Static | ZeroBOX

PE Compile Time

2020-09-19 02:18:20

PE Imphash

ab42c8bd7175e5cbed6d5d942f376e7f

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0009879c 0x00098800 6.69474809598
.rdata 0x0009a000 0x00053ff0 0x00054000 4.29437523295
.data 0x000ee000 0x000042cc 0x00003a00 3.52658978966
.rsrc 0x000f3000 0x00003fe8 0x00004000 6.5411395562
.reloc 0x000f7000 0x00007e32 0x00008000 6.50027510124

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000f6b50 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000f6b50 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000f6b50 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000f6fb8 0x00000030 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x000f3150 0x000003ac LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library ADVAPI32.dll:
0x49a000 CryptSetHashParam
0x49a004 CryptGetHashParam
0x49a008 CryptExportKey
0x49a010 CryptSetKeyParam
0x49a014 CryptGetKeyParam
0x49a018 CryptReleaseContext
0x49a01c CryptDuplicateKey
0x49a024 CryptGetProvParam
0x49a028 CryptImportKey
0x49a02c SystemFunction007
0x49a030 CryptEncrypt
0x49a034 CryptCreateHash
0x49a038 CryptGenKey
0x49a03c CryptDestroyKey
0x49a040 CryptDecrypt
0x49a044 CryptDestroyHash
0x49a048 CryptHashData
0x49a04c CopySid
0x49a050 GetLengthSid
0x49a058 LsaOpenPolicy
0x49a05c LsaClose
0x49a060 CreateWellKnownSid
0x49a06c RegQueryValueExW
0x49a070 RegQueryInfoKeyW
0x49a074 RegEnumValueW
0x49a078 RegOpenKeyExW
0x49a07c RegEnumKeyExW
0x49a080 RegCloseKey
0x49a084 RegSetValueExW
0x49a088 SystemFunction032
0x49a090 CreateServiceW
0x49a094 CloseServiceHandle
0x49a098 DeleteService
0x49a09c OpenSCManagerW
0x49a0a4 OpenServiceW
0x49a0b0 StartServiceW
0x49a0bc FreeSid
0x49a0c0 ControlService
0x49a0c4 IsTextUnicode
0x49a0c8 OpenProcessToken
0x49a0cc GetTokenInformation
0x49a0d0 LookupAccountNameW
0x49a0d4 LookupAccountSidW
0x49a0d8 DuplicateTokenEx
0x49a0e0 CryptSetProvParam
0x49a0e4 CryptEnumProvidersW
0x49a0ec LsaFreeMemory
0x49a0f0 GetSidSubAuthority
0x49a0f8 IsValidSid
0x49a0fc SetThreadToken
0x49a104 SystemFunction006
0x49a108 CryptGetUserKey
0x49a10c OpenEventLogW
0x49a114 ClearEventLogW
0x49a118 SystemFunction001
0x49a11c CryptDeriveKey
0x49a120 SystemFunction005
0x49a128 CryptSignHashW
0x49a12c LsaSetSecret
0x49a130 LsaOpenSecret
0x49a134 LsaQuerySecret
0x49a138 SystemFunction013
0x49a14c SetServiceStatus
0x49a158 OpenThreadToken
0x49a15c EqualSid
0x49a160 CredFree
0x49a164 CredEnumerateW
0x49a168 SystemFunction025
0x49a170 SystemFunction024
Library Cabinet.dll:
0x49a1ec None
0x49a1f0 None
0x49a1f4 None
0x49a1f8 None
Library CRYPT32.dll:
0x49a180 CertNameToStrW
0x49a184 CertEnumSystemStore
0x49a190 CryptDecodeObjectEx
0x49a198 CertOpenStore
0x49a1a0 CertCloseStore
0x49a1ac CryptUnprotectData
0x49a1c4 CryptFindOIDInfo
0x49a1cc CertGetNameStringW
0x49a1dc CryptEncodeObject
0x49a1e0 CryptProtectData
0x49a1e4 CryptQueryObject
Library cryptdll.dll:
0x49a76c MD5Update
0x49a770 MD5Final
0x49a778 CDLocateCSystem
0x49a77c MD5Init
0x49a780 CDLocateCheckSum
Library DNSAPI.dll:
0x49a200 DnsFree
0x49a204 DnsQuery_A
Library FLTLIB.DLL:
0x49a20c FilterFindFirst
0x49a210 FilterFindNext
Library NETAPI32.dll:
0x49a478 NetServerGetInfo
0x49a47c NetStatisticsGet
0x49a480 NetShareEnum
0x49a488 DsGetDcNameW
0x49a48c NetApiBufferFree
0x49a490 NetRemoteTOD
0x49a494 NetSessionEnum
0x49a498 NetWkstaUserEnum
Library ole32.dll:
0x49a974 CoTaskMemFree
0x49a978 CoInitializeEx
0x49a97c CoUninitialize
0x49a980 CoCreateInstance
Library OLEAUT32.dll:
0x49a4a0 VariantInit
0x49a4a4 SysFreeString
0x49a4a8 SysAllocString
Library RPCRT4.dll:
0x49a4bc NdrClientCall2
0x49a4c0 RpcMgmtEpEltInqDone
0x49a4d8 RpcBindingSetOption
0x49a4e0 RpcBindingFree
0x49a4e4 RpcStringFreeW
0x49a4e8 RpcRevertToSelf
0x49a4f0 MesHandleFree
0x49a4f8 NdrMesTypeDecode2
0x49a500 NdrMesTypeFree2
0x49a504 NdrMesTypeEncode2
0x49a514 RpcServerListen
0x49a51c RpcEpRegisterW
0x49a534 UuidToStringW
0x49a53c RpcEpUnregister
0x49a540 NdrServerCall2
0x49a548 UuidCreate
0x49a54c RpcEpResolveBinding
Library SHLWAPI.dll:
0x49a5cc PathIsDirectoryW
0x49a5d0 PathCanonicalizeW
0x49a5d4 PathCombineW
0x49a5d8 PathFindFileNameW
0x49a5dc PathIsRelativeW
Library SAMLIB.dll:
0x49a55c SamConnect
0x49a564 SamOpenDomain
0x49a568 SamGetGroupsForUser
0x49a570 SamRidToSid
0x49a584 SamCloseHandle
0x49a58c SamFreeMemory
0x49a594 SamOpenUser
0x49a5a4 SamOpenGroup
0x49a5a8 SamOpenAlias
Library Secur32.dll:
0x49a5ec FreeContextBuffer
0x49a5f8 LsaConnectUntrusted
0x49a610 LsaFreeReturnBuffer
Library SHELL32.dll:
0x49a5c4 CommandLineToArgvW
Library USER32.dll:
0x49a618 IsCharAlphaNumericW
0x49a61c GetKeyboardLayout
0x49a620 DispatchMessageW
0x49a624 DefWindowProcW
0x49a628 SetClipboardViewer
0x49a62c SendMessageW
0x49a634 OpenClipboard
0x49a638 CreateWindowExW
0x49a640 GetClipboardData
0x49a644 RegisterClassExW
0x49a648 TranslateMessage
0x49a650 PostMessageW
0x49a654 UnregisterClassW
0x49a658 GetMessageW
0x49a65c CloseClipboard
0x49a660 DestroyWindow
Library USERENV.dll:
Library VERSION.dll:
0x49a678 VerQueryValueW
0x49a67c GetFileVersionInfoW
Library HID.DLL:
0x49a218 HidD_GetFeature
0x49a220 HidD_GetHidGuid
0x49a224 HidD_GetAttributes
0x49a22c HidP_GetCaps
0x49a230 HidD_SetFeature
Library SETUPAPI.dll:
Library WinSCard.dll:
0x49a72c SCardControl
0x49a730 SCardTransmit
0x49a734 SCardDisconnect
0x49a738 SCardGetAttrib
0x49a740 SCardFreeMemory
0x49a744 SCardListReadersW
0x49a748 SCardReleaseContext
0x49a750 SCardListCardsW
0x49a754 SCardConnectW
Library WINSTA.dll:
0x49a690 WinStationConnectW
Library WLDAP32.dll:
0x49a6a0 None
0x49a6a4 None
0x49a6a8 None
0x49a6ac None
0x49a6b0 None
0x49a6b4 None
0x49a6b8 None
0x49a6bc None
0x49a6c0 None
0x49a6c4 None
0x49a6c8 None
0x49a6cc None
0x49a6d0 None
0x49a6d4 None
0x49a6d8 None
0x49a6dc None
0x49a6e0 None
0x49a6e4 None
0x49a6e8 None
0x49a6ec None
0x49a6f0 None
0x49a6f4 None
