Static | ZeroBOX

PE Compile Time

2022-09-20 00:43:55

PE Imphash

ff6abb25b3369620afef1dacd4a21f4c

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0009cfdc 0x0009d000 6.69246678984
.rdata 0x0009e000 0x0005b7f6 0x0005b800 4.29574580909
.data 0x000fa000 0x00004334 0x00003a00 3.57736076949
.rsrc 0x000ff000 0x00003fe8 0x00004000 6.54136481389
.reloc 0x00103000 0x00008558 0x00008600 6.55242187972

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00102b50 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x00102b50 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x00102b50 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x00102fb8 0x00000030 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x000ff150 0x000003ac LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library ADVAPI32.dll:
0x49e000 CryptSetHashParam
0x49e004 CryptGetHashParam
0x49e008 CryptExportKey
0x49e010 CryptSetKeyParam
0x49e014 CryptGetKeyParam
0x49e018 CryptReleaseContext
0x49e01c CryptDuplicateKey
0x49e024 CryptGetProvParam
0x49e028 CryptImportKey
0x49e02c SystemFunction007
0x49e030 CryptEncrypt
0x49e034 CryptCreateHash
0x49e038 CryptGenKey
0x49e03c CryptDestroyKey
0x49e040 CryptDecrypt
0x49e044 CryptDestroyHash
0x49e048 CryptHashData
0x49e04c CopySid
0x49e050 GetLengthSid
0x49e058 LsaOpenPolicy
0x49e05c LsaClose
0x49e060 CreateWellKnownSid
0x49e06c RegQueryValueExW
0x49e070 RegQueryInfoKeyW
0x49e074 RegEnumValueW
0x49e078 RegOpenKeyExW
0x49e07c RegEnumKeyExW
0x49e080 RegCloseKey
0x49e084 RegSetValueExW
0x49e088 SystemFunction033
0x49e08c SystemFunction032
0x49e094 CreateServiceW
0x49e098 CloseServiceHandle
0x49e09c DeleteService
0x49e0a0 OpenSCManagerW
0x49e0a8 OpenServiceW
0x49e0b4 StartServiceW
0x49e0c0 FreeSid
0x49e0c4 ControlService
0x49e0c8 IsTextUnicode
0x49e0cc OpenProcessToken
0x49e0d0 GetTokenInformation
0x49e0d4 LookupAccountNameW
0x49e0d8 LookupAccountSidW
0x49e0dc DuplicateTokenEx
0x49e0e4 CryptSetProvParam
0x49e0e8 CryptEnumProvidersW
0x49e0f0 LsaFreeMemory
0x49e0f4 GetSidSubAuthority
0x49e0fc IsValidSid
0x49e100 SetThreadToken
0x49e108 SystemFunction006
0x49e10c CryptGetUserKey
0x49e110 OpenEventLogW
0x49e118 ClearEventLogW
0x49e11c SystemFunction001
0x49e120 CryptDeriveKey
0x49e124 SystemFunction005
0x49e12c CryptSignHashW
0x49e130 LsaSetSecret
0x49e134 SystemFunction023
0x49e138 LsaOpenSecret
0x49e13c LsaQuerySecret
0x49e150 SetServiceStatus
0x49e15c OpenThreadToken
0x49e160 EqualSid
0x49e164 CredFree
0x49e168 CredEnumerateW
0x49e16c SystemFunction026
0x49e174 SystemFunction027
0x49e178 SystemFunction041
Library Cabinet.dll:
0x49e1f4 None
0x49e1f8 None
0x49e1fc None
0x49e200 None
Library CRYPT32.dll:
0x49e18c CertEnumSystemStore
0x49e198 CryptDecodeObjectEx
0x49e1a4 CertOpenStore
0x49e1ac CertCloseStore
0x49e1bc CryptUnprotectData
0x49e1cc CryptFindOIDInfo
0x49e1d4 CertNameToStrW
0x49e1e0 CertGetNameStringW
0x49e1e4 CryptEncodeObject
0x49e1e8 CryptProtectData
0x49e1ec CryptQueryObject
Library cryptdll.dll:
0x49e7b0 MD5Update
0x49e7b4 MD5Final
0x49e7b8 CDLocateCSystem
0x49e7bc MD5Init
0x49e7c0 CDLocateCheckSum
Library DNSAPI.dll:
0x49e208 DnsFree
0x49e20c DnsQuery_A
Library FLTLIB.DLL:
0x49e214 FilterFindFirst
0x49e218 FilterFindNext
Library MPR.dll:
0x49e484 WNetAddConnection2W
Library NETAPI32.dll:
0x49e48c NetStatisticsGet
0x49e490 DsGetDcNameW
0x49e494 NetApiBufferFree
0x49e498 NetRemoteTOD
0x49e49c NetSessionEnum
0x49e4a0 NetServerGetInfo
0x49e4a8 NetShareEnum
0x49e4ac NetWkstaUserEnum
Library ODBC32.dll:
0x49e4b4 None
0x49e4b8 None
0x49e4bc None
0x49e4c0 None
0x49e4c4 None
0x49e4c8 None
0x49e4cc None
0x49e4d0 None
Library ole32.dll:
0x49e9c8 CoTaskMemFree
0x49e9cc CoSetProxyBlanket
0x49e9d0 CoInitializeEx
0x49e9d4 CoUninitialize
0x49e9d8 CoCreateInstance
Library OLEAUT32.dll:
0x49e4d8 SysAllocString
0x49e4dc VariantInit
0x49e4e0 SysFreeString
0x49e4e4 VariantClear
Library RPCRT4.dll:
0x49e4ec RpcBindingFree
0x49e504 RpcBindingSetOption
0x49e50c RpcStringFreeW
0x49e510 RpcRevertToSelf
0x49e518 MesHandleFree
0x49e520 NdrMesTypeDecode2
0x49e528 NdrMesTypeFree2
0x49e52c NdrMesTypeEncode2
0x49e53c RpcServerListen
0x49e544 RpcEpRegisterW
0x49e55c UuidToStringW
0x49e564 RpcEpUnregister
0x49e568 NdrServerCall2
0x49e56c NdrClientCall2
0x49e570 UuidCreate
0x49e574 RpcEpResolveBinding
0x49e578 RpcBindingSetObject
0x49e580 RpcMgmtEpEltInqDone
Library SHLWAPI.dll:
0x49e60c UrlUnescapeW
0x49e610 PathIsDirectoryW
0x49e614 PathFindFileNameW
0x49e618 PathIsRelativeW
0x49e61c PathCombineW
0x49e620 PathCanonicalizeW
Library SAMLIB.dll:
0x49e59c SamCloseHandle
0x49e5a4 SamFreeMemory
0x49e5ac SamOpenUser
0x49e5bc SamOpenDomain
0x49e5c0 SamConnect
0x49e5d0 SamGetGroupsForUser
0x49e5dc SamRidToSid
0x49e5e4 SamOpenGroup
0x49e5e8 SamOpenAlias
Library Secur32.dll:
0x49e628 FreeContextBuffer
