Static | ZeroBOX

PE Compile Time

2020-02-29 19:13:28

PE Imphash

f1f5d7c44930a687e54a18242f91deb2

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000937dc 0x00093800 6.68726901908
.rdata 0x00095000 0x0004d46e 0x0004d600 4.33213505313
.data 0x000e3000 0x000041c8 0x00003800 3.58629292443
.rsrc 0x000e8000 0x00003fe8 0x00004000 6.54118483795
.reloc 0x000ec000 0x0000779e 0x00007800 6.53639273221

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000ebb50 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000ebb50 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000ebb50 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000ebfb8 0x00000030 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x000e8150 0x000003ac LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library ADVAPI32.dll:
0x495000 CryptSetHashParam
0x495004 CryptGetHashParam
0x495008 CryptExportKey
0x495010 CryptSetKeyParam
0x495014 CryptGetKeyParam
0x495018 CryptReleaseContext
0x49501c CryptDuplicateKey
0x495024 CryptGetProvParam
0x495028 CryptImportKey
0x49502c SystemFunction007
0x495030 CryptEncrypt
0x495034 CryptCreateHash
0x495038 CryptGenKey
0x49503c CryptDestroyKey
0x495040 CryptDecrypt
0x495044 CryptDestroyHash
0x495048 CryptHashData
0x49504c CopySid
0x495050 GetLengthSid
0x495058 LsaOpenPolicy
0x49505c LsaClose
0x495060 CreateWellKnownSid
0x49506c RegQueryValueExW
0x495070 RegQueryInfoKeyW
0x495074 RegEnumValueW
0x495078 RegOpenKeyExW
0x49507c RegEnumKeyExW
0x495080 RegCloseKey
0x495084 RegSetValueExW
0x495088 SystemFunction032
0x495090 CreateServiceW
0x495094 CloseServiceHandle
0x495098 DeleteService
0x49509c OpenSCManagerW
0x4950a4 OpenServiceW
0x4950b0 StartServiceW
0x4950bc FreeSid
0x4950c0 ControlService
0x4950c4 IsTextUnicode
0x4950c8 OpenProcessToken
0x4950cc GetTokenInformation
0x4950d0 LookupAccountNameW
0x4950d4 LookupAccountSidW
0x4950d8 DuplicateTokenEx
0x4950e0 CryptSetProvParam
0x4950e4 CryptEnumProvidersW
0x4950ec LsaFreeMemory
0x4950f0 GetSidSubAuthority
0x4950f8 IsValidSid
0x4950fc SetThreadToken
0x495104 SystemFunction006
0x495108 CryptGetUserKey
0x49510c OpenEventLogW
0x495114 ClearEventLogW
0x495118 SystemFunction001
0x49511c CryptDeriveKey
0x495120 SystemFunction005
0x495128 CryptSignHashW
0x49512c LsaOpenSecret
0x495130 LsaQuerySecret
0x495134 SystemFunction013
0x495148 SetServiceStatus
0x495154 OpenThreadToken
0x495158 CredFree
0x49515c CredEnumerateW
0x495160 SystemFunction025
0x495168 SystemFunction024
Library Cabinet.dll:
0x4951e4 None
0x4951e8 None
0x4951ec None
0x4951f0 None
Library CRYPT32.dll:
0x49517c CertEnumSystemStore
0x495188 CryptDecodeObjectEx
0x495190 CertOpenStore
0x495198 CertCloseStore
0x4951a4 CryptUnprotectData
0x4951b8 CryptFindOIDInfo
0x4951c0 CertNameToStrW
0x4951d0 CryptEncodeObject
0x4951d4 CryptProtectData
0x4951d8 CryptQueryObject
0x4951dc CertGetNameStringW
Library cryptdll.dll:
0x495758 MD5Init
0x49575c MD5Update
0x495760 MD5Final
0x495764 CDLocateCSystem
0x49576c CDLocateCheckSum
Library DNSAPI.dll:
0x4951f8 DnsFree
0x4951fc DnsQuery_A
Library FLTLIB.DLL:
0x495204 FilterFindFirst
0x495208 FilterFindNext
Library NETAPI32.dll:
0x495468 NetServerGetInfo
0x49546c NetStatisticsGet
0x495470 NetShareEnum
0x495478 DsGetDcNameW
0x49547c NetApiBufferFree
0x495480 NetRemoteTOD
0x495484 NetSessionEnum
0x495488 NetWkstaUserEnum
Library ole32.dll:
0x495960 CoInitializeEx
0x495964 CoUninitialize
0x495968 CoCreateInstance
Library OLEAUT32.dll:
0x495490 VariantInit
0x495494 SysFreeString
0x495498 SysAllocString
Library RPCRT4.dll:
0x4954ac NdrClientCall2
0x4954b0 RpcMgmtEpEltInqDone
0x4954c8 RpcBindingSetOption
0x4954d0 RpcBindingFree
0x4954d4 RpcStringFreeW
0x4954d8 RpcRevertToSelf
0x4954e0 MesHandleFree
0x4954e8 NdrMesTypeDecode2
0x4954f0 NdrMesTypeFree2
0x4954f4 NdrMesTypeEncode2
0x495504 RpcServerListen
0x49550c RpcEpRegisterW
0x495524 UuidToStringW
0x49552c RpcEpUnregister
0x495530 NdrServerCall2
0x495534 RpcEpResolveBinding
0x495538 UuidCreate
Library SHLWAPI.dll:
0x4955b8 PathIsDirectoryW
0x4955bc PathCanonicalizeW
0x4955c0 PathCombineW
0x4955c4 PathFindFileNameW
0x4955c8 PathIsRelativeW
Library SAMLIB.dll:
0x49554c SamGetGroupsForUser
0x495550 SamConnect
0x495558 SamRidToSid
0x495568 SamOpenGroup
0x495570 SamCloseHandle
0x495578 SamFreeMemory
0x495580 SamOpenUser
0x495590 SamOpenDomain
0x495594 SamOpenAlias
Library Secur32.dll:
0x4955d4 FreeContextBuffer
0x4955d8 LsaConnectUntrusted
0x4955e0 LsaFreeReturnBuffer
Library SHELL32.dll:
0x4955b0 CommandLineToArgvW
Library USER32.dll:
0x495604 IsCharAlphaNumericW
0x495608 GetKeyboardLayout
0x49560c DispatchMessageW
0x495610 DefWindowProcW
0x495614 SetClipboardViewer
0x495618 SendMessageW
0x495620 OpenClipboard
0x495624 CreateWindowExW
0x49562c GetClipboardData
0x495630 RegisterClassExW
0x495634 TranslateMessage
0x49563c PostMessageW
0x495640 UnregisterClassW
0x495644 GetMessageW
0x495648 CloseClipboard
0x49564c DestroyWindow
Library USERENV.dll:
Library VERSION.dll:
0x495664 VerQueryValueW
0x495668 GetFileVersionInfoW
Library HID.DLL:
0x495210 HidD_GetFeature
0x495218 HidD_GetHidGuid
0x49521c HidD_GetAttributes
0x495224 HidP_GetCaps
0x495228 HidD_SetFeature
Library SETUPAPI.dll:
Library WinSCard.dll:
0x495718 SCardControl
0x49571c SCardTransmit
0x495720 SCardDisconnect
0x495724 SCardGetAttrib
0x49572c SCardFreeMemory
0x495730 SCardListReadersW
0x495734 SCardReleaseContext
0x49573c SCardListCardsW
0x495740 SCardConnectW
Library WINSTA.dll:
0x49567c WinStationConnectW
Library WLDAP32.dll:
0x49568c None
0x495690 None
0x495694 None
0x495698 None
0x49569c None
0x4956a0 None
0x4956a4 None
0x4956a8 None
0x4956ac None
0x4956b0 None
0x4956b4 None
0x4956b8 None
0x4956bc None
0x4956c0 None
0x4956c4 None
0x4956c8 None
0x4956cc None
0x4956d0 None
0x4956d4 None
0x4956d8 None
0x4956dc None
0x4956e0 None
0x4956e4 None
0x4956e8 None
0x4956ec None
