Sample details: c28cdecba79328bd7ad3ddd4012f7898 --

Hashes
MD5: c28cdecba79328bd7ad3ddd4012f7898
SHA1: 03b0c7fad0c96b0aaf943c666a9e5723f6f6fd99
SHA256: f818376773cb30a6a46d17fd7a292a4234be44df8836a27167ec2d4522f57296
SSDEEP: 12288:9BaxwL7Yke3dHZmXJfMkz2zAJu+fpdHOyrSrvWMX3/g:Daa3reN5mXPKzAo0pkyrSrvWM4
Details
File Type: PE32
Added: 2019-10-09 07:59:54
Yara Hits
YRP/VC8_Microsoft_Corporation | YRP/Microsoft_Visual_Cpp_8 | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/HasRichSignature | YRP/domain | YRP/url | YRP/contentis_base64 | YRP/Browsers | YRP/VM_Generic_Detection | YRP/Misc_Suspicious_Strings | YRP/anti_dbg | YRP/network_http | YRP/screenshot | YRP/cred_ff | YRP/win_mutex | YRP/win_registry | YRP/win_files_operation | YRP/Big_Numbers1 | YRP/CRC32_poly_Constant | YRP/CRC32_table | YRP/BASE64_table | YRP/Str_Win32_Wininet_Library | YRP/Str_Win32_Internet_API | YRP/Str_Win32_Http_API | YRP/with_sqlite |
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
FYY;t$
FYY;t$
uaSh0sG
uOSh,sG
u=Sh(sG
u+Sh$sG
rt\HtPHt9Ht"H
HtiHtTHt?Ht*Ht
tkh$dG
9~(tF9~4tAWh
j(h`{G
j2h,{G
F4SSSSW
v<jPPW
u	j	hl|G
u	j	h\|G
ETPj.W
9^4v@3
t*SVhd~G
SWh\~G
$ShP~G
PSSSSS
PSSSSS
GWj@WP
u>ShxsG
PSSSSS
t?hP~G
PQj;Qj
tNWj	Y3
te;>wa
t"j}H3
W9^(u89]
u.j	Y3
P@YY_^
tO8_	tJ
_U_^][
NDY9~D
u	9P0u
W;KDt?
t-9_4t(V
HtgHt\HtQHtFHt;H
<tHHt0H
	uZWht
uA8C*t<
Yt>954
[9\$ u,
9V`~$3
0Y;w`|
0C;^`|
!^(!^,Y
Yf;F:}'W3
Yf;F:}&!E
f!HJ^[
 t3It*IIt 
;sTt;VW
>,...f
9{DtTV
Y9^<t$9^8~
CYY;^8|
YY[_^]
f!CJ^[
t7< t33
t0j	X3
	G(	W,f
VPPSj 
QQQQQQ
SHPSj^V
	SPSjA
S@PSj=
E$*E(jL
	F(	V,
YPSSSj|
9_@ub8^
E(9u(|
9MHuNh
EL;E(|
Y9_0tE
]0	M4	E8C
	U4	M8
	M4	E8
E$9MPt
t59U$u:9U u5
O(;HXt
0Y;F`|
ItiItGIt
HUUUWh
}(9;~=
Y9}(t j
F09^0~
P<YYV3
G`;C4uDj
;C4s>3
CX!C4W
r{;~0wv9]
9}x~J3
u 9FXt
u~9_Xu
t%8^	t
vH;u,s	
u49u<|
M09]0~
@H;FHtFf9]
FYY;u |
QQSVW3
^A8^Cu
f9^\tN
u	9^Pu
P4FYY;
9{4t-3
f;C2s#
9]Xu	S
uo9]Xt
u?9]Xt,
]l9]Xt
Y9^T|^9^\t9
YY8^ctF
t98^bt4SP
1t|Ht0H
1tYIt0I
GH@PVSW
HtNHtCHtHH
;wL~Ch
FVPPPj
<^tU<btQ<
HtwHtoH
Kt9Jt-Jt!Jt
GL;FPu
WL;VPu
u=9M0}83
E(9E$sz
;M u	;E
@H:Fds
R9O@t+
E`89MH|
E@9E8t
#EX#M\
t@9U4|'
uj9u ~eh
@I:AIt
t+SSSj
tV9V$u53
YY9]Du
9E$t&9A
SSSSSS
YYSSSSSS
tQj	Y3
,9s@u/
Q@PRh@
MT9MD~1!ML
+EX9ED
EX9}8}
9Mpt	;
XSSPjv
PPPPPQ
ItsIt:j
WWWWWWW
PPPPPPP
+2+34+567
+%PQRS
+TUVWXY4Z[\
>]^_`abbcdaaefghijkllllllllmnmnopqrstuuvw
yz{|}~
F 9^$|
<+t"<-t
EPQjLP
VVVVQPVV
SSQPSS
^<9^<u
8;^(r	
t	;Ftt
W9^Hu&h
QQSVWd
v	N+D$
v	N+D$
PPPPPPPP
t"SS9] u
.t|PVj@
t*=RCC
;7|G;p
tR99u2
HHtXHHt
?If90t
HHtYHHt
j@j ^V
URPQQh )F
>:u8FV
VVVVVQRSSj
^SSSSS
<at,<rt"<wt
t$<"u	3
< tK<	tG
F Pj*S
F$Pj+Sj
F(Pj,S
F,Pj-S
F0Pj.S
F4Pj/S
F8PjDS
F<PjES
F@PjFS
FDPjGS
FHPjHS
FLPjIS
FPPjJS
FTPjKS
FXPjLS
F\PjMS
F`PjNS
FdPjOS
FhPj8S
FlPj9S
FpPj:S
FtPj;S
FxPj<S
F|Pj=S
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
CHPjPV
CLPjQV
tKh 5H
Wj@hH2H
u h$5H
PPPPPPPP
;t$,v-
UQPXY]Y[
tCHt(Ht 
tCHt(Ht 
t VV9u
<+t"<-t
+t HHt
invalid string position
string too long
\files\Wallets
\Chedot\User Data\
Chedot Browser
\Rafotech\Mustang\User Data\
Mustang Browser
\Suhba\User Data\
Suhba Browser
\TorBro\Profile\
TorBro Browser
\Elements Browser\User Data\
Elements Browser
\CentBrowser\User Data\
Cent Browser
\QIP Surf\User Data\
QIP Surf
\uCozMedia\Uran\User Data\
\CocCoc\Browser\User Data\
CocCoc
\Vivaldi\User Data\