0x49a6f8 None
0x49a6fc None
0x49a700 None
0x49a704 None
0x49a708 None
0x49a70c None
0x49a710 None
0x49a714 None
0x49a718 None
0x49a71c None
0x49a720 None
0x49a724 None
Library advapi32.dll:
0x49a75c A_SHAFinal
0x49a760 A_SHAInit
0x49a764 A_SHAUpdate
Library msasn1.dll:
0x49a788 ASN1_CreateModule
0x49a78c ASN1BERDotVal2Eoid
0x49a790 ASN1_CloseEncoder
0x49a794 ASN1_CreateDecoder
0x49a798 ASN1_FreeEncoded
0x49a79c ASN1_CloseModule
0x49a7a0 ASN1_CreateEncoder
0x49a7a4 ASN1_CloseDecoder
Library ntdll.dll:
0x49a8f4 RtlFreeAnsiString
0x49a908 NtQueryObject
0x49a90c RtlCompressBuffer
0x49a918 RtlGetCurrentPeb
0x49a920 RtlCreateUserThread
0x49a924 RtlGUIDFromString
0x49a928 RtlStringFromGUID
0x49a92c NtCompareTokens
0x49a934 RtlEqualString
0x49a944 RtlFreeOemString
0x49a94c NtResumeProcess
0x49a950 RtlAdjustPrivilege
0x49a954 NtSuspendProcess
0x49a958 NtTerminateProcess
Library netapi32.dll:
Library KERNEL32.dll:
0x49a238 GetTimeFormatW
0x49a23c WideCharToMultiByte
0x49a248 lstrlenA
0x49a24c GetDateFormatW
0x49a250 PurgeComm
0x49a254 ClearCommError
0x49a258 CreateRemoteThread
0x49a25c InterlockedExchange
0x49a260 SetFilePointerEx
0x49a264 GetProcessId
0x49a268 GetComputerNameW
0x49a26c WaitForSingleObject
0x49a270 SetLastError
0x49a274 CreateProcessW
0x49a278 SetConsoleOutputCP
0x49a27c GetConsoleOutputCP
0x49a280 CreateFileMappingW
0x49a284 UnmapViewOfFile
0x49a288 MapViewOfFile
0x49a28c WriteProcessMemory
0x49a290 VirtualProtect
0x49a294 VirtualAllocEx
0x49a298 VirtualProtectEx
0x49a29c VirtualAlloc
0x49a2a0 ReadProcessMemory
0x49a2a4 VirtualFreeEx
0x49a2a8 VirtualQueryEx
0x49a2ac VirtualFree
0x49a2b0 VirtualQuery
0x49a2b4 GetComputerNameExW
0x49a2b8 DeviceIoControl
0x49a2bc DuplicateHandle
0x49a2c0 OpenProcess
0x49a2c4 GetCurrentProcess
0x49a2cc FindNextFileW
0x49a2d0 FindClose
0x49a2d8 GetFileSizeEx
0x49a2dc FlushFileBuffers
0x49a2e0 GetFileAttributesW
0x49a2e4 FindFirstFileW
0x49a2e8 lstrlenW
0x49a2ec GetProcAddress
0x49a2f0 LoadLibraryW
0x49a2f4 GetModuleHandleW
0x49a2f8 FreeLibrary
0x49a2fc DeleteFileA
0x49a300 GetTempPathA
0x49a310 GetTempFileNameA
0x49a314 SetFilePointer
0x49a318 CreateFileA
0x49a320 GetFullPathNameW
0x49a324 LocalFree
0x49a328 CloseHandle
0x49a32c LocalAlloc
0x49a330 GetLastError
0x49a334 CreateFileW
0x49a338 ReadFile
0x49a33c Sleep
0x49a340 TerminateThread
0x49a344 WriteFile
0x49a34c HeapReAlloc
0x49a350 GetFileSize
0x49a354 CreateMutexW
0x49a358 HeapCompact
0x49a35c SetEndOfFile
0x49a360 HeapAlloc
0x49a368 HeapFree
0x49a370 UnlockFile
0x49a374 FlushViewOfFile
0x49a378 LockFile
0x49a380 OutputDebugStringW
0x49a384 GetTickCount
0x49a388 GetFullPathNameA
0x49a38c UnlockFileEx
0x49a390 GetProcessHeap
0x49a394 FormatMessageA
0x49a398 FormatMessageW
0x49a39c GetVersionExW
0x49a3a0 HeapDestroy
0x49a3a4 GetFileAttributesA
0x49a3a8 HeapCreate
0x49a3ac HeapValidate
0x49a3b0 MultiByteToWideChar
0x49a3b4 GetTempPathW
0x49a3b8 HeapSize
0x49a3bc LockFileEx
0x49a3c0 GetDiskFreeSpaceW
0x49a3c4 LoadLibraryA
0x49a3c8 CreateFileMappingA
0x49a3cc GetDiskFreeSpaceA
0x49a3d0 GetSystemInfo
0x49a3d8 OutputDebugStringA
0x49a3dc GetVersionExA
0x49a3e0 DeleteFileW
0x49a3e4 GetCurrentProcessId
0x49a3e8 GetSystemTime
0x49a3ec AreFileApisANSI
0x49a3f0 ExitProcess
0x49a3f4 ExitThread
0x49a3f8 RaiseException
0x49a400 SetConsoleTitleW
0x49a404 SetFileAttributesW
0x49a408 GlobalSize
0x49a410 CreatePipe
0x49a424 SetEvent
0x49a428 GetCurrentThreadId
0x49a42c GetModuleHandleA
0x49a430 GetVersion
0x49a43c TerminateProcess
0x49a440 CreateThread
0x49a444 RtlUnwind
0x49a448 CreateEventW
0x49a44c GetSystemDirectoryW
0x49a458 GetStdHandle
0x49a460 GetCurrentThread
0x49a468 IsWow64Process
Library msvcrt.dll:
0x49a7ac calloc
0x49a7b0 __set_app_type
0x49a7b4 isdigit
0x49a7b8 _read
0x49a7bc _lseeki64
0x49a7c0 mbtowc
0x49a7c4 __mb_cur_max
0x49a7c8 isleadbyte
0x49a7cc isxdigit
0x49a7d0 localeconv
0x49a7d4 _snprintf
0x49a7d8 _itoa
0x49a7dc wctomb
0x49a7e0 ferror
0x49a7e4 iswctype
0x49a7e8 wcstombs
0x49a7ec _write
0x49a7f0 _isatty
0x49a7f4 ungetc
0x49a7f8 ?terminate@@YAXXZ
0x49a7fc _controlfp
0x49a800 __badioinfo
0x49a804 __pioinfo
0x49a808 __p__fmode
0x49a80c isspace
0x49a810 strrchr
0x49a814 __p__commode
0x49a818 __setusermatherr
0x49a81c _amsg_exit
0x49a820 _initterm
0x49a824 exit
0x49a828 _errno
0x49a82c free
0x49a830 _wcsdup
0x49a834 _vsnprintf
0x49a838 _except_handler3
0x49a83c _wcsicmp
0x49a840 vfwprintf
0x49a844 _vscwprintf
0x49a848 fflush
0x49a84c _wfopen
0x49a850 wprintf
0x49a854 _fileno
0x49a858 _iob
0x49a85c vwprintf
0x49a860 _setmode
0x49a864 fclose
0x49a868 _stricmp
0x49a86c wcsrchr
0x49a870 wcschr
0x49a874 strtoul
0x49a878 _wcsnicmp
0x49a87c wcsstr
0x49a880 _vscprintf
0x49a884 memmove
0x49a888 strncmp
0x49a88c malloc
0x49a890 _msize
0x49a894 strcspn
0x49a898 realloc
0x49a89c fgetws
0x49a8a0 wcstoul
0x49a8a4 strchr
0x49a8a8 wcstol
0x49a8ac wcsncmp
0x49a8b0 towupper
0x49a8b4 _wpgmptr
0x49a8b8 strstr
0x49a8bc _wcstoui64
0x49a8c0 getchar
0x49a8c4 memset
0x49a8c8 memcpy
0x49a8cc __wgetmainargs
0x49a8d0 _cexit
0x49a8d4 _exit
0x49a8d8 _XcptFilter

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
Vhkiwih\JJ
tSVVVh
tAWPhxRJ
t79~ht29~dt-9~`t(V
PVhtTJ
QVWj\S
PQh0XJ
QSVWjdj@
PPWShXZJ
PPWSh8[J
WSh|[J
@PPWSh
PQQWSh
F$PPWShH\J
@PPWSh
F,PPWSh
vLWShP]J
WSh ^J
v$WShP^J
PPVShp_J
QSVWjTj@
[Sh0`J
PPWShh`J
PPWSh8[J
WSh|[J
PQQWSh
PPWShH\J
F PPWSh
@PPWSh
WSh ^J
WShP^J
UPPWSh
WSh,aJ
WShTaJ
KDBMV9Y
KSSMu^
94r=9Y
SVWj<j@
s/j j@
UVSh4bJ
PPVShpbJ
PPPVShHcJ
G,PPVSh
0VSh(dJ
Y]^[YY
[Sh`eJ
tTUh(IJ
tbSVSSj
|USj h
F(YPPW
F,YPPW
t7j(j@
PPWSh(
PRRWShp
PRRWSh
SVWj$j@
SPPWUh
VPPSUh
G\PPSUhh
G`PPSUh
LPPSUh
GpPPSUhX
GxPPSUh
tTjPj@
UPPVSh
UPPWSh
PPWSh\
PRRWSh
F PPWSh
F$PPWSh
PRRWShP
F,PPWSh
F0PPWSh
9u u19E
ts9] tnP
QQSVW3
D$DPWV
QSVWjHj@
UPPWSh
PPWShP
PPPWSh
PPWSh@
F PPWSh
PPPWSh0
YYWShd
>RSA2W
DSS4uN
QSVWj@j@
SPPWUh
PPWUhP
PPPWUh@
YYWUh,
PPVSh0
PPVShx
PPPVSh
ItpItTIt?
