeShort
DateTimeLong
%s %s
%ix%i PosX
%ix%i PosY
%ix%i SizeX
%ix%i SizeY
%ix%i Maximized
Window
MsgStickyWinPos
WriteTest
Settings
\$Date:[^\$]+\$ | $Date: %Y/%m/%d %H:%M:%S $
TimeStamp
WebTemplate1
WebTemplate2
/pos %i,%i,%i,%i,%i
>SaveSettings
SaveRecentFiles
SaveFindReplace
CloseFind
CloseReplace
NoFindWrap
OpenWithDir
Favorites
PathNameFormat
WordWrap
WordWrapMode
WordWrapIndent
WordWrapSymbols
ShowWordWrapSymbols
MatchBraces
AutoCloseTags
HighlightCurrentLine
AutoIndent
AutoCompleteWords
ShowIndentGuides
TabsAsSpaces
TabIndents
BackspaceUnindents
TabWidth
IndentWidth
MarkLongLines
LongLinesLimit
LongLineMode
ShowSelectionMargin
ShowLineNumbers
ShowCodeFolding
MarkOccurrences
MarkOccurrencesMatchCase
MarkOccurrencesMatchWholeWords
ViewWhiteSpace
ViewEOLs
DefaultEncoding
SkipUnicodeDetection
LoadASCIIasUTF8
LoadNFOasOEM
NoEncodingTags
DefaultEOLMode
FixLineEndings
FixTrailingBlanks
PrintHeader
PrintFooter
PrintColorMode
PrintZoom
PrintMarginLeft
PrintMarginTop
PrintMarginRight
PrintMarginBottom
SaveBeforeRunningTools
FileWatchingMode
ResetFileWatching
EscFunction
AlwaysOnTop
MinimizeToTray
TransparentMode
ToolbarButtons
ShowToolbar
ShowStatusbar
EncodingDlgSizeX
EncodingDlgSizeY
RecodeDlgSizeX
RecodeDlgSizeY
FileMRUDlgSizeX
FileMRUDlgSizeY
OpenWithDlgSizeX
OpenWithDlgSizeY
FavoritesDlgSizeX
FavoritesDlgSizeY
FindReplaceDlgPosX
FindReplaceDlgPosY
DefaultExtension
DefaultDirectory
FileDlgFilters
FileCheckInverval
AutoReloadTimeout
Toolbar Images
BitmapDefault
BitmapHot
BitmapDisabled
UNICODE
UNICODEBE
UNICODE-BE
UTF-8
UTF8SIG
UTF-8SIG
UTF8SIGNATURE
UTF-8SIGNATURE
UTF8-SIGNATURE
UTF-8-SIGNATURE
appid=
sysmru=
FLTRBM
%i,%i,%i,%i,%i
%i,%i
MultiFileArg
RelativeFileMRU
PortableMyDocs
NoFadeHidden
ToolbarLook
SimpleIndentGuides
NoHTMLGuess
NoCGIGuess
NoFileVariables
ShellAppUserModelID
ShellUseSystemMRU
Notepad2.ini
/n -
runas
Arial
Default Text
txt; text; wtx; log; asc; doc
Default Style
font:Default; size:10
Margins and Line Numbers
size:-2; fore:#FF0000
Matching Braces
size:+1; bold; fore:#FF0000
Matching Braces Error
size:+1; bold; fore:#000080
Control Characters (Font)
size:-1
Indentation Guide (Color)
fore:#A0A0A0
Selected Text (Colors)
back:#0A246A; eolfilled; alpha:95
Whitespace (Colors, Size 0-5)
fore:#FF4000
Current Line Background (Color)
back:#FFFF00; alpha:50
Caret (Color, Size 1-3)
Long Line Marker (Colors)
fore:#FFC000
Extra Line Spacing (Size)
size:2
2nd Default Style
font:Courier New; size:10
2nd Margins and Line Numbers
font:Tahoma; size:-2; fore:#FF0000
2nd Matching Braces
bold; fore:#FF0000
2nd Matching Braces Error
bold; fore:#000080
2nd Control Characters (Font)
2nd Indentation Guide (Color)
2nd Selected Text (Colors)
eolfilled
2nd Whitespace (Colors, Size 0-5)
2nd Current Line Background (Color)
2nd Caret (Color, Size 1-3)
2nd Long Line Marker (Colors)
2nd Extra Line Spacing (Size)
Web Source Code
html; htm; asp; aspx; shtml; htd; xhtml; php; php3; phtml; htt; cfm; tpl; dtd; hta; htc
Default
HTML Tag
fore:#648000
HTML Unknown Tag
fore:#C80000; back:#FFFF80
HTML Attribute
HTML Unknown Attribute
HTML Value
fore:#3A6EA5
HTML String
HTML Other Inside Tag
HTML Comment
fore:#646464
HTML Entity
fore:#B000B0
HTML Element Text
XML Identifier
bold; fore:#881280
fore:#881280
CDATA
ASP Start Tag
PHP Start Tag
PHP Default
PHP Comment
fore:#FF8000
PHP Keyword
bold; fore:#A46000