Vivaldi
\Epic Privacy Browser\User Data\
Epic Privacy Browser
\Sputnik\User Data\
Sputnik
\Maxthon5\Users\
Maxthon5
\Nichrome\User Data\
Nichrome
\Comodo\Dragon\User Data\
Comodo Dragon
\Opera Software\
\Orbitum\User Data\
Orbitum
\Torch\User Data\
\Amigo\User Data\
\Kometa\User Data\
Kometa
\Chromium\User Data\
Chromium
\Google\Chrome\User Data\
Google Chrome
\K-Meleon\
K-Meleon
\Mozilla\icecat\Profiles\
IceCat
\NETGATE Technologies\BlackHawk\Profiles\
BlackHawk
\8pecxstudios\Cyberfox\Profiles\
Cyberfox
\Waterfox\Profiles\
Waterfox
\Moonchild Productions\Pale Moon\Profiles\
Pale Moon
\Mozilla\Firefox\Profiles\
Mozilla Firefox
update_notifier.exe
plugin-container.exe
firefox.exe
\Telegram Desktop\tdata\D877F783D5D3EF8C\
\Telegram Desktop\tdata\D877F783D5D3EF8C\*
D877F783D5D3EF8C1
\Telegram Desktop\tdata\
D877F783D5D3EF8C0
\Telegram Desktop\tdata\*
\files\Telegram
Thunderbird
LOCALAPPDATA
APPDATA
C:\Program Files (x86)\Mozilla Thunderbird
\Thunderbird\Profiles\
Soft: Pidgin
<password>
<name>
<protocol>
\AppData\Roaming\.purple\accounts.xml
Soft: FileZilla
<Pass encoding="base64">
<User>
<Port>
<Host>
\AppData\Roaming\FileZilla\recentservers.xml
C:\Users\
SELECT HOST_KEY,name,encrypted_value from cookies
SELECT url, title from urls
SELECT target_path, tab_url from downloads
SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
SELECT name, value, value_lower FROM autofill
SELECT action_url, username_value, password_value FROM logins
SELECT host, name, value FROM moz_cookies
encryptedPassword
encryptedUsername
usernameField
formSubmitURL
\logins.json
SELECT encryptedUsername, encryptedPassword, formSubmitURL FROM moz_logins
\signons.sqlite
%s\Mozilla\Firefox\profiles.ini
SELECT url FROM moz_places
VaultFree
VaultGetItem
VaultEnumerateItems
VaultCloseVault
VaultOpenVault
vaultcli.dll
vector<T> too long
Password
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000005
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000006
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000007
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000008
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000009
ios_base::eofbit set
ios_base::failbit set
ios_base::badbit set
bad locale name
bad cast
-T2P!((>:1!D&l14~MT
N5B9UIDWTGD7RBPWP83
:Zone.Identifier
[ZoneTransfer]
ZoneId=2
C:\ProgramData\
netfulfilled
mnpayments
mncache
governance
banlist
mempool
fee_estimates
Users\Public
MicrosoftEdge\Cookies
All Users
Recycle.Bin
Program Files
Local\Temp
Recovery
msdownld.tmp
System Volume Information
Config.Msi
RECYCLE.BIN
ProgramData
Windows
WinRAR
Microsoft
*btc*.dat
*wallet*.dat
%DRIVE_REMOVABLE%
%DRIVE_FIXED%
%ALL_DRIVES%
\Documents
%DOCUMENTS%
\Desktop
%DESKTOP%
%LOCALAPPDATA%
%APPDATA%
%USERPROFILE%
telegram
fcount
ccount
cccount
profile
platform
\files\Files
\historych
\history
[Software]
[Processes]
Coordinates: 
City: 
Country: 
IP: %s
[Network]
VideoCard: 
CPU Count: 
Processor: 
[Hardware]
TimeZone: 
Local Time: 
Keyboard Languages: 
Display Language: 
Display Resolution: 
User Name: 
Computer Name: 
Windows: 
Work Dir: %s 
Path: %s 
GUID: %s
MachineID: %s
Date: %s
Version: %s
http://ip-api.com/line/
\files\Downloads
\files\History
\files\CC
\files\Cookies
\files\Autofill
\files
\jaxx\Local Storage\