0x49e630 LsaFreeReturnBuffer
0x49e654 LsaConnectUntrusted
Library SHELL32.dll:
0x49e604 CommandLineToArgvW
Library USER32.dll:
0x49e65c SetClipboardViewer
0x49e660 DefWindowProcW
0x49e668 OpenClipboard
0x49e66c CreateWindowExW
0x49e674 RegisterClassExW
0x49e678 TranslateMessage
0x49e680 PostMessageW
0x49e684 DispatchMessageW
0x49e688 GetKeyboardLayout
0x49e68c IsCharAlphaNumericW
0x49e690 SendMessageW
0x49e694 UnregisterClassW
0x49e698 GetMessageW
0x49e69c DestroyWindow
0x49e6a0 CloseClipboard
0x49e6a4 GetClipboardData
Library USERENV.dll:
Library VERSION.dll:
0x49e6b8 VerQueryValueW
0x49e6c0 GetFileVersionInfoW
Library HID.DLL:
0x49e220 HidD_GetFeature
0x49e228 HidD_GetHidGuid
0x49e22c HidP_GetCaps
0x49e230 HidD_SetFeature
0x49e238 HidD_GetAttributes
Library SETUPAPI.dll:
Library WinSCard.dll:
0x49e770 SCardControl
0x49e774 SCardTransmit
0x49e778 SCardDisconnect
0x49e77c SCardGetAttrib
0x49e784 SCardFreeMemory
0x49e788 SCardListReadersW
0x49e78c SCardReleaseContext
0x49e794 SCardListCardsW
0x49e798 SCardConnectW
Library WINSTA.dll:
0x49e6d4 WinStationConnectW
Library WLDAP32.dll:
0x49e6e4 None
0x49e6e8 None
0x49e6ec None
0x49e6f0 None
0x49e6f4 None
0x49e6f8 None
0x49e6fc None
0x49e700 None
0x49e704 None
0x49e708 None
0x49e70c None
0x49e710 None
0x49e714 None
0x49e718 None
0x49e71c None
0x49e720 None
0x49e724 None
0x49e728 None
0x49e72c None
0x49e730 None
0x49e734 None
0x49e738 None
0x49e73c None
0x49e740 None
0x49e744 None
0x49e748 None
0x49e74c None
0x49e750 None
0x49e754 None
0x49e758 None
0x49e75c None
0x49e760 None
0x49e764 None
0x49e768 None
Library advapi32.dll:
0x49e7a0 A_SHAFinal
0x49e7a4 A_SHAInit
0x49e7a8 A_SHAUpdate
Library msasn1.dll:
0x49e7cc ASN1_CreateEncoder
0x49e7d0 ASN1BERDotVal2Eoid
0x49e7d4 ASN1_CloseEncoder
0x49e7d8 ASN1_CreateDecoder
0x49e7dc ASN1_FreeEncoded
0x49e7e0 ASN1_CloseModule
0x49e7e4 ASN1_CloseDecoder
0x49e7e8 ASN1_CreateModule
Library ntdll.dll:
0x49e944 RtlFreeAnsiString
0x49e958 NtQueryObject
0x49e95c RtlCompressBuffer
0x49e968 RtlGetCurrentPeb
0x49e970 RtlCreateUserThread
0x49e974 RtlGUIDFromString
0x49e978 RtlStringFromGUID
0x49e97c NtCompareTokens
0x49e984 RtlEqualString
0x49e994 RtlFreeOemString
0x49e9a0 NtResumeProcess
0x49e9a8 RtlAdjustPrivilege
0x49e9ac NtSuspendProcess
0x49e9b0 NtTerminateProcess
Library netapi32.dll:
Library KERNEL32.dll:
0x49e244 lstrlenA
0x49e248 GetDateFormatW
0x49e250 ClearCommError
0x49e254 CreateRemoteThread
0x49e258 WaitForSingleObject
0x49e25c CreateProcessW
0x49e260 SetConsoleOutputCP
0x49e264 GetConsoleOutputCP
0x49e268 CreateFileMappingW
0x49e26c UnmapViewOfFile
0x49e270 MapViewOfFile
0x49e274 WriteProcessMemory
0x49e278 VirtualProtect
0x49e27c InterlockedExchange
0x49e280 SetFilePointerEx
0x49e284 GetProcessId
0x49e288 GetComputerNameW
0x49e290 VirtualAllocEx
0x49e294 VirtualProtectEx
0x49e298 VirtualAlloc
0x49e29c SetLastError
0x49e2a0 ReadProcessMemory
0x49e2a4 VirtualFreeEx
0x49e2a8 VirtualQueryEx
0x49e2ac VirtualFree
0x49e2b0 VirtualQuery
0x49e2b4 GetComputerNameExW
0x49e2b8 DeviceIoControl
0x49e2bc DuplicateHandle
0x49e2c0 OpenProcess
0x49e2c4 GetCurrentProcess
0x49e2cc FindNextFileW
0x49e2d0 FindClose
0x49e2d8 GetFileSizeEx
0x49e2dc FlushFileBuffers
0x49e2e0 GetFileAttributesW
0x49e2e4 FindFirstFileW
0x49e2e8 lstrlenW
0x49e2ec GetProcAddress
0x49e2f0 LoadLibraryW
0x49e2f4 GetModuleHandleW
0x49e2f8 FreeLibrary
0x49e2fc DeleteFileA
0x49e300 GetTempPathA
0x49e310 GetTempFileNameA
0x49e314 SetFilePointer
0x49e318 CreateFileA
0x49e320 CreateThread
0x49e324 LocalFree
0x49e328 CloseHandle
0x49e32c LocalAlloc
0x49e330 GetLastError
0x49e334 CreateFileW
0x49e338 ReadFile
0x49e33c Sleep
0x49e340 TerminateThread
0x49e344 WriteFile
0x49e34c GetTimeFormatW
0x49e350 GetFullPathNameW
0x49e354 GetFullPathNameA
0x49e358 HeapReAlloc
0x49e35c GetFileSize
0x49e360 CreateMutexW
0x49e364 HeapCompact
0x49e368 SetEndOfFile
0x49e36c HeapAlloc
0x49e374 HeapFree
0x49e37c UnlockFile
0x49e380 FlushViewOfFile
0x49e384 LockFile
0x49e38c OutputDebugStringW
0x49e390 GetTickCount
0x49e394 UnlockFileEx
0x49e398 GetProcessHeap
0x49e39c FormatMessageA
0x49e3a0 FormatMessageW
0x49e3a4 GetVersionExW
0x49e3a8 WideCharToMultiByte
0x49e3ac HeapDestroy
0x49e3b0 GetFileAttributesA
0x49e3b4 HeapCreate
0x49e3b8 HeapValidate
0x49e3bc MultiByteToWideChar
0x49e3c0 GetTempPathW
0x49e3c4 HeapSize
0x49e3c8 LockFileEx
0x49e3cc GetDiskFreeSpaceW
0x49e3d0 LoadLibraryA
0x49e3d4 CreateFileMappingA
0x49e3d8 GetDiskFreeSpaceA
0x49e3dc GetSystemInfo
0x49e3e4 OutputDebugStringA
0x49e3e8 GetVersionExA
0x49e3ec DeleteFileW
0x49e3f0 GetCurrentProcessId
0x49e3f4 GetSystemTime
0x49e3f8 AreFileApisANSI
0x49e3fc ExitProcess
0x49e400 ExitThread
0x49e404 RaiseException
0x49e40c SetConsoleTitleW
0x49e410 SetFileAttributesW
0x49e414 GlobalSize
0x49e41c CreatePipe
0x49e430 SetEvent