tBIt&IIuO
t9Jt!JJuB
tPWWWj
98t1WWWj
9MDMPu
t$hSh8
LSVWjD_
t:Ht!HugW
PVVSQV
PVVSVVVQVV
PVVSVVVQV
+7FVj@
f9D$Pu
L$$#L$4
9regfuA9Y
9hbinu.
CL@@Pj@
pLt=;7
6SSSSS
u)9](t5
u[PPhP
tOVWhD
u*VWhT
YY9u$tUV
FVWWWW
vPPhH)K
t!PPh(3K
&Vh08K
PSSSSSSSSj
YYVVVVV
t WWVPj
tFVj@
t VVSPj
t SSWPj
~3FVj@
CW8F*t
t$$h4eK
8HQu28HRu-9
.tPj0Z;
\$,+\$
D$(j HP
tD9D$(u>9D$
t$<9D$
t%:D$#u
SShlfK
F9t$ u3
^[_]YY
HtUHtB
r7;~8u
;V<t-9F$u(9F4
u^8OPt
GL9GL~
9t$4uw
t>9t$@u8
</t6<\t2
t"j}H3
;{Tt2WV
0;w`Y|
0C;^`|
9_(t<8_
u!9CXt
N<99t7
O(;Hpt
u;{4s
!GH!GL
0;F`Y|
vDh iK
vlhHiK
up8_+u
Q<YY9}
;CDuBj
_^;CDt
Vf9C(up
ul9^Dt%
u.8^+t%
F8WUPW
w AA^@;
;^,v(h"
:FEth7
E *E$jL
t19w@u,
Q0+A(;
98^Dt#
=8_Dt.
;X<rSf
;G$u f
9G,u:S
VW;X,v
F(htiK
QPhdjK
PQhdkK
tIh|kK
H$~O9]
\$,9t
9D$ }o
D$09D$
s @9D$
;\$0sm
L$D;L$<|
L$@;L$8v
D{3VWj
AtGIIt<It2It(
SVWj8Yj8
QRh0mK
p hDmK
uJ9D$$u
_,9_(t
u+9_(t
_,9_$|(
CD#F(_[Y
ItxItaItDIt
Ht{Hte
!t$p!T$t
D$("D$,
D$,$.<
D$($.<
D$,,t-
D$(,t)j
|$(;C
|$,B;T$D
L$$+L$Lf
F:;D$D
8EYYuW
D$D;D$<v
D$$9D$,u?P
L$L~T3
~j9K0u
YYh\pK
D$0$.<
|Q9|$l|
9|$$u,
r,;t$du
S|hxpK
t$0~!j
D$$9T$$|
Q~7h qK
D$$(G;~
P,9N$~
YPhhfK
D$(9\$
tD9~(t
~"9=0O
D$()D$
t$(hPtK
59D$4t
9D$ u8
D$DYY;F
@PhDuK
@u#QRV
D$@w;C
D$D/GC
D$ 9D$(
tDh4vK
YY_^[]
<+unSUW
C|"f9A
u9p<u
t$,jZV
G,PRjFS
D$ PSW
D$$_^[
VPh,xK
D$8_^[
t$ jNW
Gl@@PVj/W
f;G*}/!E
D$,Y_^[
tC!T$|R
G2PjFS
@M:CNt
YYhHqK
0t+VPh0
9^8u$9^
f;G*}D
Y9s<t4
YYF;s8|
C*@;At~
f;F*}2
YFf;C*Y}p
f;F4s&
F0PRWWWS
f;C2sR
f;A*}-
Y9~8tW
f!HN_^[
f;G*}3
f;C2rL
f;F*}-
F2GG9E
Y_^[Y]
QQSVW3
f;F2se
tX9~HV
98ZLu4
D$@9w$
u9_pu
G,PSjF
G,PSjI
D$h+D$
D$l+D$
t$`j\V
\$$9C8
D$4+D$
9D$(tB
t$0j$V
t$8jZV
t$hj)V
f;C*}F
$;Fl}!
t'9s$t
u'9|$$uH
9\$ s8
T$$9t$$
t&)\$
|$$9t$$
T$$t A<
D$0Pj2
D$0Pj2
D$ ;D$
QQVWj
QQVWj
[WWWWW
WWWWWU
u!9Clu
|:f;N(t4
f;A2si
9p$u9VVVVS
HlAAQSj.P
t);F u
f;F4sL
C,PRjFV
59O8u
f;G*YY}r!E
D$H9t$L
Ht}HtsHtwHHt
t$<Vj3
D$HYYH
9t$0u.
u%9\$0t
L$<9^$t-
9\$8up9^
uk9t$ ue
D$ 9D$$tF
f;A2s8
t$<9D$(
D$0;D$$u%
D$49D$
QlBBRPj2Q
F2Sf9G2t
O6:N6u
F*f;A*
~(f;y(
F,;G,u
t$ NVS
SVWj>3
f;C2s8
D$ YYW
D$$h8mK
YPhhfK
~:VW8Z
YPhhfK
Q,9P,u
D$PPzK
D$l xK
;^p~=ht
ItvIt3IIt/
G(RPjp
u Pj1S
WWWjVV
t'<mt#
C$ t'3
9x4ty9x0
YY_^[Y]
D$$PWWW
\$`9D$$t*9D$(t$
~F9D$$u@
9T$hu&
8XQu]W
Y9^$uD
YY9^$u+
D$`PWS
Y9t$Xtb;
9p(u.9p,u)
D$$Vj\
D$XPRjt
u!9t$8u
t$$jZW
t$4@PjWW
t$Pj/W
t$\jBS
t$Hj/S
t$DjBS
t$djBS
t$XjBS
H0f;K.}
t$ j]V
t$,juV
{,WRjF
D$ 9D$
W;KHt?