PHP String
fore:#008000
PHP Simple String
PHP Number
fore:#FF0000
PHP Operator
PHP Variable
italic; fore:#000080
PHP String Variable
PHP Complex Variable
JS Default
JS Comment
JS Keyword
JS Identifier
JS String
JS Regex
fore:#006633; back:#FFF1A8
JS Number
JS Symbols
ASP JS Default
ASP JS Comment
ASP JS Keyword
ASP JS Identifier
ASP JS String
ASP JS Regex
ASP JS Number
ASP JS Symbols
VBS Default
VBS Comment
VBS Keyword
bold; fore:#B000B0
VBS Identifier
VBS String
VBS Number
ASP VBS Default
ASP VBS Comment
ASP VBS Keyword
ASP VBS Identifier
ASP VBS String
ASP VBS Number
XML Document
xml; xsl; rss; svg; xul; xsd; xslt; axl; rdf; xaml; vcproj
XML Tag
XML Attribute
fore:#994500
XML Value
fore:#1A1AA6
XML String
XML Other Inside Tag
XML Comment
XML Entity
XML Element Text
CSS Style Sheets
Comment
bold; fore:#0A246A
Tag-Class
Tag-Id
Tag-Attribute
italic; fore:#648000
Pseudo-class
Pseudo-element
fore:#B00050
CSS Property
String
Value
Operator
Important
bold; fore:#C80000
Directive
bold; fore:#000000; back:#FFF1A8
Media
Variable
bold; fore:#FF4000
Unknown Pseudo-class
Unknown Property
C/C++ Source Code
c; cpp; cxx; cc; h; hpp; hxx; hh; m; mm; idl; inl; odl
Keyword
Identifier
Number
Preprocessor
C# Source Code
bold; fore:#804000
Verbatim String
Global Class
fore:#2B91AF
Resource Script
rc; rc2; rct; rh; r; dlg
fore:#0A246A
Makefiles
mak; make; mk; dsp; msc; msvc
fore:#003CE6
Target
fore:#003CE6; back:#FFC000
VBScript
vbs; dsm
fore:#808080
Visual Basic
vb; bas; frm; cls; ctl; pag; dsr; dob
fore:#FF9C00
JavaScript
js; jse; jsm; json; as
Regex
Java Source Code
Pascal Source Code
pas; dpr; dpk; dfm; inc; pp
bold; fore:#800080
Inline Asm
fore:#0000FF
fore:#FF00FF
防病毒引擎/厂商 病毒名/规则匹配 病毒库日期
Bkav 未发现病毒 20190410
K7AntiVirus 未发现病毒 20190411
MicroWorld-eScan 未发现病毒 20190412
FireEye 未发现病毒 20190411
CAT-QuickHeal 未发现病毒 20190411
McAfee 未发现病毒 20190412
Malwarebytes 未发现病毒 20190412
Zillya 未发现病毒 20190410
SUPERAntiSpyware 未发现病毒 20190410
TheHacker 未发现病毒 20190411
Alibaba 未发现病毒 20190402
K7GW 未发现病毒 20190411
Trustlook 未发现病毒 20190412
Arcabit 未发现病毒 20190411
Baidu 未发现病毒 20190318
Babable 未发现病毒 20180918
Cyren 未发现病毒 20190411
ESET-NOD32 未发现病毒 20190412
TrendMicro-HouseCall 未发现病毒 20190411
Avast 未发现病毒 20190411
ClamAV 未发现病毒 20190411
Kaspersky 未发现病毒 20190411
BitDefender 未发现病毒 20190411
NANO-Antivirus 未发现病毒 20190412
Paloalto 未发现病毒 20190412
AegisLab 未发现病毒 20190411
Tencent 未发现病毒 20190412
Ad-Aware 未发现病毒 20190412
Emsisoft 未发现病毒 20190411
Comodo 未发现病毒 20190411
F-Secure 未发现病毒 20190411
DrWeb 未发现病毒 20190411
VIPRE 未发现病毒 20190411
Invincea 未发现病毒 20190313
McAfee-GW-Edition 未发现病毒 20190411
Trapmine 未发现病毒 20190325
CMC 未发现病毒 20190321
Sophos 未发现病毒 20190411
SentinelOne 未发现病毒 20190407
Avast-Mobile 未发现病毒 20190411
Jiangmin 未发现病毒 20190411
Avira 未发现病毒 20190411
MAX 未发现病毒 20190412
Antiy-AVL 未发现病毒 20190411
Kingsoft 未发现病毒 20190412
Microsoft 未发现病毒 20190411
Endgame 未发现病毒 20190403
ViRobot 未发现病毒 20190411
AhnLab-V3 未发现病毒 20190411
ZoneAlarm 未发现病毒 20190411
GData 未发现病毒 20190411
TotalDefense 未发现病毒 20190411
Acronis 未发现病毒 20190409
VBA32 未发现病毒 20190411
ALYac 未发现病毒 20190411
TACHYON 未发现病毒 20190411
Zoner 未发现病毒 20190412
Rising 未发现病毒 20190412
Yandex 未发现病毒 20190411
Ikarus 未发现病毒 20190411
eGambit PE.Heur.InvalidSig 20190412
Fortinet 未发现病毒 20190412
AVG 未发现病毒 20190412
Cybereason 未发现病毒 20190403
Panda 未发现病毒 20190411
CrowdStrike 未发现病毒 20190212
Qihoo-360 未发现病毒 20190412