0x49e434 CreateEventW
0x49e438 GetSystemDirectoryW
0x49e444 GetStdHandle
0x49e450 IsWow64Process
0x49e458 GetCurrentThread
0x49e45c RtlUnwind
0x49e460 TerminateProcess
0x49e46c GetVersion
0x49e470 GetModuleHandleA
0x49e474 GetCurrentThreadId
0x49e478 PurgeComm
Library msvcrt.dll:
0x49e7f0 calloc
0x49e7f4 __set_app_type
0x49e7f8 _lseeki64
0x49e7fc wctomb
0x49e800 __setusermatherr
0x49e804 isspace
0x49e808 mbtowc
0x49e80c __mb_cur_max
0x49e810 _itoa
0x49e814 isleadbyte
0x49e818 isxdigit
0x49e81c localeconv
0x49e820 _snprintf
0x49e824 __p__fmode
0x49e828 ferror
0x49e82c iswctype
0x49e830 wcstombs
0x49e834 ?terminate@@YAXXZ
0x49e838 _write
0x49e83c _isatty
0x49e840 ungetc
0x49e844 _controlfp
0x49e848 __badioinfo
0x49e84c __pioinfo
0x49e850 __p__commode
0x49e854 _read
0x49e858 isdigit
0x49e85c strrchr
0x49e860 _amsg_exit
0x49e864 _initterm
0x49e868 exit
0x49e86c _XcptFilter
0x49e870 _exit
0x49e874 _cexit
0x49e878 _errno
0x49e87c free
0x49e880 _wcsdup
0x49e884 _vsnprintf
0x49e888 _except_handler3
0x49e88c _wcsicmp
0x49e890 vfwprintf
0x49e894 _vscwprintf
0x49e898 fflush
0x49e89c _wfopen
0x49e8a0 wprintf
0x49e8a4 _fileno
0x49e8a8 _iob
0x49e8ac vwprintf
0x49e8b0 _setmode
0x49e8b4 fclose
0x49e8b8 _stricmp
0x49e8bc wcsrchr
0x49e8c0 wcschr
0x49e8c4 wcsstr
0x49e8c8 strtoul
0x49e8cc _wcsnicmp
0x49e8d0 _vscprintf
0x49e8d4 memmove
0x49e8d8 strncmp
0x49e8dc malloc
0x49e8e0 _msize
0x49e8e4 strcspn
0x49e8e8 realloc
0x49e8ec fgetws
0x49e8f0 wcstoul
0x49e8f4 strchr
0x49e8f8 wcstol
0x49e8fc wcsncmp
0x49e900 _wcstoui64
0x49e904 towupper
0x49e908 _wpgmptr
0x49e90c strstr
0x49e910 _strcmpi
0x49e914 strtol
0x49e918 getchar
0x49e91c memset
0x49e920 memcpy
0x49e924 __wgetmainargs

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
Vhkiwih<
tSVVVh
D$ 9l$0
t79~ht29~dt-9~`t(V
QVWj\S
QSVWjdj@
PPWShX
PPWSh0
@PPWSh
PQQWSh@
F$PPWSh
@PPWSh
F,PPWSh
v4WShd
vTWSh4
QSVWjTj@
PPWSh0
PQQWSh@
F PPWSh
@PPWSh
v,WShd
vDWSh4
UPPWSh
KDBMV9Y
KSSMu^
94r=9Y
SVWj<j@
s/j j@
PPVSh@
PPPVSh
G,PPVSh
Y]^[YY
PPWSh0
PPWShd
jLXPj@
tbSVSSj
tRWWVPj
tRWWVPj
jDh`YO
jDhPYO
|USj h4
WShD"K
PPWSh`"K
F(YPPW
F,YPPW
t7j(j@
[ShL(K
PPWShp(K
PRRWSh8)K
PRRWSh
SVWj$j@
]Uhl*K
SPPWUhp(K
WUh +K
WUhT+K
VPPSUh`"K
G\PPSUh0,K
G`PPSUh
LPPSUh
GpPPSUh -K
GxPPSUhp-K
tTjPj@
UPPVSh`.K
UPPWSh`.K
PPWSh$/K
PRRWSh`/K
F PPWSh
F$PPWSh
PRRWSh
F,PPWSh\0K
F0PPWSh
9u u19E
ts9] tnP
QQSVW3
sPh`=K
D$Dhp>K
D$Dht>K
D$DPWV
sPh`=K
QSVWjHj@
UPPWSh`"K
PPWSh(@K
PPWShx@K
PPPWSh
PPWShhAK
F PPWSh
PPPWSh
WShTBK
YYWSh<CK
YYWShtCK
>RSA2W
DSS4uN
QSVWj@j@
SPPWUh
PPWUh(EK
PPWUhxEK
PPPWUh
PPWUhhFK
WUhDGK
PPVShxHK
PPVShPIK
PPPVSh
t(Sh<JK
u"PPhXJK
ItpItTIt?
tLIt0IIt
t9Jt!JJuB
tPWWWj
98t1WWWj
9MDMPu
t$hSh8
LSVWjD_
t:Ht!HugW
PVVSQV
PVVSVVVQVV
PVVSVVVQV
+7FVj@
f9D$Pu
L$$#L$4
+7FFVj@
PVhp]K
9regfuA9Y
9hbinu.
CL@@Pj@
pLt=;7
6SSSSS
u)9u$t5
uVPPh8pK
%PPhPqK
PPh0rK
tUSWh,uK
u.SWh<uK
SWhLuK
SShtvK
SVh$wK
9]0tWS
j hxZO
FVWWWW
t!PPhP
PSSSSSSSSj
YYVVVVV
t WWVPj
tFVj@
t VVSPj
t SSWPj
~3FVj@
CW8F*t
8HQu28HRu-9
.tPj0Z;
\$,+\$
D$(j HP
tD9D$(u>9D$
t$<9D$
t%:D$#u
F9t$ u3
^[_]YY
HtUHtB
r7;~8u
;V<t-9F$u(9F4
u^8OPt
GL9GL~
9t$4uw
t>9t$@u8
</t6<\t2
t"j}H3
;{Tt2WV
0;w`Y|
0C;^`|
9_(t<8_
u!9CXt
N<99t7
O(;Hpt
u;{4s
!GH!GL
0;F`Y|
up8_+u
Q<YY9}
;CDuBj
_^;CDt
Vf9C(up
ul9^Dt%
u.8^+t%
F8WUPW
w AA^@;
;^,v(h"
:FEth7
E *E$jL
t19w@u,
Q0+A(;
98^Dt#
=8_Dt.
;X<rSf
;G$u f
9G,u:S
VW;X,v
t4PVhH
H$~O9]
\$,9t
9D$ }o
D$09D$
s @9D$
;\$0sm
L$D;L$<|
L$@;L$8v
D{3VWj
AtGIIt<It2It(
SVWj8Yj8
uJ9D$$u
_,9_(t
u+9_(t
_,9_$|(
CD#F(_[Y
ItxItaItDIt
Ht{Hte
!t$p!T$t
D$("D$,
D$,$.<
D$($.<
D$,,t-
D$(,t)j
|$(;C
|$,B;T$D
L$$+L$Lf
F:;D$D
8EYYuW
D$D;D$<v
D$$9D$,u?P
L$L~T3
~j9K0u
D$0$.<
|Q9|$l|
9|$$u,
r,;t$du
t$0~!j
D$$9T$$|
D$$(G;~
P,9N$~
D$(9\$
tD9~(t
D$()D$
59D$4t
9D$ u8
D$DYY;F
@u#QRV
D$DNQC
D$ 9D$(
YY_^[]
<+unSUW
C|"f9A
u9p<u
t$,jZV
G,PRjFS
D$ PSW
D$$_^[
D$8_^[
t$ jNW
Gl@@PVj/W
f;G*}/!E
D$,Y_^[
tC!T$|R
G2PjFS
@M:CNt
0t+VPhx,J
9^8u$9^
f;G*}D
Y9s<t4
YYF;s8|
C*@;At~
f;F*}2
YFf;C*Y}p
f;F4s&
F0PRWWWS
f;C2sR
f;A*}-
Y9~8tW
f!HN_^[
f;G*}3
f;C2rL
f;F*}-
F2GG9E
Y_^[Y]
QQSVW3
f;F2se
tX9~HV
98ZLu4
D$@9w$
u9_pu
G,PSjF
G,PSjI
D$h+D$
D$l+D$
t$`j\V
\$$9C8
D$4+D$
9D$(tB
t$0j$V
t$8jZV
t$hj)V
f;C*}F
$;Fl}!
t'9s$t
u'9|$$uH
9\$ s8
T$$9t$$
t&)\$
|$$9t$$
T$$t A<
D$0Pj2
D$0Pj2
D$ ;D$
QQVWj
QQVWj
[WWWWW
WWWWWU
u!9Clu
|:f;N(t4
f;A2si
9p$u9VVVVS
HlAAQSj.P
t);F u
f;F4sL
C,PRjFV
59O8u
f;G*YY}r!E
D$H9t$L
Ht}HtsHtwHHt
t$<Vj3
D$HYYH
9t$0u.
u%9\$0t
L$<9^$t-
9\$8up9^
uk9t$ ue
D$ 9D$$tF
f;A2s8
t$<9D$(
D$0;D$$u%
D$49D$
QlBBRPj2Q
F2Sf9G2t
O6:N6u
F*f;A*
~(f;y(
F,;G,u
t$ NVS
t+h8#J
SVWj>3
f;C2s8
D$ YYW
~:VW8Z
Q,9P,u
;^p~=h
ItvIt3IIt/
YYh: A
G(RPjp
u Pj1S
WWWjVV
t'<mt#
C$ t'3
9x4ty9x0
YY_^[Y]
D$$PWWW
\$`9D$$t*9D$(t$
~F9D$$u@
9T$hu&
8XQu]W
Y9^$uD
YY9^$u+
D$`PWS
Y9t$Xtb;
9p(u.9p,u)
D$$Vj\
D$XPRjt
u!9t$8u
t$$jZW
t$4@PjWW
t$Pj/W
t$\jBS
t$Hj/S
t$DjBS
t$djBS
t$XjBS
H0f;K.}
t$ j]V
t$,juV
{,WRjF
D$ 9D$
W;KHt?