9}$t"9y
QPh qK
t*9{pu%8K
C,PWjF
f;G*}j!E
f;G*}5
CSWjQV
f;H*}_
@$ u6W
f;H*}5!M
PhdSK
8XQup9Z
uk9Z8uf9^
@f9A2t
9S8tm;
QQSVW3
VL#H(#P,
QQSVW3
N,#CH#KL
Fl@@Pj
f;G2s2
N,#CH#KL
N,#CH#KL
y(9G8t
f;F2s43
YY_^[Y
f;CHuE
f;4Yu"
f;F2sH
IluM9M
x*j?Xf;
f;8tbC@@;
f;~2s0
#C #S$
C 9V t$
OWQVPS
OD#B8#J<
G,u(9E
@u|f9M
uvjaX8K1t
I$Pj/S
HYt-Hu<
jLZjZXjUYjY_j\
F0P@PjmW
@@PWj9V
G@@PjSS
w@VjOS
PPPjRS
FP@@PRjZW
HtYHt+
Hlt AAQ
<Vtf<Zt
Xuf<Xu
tt9~4t:
WWWWWWP
WWWWWWP
D$89D$0w
YY9{hu
tYHt6HHt
C9u,t*Vj
<=t}<&ty
YY_^[t
CD;C@t
CD;C@t
D$0hIaF
YYVUj!
D$PSSh
D$$PhT
D$lPh(
D$tPh0
D$pPh4
D$xPhD
89\$0uI
Y9\$Pt
PSSh 51
D$(PSS
t$ Phx
D$,PSS
D$(VWP
YY9|$$t
VWSShH
jLXPj@f
tNj{Yf
D$LPh\
#t$$QV
D$4Ph`
D$`Phh
Y9\$0tL
Y9\$8t
t49] t/
uOWWh<
u8WWh(
|$,9|$,t
Y9|$4u
YY9|$$t
D$,_^[
uoj$j@
|QSj h
t;WSh8
tM9u tH
t>Gj.W
PjJh`IJ
t'h8'L
W=PCPM
~$h4+L
~(h`+L
tiWh\.L
tfhpAL
t8hHDL
|"hlO
E@j(P3
VVh(OL
]xVVh(OL
VVhdTL
VVhlTL
Y9uLtJhdTL
|J9ul|;
YY9udt3
t>hXPL
D$pPhTZL
D$@PhdZL
D$ Phh
D$8Phd
t$(h0[L
FYY;t$
YY9\$4t
t$4h \L
YYh@\L
ti9\$ht&
9\$$t$9\$
tthxbL
D$@Phh
T$$RQP
YYjdj@
tohXPL
ItIIt5It%
u%j(j@
QVh4jL
PRh kL
jvhtoL
CYYf;^
t-h4rL
t#h$uL
vhhhyL
WWh(OL
QVRPh
SSh(OL
YY9u$t
QQSVW3
t>WVh@
VVh(OL
VVVVVW
ta=RSA2tS=ECK2t
=ECS2t
=RSA3t7=ECK4
=DSS4u
=RSA2u
=DSS2u
=ECKVty=DHPVth=DSPVtW=
t'h`{L
QQSVW3
t-WWWj
D$ PWVh
D$$PVV
D$(PWV
SVWj0X
D$ Ph,
WWh(OL
WWh(OL
D$$Ph`
D$0Pht
D$\PhT
D$@WP3
D$PWP3
QQSVW3
Phx/M
Sj*j*h
D$<PVVVV
D$PAAAA
D$`BBBB
D$pCCCC
t$0Sh8
D$,+D$
D$pJJJJ
D$|@YK
t$8Vh8
D$ j(P
YY9t$(
tbh(>M
t"hT>M
D$LAAAA
D$XhZK
D$\BBBB
tVhhBM
D$HXEM
D$LAAAA
D$XhZK
D$\BBBB
Ht HuL
VVVVVh
vvShXOM
YYC;]$r
YYC;]dr
YYC;]dr
_[9uht
u)hHfM
Hu h<gM
D$d(jM
t$(hXjM
ItMItCIt9It/
,Y;D$(
YYh\mM
HtaHtWHtMHtC
PPhPnM
D$\ oM
D$`LoM
D$l(jM
D$8PhT
t hLoM
D$0PSh
9\$,t j
PPh`sM
QVVVVh
f90t'Ph8
PWWWWVW3
|SVWjH^V3
D$,9|$
D$DPWWh
D$T8\$
sDSWSWh
SWSWh0
PPRQVhP
QSUVWj
D$4PVV
WWhxzM
YYWWVh:
HtFHt7HHu0
WWhxzM
QQVWhT
VVhdZL
D$HPh4
|$89|$L
Y9|$Dt8
D$@PWW
Y9|$Dt8
Y9|$ u
D$(8;D$,
KQHPhP
SNVhpDL
tNIt9It
PVVVVV
PVVVVV
D$<PhX
9\$HvP
YYC;\$Hr
9\$HvM
Y9t$Lv
FYY;t$Lr
Y;D$Hr
F;t$Hr
]TSSh(OL
YY9]Xu?S
E49]$t
Y9>v$hD
tpj{Yf
w h4'N
QPh`'N
PPh *N
QS@@SP
PPVh ,N
{J}uJjLXf
VShH?J
Xpf;Hn
t$$h`;N
tNG;~0r
PPhX>N
0SVWh8?N
40Shp?N
UVWh`AN
D$, GN
D$$XGN
D$H`GN
D$XhGN
j!X+D$
WSh@HN
uhPKN
PPSh(NN
VVhtPN
D$(VVh(QN
D$8PhHQN
D$$9t$
u(9t$8u
9t$0t`VVhTQN
VVhdQN
VVhtQN
D$@Phh
9t$(tcVVh
9t$$t,h
9t$0t h
||9t$$t"h
|N9t$ t
PPh8UN
th4VN
v 9^4t
8VhPVN
u'htVN
t$ph8[N
t$pVh:
tyh\[N
t!h0^N
t%hP^N
t*hp^N
t$h _N
PVh(bN
u<hTmN
u&hlmN
u4h8lN
%33333
%33333
|UVj hliJ
|nVj h,iJ
D$$p O
D$,h` O
SPhpvN
}fh8yN
D$$;D$,
D$ _^[
D$8VP3
D$TVP3
D$8VP3
D$LVP3
D$$_^[
D$$Ph`
D$DPhh
Y9t$(u
D$TPj8
9t$4tz9t$
D$8PSj
L$(QPP
@W@Pj@
Ht?Ht0Ht
HtMHt5Ht&Ht
tDj0j@
Yj h@ O
u/RRRh
QSVjdj@
u/PPPh
0W;1u!
u0SSSh
;L$4u?
;D$8u69\$Lu
9\$\t$
u1h O
0WWWWW
AAFFf;
0WWWWW
AAFFf;
AAf91u
URPQQh
t h8 O
<xtM<XtI
YSSSSS
HHtXHHt
>If90t
HHtXHHt
jd^j-Xf;
tPjXYf;
ou1j8Xf;
UQPXY]Y[
<+t(<-t$:
+t HHt
bcrypt.dll
ncrypt.dll
Invalid parameter passed to C runtime function.
(null)
```hhh
xppwpp
%04hu%02hu%02hu%02hu%02hu%02huZ
012345678.F? !!
NTPASSWORD
LMPASSWORD
NTPASSWORDHISTORY
LMPASSWORDHISTORY
!@#$%^&*()qwertyUIOPAzxcvbnmQQQQQQQQQQQQ)(*@&%
0123456789012345678901234567890123456789
|{VT,SG,ST,PD,TS}-BA-IS-BS-SG-SN+
3.30.1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
******""""""""""""""""""""
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
&&&&&&&&&&
BINARY
0123456789ABCDEF0123456789abcdef
Mb@?-C
>thstndrd
SQLite format 3
 !!""##$$%%&&''(())**++,,--..//00112233445566778899
0123456789ABCDEF
onoffalseyestruextrafull
naturaleftouterightfullinnercross
row_number
dense_rank
percent_rank
cume_dist
last_value
nth_value
first_value
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCLUDELETEMPORARYISNULLSAVEPOINTERSECTIESNOTNULLIKEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSCONSTRAINTOFFSETRIGGEREFERENCESUNIQUERYWITHOUTERELEASEATTACHAVINGLOBEGINNERANGEBETWEENOTHINGROUPSCASCADETACHCASECOLLATECREATECURRENT_DATEIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTUPDATEVALUESVIRTUALASTWHENWHERECURSIVEAFTERENAMEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPARTITIONDEFERREDISTINCTDROPRECEDINGFAILIMITFILTEREPLACEFIRSTFOLLOWINGFROMFULLIFORDERESTRICTOTHERSOVERIGHTROLLBACKROWSUNBOUNDEDUNIONUSINGVACUUMVIEWINDOWBYINITIALLYPRIMARY
':)xC!