file__0.localstorage
\MultiDoge\
MultiDoge
multidoge.wallet
\ElectronCash\wallets\
ElectronCash
info.seco
\Exodus\exodus.wallet\
seed.seco
passphrase.json
window-state.json
\Exodus\
Exodus
exodus.conf.json
\Electrum-LTC\wallets\
ElectrumLTC
\Electrum\wallets\
Electrum
default_wallet
\Ethereum\
Ethereum
keystore
1BEF0A57BE110FD467A
Content-Disposition: form-data; name="
Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0
Accept-Charset: iso-8859-1, utf-8, utf-16, *;q=0.1
Accept-Language: ru-RU,ru;q=0.9,en;q=0.8
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
http://
Content-Type: 
"; filename="
image/tiff
image/png
image/gif
image/jpeg
Content-Length: 
Content-Type: multipart/form-data; boundary=
+-0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
C:\ProgramData
sqlite3_column_text
sqlite3_step
sqlite3_prepare_v2
sqlite3_open
PK11SDR_Decrypt
PK11_Authenticate
PK11_FreeSlot
PK11_GetInternalKeySlot
NSS_Shutdown
NSS_Init
\nss3.dll
0123456789ABCDEF
Password: %s
Password: 
Login: %s
Host: %s
Soft: %s
Password: %s
FIREFOX PASS
Soft: %s
Password: 
Login: 
Host: 
Soft: 
Card: 
Year: 
Month: 
Name: 
Password: %s
UserName
Login: 
PortNumber
HostName
Soft: WinSCP
Host: 
Soft: The Bat!
\Account.CFN
\The Bat!\
\Authy Desktop\Local Storage\
files\Soft\Authy
\files\Soft\Authy
\files\Soft
\Authy Desktop\Local Storage\*.localstorage
	FALSE	1610149366
	FALSE	
	TRUE	/	FALSE	1830365600	
historych
history
C:\ProgramData\vcruntime140.dll
C:\ProgramData\softokn3.dll
C:\ProgramData\nss3.dll
C:\ProgramData\msvcp140.dll
C:\ProgramData\mozglue.dll
C:\ProgramData\freebl3.dll
*.cookie
files\Cookies\Edge_Cookies.txt
\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\
files\Cookies\IE_Cookies.txt
\Microsoft\Windows\Cookies\Low\
QQBrowser
\Tencent\QQBrowser\User Data\
360 Browser
\360Browser\Browser\User Data\
\vcruntime140.dll
/vcruntime140.dll
\softokn3.dll
/softokn3.dll
/nss3.dll
\msvcp140.dll
/msvcp140.dll
\mozglue.dll
/mozglue.dll
\freebl3.dll
/freebl3.dll
files\passwords.txt
file is encrypted or is not a database
bind or column index out of range
auxiliary database format error
authorization denied
large file support is disabled
library routine called out of sequence
datatype mismatch
constraint failed
string or blob too big
database schema has changed
table contains no data
locking protocol
unable to open database file
database or disk is full
database disk image is malformed
disk I/O error
interrupted
attempt to write a readonly database
out of memory
database table is locked
database is locked
callback requested query abort
access permission denied
SQL logic error or missing database
not an error
detail
selectid
comment
opcode
UTF-16
UTF16be
UTF16le
UTF-16be
UTF-16le
memory
truncate
persist
delete
foreign_keys
recursive_triggers
read_uncommitted
omit_readlock
writable_schema
ignore_check_constraints
automatic_index
reverse_unordered_selects
checkpoint_fullfsync
fullfsync
legacy_file_format
empty_result_callbacks
count_changes
short_column_names
full_column_names
group_concat
load_extension
zeroblob
replace
total_changes
changes
last_insert_rowid
sqlite_compileoption_get
sqlite_compileoption_used
sqlite_source_id
sqlite_version
nullif
randomblob
random
ifnull
coalesce
substr
length