0x4956f0 None
0x4956f4 None
0x4956f8 None
0x4956fc None
0x495700 None
0x495704 None
0x495708 None
0x49570c None
0x495710 None
Library advapi32.dll:
0x495748 A_SHAFinal
0x49574c A_SHAInit
0x495750 A_SHAUpdate
Library msasn1.dll:
0x495774 ASN1_CreateModule
0x495778 ASN1BERDotVal2Eoid
0x49577c ASN1_CloseEncoder
0x495780 ASN1_CreateDecoder
0x495784 ASN1_FreeEncoded
0x495788 ASN1_CloseModule
0x49578c ASN1_CreateEncoder
0x495790 ASN1_CloseDecoder
Library ntdll.dll:
0x4958e0 RtlFreeAnsiString
0x4958f4 NtQueryObject
0x4958f8 RtlCompressBuffer
0x495904 RtlGetCurrentPeb
0x49590c RtlCreateUserThread
0x495910 RtlGUIDFromString
0x495914 RtlStringFromGUID
0x495918 NtCompareTokens
0x495920 RtlEqualString
0x495930 RtlFreeOemString
0x495938 NtResumeProcess
0x49593c RtlAdjustPrivilege
0x495940 NtSuspendProcess
0x495944 NtTerminateProcess
Library netapi32.dll:
Library KERNEL32.dll:
0x495230 GetFileSize
0x495234 HeapReAlloc
0x495238 GetFullPathNameA
0x49523c GetFullPathNameW
0x495240 GetTimeFormatW
0x495244 WideCharToMultiByte
0x495250 GetDateFormatW
0x495254 InterlockedExchange
0x495258 SetFilePointerEx
0x49525c GetProcessId
0x495260 PurgeComm
0x495264 ClearCommError
0x495268 CreateRemoteThread
0x49526c WaitForSingleObject
0x495270 SetLastError
0x495274 CreateProcessW
0x495278 SetConsoleOutputCP
0x49527c GetConsoleOutputCP
0x495280 CreateFileMappingW
0x495284 UnmapViewOfFile
0x495288 MapViewOfFile
0x49528c WriteProcessMemory
0x495290 VirtualProtect
0x495294 VirtualAllocEx
0x495298 VirtualProtectEx
0x49529c VirtualAlloc
0x4952a0 ReadProcessMemory
0x4952a4 VirtualFreeEx
0x4952a8 VirtualQueryEx
0x4952ac VirtualFree
0x4952b0 VirtualQuery
0x4952b4 GetComputerNameExW
0x4952b8 DeviceIoControl
0x4952bc DuplicateHandle
0x4952c0 OpenProcess
0x4952c4 GetCurrentProcess
0x4952cc FindNextFileW
0x4952d0 FindClose
0x4952d8 GetFileSizeEx
0x4952dc FlushFileBuffers
0x4952e0 GetFileAttributesW
0x4952e4 FindFirstFileW
0x4952e8 lstrlenW
0x4952ec DeleteFileA
0x4952f0 GetTempPathA
0x495300 GetTempFileNameA
0x495304 SetFilePointer
0x495308 CreateFileA
0x495310 CreateThread
0x495314 CreateMutexW
0x495318 CloseHandle
0x49531c LocalAlloc
0x495320 GetLastError
0x495324 CreateFileW
0x495328 ReadFile
0x49532c Sleep
0x495330 TerminateThread
0x495334 WriteFile
0x49533c SetEndOfFile
0x495340 FreeLibrary
0x495344 HeapAlloc
0x49534c HeapFree
0x495354 UnlockFile
0x495358 FlushViewOfFile
0x49535c LockFile
0x495364 OutputDebugStringW
0x495368 GetTickCount
0x49536c UnlockFileEx
0x495370 GetProcessHeap
0x495374 FormatMessageA
0x495378 LoadLibraryW
0x49537c HeapCompact
0x495380 FormatMessageW
0x495384 GetVersionExW
0x495388 HeapDestroy
0x49538c GetFileAttributesA
0x495390 HeapCreate
0x495394 HeapValidate
0x495398 MultiByteToWideChar
0x49539c GetTempPathW
0x4953a0 GetProcAddress
0x4953a4 HeapSize
0x4953a8 LockFileEx
0x4953ac GetDiskFreeSpaceW
0x4953b0 LoadLibraryA
0x4953b4 CreateFileMappingA
0x4953b8 GetDiskFreeSpaceA
0x4953bc GetSystemInfo
0x4953c4 OutputDebugStringA
0x4953c8 GetVersionExA
0x4953cc DeleteFileW
0x4953d0 GetCurrentProcessId
0x4953d4 GetSystemTime
0x4953d8 AreFileApisANSI
0x4953dc ExitProcess
0x4953e0 RaiseException
0x4953e8 SetConsoleTitleW
0x4953ec lstrlenA
0x4953f0 GlobalSize
0x4953f4 GetModuleHandleW
0x4953fc CreatePipe
0x495410 SetEvent
0x495414 CreateEventW
0x495418 GetCurrentThreadId
0x49541c GetModuleHandleA
0x495420 GetVersion
0x49542c TerminateProcess
0x495430 LocalFree
0x495434 RtlUnwind
0x495438 GetSystemDirectoryW
0x495444 GetStdHandle
0x49544c GetComputerNameW
0x495454 GetCurrentThread
0x49545c IsWow64Process
Library msvcrt.dll:
0x495798 calloc
0x49579c __set_app_type
0x4957a0 isdigit
0x4957a4 _read
0x4957a8 _lseeki64
0x4957ac mbtowc
0x4957b0 __mb_cur_max
0x4957b4 isleadbyte
0x4957b8 isxdigit
0x4957bc localeconv
0x4957c0 _snprintf
0x4957c4 _itoa
0x4957c8 wctomb
0x4957cc ferror
0x4957d0 iswctype
0x4957d4 wcstombs
0x4957d8 _write
0x4957dc _isatty
0x4957e0 ungetc
0x4957e4 ?terminate@@YAXXZ
0x4957e8 _controlfp
0x4957ec __badioinfo
0x4957f0 __pioinfo
0x4957f4 __p__fmode
0x4957f8 isspace
0x4957fc _wcsicmp
0x495800 __p__commode
0x495804 __setusermatherr
0x495808 _amsg_exit
0x49580c _initterm
0x495810 _errno
0x495814 free
0x495818 _wcsdup
0x49581c _vsnprintf
0x495820 strrchr
0x495824 _except_handler3
0x495828 vfwprintf
0x49582c _vscwprintf
0x495830 fflush
0x495834 _wfopen
0x495838 wprintf
0x49583c _fileno
0x495840 _iob
0x495844 vwprintf
0x495848 _setmode
0x49584c fclose
0x495850 _stricmp
0x495854 wcsrchr
0x495858 wcschr
0x49585c strtoul
0x495860 _wcsnicmp
0x495864 wcsstr
0x495868 _vscprintf
0x49586c memmove
0x495870 strncmp
0x495874 malloc
0x495878 _msize
0x49587c strcspn
0x495880 realloc
0x495884 fgetws
0x495888 wcstoul
0x49588c wcstol
0x495890 towupper
0x495894 _wpgmptr
0x495898 strstr
0x49589c strchr
0x4958a0 _wcstoui64
0x4958a4 wcsncmp
0x4958a8 getchar
0x4958ac memset
0x4958b0 memcpy
0x4958b4 __wgetmainargs
0x4958b8 _cexit
0x4958bc _exit
0x4958c0 _XcptFilter
0x4958c4 exit

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
t'h8[I
t%hL[I
QPhX]I
QPhP^I
Vhkiwih
tSVVVh
tAWPh8
t79~ht29~dt-9~`t(V
QVWj\S
QSVWjdj@
PPWSh`
@PPWShp
PQQWSh
F$PPWSh
@PPWShP
F,PPWSh
vDWShD
v<WShx
PPWShh
PPVSh0
PPVShx
QSVWjTj@
PPWSh(
PPWShp
PQQWSh
F PPWShP
@PPWSh
v4WShD
v<WShx
UPPWSh
KDBMV9Y
KSSMu^
94r=9Y
SVWj<j@
s/j j@
PPVSh0
PPPVSh
w(VShT
G,PPVSh
Y]^[YY
PPWSht
PWhHKJ
tbSVSSj
|USj h
}%Wh8VJ
}RVh(WJ
WShD\J
PPWSh`\J
F(YPPW
F,YPPW
t7j(j@
[ShLbJ
PPWShpbJ
PRRWSh8cJ
PRRWSh
SVWj$j@
]UhldJ
SPPWUhpbJ
WUh eJ
WUhTeJ
VPPSUh`\J
G\PPSUh0fJ
G`PPSUh
LPPSUh
GpPPSUh gJ
GxPPSUhpgJ
tTjPj@
UPPVSh`hJ
UPPWSh`hJ
PPWSh$iJ
PRRWSh`iJ
F PPWSh
F$PPWSh
PRRWSh
F,PPWSh\jJ
F0PPWSh
9u u19E
ts9] tnP
QQSVW3
YYhH[I
D$DPWV
QSVWjHj@
UPPWSh`\J
PPWShxuJ
PPPWShhvJ
F PPWShXwJ
PPPWSh
v(h,xJ
WSh4xJ
@WShlxJ
WShLyJ
>RSA2W
DSS4uN
QSVWj@j@
SPPWUhxzJ
PPWUhh{J
PPPWUh
PPWUhX|J
WUh,}J
WUhh}J
PPVSh`~J
PPPVSh8
ItpItTIt?