9}$t"9y
t*9{pu%8K
C,PWjF
f;G*}j!E
f;G*}5
CSWjQV
f;H*}_
@$ u6W
f;H*}5!M
8XQup9Z
uk9Z8uf9^
@f9A2t
9S8tm;
QQSVW3
VL#H(#P,
QQSVW3
N,#CH#KL
Fl@@Pj
f;G2s2
N,#CH#KL
N,#CH#KL
y(9G8t
f;F2s43
YY_^[Y
f;CHuE
f;4Yu"
f;F2sH
IluM9M
x*j?Xf;
f;8tbC@@;
f;~2s0
#C #S$
C 9V t$
OWQVPS
OD#B8#J<
G,u(9E
@u|f9M
uvjaX8K1t
I$Pj/S
HYt-Hu<
jLZjZXjUYjY_j\
F0P@PjmW
@@PWj9V
G@@PjSS
w@VjOS
PPPjRS
FP@@PRjZW
HtYHt+
Hlt AAQ
<Vtf<Zt
Xuf<Xu
tt9~4t:
WWWWWWP
WWWWWWP
PPhT"J
PWWPh,"J
D$89D$0w
YY9{hu
tYHt6HHt
C9u,t*Vj
<=t}<&ty
YY_^[t
CD;C@t
CD;C@t
D$$hikF
YYVUj!
D$<Ph,!L
D$PSSh4!L
SShp!L
D$lPhp"L
D$tPhx"L
D$pPh|"L
D$ PhL#L
t$ hd#L
89\$0uI
Y9\$Pt
PPhp-L
PSSh 51
D$(PSS
t1h 9L
tPh`:L
D$,PSS
YSSh8CL
t$$hDCL
D$8PhPCL
D$ PhtCL
D$(VWP
YY9|$$t
jLXPj@f
tNj{Yf
t1h|FL
D$8Ph0HL
t$8hXHL
#t$$QV
D$\PhlLL
WWh4<L
uFhXOL
t49] t/
D$,Ph0HL
u8WWhp!L
|$,9|$,t
t$,hXHL
tdhPIL
Y9|$4u
tYVhhUL
D$,PhtCL
YY9|$$t
t"h,WL
t'hTWL
D$,_^[
QSVh$YL
uoj$j@
QSVWh`[L
|QSj h4
0PhHkL
VPhhuL
t;hP|L
t7WPhD}L
tM9u tH
t>Gj.W
W=PCPM
RVVVVVVh0
T$ RVj0h
T$@RVh
T$@RVh
T$@RVhX
T$@RVh
T$@RVh
T$@RVh(
E@j(P3
]xVVh8
EXPhLuK
Y9uLtJht
|J9ul|;
YY9udt3
D$pPhd
D$@Pht
D$<Ph vK
D$8PhLuK
D$dPh<<L
FYY;t$
YY9\$4t
ti9\$ht&
9\$$t$9\$
T$$RQP
YYjdj@
ItIIt5It%
u%j(j@
CYYf;^
jDhx[O
QVRPh0
YY9u$t
QQSVW3
t>WVhP
VVVVVW
jXhH[O
ta=RSA2tS=ECK2t
=ECS2t
=RSA3t7=ECK4
=DSS4u
=RSA2u
=DSS2u
=ECKVty=DHPVth=DSPVtW=
QQSVW3
tNhP"M
t-WWWj
tDWh4,M
t Wh\,M
D$ PWVh
D$$PVV
D$(PWV
PVShT]M
PQh(^M
PPh(_M
SShTjM
ujSSh|kM
|Xh4pM
YYhDpM
YYhTqM
VVhTjM
SPh@wM
WWhDxM
t$$h<yM
t$$h<zM
WWhDxM
|'h8{M
|'hP{M
}EVhh{M
ElPh0HL
D$@WP3
D$PWP3
QQSVW3
Sj*j*h
D$@PVVVV
D$PAAAA
D$`BBBB
D$pCCCC
t$0Sh8
D$,+D$
D$lHjM
D$pJJJJ
t$8Vh8
D$ j(P
YY9t$(
D$LAAAA
D$\BBBB
D$LAAAA
D$\BBBB
Ht HuL
VVVVVh
SVh$uL
FVVhtvK
uxVVj*
FVVhtvK
PVVVVVVV
t(h(nJ
QPhDCL
YYC;]$r
YYC;]dr
YYC;]dr
_[9uht
ItMItCIt9It/
,Y;D$(
HtaHtWHtMHtC
D$8Ph<uK
D$DPh8
t$$Vhl
D$0PSh
9\$,t j
VVVVVh
f90t'Ph
PWWWWVW3
|SVWjH^V3
D$$Ph0
D$,9|$
D$DPWWh
D$T8\$
t$$h(N
+VVhpN
sDSWSWh
t$ h@#N
SShh'N
VVh0(N
PPRQVh
QSUVWj
D$8PVVV
\$,VVV
t7h4?N
t%Ph@AN
YWWh<CN
WWhdCN
YYWWVh
YPhHDN
HtFHt7HHu0
PPh(SN
PWhP[N
F PhhcN
YYhD(K
YYh0mN
VVh,nN
VVhHnN
?Ph<rN
t h,xN
t h@xN
D$HPhpxN
tSVhP|N
|$89|$L
Y9|$Dt8
D$@PWW
Y9|$Dt8
Y9|$ u
D$(8;D$,
tNIt9It
SShTjM
PVVVVV
PVVVVV
9\$`vP
YYC;\$`r
9\$`vM
Y9t$dv
FYY;t$dr
Y;D$`r
F;t$`r
]LSSh8
YY9]Tu?S
PSSVW3
SVu:hP
VPh@wM
VPh@wM
tpj{Yf
QS@@SP
{J}uJjLXf
Xpf;Hn
tNG;~0r
j!X+D$
D$(SSh
D$$9\$
u(9\$8u
9\$0t`SSh
9\$(tcSSh
9\$$t,h
9\$0t hH
||9\$$t"hx
|N9\$ t
v 9^4t
vDVWhd
D$rPj@
HtSHt1h
p<VWhX
pTVWh
pXVWhh
pdVWhH
QQVWh@
t$pVh:
uRhh>K
uGhh>K
u4hh"O
PPPPhH
%33333
%33333
|UVj h
|nVj ht
j0h8[O
}fhh/O
D$$;D$,
D$ _^[
thh,5O
D$8VP3
D$TVP3
D$8VP3
D$LVP3
D$$_^[
D$@Ph0
Y9t$(u
D$HPh,
D$TPj8
9t$4tz9t$
D$8PSj
L$(QPP
@W@Pj@
HtBHt3Ht
HtMHt5Ht&Ht
tDj0j@
u/RRRhH
D$0T#L
t$ThPSO
QSVjdj@
u/PPPhX
9QhB`I
0W;1u!
u0SSSh\
;L$4u?
;D$8u69\$Lu
9\$\t$
0WWWWW
AAFFf;
0WWWWW
AAFFf;
AAf91u
URPQQh
<xtM<XtI
YSSSSS
HHtXHHt
>If90t
HHtXHHt
jd^j-Xf;
tPjXYf;
ou1j8Xf;
UQPXY]Y[
<+t(<-t$:
+t HHt
bcrypt.dll
ncrypt.dll
Invalid parameter passed to C runtime function.
(null)
```hhh
xppwpp
%04hu%02hu%02hu%02hu%02hu%02huZ
012345678.F? !!
NTPASSWORD
LMPASSWORD
NTPASSWORDHISTORY
LMPASSWORDHISTORY
!@#$%^&*()qwertyUIOPAzxcvbnmQQQQQQQQQQQQ)(*@&%
0123456789012345678901234567890123456789
|{VT,SG,ST,PD,TS}-BA-IS-BS-SG-SN+
{921BB3E1-15EE-4bbe-83D4-C4CE176A481B}
RUUUg`F
3.30.1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
******""""""""""""""""""""
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
&&&&&&&&&&
BINARY
'0123456789ABCDEF0123456789abcdef
Mb@?-C
>thstndrd
SQLite format 3
 !!""##$$%%&&''(())**++,,--..//00112233445566778899
0123456789ABCDEF
onoffalseyestruextrafull
naturaleftouterightfullinnercross
row_number
dense_rank
percent_rank
cume_dist
last_value
nth_value
first_value
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCLUDELETEMPORARYISNULLSAVEPOINTERSECTIESNOTNULLIKEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSCONSTRAINTOFFSETRIGGEREFERENCESUNIQUERYWITHOUTERELEASEATTACHAVINGLOBEGINNERANGEBETWEENOTHINGROUPSCASCADETACHCASECOLLATECREATECURRENT_DATEIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTUPDATEVALUESVIRTUALASTWHENWHERECURSIVEAFTERENAMEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPARTITIONDEFERREDISTINCTDROPRECEDINGFAILIMITFILTEREPLACEFIRSTFOLLOWINGFROMFULLIFORDERESTRICTOTHERSOVERIGHTROLLBACKROWSUNBOUNDEDUNIONUSINGVACUUMVIEWINDOWBYINITIALLYPRIMARY
':)xC!