进程树

Notepad2-mod_4.2.25r998_x64_CN.exe, PID: 2488, 上一级进程 PID: 2332
下载PCAP包

访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

TCP

无TCP连接纪录.

UDP

无UDP连接纪录.

域名解析 (可点击查询WPING实时安全评级)

无域名信息.

TCP

无TCP连接纪录.

UDP

无UDP连接纪录.

HTTP 请求

未发现HTTP请求.

SMTP 流量

无SMTP流量.

IRC 流量

无IRC请求.

ICMP 流量

无ICMP流量.

CIF 报告

无 CIF 结果

网络警报

无警报

TLS

No TLS

Suricata HTTP

No Suricata HTTP

未发现网络提取文件
抱歉! 没有任何文件投放。
没有发现相似的分析.
HTML 总结报告
(需15-60分钟同步)		 下载

Processing ( 30.425 seconds )

  • 15.575 Suricata
  • 10.924 Static
  • 1.297 VirusTotal
  • 0.937 TargetInfo
  • 0.499 Strings
  • 0.436 peid
  • 0.351 NetworkAnalysis
  • 0.214 AnalysisInfo
  • 0.182 BehaviorAnalysis
  • 0.007 config_decoder
  • 0.003 Memory

Signatures ( 0.231 seconds )

  • 0.032 antiav_detectreg
  • 0.023 md_url_bl
  • 0.017 md_domain_bl
  • 0.013 infostealer_ftp
  • 0.009 antiav_detectfile
  • 0.008 api_spamming
  • 0.008 infostealer_im
  • 0.007 anomaly_persistence_autorun
  • 0.007 stealth_timeout
  • 0.007 antianalysis_detectreg
  • 0.007 ransomware_extensions
  • 0.007 ransomware_files
  • 0.006 stealth_decoy_document
  • 0.006 infostealer_bitcoin
  • 0.005 infostealer_mail
  • 0.004 antivm_vbox_files
  • 0.003 tinba_behavior
  • 0.003 geodo_banking_trojan
  • 0.003 disables_browser_warn
  • 0.002 rat_nanocore
  • 0.002 betabot_behavior
  • 0.002 reads_self
  • 0.002 kibex_behavior
  • 0.002 antidbg_windows
  • 0.002 cerber_behavior
  • 0.002 antivm_parallels_keys
  • 0.002 bot_drive
  • 0.002 browser_security
  • 0.002 modify_proxy
  • 0.002 md_bad_drop
  • 0.001 antiemu_wine_func
  • 0.001 network_tor
  • 0.001 bootkit
  • 0.001 mimics_filetime
  • 0.001 dridex_behavior
  • 0.001 stealth_file
  • 0.001 antivm_generic_services
  • 0.001 ursnif_behavior
  • 0.001 antivm_generic_scsi
  • 0.001 shifu_behavior
  • 0.001 antivm_generic_disk
  • 0.001 infostealer_browser_password
  • 0.001 anormaly_invoke_kills
  • 0.001 virus
  • 0.001 kovter_behavior
  • 0.001 antianalysis_detectfile
  • 0.001 antidbg_devices
  • 0.001 antivm_generic_diskreg
  • 0.001 antivm_xen_keys
  • 0.001 banker_zeus_mutex
  • 0.001 bot_drive2
  • 0.001 browser_addon
  • 0.001 disables_system_restore
  • 0.001 disables_windows_defender
  • 0.001 darkcomet_regkeys
  • 0.001 maldun_malicious_drop_executable_file_to_temp_folder
  • 0.001 office_security
  • 0.001 rat_pcclient
  • 0.001 rat_spynet
  • 0.001 recon_fingerprint
  • 0.001 stealth_hiddenreg
  • 0.001 stealth_hide_notifications
  • 0.001 stealth_modify_uac_prompt
  • 0.001 stealth_modify_security_center_warnings

Reporting ( 0.864 seconds )

  • 0.861 ReportHTMLSummary
  • 0.003 Malheur
Task ID 373906
Mongo ID 5d7f3db32f8f2e3c66bb5d35
Cuckoo release 1.4-Maldun