tBIt&IIuO
t9Jt!JJuB
tPWWWj
98t1WWWj
9MDMPu
t$hSh8
LSVWjD_
t:Ht!HugW
PVVSQV
PVVSVVVQVV
PVVSVVVQV
+7FVj@
f9D$Pu
L$$#L$4
9regfuA9Y
9hbinu.
CL@@Pj@
pLt=;7
6SSSSS
u)9](t5
tVWhH
tVWh|
YY9u tUV
FVWWWW
t!PPh8
PSSSSSSSSj
YYVVVVV
t WWVPj
tFVj@
t VVSPj
~3FVj@
CW8F*t
8HQu28HRu-9
.tPj0Z;
\$,+\$
D$(j HP
tD9D$(u>9D$
t$<9D$
t%:D$#u
F9t$ u3
^[_]YY
HtUHtB
r7;~8u
;V<t-9F$u(9F4
u^8OPt
GL9GL~
9t$4uw
t>9t$@u8
</t6<\t2
t"j}H3
tU;5TmN
r8;5XmN
;{Tt2WV
0;w`Y|
0C;^`|
9_(t<8_
u!9CXt
N<99t7
O(;Hpt
u;{4s
!GH!GL
0;F`Y|
up8_+u
Q<YY9}
;CDuBj
_^;CDt
Vf9C(up
ul9^Dt%
u.8^+t%
F8WUPW
w AA^@;
;^,v(h"
:FEth7
E *E$jL
t19w@u,
Q0+A(;
98^Dt#
=8_Dt.
;X<rSf
;G$u f
9G,u:S
VW;X,v
t4PVhL
H$~O9]
\$,9t
9D$ }o
D$09D$
s @9D$
;\$0sm
L$D;L$<|
L$@;L$8v
D{3VWj
AtGIIt<It2It(
SVWj8Yj8
uJ9D$$u
_,9_(t
u+9_(t
_,9_$|(
CD#F(_[Y
ItxItaItDIt
Ht{Hte
!t$p!T$t
D$("D$,
D$,$.<
D$($.<
D$,,t-
D$(,t)j
|$(;C
|$,B;T$D
L$$+L$Lf
F:;D$D
8EYYuW
D$D;D$<v
D$$9D$,u?P
L$L~T3
~j9K0u
D$0$.<
|Q9|$l|
9|$$u,
r,;t$du
t$0~!j
D$$9T$$|
D$$(G;~
P,9N$~
D$(9\$
tD9~(t
~"9=(nN
D$()D$
59D$4t
9D$ u8
D$DYY;F
@u#QRV
D$D:6C
D$ 9D$(
YY_^[]
<+unSUW
C|"f9A
u9p<u
t$,jZV
G,PRjFS
D$ PSW
D$$_^[
D$8_^[
t$ jNW
Gl@@PVj/W
f;G*}/!E
D$,Y_^[
tC!T$|R
G2PjFS
@M:CNt
0t+VPhh
9^8u$9^
f;G*}D
Y9s<t4
YYF;s8|
C*@;At~
f;F*}2
YFf;C*Y}p
f;F4s&
F0PRWWWS
f;C2sR
f;A*}-
Y9~8tW
f!HN_^[
f;G*}3
f;C2rL
f;F*}-
F2GG9E
Y_^[Y]
QQSVW3
f;F2se
tX9~HV
98ZLu4
D$@9w$
u9_pu
G,PSjF
G,PSjI
D$h+D$
D$l+D$
t$`j\V
\$$9C8
D$4+D$
9D$(tB
t$0j$V
t$8jZV
t$hj)V
f;C*}F
$;Fl}!
t'9s$t
u'9|$$uH
9\$ s8
T$$9t$$
t&)\$
|$$9t$$
T$$t A<
$Vh@ K
D$0Pj2
D$0Pj2
D$ ;D$
QQVWj
QQVWj
[WWWWW
WWWWWU
u!9Clu
|:f;N(t4
f;A2si
9p$u9VVVVS
HlAAQSj.P
t);F u
f;F4sL
C,PRjFV
59O8u
f;G*YY}r!E
D$H9t$L
Ht}HtsHtwHHt
t$<Vj3
D$HYYH
9t$0u.
u%9\$0t
L$<9^$t-
9\$8up9^
uk9t$ ue
D$ 9D$$tF
f;A2s8
t$<9D$(
D$0;D$$u%
D$49D$
QlBBRPj2Q
F2Sf9G2t
O6:N6u
F*f;A*
~(f;y(
F,;G,u
t$ NVS
SVWj>3
f;C2s8
D$ YYW
~:VW8Z
Q,9P,u
D$p8%K
;^p~=h
ItvIt3IIt/
@Ph 'K
G(RPjp
u Pj1S
WWWjVV
t'<mt#
C$ t'3
9x4ty9x0
YY_^[Y]
D$$PWWW
D$0 *K
\$`9D$$t*9D$(t$
~F9D$$u@
t$8h$*K
9T$hu&
t$$h0*K
8XQu]W
Y9^$uD
YY9^$u+
D$`PWS
Y9t$Xtb;
9p(u.9p,u)
D$$Vj\
D$XPRjt
u!9t$8u
t$$jZW
t$4@PjWW
t$Pj/W
t$\jBS
t$Hj/S
t$DjBS
t$djBS
t$XjBS
H0f;K.}
t$ j]V
t$,juV
{,WRjF
D$ 9D$
W;KHt?
9}$t"9y
QPhP-K
t*9{pu%8K
C,PWjF
f;G*}j!E
f;G*}5
CSWjQV
f;H*}_
@$ u6W
f;H*}5!M
8XQup9Z
uk9Z8uf9^
@f9A2t
9S8tm;
QQSVW3
VL#H(#P,
QQSVW3
N,#CH#KL
Fl@@Pj
f;G2s2
N,#CH#KL
N,#CH#KL
y(9G8t
f;F2s43
YY_^[Y
f;CHuE
f;4Yu"
f;F2sH
IluM9M
x*j?Xf;
f;8tbC@@;
f;~2s0
#C #S$
C 9V t$
eu!h 3K
OWQVPS
OD#B8#J<
j@hX3K
G,u(9E
@u|f9M
uvjaX8K1t
I$Pj/S
HYt-Hu<
jLZjZXjUYjY_j\
F0P@PjmW
@@PWj9V
G@@PjSS
w@VjOS
PPPjRS
FP@@PRjZW
HtYHt+
Hlt AAQ
<Vtf<Zt
Xuf<Xu
tt9~4t:
WWWWWWP
WWWWWWP
D$89D$0w
YY9{hu
uZWh<7K
u1WhL7K
W95xRN
tYHt6HHt
C9u,t*Vj
CWhh8K
<=t}<&ty
YY_^[t
0Qh@>K
YYhH[I
YPh$@K
t$h AK
t$h AK
t!h<AK
t"hXAK
t'h AK
t"h AK
s hT@K
t"h AK
s4hT@K
CD;C@t
C@h0DK
CD;C@t
C@h0DK
D$0h*PF
YYVUj!