ED~Myw
%raaUW
CABINET
%s_%02d.cab
No error
Failure opening file to be stored in cabinet
Failure reading file to be stored in cabinet
Insufficient memory in FCI
Could not create a temporary file
Unknown compression type
Could not create cabinet file
Client requested abort
Failure compressing data
Unknown error
NCryptKeyDerivation
NgcSignWithSymmetricPopKey
CryptProtectMemory
CryptUnprotectMemory
IUMDATAPROTECT
1.2.840.113556.1.4.27
1.2.840.113556.1.4.135
1.2.840.113556.1.4.129
1.2.840.113556.1.4.125
1.2.840.113556.1.4.160
1.2.840.113556.1.4.55
1.2.840.113556.1.4.94
1.2.840.113556.1.4.90
-----BEGIN %s-----
%s-----END %s-----
\pipe\spoolss
ncacn_np
private
shared
warning message
notification message
file is not a database
column index out of range
authorization denied
bad parameter or other API misuse
datatype mismatch
constraint failed
locking protocol
unable to open database file
database or disk is full
unknown operation
database disk image is malformed
disk I/O error
interrupted
attempt to write a readonly database
database table is locked
database is locked
query aborted
access permission denied
SQL logic error
not an error
frame ending offset must be a non-negative number
frame starting offset must be a non-negative number
frame ending offset must be a non-negative integer
frame starting offset must be a non-negative integer
regexp
detail
notused
comment
opcode
UTF-16
UTF16be
UTF16le
UTF-16be
UTF-16le
truncate
persist
delete
writable_schema
wal_checkpoint
wal_autocheckpoint
user_version
threads
temp_store_directory
temp_store
table_xinfo
table_info
synchronous
soft_heap_limit
shrink_memory
short_column_names
secure_delete
schema_version
reverse_unordered_selects
recursive_triggers
read_uncommitted
quick_check
query_only
pragma_list
page_size
page_count
optimize
module_list
mmap_size
max_page_count
locking_mode
legacy_file_format
legacy_alter_table
journal_size_limit
journal_mode
integrity_check
index_xinfo
index_list
index_info
incremental_vacuum
ignore_check_constraints
function_list
fullfsync
full_column_names
freelist_count
foreign_keys
foreign_key_list
foreign_key_check
encoding
empty_result_callbacks
defer_foreign_keys
database_list
data_version
data_store_directory
count_changes
compile_options
collation_list
checkpoint_fullfsync
cell_size_check
case_sensitive_like
cache_spill
busy_timeout
automatic_index
auto_vacuum
application_id
timeout
cache_size
status
database
builtin
checkpointed
parent
partial
origin
unique
hidden
dflt_value
notnull
on_delete
on_update
coalesce
group_concat
substr
zeroblob
replace
total_changes
changes
last_insert_rowid
sqlite_log
sqlite_source_id
sqlite_version
nullif
randomblob
random
ifnull
unicode
printf
length
typeof
likely
likelihood
unlikely
sqlite_compileoption_get
sqlite_compileoption_used
load_extension
RELEASE
sqlite_attach
sqlite_detach
stat_get
stat_push
stat_init
sqlite_stat3
sqlite_stat4
tbl,idx,stat
sqlite_stat1
sqlite_rename_test
sqlite_rename_table
sqlite_rename_column
FOREIGN KEY
UNIQUE
NOT NULL
win32-longpath-none
win32-none
win32-longpath
FlushViewOfFile
UuidCreateSequential
UuidCreate
InterlockedCompareExchange
CreateFileMappingFromApp
GetProcessHeap
OutputDebugStringW
OutputDebugStringA
GetNativeSystemInfo
GetTickCount64
LoadPackagedLibrary
CreateFile2
MapViewOfFileFromApp
GetFileInformationByHandleEx
SetFilePointerEx
WaitForSingleObjectEx
WaitForSingleObject
CreateEventExW
WriteFile
WideCharToMultiByte
UnmapViewOfFile
UnlockFileEx
UnlockFile
SystemTimeToFileTime
SetFilePointer
SetEndOfFile
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MapViewOfFile
LockFileEx
LockFile
LocalFree
LoadLibraryW
LoadLibraryA
HeapCompact
HeapValidate
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExW
GetVersionExA
GetTickCount
GetTempPathW
GetTempPathA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetProcAddressA
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileSize
GetFileAttributesExW
GetFileAttributesW
GetFileAttributesA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetCurrentProcessId
FreeLibrary
FormatMessageW
FormatMessageA
FlushFileBuffers
FileTimeToSystemTime
FileTimeToLocalFileTime
DeleteFileW
DeleteFileA
CreateMutexW
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateFileA
CloseHandle
CharUpperW
CharLowerW
AreFileApisANSI
Abortable
Explain
CursorHint
MaxPgcnt
Pagecount
VRename
VColumn
VDestroy
VCreate
VBegin
TableLock
Expire
AggFinal
AggValue
AggStep1
AggStep
AggInverse
OffsetLimit
MemMax
FkCounter
RowSetAdd
IntegrityCk
DropTrigger
DropIndex
DropTable
LoadAnalysis
ParseSchema
SqlExec
CreateBtree
ResetSorter
Destroy
IdxRowid
DeferredSeek
IdxDelete
IdxInsert
SorterInsert
SeekEnd
NullRow
RowData
SorterData
SorterCompare
ResetCount
Delete
Insert
NewRowid
Sequence
SeekHit
ColumnsUsed
OpenPseudo
SequenceTest
SorterOpen
String8
OpenEphemeral
OpenAutoindex
BitNot
OpenDup
Concat
Remainder
Divide
Multiply
Subtract
ShiftRight
ShiftLeft
BitAnd
OpenWrite
OpenRead
ReopenIdx
SetCookie
ReadCookie
MakeRecord
Affinity
Column
Offset
IsTrue
Compare
Permutation
RealAffinity
AddImm
CollSeq
ResultRow
IntCopy
Variable
SoftNull
String
Integer
HaltIfNull
EndCoroutine
Return
Function
PureFunc
Function0
PureFunc0
IncrVacuum
ElseNotEq
NotNull
IsNull
DecrJumpZero
IfNotZero
FkIfZero
Program
RowSetTest
RowSetRead
Rewind
SorterSort
IfSmaller
NotExists
SeekRowid
NotFound
NoConflict
IfNoHope
SeekGT
SeekGE
SeekLE
SeekLT
IfNullRow
MustBeInt
InitCoroutine
VUpdate
VFilter
Vacuum
JournalMode
Checkpoint
SorterNext
Transaction
AutoCommit
Savepoint
current_date
current_timestamp
current_time
strftime
datetime
julianday
minute
second
USE_ALLOCA
UNTESTABLE
THREADSAFE=0
OMIT_TRUNCATE_OPTIMIZATION
OMIT_TCL_VARIABLE
OMIT_SHARED_CACHE
OMIT_PROGRESS_CALLBACK
OMIT_OR_OPTIMIZATION
OMIT_LOCALTIME
OMIT_LIKE_OPTIMIZATION
OMIT_DEPRECATED
OMIT_DECLTYPE
OMIT_BETWEEN_OPTIMIZATION
MAX_EXPR_DEPTH=0
LIKE_DOESNT_MATCH_BLOBS
DISABLE_INTRINSIC
DEFAULT_WAL_SYNCHRONOUS=1
COMPILER=msvc-1500
20b:20e
20c:20e
40f-21a-21d
unixepoch
weekday
start of
%04d-%02d-%02d %02d:%02d:%02d
%02d:%02d:%02d
%04d-%02d-%02d
%06.3f
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
(NULL)
922337203685477580
API call with %s database connection pointer
unopened
invalid
OsError 0x%lx (%lu)
os_win.c:%d: (%lu) %s(%s) - %s
delayed %dms for lock/sharing conflict at line %d
winSeekFile
winClose
winRead
winWrite1
winWrite2
winTruncate1
winTruncate2
winSync1
winSync2
winFileSize
winUnlockReadLock
winUnlock
winLockSharedMemory
%s-shm
readonly_shm
winOpenShm
winShmMap1
winShmMap2
winShmMap3
winUnmapfile1
winUnmapfile2
winMapfile1
winMapfile2
etilqs_
winGetTempname1
winGetTempname2
winGetTempname3
winGetTempname4
winGetTempname5
winOpen
winDelete
winAccess
%s%c%s
winFullPathname1
winFullPathname2
winFullPathname3
winFullPathname4
recovered %d pages from %s
-journal
nolock
immutable
recovered %d frames from WAL file %s