ED~Myw
%raaUW
CABINET
%s_%02d.cab
No error
Failure opening file to be stored in cabinet
Failure reading file to be stored in cabinet
Insufficient memory in FCI
Could not create a temporary file
Unknown compression type
Could not create cabinet file
Client requested abort
Failure compressing data
Unknown error
NCryptKeyDerivation
NgcSignWithSymmetricPopKey
IUMDATAPROTECT
1.2.840.113556.1.4.27
1.2.840.113556.1.4.135
1.2.840.113556.1.4.129
1.2.840.113556.1.4.125
1.2.840.113556.1.4.160
1.2.840.113556.1.4.55
1.2.840.113556.1.4.94
1.2.840.113556.1.4.90
-----BEGIN %s-----
%s-----END %s-----
private
shared
warning message
notification message
file is not a database
column index out of range
authorization denied
bad parameter or other API misuse
datatype mismatch
constraint failed
locking protocol
unable to open database file
database or disk is full
unknown operation
database disk image is malformed
disk I/O error
interrupted
attempt to write a readonly database
database table is locked
database is locked
query aborted
access permission denied
SQL logic error
not an error
frame ending offset must be a non-negative number
frame starting offset must be a non-negative number
frame ending offset must be a non-negative integer
frame starting offset must be a non-negative integer
regexp
detail
notused
comment
opcode
UTF-16
UTF16be
UTF16le
UTF-16be
UTF-16le
truncate
persist
delete
writable_schema
wal_checkpoint
wal_autocheckpoint
user_version
threads
temp_store_directory
temp_store
table_xinfo
table_info
synchronous
soft_heap_limit
shrink_memory
short_column_names
secure_delete
schema_version
reverse_unordered_selects
recursive_triggers
read_uncommitted
quick_check
query_only
pragma_list
page_size
page_count
optimize
module_list
mmap_size
max_page_count
locking_mode
legacy_file_format
legacy_alter_table
journal_size_limit
journal_mode
integrity_check
index_xinfo
index_list
index_info
incremental_vacuum
ignore_check_constraints
function_list
fullfsync
full_column_names
freelist_count
foreign_keys
foreign_key_list
foreign_key_check
encoding
empty_result_callbacks
defer_foreign_keys
database_list
data_version
data_store_directory
count_changes
compile_options
collation_list
checkpoint_fullfsync
cell_size_check
case_sensitive_like
cache_spill
busy_timeout
automatic_index
auto_vacuum
application_id
timeout
cache_size
status
database
builtin
checkpointed
parent
partial
origin
unique
hidden
dflt_value
notnull
on_delete
on_update
coalesce
group_concat
substr
zeroblob
replace
total_changes
changes
last_insert_rowid
sqlite_log
sqlite_source_id
sqlite_version
nullif
randomblob
random
ifnull
unicode
printf
length
typeof
likely
likelihood
unlikely
sqlite_compileoption_get
sqlite_compileoption_used
load_extension
RELEASE
sqlite_attach
sqlite_detach
stat_get
stat_push
stat_init
sqlite_stat3
sqlite_stat4
tbl,idx,stat
sqlite_stat1
sqlite_rename_test
sqlite_rename_table
sqlite_rename_column
FOREIGN KEY
UNIQUE
NOT NULL
win32-longpath-none
win32-none
win32-longpath
FlushViewOfFile
UuidCreateSequential
UuidCreate
InterlockedCompareExchange
CreateFileMappingFromApp
GetProcessHeap
OutputDebugStringW
OutputDebugStringA
GetNativeSystemInfo
GetTickCount64
LoadPackagedLibrary
CreateFile2
MapViewOfFileFromApp
GetFileInformationByHandleEx
SetFilePointerEx
WaitForSingleObjectEx
WaitForSingleObject
CreateEventExW
WriteFile
WideCharToMultiByte
UnmapViewOfFile
UnlockFileEx
UnlockFile
SystemTimeToFileTime
SetFilePointer
SetEndOfFile
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MapViewOfFile
LockFileEx
LockFile
LocalFree
LoadLibraryW
LoadLibraryA
HeapCompact
HeapValidate
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExW
GetVersionExA
GetTickCount
GetTempPathW
GetTempPathA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetProcAddressA
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileSize
GetFileAttributesExW
GetFileAttributesW
GetFileAttributesA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetCurrentProcessId
FreeLibrary
FormatMessageW
FormatMessageA
FlushFileBuffers
FileTimeToSystemTime
FileTimeToLocalFileTime
DeleteFileW
DeleteFileA
CreateMutexW
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateFileA
CloseHandle
CharUpperW
CharLowerW
AreFileApisANSI
Abortable
Explain
CursorHint
MaxPgcnt
Pagecount
VRename
VColumn
VDestroy
VCreate
VBegin
TableLock
Expire
AggFinal
AggValue
AggStep1
AggStep
AggInverse
OffsetLimit
MemMax
FkCounter
RowSetAdd
IntegrityCk
DropTrigger
DropIndex
DropTable
LoadAnalysis
ParseSchema
SqlExec
CreateBtree
ResetSorter
Destroy
IdxRowid
DeferredSeek
IdxDelete
IdxInsert
SorterInsert
SeekEnd
NullRow
RowData
SorterData
SorterCompare
ResetCount
Delete
Insert
NewRowid
Sequence
SeekHit
ColumnsUsed
OpenPseudo
SequenceTest
SorterOpen
String8
OpenEphemeral
OpenAutoindex
BitNot
OpenDup
Concat
Remainder
Divide
Multiply
Subtract
ShiftRight
ShiftLeft
BitAnd
OpenWrite
OpenRead
ReopenIdx
SetCookie
ReadCookie
MakeRecord
Affinity
Column
Offset
IsTrue
Compare
Permutation
RealAffinity
AddImm
CollSeq
ResultRow
IntCopy
Variable
SoftNull
String
Integer
HaltIfNull
EndCoroutine
Return
Function
PureFunc
Function0
PureFunc0
IncrVacuum
ElseNotEq
NotNull
IsNull
DecrJumpZero
IfNotZero
FkIfZero
Program
RowSetTest
RowSetRead
Rewind
SorterSort
IfSmaller
NotExists
SeekRowid
NotFound
NoConflict
IfNoHope
SeekGT
SeekGE
SeekLE
SeekLT
IfNullRow
MustBeInt
InitCoroutine
VUpdate
VFilter
Vacuum
JournalMode
Checkpoint
SorterNext
Transaction
AutoCommit
Savepoint
current_date
current_timestamp
current_time
strftime
datetime
julianday
minute
second
USE_ALLOCA
UNTESTABLE
THREADSAFE=0
OMIT_TRUNCATE_OPTIMIZATION
OMIT_TCL_VARIABLE
OMIT_SHARED_CACHE
OMIT_PROGRESS_CALLBACK
OMIT_OR_OPTIMIZATION
OMIT_LOCALTIME
OMIT_LIKE_OPTIMIZATION
OMIT_DEPRECATED
OMIT_DECLTYPE
OMIT_BETWEEN_OPTIMIZATION
MAX_EXPR_DEPTH=0
LIKE_DOESNT_MATCH_BLOBS
DISABLE_INTRINSIC
DEFAULT_WAL_SYNCHRONOUS=1
COMPILER=msvc-1500
20b:20e
20c:20e
40f-21a-21d
unixepoch
weekday
start of
%04d-%02d-%02d %02d:%02d:%02d
%02d:%02d:%02d
%04d-%02d-%02d
%06.3f
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
(NULL)
922337203685477580
API call with %s database connection pointer
unopened
invalid
OsError 0x%lx (%lu)
os_win.c:%d: (%lu) %s(%s) - %s
delayed %dms for lock/sharing conflict at line %d
winSeekFile
winClose
winRead
winWrite1
winWrite2
winTruncate1
winTruncate2
winSync1
winSync2
winFileSize
winUnlockReadLock
winUnlock
winLockSharedMemory
%s-shm
readonly_shm
winOpenShm
winShmMap1
winShmMap2
winShmMap3
winUnmapfile1
winUnmapfile2
winMapfile1
winMapfile2
etilqs_
winGetTempname1
winGetTempname2
winGetTempname3
winGetTempname4
winGetTempname5
winOpen
winDelete
winAccess
%s%c%s
winFullPathname1
winFullPathname2
winFullPathname3
winFullPathname4
recovered %d pages from %s
-journal
nolock
immutable
recovered %d frames from WAL file %s
cannot limit WAL size: %s