F$PhtPK
D$8HEJ
D$<Ph<UK
D$PSShLUK
D$ PhdWK
t$ h|WK
89\$0uI
Y9\$Pt
RPh4cK
PSSh 51
RPh(eK
D$0Ph4fK
D$(PSS
t1h8mK
tPhxnK
D$,PSS
YSSh`vK
t$$hlvK
D$8PhxvK
WWhtrJ
D$(VWP
YY9|$$t
jLXPj@f
tNj{Yf
D$PPhtrJ
D$XPhX{K
#t$$QV
D$\Phl~K
SShLpK
Y9\$0tL
Y9\$8t
YY9|$$t
D$,_^[
uoj$j@
|QSj h
t3hH[I
t%VhpBK
t)hH[I
t.hH[I
|"hhnN
E@j(P3
Y9uLtJh4
|J9ul|;
YY9udt3
D$pPh4
D$@PhD
D$@Ph\
D$<Ph|
D$8PhL
D$dPhTpK
FYY;t$
YY9\$4t
D$lPhh
ti9\$ht&
9\$$t$9\$
D$(Ph\
T$$RQP
YYjdj@
ItIIt5It%
u%j(j@
w`j0hl_I
PPj}h|
CYYf;^
YYhH[I
YY9u$t
QQSVW3
ta=RSA2tS=ECK2t
=ECS2t
=RSA3t7=ECK4
=DSS4u
=RSA2u
=DSS2u
=ECKVty=DHPVth=DSPVtW=
QQSVW3
t+hP/L
QQSWh43L
t-WWWj
SShxBL
,SVh0HL
t&h|XL
D$ PWVh
D$$PVV
D$(PWV
t}hdcL
j/hDyI
j)htyI
YYhH[I
SVWj0X
PVSh<hL
tfhH[I
,uJhHqL
VVhPzL
YYhH[I
YYhH[I
It@PhX
|@hH[I
D$,Ph\
D$0PhL
D$<Ph\
ElPhX{K
D$DWP3
D$`WP3
D$4Phn
D$0Ph\
t$$9t$<
9t$(tM
Y9t$(t
YYhH[I
QQSVW3
Sj*j*h
D$<PVVVV
D$0Phl
D$PAAAA
D$`BBBB
D$pCCCC
t$0Sh8
D$,+D$
D$pJJJJ
D$8Phl
t$8Vh8
D$ j(P
YY9t$(
D$LAAAA
D$\BBBB
D$LAAAA
D$\BBBB
Ht HuL
VVVVVh
YYC;]$r
YYC;]dr
YYC;]dr
_[9uht
ItMItCIt9It/
,Y;D$(
D$DPh`
HtaHtWHtMHtC
D$0PSh
9\$,t j
t$$hH[I
PWWWWVW3
|SVWjH^V3
D$,9|$
D$DPWWh
D$T8\$
sDSWSWh
SWSWh`
PPRQVh
QSUVWj
D$0PVV
YYWWVh
HtFHt7HHu0
PWh@)M
YYh /M
F Php1M
YYhDbJ
0SVWh0HL
YYh8;M
VVhtrJ
YYhH[I
0Rh8DM
D$HPh(EM
D$HPhDEM
YYhHGM
|$89|$L
Y9|$Dt8
D$@PWW
Y9|$Dt8
Y9|$ u
t$ h MM
D$(8;D$,
YYhH[I
KQHPhXUM
tNIt9It
PPh`VM
PPh@ZM
48hpZM
PVVVVV
PVVVVV
D$ (AN
9\$HvP
YYC;\$Hr
9\$HvM
Y9t$Lv
FYY;t$Lr
Y;D$Hr
F;t$Hr
SShHiM
SShPiM
SShXiM
SShhiM
YYh0jM
YYhH[I
SVWh`qM
Y9>v$h
tpj{Yf
tph0uM
tbh@uM
tThhuM
WWh<vM
QS@@SP
{J}uJjLXf
Xpf;Hn
tNG;~0r
j!X+D$
tAh0mH
D$(VVh
D$$9t$
u(9t$8u
9t$0t`VVh
9t$(tcVVh
9t$$t,h
9t$0t hP
||9t$$t"h
|N9t$ t
v 9^4t
%33333
%33333
|UVj h,
|nVj h
D$$poN
D$,h`oN
D$$;D$,
D$ _^[
D$8VP3
D$TVP3
D$8VP3
D$LVP3
D$$_^[
D$$PhP
D$ Ph\
thVVh
Y9t$(u
D$TPj8
9t$4tz9t$
D$8PSj
QPQPh|
@W@Pj@
Ht?Ht0Ht
HtMHt5Ht&Ht
tDj0j@
Yj h@oN
},hH[I
D$0lWK
QSVjdj@
u/PPPh
0W;1u!
u0SSSh
;L$4u?
;D$8u69\$Lu
9\$\t$
0WWWWW
AAFFf;
0WWWWW
AAFFf;
AAf91u
URPQQh
t h,oN
<xtM<XtI
YSSSSS
HHtXHHt
>If90t
HHtXHHt
jd^j-Xf;
tPjXYf;
ou1j8Xf;
UQPXY]Y[
<+t(<-t$:
+t HHt
bcrypt.dll
ncrypt.dll
Invalid parameter passed to C runtime function.
(null)
```hhh
xppwpp
%04hu%02hu%02hu%02hu%02hu%02huZ
012345678.F? !!
NTPASSWORD
LMPASSWORD
NTPASSWORDHISTORY
LMPASSWORDHISTORY
!@#$%^&*()qwertyUIOPAzxcvbnmQQQQQQQQQQQQ)(*@&%
0123456789012345678901234567890123456789
3.30.1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
******""""""""""""""""""""
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
&&&&&&&&&&
BINARY
0123456789ABCDEF0123456789abcdef
Mb@?-C
>thstndrd
SQLite format 3
 !!""##$$%%&&''(())**++,,--..//00112233445566778899
0123456789ABCDEF
onoffalseyestruextrafull
naturaleftouterightfullinnercross
row_number
dense_rank
percent_rank
cume_dist
last_value
nth_value
first_value
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCLUDELETEMPORARYISNULLSAVEPOINTERSECTIESNOTNULLIKEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSCONSTRAINTOFFSETRIGGEREFERENCESUNIQUERYWITHOUTERELEASEATTACHAVINGLOBEGINNERANGEBETWEENOTHINGROUPSCASCADETACHCASECOLLATECREATECURRENT_DATEIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTUPDATEVALUESVIRTUALASTWHENWHERECURSIVEAFTERENAMEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPARTITIONDEFERREDISTINCTDROPRECEDINGFAILIMITFILTEREPLACEFIRSTFOLLOWINGFROMFULLIFORDERESTRICTOTHERSOVERIGHTROLLBACKROWSUNBOUNDEDUNIONUSINGVACUUMVIEWINDOWBYINITIALLYPRIMARY
':)xC!