cannot limit WAL size: %s
:memory:
invalid page number %d
2nd reference to page %d
Failed to read ptrmap key=%d
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
failed to get page %d
freelist leaf count too big on page %d
overflow list length
%s is %d but should be %d
Page %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
free space corruption
On tree page %d cell %d:
On page %d at right child:
Offset %d out of range %d..%d
Extends off end of page
Rowid %lld out of order
Child page depth differs
Multiple uses for byte %u of page %d
Fragmentation of %d bytes reported as %d on page %d
Main freelist:
max rootpage (%d) disagrees with header (%d)
incremental_vacuum enabled with a max rootpage of zero
Page %d is never used
Pointer map page %d is referenced
unknown database %s
destination database is in use
source and destination must be distinct
%!.15g
BINARY
,%s%s%s
(%.20s)
%s(%d)
(blob)
vtab:%p
program
%s-mjXXXXXX9XXz
MJ delete: %s
MJ collide: %s
-mj%06X9%02X
FOREIGN KEY constraint failed
non-deterministic function in index expression or CHECK constraint
API called with finalized prepared statement
API called with NULL prepared statement
string or blob too big
bind on a busy prepared statement: [%s]
'%.*q'
zeroblob(%d)
%s constraint failed
%z: %s
abort at %d in [%s]: %s
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot release savepoint - SQL statements in progress
cannot commit transaction - SQL statements in progress
cannot start a transaction within a transaction
cannot rollback - no transaction is active
cannot commit - no transaction is active
database schema has changed
sqlite_master
SELECT*FROM"%w".%s WHERE %s ORDER BY rowid
too many levels of trigger recursion
out of
cannot change %s wal mode from within a transaction
statement aborts at %d: [%s] %s
out of memory
integer
cannot open value of type %s
no such rowid: %lld
cannot open virtual table: %s
cannot open table without rowid: %s
cannot open view: %s
no such column: "%s"
foreign key
indexed
cannot open %s column for writing
excluded
misuse of aliased aggregate %s
misuse of aliased window function %s
row value misused
double-quoted string literal: "%w"
no such column
ambiguous column name
%s: %s.%s.%s
%s: %s.%s
%s: %s
partial index WHERE clauses
index expressions
CHECK constraints
%s prohibited in %s
the "." operator
second argument to likelihood() must be a constant between 0.0 and 1.0
not authorized to use function: %s
non-deterministic functions
%s() prohibited in triggers and views
%.*s() may not be used as a window function
window
aggregate
misuse of %s function %.*s()
no such function: %.*s
wrong number of arguments to function %.*s()
FILTER may not be used with non-aggregate %.*s()
subqueries
parameters
%r %s BY term out of range - should be between 1 and %d
too many terms in ORDER BY clause
%r ORDER BY term does not match any column in the result set
too many terms in %s BY clause
a GROUP BY clause is required before HAVING
aggregate functions are not allowed in the GROUP BY clause
too many arguments on function %T
variable number must be between ?1 and ?%d
too many SQL variables
%d columns assigned %d values
too many columns in %s
_ROWID_
USING ROWID SEARCH ON TABLE %s FOR IN-OPERATOR
USING INDEX %s FOR IN-OPERATOR
sub-select returns %d columns - expected %d
REUSE LIST SUBQUERY %d
CORRELATED
%sLIST SUBQUERY %d
REUSE SUBQUERY %d
%sSCALAR SUBQUERY %d
hex literal too big: %s%s
misuse of aggregate: %s()
unknown function: %s()
RAISE() may only be used within a trigger-program
sqlite_
table %s may not be altered
SELECT 1 FROM "%w".%s WHERE name NOT LIKE 'sqliteX_%%' ESCAPE 'X' AND sql NOT LIKE 'create virtual%%' AND sqlite_rename_test(%Q, sql, type, name, %d)=NULL
SELECT 1 FROM temp.%s WHERE name NOT LIKE 'sqliteX_%%' ESCAPE 'X' AND sql NOT LIKE 'create virtual%%' AND sqlite_rename_test(%Q, sql, type, name, 1)=NULL
there is already another table or index with this name: %s
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_table(%Q, type, name, sql, %Q, %Q, %d) WHERE (type!='index' OR tbl_name=%Q COLLATE nocase)AND name NOT LIKE 'sqliteX_%%' ESCAPE 'X'
UPDATE %Q.%s SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
sqlite_sequence
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE sqlite_temp_master SET sql = sqlite_rename_table(%Q, type, name, sql, %Q, %Q, 1), tbl_name = CASE WHEN tbl_name=%Q COLLATE nocase AND sqlite_rename_test(%Q, sql, type, name, 1) THEN %Q ELSE tbl_name END WHERE type IN ('view', 'trigger')
Cannot add a PRIMARY KEY column
Cannot add a UNIQUE column
Cannot add a REFERENCES column with non-NULL default value
Cannot add a NOT NULL column with default value NULL
Cannot add a column with non-constant default
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
virtual tables may not be altered
Cannot add a column to a view
sqlite_altertab_%s
virtual table
cannot rename columns of %s "%s"
UPDATE "%w".%s SET sql = sqlite_rename_column(sql, type, name, %Q, %Q, %d, %Q, %d, %d) WHERE name NOT LIKE 'sqliteX_%%' ESCAPE 'X' AND (type != 'index' OR tbl_name = %Q) AND sql NOT LIKE 'create virtual%%'
UPDATE temp.%s SET sql = sqlite_rename_column(sql, type, name, %Q, %Q, %d, %Q, %d, 1) WHERE type IN ('trigger', 'view')
after rename
error in %s %s%s: %s
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE %s=%Q
sqlite\_%
unordered*
sz=[0-9]*
noskipscan*
SELECT tbl,idx,stat FROM %Q.sqlite_stat1
too many attached databases - max %d
database %s is already in use
database is already attached
attached databases must use the same text encoding as main database
unable to open database: %s
no such database: %s
cannot detach database %s
database %s is locked
%s %T cannot reference objects in database %s
%s cannot use variables
authorizer malfunction
access to %z is prohibited
not authorized
sqlite_temp_master
pragma_
no such view
no such table
corrupt database
unknown database %T
object name reserved for internal use: %s
temporary table name must be unqualified
table %T already exists
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
INTEGER
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
CREATE TABLE
AUTOINCREMENT not allowed on WITHOUT ROWID tables
PRIMARY KEY missing on table %s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE TABLE %Q.sqlite_sequence(name,seq)
tbl_name='%q' AND type!='trigger'
parameters are not allowed in views
view %s is circularly defined
corrupt schema
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
sqlite_stat%d
DELETE FROM %Q.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
unsupported use of NULLS %s
cannot create a TEMP index on non-TEMP table "%s"
table %s may not be indexed
views may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
expressions prohibited in PRIMARY KEY and UNIQUE constraints
conflicting ON CONFLICT clauses specified