:memory:
invalid page number %d
2nd reference to page %d
Failed to read ptrmap key=%d
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
failed to get page %d
freelist leaf count too big on page %d
overflow list length
%s is %d but should be %d
Page %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
free space corruption
On tree page %d cell %d:
On page %d at right child:
Offset %d out of range %d..%d
Extends off end of page
Rowid %lld out of order
Child page depth differs
Multiple uses for byte %u of page %d
Fragmentation of %d bytes reported as %d on page %d
Main freelist:
max rootpage (%d) disagrees with header (%d)
incremental_vacuum enabled with a max rootpage of zero
Page %d is never used
Pointer map page %d is referenced
unknown database %s
destination database is in use
source and destination must be distinct
%!.15g
BINARY
,%s%s%s
(%.20s)
%s(%d)
(blob)
vtab:%p
program
%s-mjXXXXXX9XXz
MJ delete: %s
MJ collide: %s
-mj%06X9%02X
FOREIGN KEY constraint failed
non-deterministic function in index expression or CHECK constraint
API called with finalized prepared statement
API called with NULL prepared statement
string or blob too big
bind on a busy prepared statement: [%s]
'%.*q'
zeroblob(%d)
%s constraint failed
%z: %s
abort at %d in [%s]: %s
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot release savepoint - SQL statements in progress
cannot commit transaction - SQL statements in progress
cannot start a transaction within a transaction
cannot rollback - no transaction is active
cannot commit - no transaction is active
database schema has changed
sqlite_master
SELECT*FROM"%w".%s WHERE %s ORDER BY rowid
too many levels of trigger recursion
out of
cannot change %s wal mode from within a transaction
statement aborts at %d: [%s] %s
out of memory
integer
cannot open value of type %s
no such rowid: %lld
cannot open virtual table: %s
cannot open table without rowid: %s
cannot open view: %s
no such column: "%s"
foreign key
indexed
cannot open %s column for writing
excluded
misuse of aliased aggregate %s
misuse of aliased window function %s
row value misused
double-quoted string literal: "%w"
no such column
ambiguous column name
%s: %s.%s.%s
%s: %s.%s
%s: %s
partial index WHERE clauses
index expressions
CHECK constraints
%s prohibited in %s
the "." operator
second argument to likelihood() must be a constant between 0.0 and 1.0
not authorized to use function: %s
non-deterministic functions
%s() prohibited in triggers and views
%.*s() may not be used as a window function
window
aggregate
misuse of %s function %.*s()
no such function: %.*s
wrong number of arguments to function %.*s()
FILTER may not be used with non-aggregate %.*s()
subqueries
parameters
%r %s BY term out of range - should be between 1 and %d
too many terms in ORDER BY clause
%r ORDER BY term does not match any column in the result set
too many terms in %s BY clause
a GROUP BY clause is required before HAVING
aggregate functions are not allowed in the GROUP BY clause
too many arguments on function %T
variable number must be between ?1 and ?%d
too many SQL variables
%d columns assigned %d values
too many columns in %s
_ROWID_
USING ROWID SEARCH ON TABLE %s FOR IN-OPERATOR
USING INDEX %s FOR IN-OPERATOR
sub-select returns %d columns - expected %d
REUSE LIST SUBQUERY %d
CORRELATED
%sLIST SUBQUERY %d
REUSE SUBQUERY %d
%sSCALAR SUBQUERY %d
hex literal too big: %s%s
misuse of aggregate: %s()
unknown function: %s()
RAISE() may only be used within a trigger-program
sqlite_
table %s may not be altered
SELECT 1 FROM "%w".%s WHERE name NOT LIKE 'sqliteX_%%' ESCAPE 'X' AND sql NOT LIKE 'create virtual%%' AND sqlite_rename_test(%Q, sql, type, name, %d)=NULL
SELECT 1 FROM temp.%s WHERE name NOT LIKE 'sqliteX_%%' ESCAPE 'X' AND sql NOT LIKE 'create virtual%%' AND sqlite_rename_test(%Q, sql, type, name, 1)=NULL
there is already another table or index with this name: %s
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_table(%Q, type, name, sql, %Q, %Q, %d) WHERE (type!='index' OR tbl_name=%Q COLLATE nocase)AND name NOT LIKE 'sqliteX_%%' ESCAPE 'X'
UPDATE %Q.%s SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
sqlite_sequence
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE sqlite_temp_master SET sql = sqlite_rename_table(%Q, type, name, sql, %Q, %Q, 1), tbl_name = CASE WHEN tbl_name=%Q COLLATE nocase AND sqlite_rename_test(%Q, sql, type, name, 1) THEN %Q ELSE tbl_name END WHERE type IN ('view', 'trigger')
Cannot add a PRIMARY KEY column
Cannot add a UNIQUE column
Cannot add a REFERENCES column with non-NULL default value
Cannot add a NOT NULL column with default value NULL
Cannot add a column with non-constant default
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
virtual tables may not be altered
Cannot add a column to a view
sqlite_altertab_%s
virtual table
cannot rename columns of %s "%s"
UPDATE "%w".%s SET sql = sqlite_rename_column(sql, type, name, %Q, %Q, %d, %Q, %d, %d) WHERE name NOT LIKE 'sqliteX_%%' ESCAPE 'X' AND (type != 'index' OR tbl_name = %Q) AND sql NOT LIKE 'create virtual%%'
UPDATE temp.%s SET sql = sqlite_rename_column(sql, type, name, %Q, %Q, %d, %Q, %d, 1) WHERE type IN ('trigger', 'view')
after rename
error in %s %s%s: %s
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE %s=%Q
sqlite\_%
unordered*
sz=[0-9]*
noskipscan*
SELECT tbl,idx,stat FROM %Q.sqlite_stat1
too many attached databases - max %d
database %s is already in use
database is already attached
attached databases must use the same text encoding as main database
unable to open database: %s
no such database: %s
cannot detach database %s
database %s is locked
%s %T cannot reference objects in database %s
%s cannot use variables
authorizer malfunction
access to %z is prohibited
not authorized
sqlite_temp_master
pragma_
no such view
no such table
corrupt database
unknown database %T
object name reserved for internal use: %s
temporary table name must be unqualified
table %T already exists
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
INTEGER
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
CREATE TABLE
AUTOINCREMENT not allowed on WITHOUT ROWID tables
PRIMARY KEY missing on table %s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE TABLE %Q.sqlite_sequence(name,seq)
tbl_name='%q' AND type!='trigger'
parameters are not allowed in views
view %s is circularly defined
corrupt schema
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
sqlite_stat%d
DELETE FROM %Q.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
unsupported use of NULLS %s
cannot create a TEMP index on non-TEMP table "%s"
table %s may not be indexed
views may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
expressions prohibited in PRIMARY KEY and UNIQUE constraints
conflicting ON CONFLICT clauses specified