ED~Myw
%raaUW
CABINET
%s_%02d.cab
No error
Failure opening file to be stored in cabinet
Failure reading file to be stored in cabinet
Insufficient memory in FCI
Could not create a temporary file
Unknown compression type
Could not create cabinet file
Client requested abort
Failure compressing data
Unknown error
IUMDATAPROTECT
1.2.840.113556.1.4.27
1.2.840.113556.1.4.135
1.2.840.113556.1.4.129
1.2.840.113556.1.4.125
1.2.840.113556.1.4.160
1.2.840.113556.1.4.55
1.2.840.113556.1.4.94
1.2.840.113556.1.4.90
-----BEGIN %s-----
%s-----END %s-----
private
shared
warning message
notification message
file is not a database
column index out of range
authorization denied
bad parameter or other API misuse
datatype mismatch
constraint failed
locking protocol
unable to open database file
database or disk is full
unknown operation
database disk image is malformed
disk I/O error
interrupted
attempt to write a readonly database
database table is locked
database is locked
query aborted
access permission denied
SQL logic error
not an error
frame ending offset must be a non-negative number
frame starting offset must be a non-negative number
frame ending offset must be a non-negative integer
frame starting offset must be a non-negative integer
regexp
detail
notused
comment
opcode
UTF-16
UTF16be
UTF16le
UTF-16be
UTF-16le
truncate
persist
delete
writable_schema
wal_checkpoint
wal_autocheckpoint
user_version
threads
temp_store_directory
temp_store
table_xinfo
table_info
synchronous
soft_heap_limit
shrink_memory
short_column_names
secure_delete
schema_version
reverse_unordered_selects
recursive_triggers
read_uncommitted
quick_check
query_only
pragma_list
page_size
page_count
optimize
module_list
mmap_size
max_page_count
locking_mode
legacy_file_format
legacy_alter_table
journal_size_limit
journal_mode
integrity_check
index_xinfo
index_list
index_info
incremental_vacuum
ignore_check_constraints
function_list
fullfsync
full_column_names
freelist_count
foreign_keys
foreign_key_list
foreign_key_check
encoding
empty_result_callbacks
defer_foreign_keys
database_list
data_version
data_store_directory
count_changes
compile_options
collation_list
checkpoint_fullfsync
cell_size_check
case_sensitive_like
cache_spill
busy_timeout
automatic_index
auto_vacuum
application_id
timeout
cache_size
status
database
builtin
checkpointed
parent
partial
origin
unique
hidden
dflt_value
notnull
on_delete
on_update
coalesce
group_concat
substr
zeroblob
replace
total_changes
changes
last_insert_rowid
sqlite_log
sqlite_source_id
sqlite_version
nullif
randomblob
random
ifnull
unicode
printf
length
typeof
likely
likelihood
unlikely
sqlite_compileoption_get
sqlite_compileoption_used
load_extension
RELEASE
sqlite_attach
sqlite_detach
stat_get
stat_push
stat_init
sqlite_stat3
sqlite_stat4
tbl,idx,stat
sqlite_stat1
sqlite_rename_test
sqlite_rename_table
sqlite_rename_column
FOREIGN KEY
UNIQUE
NOT NULL
win32-longpath-none
win32-none
win32-longpath
FlushViewOfFile
UuidCreateSequential
UuidCreate
InterlockedCompareExchange
CreateFileMappingFromApp
GetProcessHeap
OutputDebugStringW
OutputDebugStringA
GetNativeSystemInfo
GetTickCount64
LoadPackagedLibrary
CreateFile2
MapViewOfFileFromApp
GetFileInformationByHandleEx
SetFilePointerEx
WaitForSingleObjectEx
WaitForSingleObject
CreateEventExW
WriteFile
WideCharToMultiByte
UnmapViewOfFile
UnlockFileEx
UnlockFile
SystemTimeToFileTime
SetFilePointer
SetEndOfFile
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MapViewOfFile
LockFileEx
LockFile
LocalFree
LoadLibraryW
LoadLibraryA
HeapCompact
HeapValidate
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExW
GetVersionExA
GetTickCount
GetTempPathW
GetTempPathA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetProcAddressA
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileSize
GetFileAttributesExW
GetFileAttributesW
GetFileAttributesA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetCurrentProcessId
FreeLibrary
FormatMessageW
FormatMessageA
FlushFileBuffers
FileTimeToSystemTime
FileTimeToLocalFileTime
DeleteFileW
DeleteFileA
CreateMutexW
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateFileA
CloseHandle
CharUpperW
CharLowerW
AreFileApisANSI
Abortable
Explain
CursorHint
MaxPgcnt
Pagecount
VRename
VColumn
VDestroy
VCreate
VBegin
TableLock
Expire
AggFinal
AggValue
AggStep1
AggStep
AggInverse
OffsetLimit
MemMax
FkCounter
RowSetAdd
IntegrityCk
DropTrigger
DropIndex
DropTable
LoadAnalysis
ParseSchema
SqlExec
CreateBtree
ResetSorter
Destroy
IdxRowid
DeferredSeek
IdxDelete
IdxInsert
SorterInsert
SeekEnd
NullRow
RowData
SorterData
SorterCompare
ResetCount
Delete
Insert
NewRowid
Sequence
SeekHit
ColumnsUsed
OpenPseudo
SequenceTest
SorterOpen
String8
OpenEphemeral
OpenAutoindex
BitNot
OpenDup
Concat
Remainder
Divide
Multiply
Subtract
ShiftRight
ShiftLeft
BitAnd
OpenWrite
OpenRead
ReopenIdx
SetCookie
ReadCookie
MakeRecord
Affinity
Column
Offset
IsTrue
Compare
Permutation
RealAffinity
AddImm
CollSeq
ResultRow
IntCopy
Variable
SoftNull
String
Integer
HaltIfNull
EndCoroutine
Return
Function
PureFunc
Function0
PureFunc0
IncrVacuum
ElseNotEq
NotNull
IsNull
DecrJumpZero
IfNotZero
FkIfZero
Program
RowSetTest
RowSetRead
Rewind
SorterSort
IfSmaller
NotExists
SeekRowid
NotFound
NoConflict
IfNoHope
SeekGT
SeekGE
SeekLE
SeekLT
IfNullRow
MustBeInt
InitCoroutine
VUpdate
VFilter
Vacuum
JournalMode
Checkpoint
SorterNext
Transaction
AutoCommit
Savepoint
current_date
current_timestamp
current_time
strftime
datetime
julianday
minute
second
USE_ALLOCA
UNTESTABLE
THREADSAFE=0
OMIT_TRUNCATE_OPTIMIZATION
OMIT_TCL_VARIABLE
OMIT_SHARED_CACHE
OMIT_PROGRESS_CALLBACK
OMIT_OR_OPTIMIZATION
OMIT_LOCALTIME
OMIT_LIKE_OPTIMIZATION
OMIT_DEPRECATED
OMIT_DECLTYPE
OMIT_BETWEEN_OPTIMIZATION
MAX_EXPR_DEPTH=0
LIKE_DOESNT_MATCH_BLOBS
DISABLE_INTRINSIC
DEFAULT_WAL_SYNCHRONOUS=1
COMPILER=msvc-1500
20b:20e
20c:20e
40f-21a-21d
unixepoch
weekday
start of
%04d-%02d-%02d %02d:%02d:%02d
%02d:%02d:%02d
%04d-%02d-%02d
%06.3f
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
(NULL)
922337203685477580
API call with %s database connection pointer
unopened
invalid
OsError 0x%lx (%lu)
os_win.c:%d: (%lu) %s(%s) - %s
delayed %dms for lock/sharing conflict at line %d
winSeekFile
winClose
winRead
winWrite1
winWrite2
winTruncate1
winTruncate2
winSync1
winSync2
winFileSize
winUnlockReadLock
winUnlock
winLockSharedMemory
%s-shm
readonly_shm
winOpenShm
winShmMap1
winShmMap2
winShmMap3
winUnmapfile1
winUnmapfile2
winMapfile1
winMapfile2
etilqs_
winGetTempname1
winGetTempname2
winGetTempname3
winGetTempname4
winGetTempname5
winOpen
winDelete
winAccess
%s%c%s
winFullPathname1
winFullPathname2
winFullPathname3
winFullPathname4
recovered %d pages from %s
-journal
nolock
immutable
recovered %d frames from WAL file %s
cannot limit WAL size: %s
:memory:
invalid page number %d
2nd reference to page %d
Failed to read ptrmap key=%d
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
failed to get page %d
freelist leaf count too big on page %d
overflow list length
%s is %d but should be %d
Page %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
free space corruption
On tree page %d cell %d:
On page %d at right child:
Offset %d out of range %d..%d
Extends off end of page
Rowid %lld out of order
Child page depth differs
Multiple uses for byte %u of page %d
Fragmentation of %d bytes reported as %d on page %d
Main freelist:
max rootpage (%d) disagrees with header (%d)
incremental_vacuum enabled with a max rootpage of zero
Page %d is never used
Pointer map page %d is referenced
unknown database %s
destination database is in use
source and destination must be distinct
%!.15g
BINARY
,%s%s%s
(%.20s)
%s(%d)
(blob)
vtab:%p
program
%s-mjXXXXXX9XXz
MJ delete: %s
MJ collide: %s
-mj%06X9%02X
FOREIGN KEY constraint failed
non-deterministic function in index expression or CHECK constraint
API called with finalized prepared statement
API called with NULL prepared statement
string or blob too big
bind on a busy prepared statement: [%s]
'%.*q'
zeroblob(%d)
%s constraint failed
%z: %s
abort at %d in [%s]: %s
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot release savepoint - SQL statements in progress
cannot commit transaction - SQL statements in progress
cannot start a transaction within a transaction
cannot rollback - no transaction is active
cannot commit - no transaction is active
database schema has changed
sqlite_master
SELECT*FROM"%w".%s WHERE %s ORDER BY rowid
too many levels of trigger recursion
out of
cannot change %s wal mode from within a transaction
statement aborts at %d: [%s] %s
out of memory
integer
cannot open value of type %s
no such rowid: %lld
cannot open virtual table: %s
cannot open table without rowid: %s
cannot open view: %s
no such column: "%s"
foreign key
indexed
cannot open %s column for writing
excluded
misuse of aliased aggregate %s
misuse of aliased window function %s
row value misused
double-quoted string literal: "%w"
no such column
ambiguous column name
%s: %s.%s.%s
%s: %s.%s
%s: %s
partial index WHERE clauses