invalid rootpage
UNIQUE
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
name='%q' AND type='index'
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
too many FROM clause terms, max: %d
a JOIN clause is required before %s
ROLLBACK
COMMIT
unable to open a temporary database file for storing temporary tables
index '%q'
%s.rowid
unable to identify the object to be reindexed
duplicate WITH table name: %s
no such collation sequence: %s
table %s may not be modified
cannot modify %s because it is a view
rows deleted
integer overflow
LIKE or GLOB pattern too complex
ESCAPE expression must be a single character
%!.20e
foreign key mismatch - "%w" referencing "%w"
table %S has no column named %s
table %S has %d columns but %d values were supplied
%d values for %d columns
UPSERT not implemented for virtual table "%s"
rows inserted
sqlite3_extension_init
unable to open shared library [%s]
sqlite3_
no entry point [%s] in shared library [%s]
error during initialization: %s
automatic extension loading failed: %s
exclusive
normal
incremental
memory
temporary storage cannot be changed from within a transaction
SET NULL
SET DEFAULT
CASCADE
RESTRICT
NO ACTION
not a writable directory
Safety level may not be changed inside a transaction
issisii
issisi
iissssss
*** in database %s ***
NULL value in %s.%s
CHECK constraint failed in %s
missing from index
non-unique entry in index
wrong # of entries in index
unsupported encoding: %s
restart
ANALYZE "%w"."%w"
CREATE TABLE x
%c"%s"
,arg HIDDEN
,schema HIDDEN
PRAGMA
malformed database schema (%s)
%z - %s
create
orphan index
CREATE TABLE x(type text,name text,tbl_name text,rootpage int,sql text)
unsupported file format
SELECT*FROM"%w".%s ORDER BY rowid
statement too long
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
UNION ALL
INTERSECT
EXCEPT
USE TEMP B-TREE FOR %s
column%d
%.*z:%u
cannot use window functions in recursive queries
recursive aggregate queries not supported
RECURSIVE STEP
SCAN %d CONSTANT ROW%s
ORDER BY
%s clause should come after %s not before
COMPOUND QUERY
LEFT-MOST SUBQUERY
%s USING TEMP B-TREE
all VALUES must have the same number of terms
SELECTs to the left and right of %s do not have the same number of result columns
MERGE (%s)
no such index: %s
'%s' is not a function
multiple references to recursive table: %s
circular reference: %s
table %s has %d values for %d columns
multiple recursive references: %s
recursive reference in a subquery: %s
subquery_%u
too many references to "%s": max 65535
access to view "%s" prohibited
%s.%s.%s
no such table: %s
no tables specified
too many columns in result set
DISTINCT aggregates must have exactly one argument
USING COVERING INDEX
SCAN TABLE %s%s%s
expected %d columns for '%s' but got %d
CO-ROUTINE %u
MATERIALIZE %u
DISTINCT
GROUP BY
RIGHT PART OF ORDER BY
sqlite3_get_table() called with two or more incompatible queries
temporary trigger may not have qualified name
trigger
cannot create triggers on virtual tables
trigger %T already exists
cannot create trigger on system table
BEFORE
cannot create %s trigger on view: %S
cannot create INSTEAD OF trigger on table: %S
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
type='trigger' AND name='%q'
no such trigger: %S
DELETE FROM %Q.%s WHERE name=%Q AND type='trigger'
-- TRIGGER %s
no such column: %s
rows updated
ON CONFLICT clause does not match any PRIMARY KEY or UNIQUE constraint
cannot VACUUM from within a transaction
cannot VACUUM - SQL statements in progress
non-text filename
ATTACH %Q AS vacuum_db
output file already exists
SELECT sql FROM "%w".sqlite_master WHERE type='table'AND name<>'sqlite_sequence' AND coalesce(rootpage,1)>0
SELECT sql FROM "%w".sqlite_master WHERE type='index'
SELECT'INSERT INTO vacuum_db.'||quote(name)||' SELECT*FROM"%w".'||quote(name)FROM vacuum_db.sqlite_master WHERE type='table'AND coalesce(rootpage,1)>0
INSERT INTO vacuum_db.sqlite_master SELECT*FROM "%w".sqlite_master WHERE type IN('view','trigger') OR(type='table'AND rootpage=0)
CREATE VIRTUAL TABLE %T
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
name='%q' AND type='table'
vtable constructor called recursively: %s
vtable constructor failed: %s
vtable constructor did not declare schema: %s
no such module: %s
<expr>
ANY(%s)
SEARCH
SUBQUERY %u
TABLE %s
AS %s
PRIMARY KEY
AUTOMATIC PARTIAL COVERING INDEX
AUTOMATIC COVERING INDEX
COVERING INDEX %s
INDEX %s
USING
>? AND rowid<
USING INTEGER PRIMARY KEY (rowid%s?)
VIRTUAL TABLE INDEX %d:%s
ON clause references tables to its right
too many arguments on %s() - max %d
automatic index on %s(%s)
auto-index
%s.xBestIndex malfunction
abbreviated query algorithm search
no query solution
at most %d tables in a join
SCAN CONSTANT ROW
second argument to nth_value must be a positive integer
argument of ntile must be a positive integer
no such window: %s
RANGE with offset PRECEDING/FOLLOWING requires one ORDER BY expression
FILTER clause may only be used with aggregate window functions
unsupported frame specification
PARTITION clause
ORDER BY clause
frame specification
cannot override %s of window: %s
DISTINCT is not supported for window functions
too many terms in compound SELECT
syntax error after column name "%.*s"
parser stack overflow
unknown table option: %.*s
set list
near "%T": syntax error
qualified table names are not allowed on INSERT, UPDATE, and DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
incomplete input
unrecognized token: "%.*s"
%s in "%s"
create
temporary
explain
unable to close due to unfinalized statements or unfinished backups
unknown error
abort due to ROLLBACK
another row available
no more rows available
unable to delete/modify user-function due to active statements
unable to use function %s in the requested context
unknown database: %s
unable to delete/modify collation sequence due to active statements
localhost
invalid uri authority: %.*s
access
no such %s mode: %s
%s mode not allowed: %s
no such vfs: %s
NOCASE
%s at line %d of [%.10s]
database corruption
misuse
cannot open file
no such table column: %s.%s
SQLITE_
2019-10-10 20:19:45 18db032d058f1436ce3dea84081f4ee5a0f2259ad97301d43c426bc7f3df1b0b
ncrypt.dll
bcrypt.dll
CPGenKey
CPDeriveKey
CPDestroyKey
CPSetKeyParam
CPGetKeyParam
CPExportKey
CPImportKey
CPEncrypt
CPDecrypt
CPDuplicateKey
1.3.6.1.4.1.311.20.2.3
2.5.29.17
2.5.29.15
2.5.29.37
2.5.29.14
2.5.29.35
2.5.29.31
2.5.29.19
1.2.840.113549.1.1.5
2.5.4.3
2.5.4.11
2.5.4.10
2.5.4.6
1.2.840.113549.1.1.11
1.3.14.3.2.29
1.3.6.1.5.5.7.3.2
1.3.6.1.4.1.311.20.2.2
OMNIKEY
<root>
CardAcquireContext
mimikatz
logins
select signon_realm, origin_url, username_value, password_value from logins
cookies
select host_key, path, name, creation_utc, expires_utc, encrypted_value from cookies order by host_key, path, name
select count(*) from sqlite_master where type='table' and name=?