invalid rootpage
UNIQUE
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
name='%q' AND type='index'
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
too many FROM clause terms, max: %d
a JOIN clause is required before %s
ROLLBACK
COMMIT
unable to open a temporary database file for storing temporary tables
index '%q'
%s.rowid
unable to identify the object to be reindexed
duplicate WITH table name: %s
no such collation sequence: %s
table %s may not be modified
cannot modify %s because it is a view
rows deleted
integer overflow
LIKE or GLOB pattern too complex
ESCAPE expression must be a single character
%!.20e
foreign key mismatch - "%w" referencing "%w"
table %S has no column named %s
table %S has %d columns but %d values were supplied
%d values for %d columns
UPSERT not implemented for virtual table "%s"
rows inserted
sqlite3_extension_init
unable to open shared library [%s]
sqlite3_
no entry point [%s] in shared library [%s]
error during initialization: %s
automatic extension loading failed: %s
exclusive
normal
incremental
memory
temporary storage cannot be changed from within a transaction
SET NULL
SET DEFAULT
CASCADE
RESTRICT
NO ACTION
not a writable directory
Safety level may not be changed inside a transaction
issisii
issisi
iissssss
*** in database %s ***
NULL value in %s.%s
CHECK constraint failed in %s
missing from index
non-unique entry in index
wrong # of entries in index
unsupported encoding: %s
restart
ANALYZE "%w"."%w"
CREATE TABLE x
%c"%s"
,arg HIDDEN
,schema HIDDEN
PRAGMA
malformed database schema (%s)
%z - %s
create
orphan index
CREATE TABLE x(type text,name text,tbl_name text,rootpage int,sql text)
unsupported file format
SELECT*FROM"%w".%s ORDER BY rowid
statement too long
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
UNION ALL
INTERSECT
EXCEPT
USE TEMP B-TREE FOR %s
column%d
%.*z:%u
cannot use window functions in recursive queries
recursive aggregate queries not supported
RECURSIVE STEP
SCAN %d CONSTANT ROW%s
ORDER BY
%s clause should come after %s not before
COMPOUND QUERY
LEFT-MOST SUBQUERY
%s USING TEMP B-TREE
all VALUES must have the same number of terms
SELECTs to the left and right of %s do not have the same number of result columns
MERGE (%s)
no such index: %s
'%s' is not a function
multiple references to recursive table: %s
circular reference: %s
table %s has %d values for %d columns
multiple recursive references: %s
recursive reference in a subquery: %s
subquery_%u
too many references to "%s": max 65535
access to view "%s" prohibited
%s.%s.%s
no such table: %s
no tables specified
too many columns in result set
DISTINCT aggregates must have exactly one argument
USING COVERING INDEX
SCAN TABLE %s%s%s
expected %d columns for '%s' but got %d
CO-ROUTINE %u
MATERIALIZE %u
DISTINCT
GROUP BY
RIGHT PART OF ORDER BY
sqlite3_get_table() called with two or more incompatible queries
temporary trigger may not have qualified name
trigger
cannot create triggers on virtual tables
trigger %T already exists
cannot create trigger on system table
BEFORE
cannot create %s trigger on view: %S
cannot create INSTEAD OF trigger on table: %S
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
type='trigger' AND name='%q'
no such trigger: %S
DELETE FROM %Q.%s WHERE name=%Q AND type='trigger'
-- TRIGGER %s
no such column: %s
rows updated
ON CONFLICT clause does not match any PRIMARY KEY or UNIQUE constraint
cannot VACUUM from within a transaction
cannot VACUUM - SQL statements in progress
non-text filename
ATTACH %Q AS vacuum_db
output file already exists
SELECT sql FROM "%w".sqlite_master WHERE type='table'AND name<>'sqlite_sequence' AND coalesce(rootpage,1)>0
SELECT sql FROM "%w".sqlite_master WHERE type='index'
SELECT'INSERT INTO vacuum_db.'||quote(name)||' SELECT*FROM"%w".'||quote(name)FROM vacuum_db.sqlite_master WHERE type='table'AND coalesce(rootpage,1)>0
INSERT INTO vacuum_db.sqlite_master SELECT*FROM "%w".sqlite_master WHERE type IN('view','trigger') OR(type='table'AND rootpage=0)
CREATE VIRTUAL TABLE %T
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
name='%q' AND type='table'
vtable constructor called recursively: %s
vtable constructor failed: %s
vtable constructor did not declare schema: %s
no such module: %s
<expr>
ANY(%s)
SEARCH
SUBQUERY %u
TABLE %s
AS %s
PRIMARY KEY
AUTOMATIC PARTIAL COVERING INDEX
AUTOMATIC COVERING INDEX
COVERING INDEX %s
INDEX %s
USING
>? AND rowid<
USING INTEGER PRIMARY KEY (rowid%s?)
VIRTUAL TABLE INDEX %d:%s
ON clause references tables to its right
too many arguments on %s() - max %d
automatic index on %s(%s)
auto-index
%s.xBestIndex malfunction
abbreviated query algorithm search
no query solution
at most %d tables in a join
SCAN CONSTANT ROW
second argument to nth_value must be a positive integer
argument of ntile must be a positive integer
no such window: %s
RANGE with offset PRECEDING/FOLLOWING requires one ORDER BY expression
FILTER clause may only be used with aggregate window functions
unsupported frame specification
PARTITION clause
ORDER BY clause
frame specification
cannot override %s of window: %s
DISTINCT is not supported for window functions
too many terms in compound SELECT
syntax error after column name "%.*s"
parser stack overflow
unknown table option: %.*s
set list
near "%T": syntax error
qualified table names are not allowed on INSERT, UPDATE, and DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
incomplete input
unrecognized token: "%.*s"
%s in "%s"
create
temporary
explain
unable to close due to unfinalized statements or unfinished backups
unknown error
abort due to ROLLBACK
another row available
no more rows available
unable to delete/modify user-function due to active statements
unable to use function %s in the requested context
unknown database: %s
unable to delete/modify collation sequence due to active statements
localhost
invalid uri authority: %.*s
access
no such %s mode: %s
%s mode not allowed: %s
no such vfs: %s
NOCASE
%s at line %d of [%.10s]
database corruption
misuse
cannot open file
no such table column: %s.%s
SQLITE_
2019-10-10 20:19:45 18db032d058f1436ce3dea84081f4ee5a0f2259ad97301d43c426bc7f3df1b0b
ncrypt.dll
bcrypt.dll
CPGenKey
CPDeriveKey
CPDestroyKey
CPSetKeyParam
CPGetKeyParam
CPExportKey
CPImportKey
CPEncrypt
CPDecrypt
CPDuplicateKey
1.3.6.1.4.1.311.20.2.3
2.5.29.17
2.5.29.15
2.5.29.37
2.5.29.14
2.5.29.35
2.5.29.31
2.5.29.19
1.2.840.113549.1.1.5
2.5.4.3
2.5.4.11
2.5.4.10
2.5.4.6
1.2.840.113549.1.1.11
1.3.14.3.2.29
1.3.6.1.5.5.7.3.2
1.3.6.1.4.1.311.20.2.2
OMNIKEY
<root>
CardAcquireContext
mimikatz
logins
select signon_realm, origin_url, username_value, password_value from logins
cookies
select host_key, path, name, creation_utc, expires_utc, encrypted_value from cookies order by host_key, path, name
select count(*) from sqlite_master where type='table' and name=?