index expressions
CHECK constraints
%s prohibited in %s
the "." operator
second argument to likelihood() must be a constant between 0.0 and 1.0
not authorized to use function: %s
non-deterministic functions
%s() prohibited in triggers and views
%.*s() may not be used as a window function
window
aggregate
misuse of %s function %.*s()
no such function: %.*s
wrong number of arguments to function %.*s()
FILTER may not be used with non-aggregate %.*s()
subqueries
parameters
%r %s BY term out of range - should be between 1 and %d
too many terms in ORDER BY clause
%r ORDER BY term does not match any column in the result set
too many terms in %s BY clause
a GROUP BY clause is required before HAVING
aggregate functions are not allowed in the GROUP BY clause
too many arguments on function %T
variable number must be between ?1 and ?%d
too many SQL variables
%d columns assigned %d values
too many columns in %s
_ROWID_
USING ROWID SEARCH ON TABLE %s FOR IN-OPERATOR
USING INDEX %s FOR IN-OPERATOR
sub-select returns %d columns - expected %d
REUSE LIST SUBQUERY %d
CORRELATED
%sLIST SUBQUERY %d
REUSE SUBQUERY %d
%sSCALAR SUBQUERY %d
hex literal too big: %s%s
misuse of aggregate: %s()
unknown function: %s()
RAISE() may only be used within a trigger-program
sqlite_
table %s may not be altered
SELECT 1 FROM "%w".%s WHERE name NOT LIKE 'sqliteX_%%' ESCAPE 'X' AND sql NOT LIKE 'create virtual%%' AND sqlite_rename_test(%Q, sql, type, name, %d)=NULL
SELECT 1 FROM temp.%s WHERE name NOT LIKE 'sqliteX_%%' ESCAPE 'X' AND sql NOT LIKE 'create virtual%%' AND sqlite_rename_test(%Q, sql, type, name, 1)=NULL
there is already another table or index with this name: %s
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_table(%Q, type, name, sql, %Q, %Q, %d) WHERE (type!='index' OR tbl_name=%Q COLLATE nocase)AND name NOT LIKE 'sqliteX_%%' ESCAPE 'X'
UPDATE %Q.%s SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
sqlite_sequence
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE sqlite_temp_master SET sql = sqlite_rename_table(%Q, type, name, sql, %Q, %Q, 1), tbl_name = CASE WHEN tbl_name=%Q COLLATE nocase AND sqlite_rename_test(%Q, sql, type, name, 1) THEN %Q ELSE tbl_name END WHERE type IN ('view', 'trigger')
Cannot add a PRIMARY KEY column
Cannot add a UNIQUE column
Cannot add a REFERENCES column with non-NULL default value
Cannot add a NOT NULL column with default value NULL
Cannot add a column with non-constant default
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
virtual tables may not be altered
Cannot add a column to a view
sqlite_altertab_%s
virtual table
cannot rename columns of %s "%s"
UPDATE "%w".%s SET sql = sqlite_rename_column(sql, type, name, %Q, %Q, %d, %Q, %d, %d) WHERE name NOT LIKE 'sqliteX_%%' ESCAPE 'X' AND (type != 'index' OR tbl_name = %Q) AND sql NOT LIKE 'create virtual%%'
UPDATE temp.%s SET sql = sqlite_rename_column(sql, type, name, %Q, %Q, %d, %Q, %d, 1) WHERE type IN ('trigger', 'view')
after rename
error in %s %s%s: %s
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE %s=%Q
sqlite\_%
unordered*
sz=[0-9]*
noskipscan*
SELECT tbl,idx,stat FROM %Q.sqlite_stat1
too many attached databases - max %d
database %s is already in use
database is already attached
attached databases must use the same text encoding as main database
unable to open database: %s
no such database: %s
cannot detach database %s
database %s is locked
%s %T cannot reference objects in database %s
%s cannot use variables
authorizer malfunction
access to %z is prohibited
not authorized
sqlite_temp_master
pragma_
no such view
no such table
corrupt database
unknown database %T
object name reserved for internal use: %s
temporary table name must be unqualified
table %T already exists
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
INTEGER
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
CREATE TABLE
AUTOINCREMENT not allowed on WITHOUT ROWID tables
PRIMARY KEY missing on table %s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE TABLE %Q.sqlite_sequence(name,seq)
tbl_name='%q' AND type!='trigger'
parameters are not allowed in views
view %s is circularly defined
corrupt schema
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
sqlite_stat%d
DELETE FROM %Q.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
unsupported use of NULLS %s
cannot create a TEMP index on non-TEMP table "%s"
table %s may not be indexed
views may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
expressions prohibited in PRIMARY KEY and UNIQUE constraints
conflicting ON CONFLICT clauses specified
invalid rootpage
UNIQUE
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
name='%q' AND type='index'
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
too many FROM clause terms, max: %d
a JOIN clause is required before %s
ROLLBACK
COMMIT
unable to open a temporary database file for storing temporary tables
index '%q'
%s.rowid
unable to identify the object to be reindexed
duplicate WITH table name: %s
no such collation sequence: %s
table %s may not be modified
cannot modify %s because it is a view
rows deleted
integer overflow
LIKE or GLOB pattern too complex
ESCAPE expression must be a single character
%!.20e
foreign key mismatch - "%w" referencing "%w"
table %S has no column named %s
table %S has %d columns but %d values were supplied
%d values for %d columns
UPSERT not implemented for virtual table "%s"
rows inserted
sqlite3_extension_init
unable to open shared library [%s]
sqlite3_
no entry point [%s] in shared library [%s]
error during initialization: %s
automatic extension loading failed: %s
exclusive
normal
incremental
memory
temporary storage cannot be changed from within a transaction
SET NULL
SET DEFAULT
CASCADE
RESTRICT
NO ACTION
not a writable directory
Safety level may not be changed inside a transaction
issisii
issisi
iissssss
*** in database %s ***
NULL value in %s.%s
CHECK constraint failed in %s
missing from index
non-unique entry in index
wrong # of entries in index
unsupported encoding: %s
restart
ANALYZE "%w"."%w"
CREATE TABLE x
%c"%s"
,arg HIDDEN
,schema HIDDEN
PRAGMA
malformed database schema (%s)
%z - %s
create
orphan index
CREATE TABLE x(type text,name text,tbl_name text,rootpage int,sql text)
unsupported file format
SELECT*FROM"%w".%s ORDER BY rowid
statement too long
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
UNION ALL
INTERSECT
EXCEPT
USE TEMP B-TREE FOR %s
column%d
%.*z:%u
cannot use window functions in recursive queries
recursive aggregate queries not supported
RECURSIVE STEP
SCAN %d CONSTANT ROW%s
ORDER BY
%s clause should come after %s not before
COMPOUND QUERY
LEFT-MOST SUBQUERY
%s USING TEMP B-TREE
all VALUES must have the same number of terms
SELECTs to the left and right of %s do not have the same number of result columns
MERGE (%s)
no such index: %s
'%s' is not a function
multiple references to recursive table: %s
circular reference: %s
table %s has %d values for %d columns
multiple recursive references: %s
recursive reference in a subquery: %s
subquery_%u
too many references to "%s": max 65535
access to view "%s" prohibited
%s.%s.%s
no such table: %s
no tables specified
too many columns in result set
DISTINCT aggregates must have exactly one argument
USING COVERING INDEX
SCAN TABLE %s%s%s
expected %d columns for '%s' but got %d
CO-ROUTINE %u
MATERIALIZE %u
DISTINCT
GROUP BY
RIGHT PART OF ORDER BY
sqlite3_get_table() called with two or more incompatible queries
temporary trigger may not have qualified name
trigger
cannot create triggers on virtual tables
trigger %T already exists
cannot create trigger on system table
BEFORE
cannot create %s trigger on view: %S
cannot create INSTEAD OF trigger on table: %S
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
type='trigger' AND name='%q'
no such trigger: %S
DELETE FROM %Q.%s WHERE name=%Q AND type='trigger'
-- TRIGGER %s
no such column: %s
rows updated
ON CONFLICT clause does not match any PRIMARY KEY or UNIQUE constraint
cannot VACUUM from within a transaction
cannot VACUUM - SQL statements in progress
non-text filename
ATTACH %Q AS vacuum_db
output file already exists
SELECT sql FROM "%w".sqlite_master WHERE type='table'AND name<>'sqlite_sequence' AND coalesce(rootpage,1)>0
SELECT sql FROM "%w".sqlite_master WHERE type='index'
SELECT'INSERT INTO vacuum_db.'||quote(name)||' SELECT*FROM"%w".'||quote(name)FROM vacuum_db.sqlite_master WHERE type='table'AND coalesce(rootpage,1)>0
INSERT INTO vacuum_db.sqlite_master SELECT*FROM "%w".sqlite_master WHERE type IN('view','trigger') OR(type='table'AND rootpage=0)
CREATE VIRTUAL TABLE %T
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
name='%q' AND type='table'
vtable constructor called recursively: %s
vtable constructor failed: %s
vtable constructor did not declare schema: %s
no such module: %s
<expr>
ANY(%s)
SEARCH
SUBQUERY %u
TABLE %s
AS %s
PRIMARY KEY
AUTOMATIC PARTIAL COVERING INDEX
AUTOMATIC COVERING INDEX
COVERING INDEX %s
INDEX %s
USING
>? AND rowid<
USING INTEGER PRIMARY KEY (rowid%s?)