%S%s%S
{"alg":"%s", "ctx":"%s"}
{"refresh_token":"%s", "is_primary":"true", "iat":"%ld"}
AppN_DN_Win
Hj1diQ6kpUx7VC4m
6jnkd5J3ZdQDtrsu
xT5rZW5qVVbrvpuA
RSA PRIVATE KEY
Kerberos
t{{t{i}t{i}t{
{t{{t{i}t{
t{{t{{{t{
}}}}}}
}t{{t{i}t{o}}}t{
t{{{t{i}t{
{{t{i}t{o}}}
{t{i}t{{
{t{i}t{o}}
PRIVATE KEY
SuppData
SamIConnect
SamrCloseHandle
SamIRetrievePrimaryCredentials
SamrOpenDomain
SamrOpenUser
SamrQueryInformationUser
SamIFree_SAMPR_USER_INFO_BUFFER
VirtualAlloc
memcpy
LocalAlloc
fwprintf
fclose
LockWorkStation
SystemParametersInfoW
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
ServerName
ServerFqdn
ServerNameUsedForAuthentication
UserSpecifiedServerName
UserName
Domain
Password
SmartCardReaderName
RDmiUsername
PasswordContainsSCardPin
VaultEnumerateItemTypes
VaultEnumerateVaults
VaultOpenVault
VaultGetInformation
VaultEnumerateItems
VaultCloseVault
VaultFree
VaultGetItem
1.2.840.113556.1.2.48
1.2.840.113556.1.4.133
1.2.840.113556.1.4.1964
1.2.840.113556.1.4.1998
1.2.840.113556.1.4.1965
1.2.840.113556.1.4.1999
1.2.840.113556.1.4.609
1.2.840.113556.1.4.146
1.2.840.113556.1.4.96
1.2.840.113556.1.4.159
1.2.840.113556.1.4.8
1.2.840.113556.1.4.302
1.2.840.113556.1.4.656
1.2.840.113556.1.4.221
1.2.840.113556.1.4.1
attributeID
attributeSyntax
systemFlags
2.5.4.0
1.2.840.113556.1.2.14
1.2.840.113556.1.2.36
1.2.840.113556.1.2.115
1.2.840.113556.1.4.307
1.2.840.113556.1.4.375
1.2.840.113556.1.4.515
1.2.840.113556.1.4.1459
1.2.840.113556.1.4.1820
1.2.840.113556.1.4.1836
CredentialKeys
Primary
mf?fffff
^@1|d^
BCryptOpenAlgorithmProvider
BCryptDestroyHash
BCryptKeyDerivation
BCryptHashData
BCryptFinishHash
BCryptGenerateSymmetricKey
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptDeriveKeyPBKDF2
BCryptCreateHash
BCryptGetProperty
BCryptEncrypt
BCryptDecrypt
BCryptSetProperty
BCryptImportKeyPair
BCryptExportKey
BCryptFreeBuffer
BCryptEnumRegisteredProviders
NCryptOpenStorageProvider
NCryptGetProperty
NCryptSetProperty
NCryptFinalizeKey
NCryptFreeObject
NCryptImportKey
NCryptOpenKey
NCryptDecrypt
NCryptFreeBuffer
NCryptEnumKeys
NCryptExportKey
NCryptSignHash
CryptSetHashParam
CryptGetHashParam
CryptExportKey
CryptAcquireContextW
CryptSetKeyParam
CryptGetKeyParam
CryptReleaseContext
CryptDuplicateKey
CryptAcquireContextA
CryptGetProvParam
CryptImportKey
SystemFunction007
CryptEncrypt
CryptCreateHash
CryptGenKey
CryptDestroyKey
CryptDecrypt
CryptDestroyHash
CryptHashData
CopySid
GetLengthSid
LsaQueryInformationPolicy
LsaOpenPolicy
LsaClose
CreateWellKnownSid
CreateProcessWithLogonW
CreateProcessAsUserW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
SystemFunction033
SystemFunction032
ConvertSidToStringSidW
CreateServiceW
CloseServiceHandle
DeleteService
OpenSCManagerW
SetServiceObjectSecurity
OpenServiceW
BuildSecurityDescriptorW
QueryServiceObjectSecurity
StartServiceW
AllocateAndInitializeSid
QueryServiceStatusEx
FreeSid
ControlService
IsTextUnicode
OpenProcessToken
GetTokenInformation
LookupAccountNameW
LookupAccountSidW
DuplicateTokenEx
CheckTokenMembership
CryptSetProvParam
CryptEnumProvidersW
ConvertStringSidToSidW
LsaFreeMemory
GetSidSubAuthority
GetSidSubAuthorityCount
IsValidSid
SetThreadToken
CryptEnumProviderTypesW
SystemFunction006
CryptGetUserKey
OpenEventLogW
GetNumberOfEventLogRecords
ClearEventLogW
SystemFunction001
CryptDeriveKey
SystemFunction005
LsaQueryTrustedDomainInfoByName
CryptSignHashW
LsaSetSecret
SystemFunction023
LsaOpenSecret
LsaQuerySecret
LsaRetrievePrivateData
LsaEnumerateTrustedDomainsEx
LookupPrivilegeValueW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
LookupPrivilegeNameW
OpenThreadToken
EqualSid
CredFree
CredEnumerateW
SystemFunction026
ConvertStringSecurityDescriptorToSecurityDescriptorW
SystemFunction027
SystemFunction041
CredIsMarshaledCredentialW
CredUnmarshalCredentialW
ADVAPI32.dll
Cabinet.dll
CryptStringToBinaryA
CertAddEncodedCertificateToStore
CertOpenStore
CertFreeCertificateContext
CertCloseStore
CryptStringToBinaryW
CertSetCertificateContextProperty
PFXExportCertStoreEx
CryptUnprotectData
CryptBinaryToStringW
CryptBinaryToStringA
CryptExportPublicKeyInfo
CryptFindOIDInfo
CryptAcquireCertificatePrivateKey
CertNameToStrW
CertFindCertificateInStore
CertGetCertificateContextProperty
CryptSignAndEncodeCertificate
CryptEncodeObject
CryptProtectData
CryptQueryObject
CertGetNameStringW
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertEnumCertificatesInStore
CertEnumSystemStore
CRYPT32.dll
CDLocateCheckSum
CDGenerateRandomBits
MD5Final
MD5Update
MD5Init
CDLocateCSystem
cryptdll.dll
DnsQuery_A
DnsFree
DNSAPI.dll
FilterFindFirst
FilterFindNext
FLTLIB.DLL
WNetCancelConnection2W
WNetAddConnection2W
MPR.dll
DsGetDcNameW
NetApiBufferFree
NetRemoteTOD
NetSessionEnum
NetServerGetInfo
DsEnumerateDomainTrustsW
NetShareEnum
NetStatisticsGet
NetWkstaUserEnum
NETAPI32.dll
ODBC32.dll
CoCreateInstance
CoUninitialize
CoInitializeEx
Antivirus Signature
Bkav W32.Common.83A3D373
Lionic Trojan.Win32.Mimikatz.i!c
Elastic Windows.Hacktool.Mimikatz
MicroWorld-eScan Trojan.Mimikatz.B
FireEye Generic.mg.d3b17ddf0b98fd24
CAT-QuickHeal HackTool.Mimikatz.S13719266
Skyhigh BehavesLike.Win32.HToolMimikatz.th
McAfee HTool-Mimikatz
Malwarebytes Mimikatz.Spyware.Stealer.DDS
VIPRE Trojan.Mimikatz.B
Sangfor HackTool.Win64.Mimikatz.uwccg
K7AntiVirus Riskware ( 0057fd7a1 )
BitDefender Trojan.Mimikatz.B
K7GW Riskware ( 0057fd7a1 )
Cybereason Clean
BitDefenderTheta Gen:NN.ZexaF.36608.cv0@a0UVOlli
VirIT Trojan.Win32.Genus.RTZ
Symantec Hacktool.Mimikatz
tehtris Clean
ESET-NOD32 a variant of Win32/RiskWare.Mimikatz.BC
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky Trojan-PSW.Win32.Mimikatz.gen
Alibaba TrojanPSW:Win32/Mimikatz.ca248c9f
NANO-Antivirus Trojan.Win32.Mimikatz.jsrits
ViRobot HackTool.S.Mimikatz.1084416
Rising HackTool.Mimikatz!1.B3A8 (CLASSIC)
Sophos ATK/Apteryx-Gen
Baidu Clean
F-Secure Trojan.TR/AD.Mimikatz.zuzcj
DrWeb Tool.Mimikatz.1231
Zillya Trojan.Mimikatz.Win32.1772
TrendMicro HackTool.Win32.Mimikatz.CNGG
Trapmine malicious.high.ml.score
CMC Clean
Emsisoft Trojan.Mimikatz.B (B)
Ikarus HackTool.Mimikatz
Jiangmin Trojan.PSW.Mimikatz.dsg
Webroot W32.Hacktool.Gen
Varist W32/Mimikatz.A.gen!Eldorado
Avira TR/AD.Mimikatz.zuzcj
MAX malware (ai score=100)
Antiy-AVL RiskWare/Win32.Mimikatz
Kingsoft Win32.PSWTroj.Undef.a
Microsoft HackTool:Win32/Mimikatz.D
Gridinsoft Risk.Win32.Mimikatz.bot
Xcitium ApplicUnwnt@#1rkmtnixm7hy6
Arcabit Trojan.Mimikatz.B
SUPERAntiSpyware Trojan.Agent/Gen-Mimikatz
ZoneAlarm Trojan-PSW.Win32.Mimikatz.gen
GData Trojan.Mimikatz.B
Google Detected
AhnLab-V3 Trojan/Win32.RL_Mimikatz.R364133
Acronis Clean
VBA32 BScope.TrojanPSW.Mimikatz
ALYac Trojan.Mimikatz.B
TACHYON Trojan-PWS/W32.Mimikatz.1084416
DeepInstinct MALICIOUS
Cylance unsafe
Panda HackingTool/Mimikatz
Zoner Clean
TrendMicro-HouseCall HackTool.Win32.Mimikatz.CNGG
Tencent Malware.Win32.Gencirc.13f73dc6
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.9460437.susgen
Fortinet Riskware/Mimikatz
AVG Win32:HacktoolX-gen [Trj]
Avast Win32:HacktoolX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.