{"alg":"%s", "ctx":"%s"}
{"refresh_token":"%s", "is_primary":"true", "iat":"%ld"}
AppN_DN_Win
Hj1diQ6kpUx7VC4m
6jnkd5J3ZdQDtrsu
xT5rZW5qVVbrvpuA
RSA PRIVATE KEY
Kerberos
t{{t{i}t{i}t{
{t{{t{i}t{
t{{t{{{t{
}}}}}}
}t{{t{i}t{o}}}t{
t{{{t{i}t{
{{t{i}t{o}}}
{t{i}t{{
{t{i}t{o}}
PRIVATE KEY
SuppData
SamIConnect
SamrCloseHandle
SamIRetrievePrimaryCredentials
SamrOpenDomain
SamrOpenUser
SamrQueryInformationUser
SamIFree_SAMPR_USER_INFO_BUFFER
VirtualAlloc
memcpy
LocalAlloc
fwprintf
fclose
LockWorkStation
SystemParametersInfoW
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
VaultEnumerateItemTypes
VaultEnumerateVaults
VaultOpenVault
VaultGetInformation
VaultEnumerateItems
VaultCloseVault
VaultFree
VaultGetItem
1.2.840.113556.1.2.48
1.2.840.113556.1.4.133
1.2.840.113556.1.4.609
1.2.840.113556.1.4.146
1.2.840.113556.1.4.96
1.2.840.113556.1.4.159
1.2.840.113556.1.4.8
1.2.840.113556.1.4.302
1.2.840.113556.1.4.656
1.2.840.113556.1.4.221
1.2.840.113556.1.4.1
attributeID
attributeSyntax
systemFlags
2.5.4.0
1.2.840.113556.1.2.14
1.2.840.113556.1.2.36
1.2.840.113556.1.2.115
1.2.840.113556.1.4.307
1.2.840.113556.1.4.375
1.2.840.113556.1.4.515
1.2.840.113556.1.4.1459
1.2.840.113556.1.4.1820
1.2.840.113556.1.4.1836
CryptUnprotectMemory
CredentialKeys
Primary
mf?fffff
^@1|d^
BCryptOpenAlgorithmProvider
BCryptDestroyHash
BCryptKeyDerivation
BCryptHashData
BCryptFinishHash
BCryptGenerateSymmetricKey
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptDeriveKeyPBKDF2
BCryptCreateHash
BCryptGetProperty
BCryptEncrypt
BCryptDecrypt
BCryptSetProperty
BCryptImportKeyPair
BCryptExportKey
BCryptFreeBuffer
BCryptEnumRegisteredProviders
NCryptOpenStorageProvider
NCryptGetProperty
NCryptSetProperty
NCryptFinalizeKey
NCryptFreeObject
NCryptImportKey
NCryptOpenKey
NCryptDecrypt
NCryptFreeBuffer
NCryptEnumKeys
NCryptExportKey
NCryptSignHash
CryptSetHashParam
CryptGetHashParam
CryptExportKey
CryptAcquireContextW
CryptSetKeyParam
CryptGetKeyParam
CryptReleaseContext
CryptDuplicateKey
CryptAcquireContextA
CryptGetProvParam
CryptImportKey
SystemFunction007
CryptEncrypt
CryptCreateHash
CryptGenKey
CryptDestroyKey
CryptDecrypt
CryptDestroyHash
CryptHashData
CopySid
GetLengthSid
LsaQueryInformationPolicy
LsaOpenPolicy
LsaClose
CreateWellKnownSid
CreateProcessWithLogonW
CreateProcessAsUserW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
SystemFunction032
ConvertSidToStringSidW
CreateServiceW
CloseServiceHandle
DeleteService
OpenSCManagerW
SetServiceObjectSecurity
OpenServiceW
BuildSecurityDescriptorW
QueryServiceObjectSecurity
StartServiceW
AllocateAndInitializeSid
QueryServiceStatusEx
FreeSid
ControlService
IsTextUnicode
OpenProcessToken
GetTokenInformation
LookupAccountNameW
LookupAccountSidW
DuplicateTokenEx
CheckTokenMembership
CryptSetProvParam
CryptEnumProvidersW
ConvertStringSidToSidW
LsaFreeMemory
GetSidSubAuthority
GetSidSubAuthorityCount
IsValidSid
SetThreadToken
CryptEnumProviderTypesW
SystemFunction006
CryptGetUserKey
OpenEventLogW
GetNumberOfEventLogRecords
ClearEventLogW
SystemFunction001
CryptDeriveKey
SystemFunction005
LsaQueryTrustedDomainInfoByName
CryptSignHashW
LsaSetSecret
LsaOpenSecret
LsaQuerySecret
SystemFunction013
LsaRetrievePrivateData
LsaEnumerateTrustedDomainsEx
LookupPrivilegeValueW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
LookupPrivilegeNameW
OpenThreadToken
EqualSid
CredFree
CredEnumerateW
SystemFunction025
ConvertStringSecurityDescriptorToSecurityDescriptorW
SystemFunction024
CredIsMarshaledCredentialW
CredUnmarshalCredentialW
ADVAPI32.dll
Cabinet.dll
CertAddEncodedCertificateToStore
CertOpenStore
CertFreeCertificateContext
CertCloseStore
CertSetCertificateContextProperty
PFXExportCertStoreEx
CryptUnprotectData
CryptBinaryToStringW
CryptStringToBinaryA
CryptBinaryToStringA
CryptStringToBinaryW
CryptExportPublicKeyInfo
CryptFindOIDInfo
CryptAcquireCertificatePrivateKey
CertNameToStrW
CertFindCertificateInStore
CertGetCertificateContextProperty
CryptSignAndEncodeCertificate
CryptEncodeObject
CryptProtectData
CryptQueryObject
CertGetNameStringW
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertEnumCertificatesInStore
CertEnumSystemStore
CRYPT32.dll
CDLocateCheckSum
CDGenerateRandomBits
MD5Final
MD5Update
MD5Init
CDLocateCSystem
cryptdll.dll
DnsQuery_A
DnsFree
DNSAPI.dll
FilterFindFirst
FilterFindNext
FLTLIB.DLL
DsGetDcNameW
NetApiBufferFree
NetRemoteTOD
NetSessionEnum
NetServerGetInfo
DsEnumerateDomainTrustsW
NetShareEnum
NetStatisticsGet
NetWkstaUserEnum
NETAPI32.dll
CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemFree
ole32.dll
OLEAUT32.dll
RpcBindingFromStringBindingW
RpcStringBindingComposeW
MesEncodeIncrementalHandleCreate
RpcBindingSetAuthInfoExW
RpcBindingInqAuthClientW
RpcBindingSetOption
RpcImpersonateClient
RpcBindingFree
RpcStringFreeW
RpcRevertToSelf
MesDecodeIncrementalHandleCreate
MesHandleFree
MesIncrementalHandleReset
NdrMesTypeDecode2
NdrMesTypeAlignSize2
Antivirus Signature
Bkav Clean
Lionic Riskware.Win32.Mimikatz.1!c
Elastic Windows.Hacktool.Mimikatz
DrWeb Tool.Mimikatz.887
MicroWorld-eScan Trojan.GenericKD.39822937
CMC Clean
CAT-QuickHeal HackTool.Mimikatz.S13719266
ALYac Trojan.GenericKD.39822937
Cylance Unsafe
Zillya Tool.Mimikatz.Win32.1637
Sangfor Trojan.Win32.Save.a
K7AntiVirus Riskware ( 004f0b6d1 )
BitDefender Trojan.GenericKD.39822937
K7GW Riskware ( 004f0b6d1 )
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Gen:NN.ZexaF.34582.@u2@aiJ!Lsdi
VirIT PUP.Win32.Delpy.B
Cyren W32/Mimikatz.A.gen!Eldorado
Symantec Hacktool.Mimikatz
tehtris Clean
ESET-NOD32 a variant of Win32/RiskWare.Mimikatz.BC
Zoner Clean
TrendMicro-HouseCall HKTL_MIMIKATZ
Paloalto generic.ml
ClamAV Win.Dropper.ClipBanker-9778171-0
Kaspersky Trojan-PSW.Win32.Mimikatz.gen
Alibaba Trojan:Win32/Mimikatz.4b2
NANO-Antivirus Trojan.Win32.Mimikatz.hxnzvn
ViRobot Clean
Rising HackTool.Mimikatz!1.B3A8 (CLASSIC)
Ad-Aware Trojan.GenericKD.39822937
Sophos Mal/Generic-R + ATK/Apteryx-Gen
Comodo Malware@#3afv56ldzfowu
F-Secure Clean
Baidu Clean
VIPRE Trojan.GenericKD.39822937
TrendMicro HKTL_MIMIKATZ
McAfee-GW-Edition HTool-Mimikatz
Trapmine Clean
FireEye Generic.mg.605d939941c5df2d
Emsisoft Trojan.GenericKD.39822937 (B)
Ikarus HackTool.Mimikatz
GData Win32.Riskware.Mimikatz.F
Jiangmin Trojan.PSW.Mimikatz.cck
Webroot W32.Hacktool.Gen
Avira PUA/Mimikatz.AR
MAX malware (ai score=94)
Antiy-AVL Trojan/Generic.ASMalwS.5C42
Kingsoft Win32.PSWTroj.Mimikatz.g.(kcloud)
Gridinsoft Hack.Mimikatz.ka!c
Arcabit Trojan.Generic.D25FA659
SUPERAntiSpyware Hack.Tool/Gen-Mimikatz
ZoneAlarm HEUR:Trojan-PSW.Win32.Mimikatz.gen
Microsoft HackTool:Win32/Mimikatz.D
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win32.RL_Mimikatz.R290617
Acronis Clean
McAfee HTool-Mimikatz
TACHYON Clean
VBA32 BScope.TrojanPSW.Mimikatz
Malwarebytes HackTool.Mimikatz
Panda HackingTool/Mimikatz
APEX Malicious
Tencent Malware.Win32.Gencirc.10ce32a0
Yandex Trojan.PWS.Mimikatz!X3lLaFpRyMo
SentinelOne Clean
MaxSecure Trojan.Malware.9460437.susgen
Fortinet Riskware/Mimikatz
AVG Win32:HacktoolX-gen [Trj]
Cybereason malicious.941c5d
Avast Win32:HacktoolX-gen [Trj]
No IRMA results available.