VIRTUAL TABLE INDEX %d:%s
ON clause references tables to its right
too many arguments on %s() - max %d
automatic index on %s(%s)
auto-index
%s.xBestIndex malfunction
abbreviated query algorithm search
no query solution
at most %d tables in a join
SCAN CONSTANT ROW
second argument to nth_value must be a positive integer
argument of ntile must be a positive integer
no such window: %s
RANGE with offset PRECEDING/FOLLOWING requires one ORDER BY expression
FILTER clause may only be used with aggregate window functions
unsupported frame specification
PARTITION clause
ORDER BY clause
frame specification
cannot override %s of window: %s
DISTINCT is not supported for window functions
too many terms in compound SELECT
syntax error after column name "%.*s"
parser stack overflow
unknown table option: %.*s
set list
near "%T": syntax error
qualified table names are not allowed on INSERT, UPDATE, and DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
incomplete input
unrecognized token: "%.*s"
%s in "%s"
create
temporary
explain
unable to close due to unfinalized statements or unfinished backups
unknown error
abort due to ROLLBACK
another row available
no more rows available
unable to delete/modify user-function due to active statements
unable to use function %s in the requested context
unknown database: %s
unable to delete/modify collation sequence due to active statements
localhost
invalid uri authority: %.*s
access
no such %s mode: %s
%s mode not allowed: %s
no such vfs: %s
NOCASE
%s at line %d of [%.10s]
database corruption
misuse
cannot open file
no such table column: %s.%s
SQLITE_
2019-10-10 20:19:45 18db032d058f1436ce3dea84081f4ee5a0f2259ad97301d43c426bc7f3df1b0b
ncrypt.dll
bcrypt.dll
CPGenKey
CPDeriveKey
CPDestroyKey
CPSetKeyParam
CPGetKeyParam
CPExportKey
CPImportKey
CPEncrypt
CPDecrypt
CPDuplicateKey
1.3.6.1.4.1.311.20.2.3
2.5.29.17
2.5.29.15
2.5.29.37
2.5.29.14
2.5.29.35
2.5.29.31
2.5.29.19
1.2.840.113549.1.1.5
2.5.4.3
2.5.4.11
2.5.4.10
2.5.4.6
1.2.840.113549.1.1.11
1.3.14.3.2.29
1.3.6.1.5.5.7.3.2
1.3.6.1.4.1.311.20.2.2
OMNIKEY
<root>
CardAcquireContext
mimikatz
logins
select signon_realm, origin_url, username_value, password_value from logins
cookies
select host_key, path, name, creation_utc, expires_utc, encrypted_value from cookies order by host_key, path, name
select count(*) from sqlite_master where type='table' and name=?
AppN_DN_Win
Hj1diQ6kpUx7VC4m
6jnkd5J3ZdQDtrsu
xT5rZW5qVVbrvpuA
RSA PRIVATE KEY
Kerberos
t{{t{i}t{i}t{
{t{{t{i}t{
t{{t{{{t{
}}}}}}
}t{{t{i}t{o}}}t{
t{{{t{i}t{
{{t{i}t{o}}}
{t{i}t{{
{t{i}t{o}}
PRIVATE KEY
SuppData
SamIConnect
SamrCloseHandle
SamIRetrievePrimaryCredentials
SamrOpenDomain
SamrOpenUser
SamrQueryInformationUser
SamIFree_SAMPR_USER_INFO_BUFFER
VirtualAlloc
memcpy
LocalAlloc
fwprintf
fclose
LockWorkStation
SystemParametersInfoW
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
VaultEnumerateItemTypes
VaultEnumerateVaults
VaultOpenVault
VaultGetInformation
VaultEnumerateItems
VaultCloseVault
VaultFree
VaultGetItem
1.2.840.113556.1.2.48
1.2.840.113556.1.4.133
1.2.840.113556.1.4.609
1.2.840.113556.1.4.146
1.2.840.113556.1.4.96
1.2.840.113556.1.4.159
1.2.840.113556.1.4.8
1.2.840.113556.1.4.302
1.2.840.113556.1.4.656
1.2.840.113556.1.4.221
1.2.840.113556.1.4.1
attributeID
attributeSyntax
systemFlags
2.5.4.0
1.2.840.113556.1.2.14
1.2.840.113556.1.2.36
1.2.840.113556.1.2.115
1.2.840.113556.1.4.307
1.2.840.113556.1.4.375
1.2.840.113556.1.4.515
1.2.840.113556.1.4.1459
1.2.840.113556.1.4.1820
1.2.840.113556.1.4.1836
CredentialKeys
Primary
mf?fffff
^@1|d^
BCryptEncrypt
BCryptOpenAlgorithmProvider
BCryptKeyDerivation
BCryptGenerateSymmetricKey
BCryptCloseAlgorithmProvider
BCryptDecrypt
BCryptSetProperty
BCryptDestroyKey
BCryptGetProperty
BCryptImportKeyPair
BCryptExportKey
BCryptFreeBuffer
BCryptEnumRegisteredProviders
NCryptOpenStorageProvider
NCryptGetProperty
NCryptSetProperty
NCryptFinalizeKey
NCryptFreeObject
NCryptImportKey
NCryptOpenKey
NCryptFreeBuffer
NCryptEnumKeys
NCryptExportKey
CryptSetHashParam
CryptGetHashParam
CryptExportKey
CryptAcquireContextW
CryptSetKeyParam
CryptGetKeyParam
CryptReleaseContext
CryptDuplicateKey
CryptAcquireContextA
CryptGetProvParam
CryptImportKey
SystemFunction007
CryptEncrypt
CryptCreateHash
CryptGenKey
CryptDestroyKey
CryptDecrypt
CryptDestroyHash
CryptHashData
CopySid
GetLengthSid
LsaQueryInformationPolicy
LsaOpenPolicy
LsaClose
CreateWellKnownSid
CreateProcessWithLogonW
CreateProcessAsUserW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
SystemFunction032
ConvertSidToStringSidW
CreateServiceW
CloseServiceHandle
DeleteService
OpenSCManagerW
SetServiceObjectSecurity
OpenServiceW
BuildSecurityDescriptorW
QueryServiceObjectSecurity
StartServiceW
AllocateAndInitializeSid
QueryServiceStatusEx
FreeSid
ControlService
IsTextUnicode
OpenProcessToken
GetTokenInformation
LookupAccountNameW
LookupAccountSidW
DuplicateTokenEx
CheckTokenMembership
CryptSetProvParam
CryptEnumProvidersW
ConvertStringSidToSidW
LsaFreeMemory
GetSidSubAuthority
GetSidSubAuthorityCount
IsValidSid
SetThreadToken
CryptEnumProviderTypesW
SystemFunction006
CryptGetUserKey
OpenEventLogW
GetNumberOfEventLogRecords
ClearEventLogW
SystemFunction001
CryptDeriveKey
SystemFunction005
LsaQueryTrustedDomainInfoByName
CryptSignHashW
LsaOpenSecret
LsaQuerySecret
SystemFunction013
LsaRetrievePrivateData
LsaEnumerateTrustedDomainsEx
LookupPrivilegeValueW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
LookupPrivilegeNameW
OpenThreadToken
CredFree
CredEnumerateW
SystemFunction025
ConvertStringSecurityDescriptorToSecurityDescriptorW
SystemFunction024
CredIsMarshaledCredentialW
CredUnmarshalCredentialW
ADVAPI32.dll
Cabinet.dll
CertAddEncodedCertificateToStore
CertOpenStore
CertFreeCertificateContext
CertCloseStore
CertSetCertificateContextProperty
PFXExportCertStoreEx
CryptUnprotectData
CryptBinaryToStringW
CryptBinaryToStringA
CryptStringToBinaryW
CryptExportPublicKeyInfo
CryptFindOIDInfo
CryptAcquireCertificatePrivateKey
CertNameToStrW
CertFindCertificateInStore
CertGetCertificateContextProperty
CryptSignAndEncodeCertificate
CryptEncodeObject
CryptProtectData
CryptQueryObject
CertGetNameStringW
CryptStringToBinaryA
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertEnumCertificatesInStore
CertEnumSystemStore
CRYPT32.dll
CDLocateCheckSum
MD5Final
MD5Update
MD5Init
CDGenerateRandomBits
CDLocateCSystem
cryptdll.dll
DnsQuery_A
DnsFree
DNSAPI.dll
FilterFindFirst
FilterFindNext
FLTLIB.DLL
DsGetDcNameW
NetApiBufferFree
NetRemoteTOD
NetSessionEnum
NetServerGetInfo
DsEnumerateDomainTrustsW
NetShareEnum
NetStatisticsGet
NetWkstaUserEnum
NETAPI32.dll
CoCreateInstance
CoUninitialize
CoInitializeEx
ole32.dll
OLEAUT32.dll
RpcBindingFromStringBindingW
RpcStringBindingComposeW
MesEncodeIncrementalHandleCreate
RpcBindingSetAuthInfoExW
RpcBindingInqAuthClientW
RpcBindingSetOption
RpcImpersonateClient
RpcBindingFree
RpcStringFreeW
RpcRevertToSelf
MesDecodeIncrementalHandleCreate
MesHandleFree
MesIncrementalHandleReset
NdrMesTypeDecode2
NdrMesTypeAlignSize2
NdrMesTypeFree2
NdrMesTypeEncode2
RpcServerUnregisterIfEx
I_RpcBindingInqSecurityContext
RpcServerInqBindings
RpcServerListen
RpcMgmtWaitServerListen
RpcEpRegisterW
RpcMgmtStopServerListening
RpcBindingToStringBindingW
RpcServerRegisterIf2
RpcServerRegisterAuthInfoW
RpcBindingVectorFree
UuidToStringW
RpcServerUseProtseqEpW
RpcEpUnregister
NdrServerCall2
NdrClientCall2
UuidCreate
RpcEpResolveBinding
RpcMgmtEpEltInqDone
RpcMgmtEpEltInqNextW
RpcMgmtEpEltInqBegin
I_RpcGetCurrentCallHandle
RPCRT4.dll
PathIsRelativeW
PathCanonicalizeW
PathCombineW
PathIsDirectoryW
PathFindFileNameW
SHLWAPI.dll
SamQueryInformationUser
SamCloseHandle
SamEnumerateDomainsInSamServer
SamFreeMemory
SamEnumerateUsersInDomain
SamOpenUser
SamLookupDomainInSamServer
SamLookupNamesInDomain
SamLookupIdsInDomain
SamOpenDomain
SamConnect
SamSetInformationUser
SamiChangePasswordUser
SamEnumerateGroupsInDomain
SamGetGroupsForUser
SamGetMembersInGroup
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Win.Tool.Mimikatz-9862700-0
CMC Clean
CAT-QuickHeal HackTool.Mimikatz.S13719266
Skyhigh BehavesLike.Win32.Ransomware.dh
ALYac Trojan.GenericKD.71678010
Cylance Unsafe
Zillya Tool.Mimikatz.Win32.1451
Sangfor HackTool.Win64.Mimikatz.uwccg
K7AntiVirus Riskware ( 004e69f51 )
Alibaba Trojan:Win32/Mimikatz.4b2
K7GW Riskware ( 004e69f51 )
Cybereason Clean
huorong HackTool/Mikatz.k
Baidu Clean
VirIT HackTool.Win32.Agent.CHMF
Paloalto generic.ml
Symantec Hacktool.Mimikatz
Elastic Windows.Hacktool.Mimikatz
ESET-NOD32 a variant of Win32/RiskWare.Mimikatz.BC
APEX Malicious
Avast Win32:HacktoolX-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky Trojan-PSW.Win32.Mimikatz.gen
BitDefender Trojan.GenericKD.71678010
NANO-Antivirus Trojan.Win32.Mimikatz.hddnuq
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.71678010
Tencent HackTool.Win32.Mimikatz.16001196
TACHYON Clean
Sophos ATK/Mimikatz-BE
F-Secure Trojan.TR/AD.Mimikatz.wtjqu
DrWeb Tool.Mimikatz.704
VIPRE Trojan.GenericKD.71678010
TrendMicro HackTool.Win32.Mimikatz.F
McAfeeD ti!2E8092205A2D
Trapmine Clean
CTX exe.hacktool.mimikatz
Emsisoft Trojan.GenericKD.71678010 (B)
Ikarus HackTool.Mimikatz
FireEye Generic.mg.46f366e3ee36c05a
WebrootD W32.Hacktool.Mimikatz
Jiangmin Trojan.PSW.Mimikatz.bgi
Webroot W32.Hacktool.Mimikatz
Varist W32/Mimikatz.GURI-1369
Avira TR/AD.Mimikatz.wtjqu
Fortinet Riskware/NetWalker
Antiy-AVL Trojan[PSW]/Win32.Mimikatz
Kingsoft Win32.Trojan-PSW.Mimikatz.gen
Gridinsoft Hack.Win32.Mimikatz.ka!c
Xcitium Malware@#3p7xsaxu4ql8i
Arcabit Trojan.Generic.D445B83A
SUPERAntiSpyware Trojan.Agent/Gen-Mimikatz
ZoneAlarm Trojan-PSW.Win32.Mimikatz.gen
Microsoft HackTool:Win32/Mimikatz.D
Google Detected
AhnLab-V3 Trojan/Win32.RL_Mimikatz.R290617
Acronis Clean
McAfee HTool-Mimikatz
MAX malware (ai score=100)
VBA32 BScope.TrojanPSW.Mimikatz
Malwarebytes Mimikatz.Spyware.Stealer.DDS
Panda HackingTool/Mimikatz
Zoner Clean
TrendMicro-HouseCall HackTool.Win32.Mimikatz.F
Rising HackTool.Mimikatz!1.B3A8 (CLASSIC)
Yandex Trojan.PWS.Mimikatz!HeNaQklqKtk
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.9460437.susgen
GData Win32.Riskware.Mimikatz.F
AVG Win32:HacktoolX-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (W)
alibabacloud Clean
No IRMA results available.