typeof
ROLLBACK
RELEASE
sqlite_attach
sqlite_detach
tbl,idx,stat
sqlite_stat1
sqlite_rename_parent
sqlite_rename_trigger
sqlite_rename_table
ToReal
ToNumeric
ToBlob
ToText
NotUsed_140
NotUsed_139
Explain
MaxPgcnt
Pagecount
VUpdate
VRename
VColumn
VFilter
VDestroy
VCreate
VBegin
TableLock
Expire
IncrVacuum
Vacuum
JournalMode
Checkpoint
AggFinal
AggStep
IfZero
MemMax
FkIfZero
FkCounter
Program
RowSetTest
RowSetRead
RowSetAdd
IntegrityCk
DropTrigger
DropIndex
DropTable
LoadAnalysis
ParseSchema
CreateTable
CreateIndex
Destroy
String8
BitNot
Concat
Remainder
Divide
Multiply
Subtract
ShiftRight
ShiftLeft
BitAnd
NotNull
IsNull
IdxRowid
IdxDelete
IdxInsert
Rewind
NullRow
RowData
RowKey
ResetCount
Delete
InsertInt
Insert
NewRowid
Sequence
NotExists
IsUnique
NotFound
SeekGt
SeekGe
SeekLe
SeekLt
OpenPseudo
OpenEphemeral
OpenAutoindex
OpenWrite
OpenRead
VerifyCookie
SetCookie
ReadCookie
Transaction
AutoCommit
Savepoint
MakeRecord
Affinity
Column
Compare
Permutation
RealAffinity
MustBeInt
AddImm
Function
CollSeq
ResultRow
Variable
String
Integer
HaltIfNull
Return
current_date
current_timestamp
current_time
strftime
datetime
julianday
THREADSAFE=1
TEMP_STORE=1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
******""""""""""""""""""""
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
LLLLLLLLLL
0123456789ABCDEF0123456789abcdef
                             
thstndrd
SQLite format 3
0123456789ABCDEFl
onoffalseyestruefull
naturaleftouterightfullinnercross
CREATE TABLE sqlite_master(
  type text,
  name text,
  tbl_name text,
  rootpage integer,
  sql text
CREATE TEMP TABLE sqlite_temp_master(
  type text,
  name text,
  tbl_name text,
  rootpage integer,
  sql text
A?/,.-
MNOPQRSTUVWXYZ[\
12MNOPmRSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
RSTUVWXYZ[\
12ijk6n
DEFGHIJKLMNOPvRSTUVWXYZ[\
`abcdef
abcdefVW12vtm
^_ aXYZ[\
h)jDEFGHIJKLMNOP
RSTUVWXYZ[\
VWXYZ[\
DEFGHIJKLMNOP~RSTUVWXYZ[\
nDEFGHIJKLMNOPvRSTUVWXYZ[\
:DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOPwRSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
DEFGHIJKLMNOP
RSTUVWXYZ[\
GHEFGHIJKLMNOP
RSTUVWXYZ[\
FGHIJKLMNOP
RSTUVWXYZ[\
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
uLm:.P
)Q+e4"n-.1
3b1$ j
uFo,w_1#
;py=>/q
v@fffff
922337203685477580
_ROWID_
normal
exclusive
incremental
RESTRICT
SET NULL
SET DEFAULT
CASCADE
NO ACTION
UNION ALL
EXCEPT
INTERSECT
INTEGER
create
explain
temporary
trigger
2010-12-07 20:14:09 a586a4deeb25330037a49df295b36aaf624d0f45
unknown error
SQLITE_
start of 
unixepoch
@weekday 
localtime
v@year
>@month
second
@minute
@wKAhour
A AND 
(NULL)
?API call with %s database connection pointer
invalid
%s\etilqs_
etilqs_
OsError 0x%x (%u)
2nd reference to page %d
invalid page number %d
vtab:%p:%p
(blob)
keyinfo(%d
%s(%d)
collseq(%.20s)
program
intarray
API called with finalized prepared statement
API called with NULL prepared statement
%r %s BY term out of range - should be between 1 and %d
Expression tree is too large (maximum depth %d)
too many SQL variables
variable number must be between ?1 and ?%d
too many columns in %s
%s OR name=%Q
name=%Q
type='trigger' AND (%s)
SELECT tbl, idx, stat FROM %Q.sqlite_stat1
authorizer malfunction
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
not authorized
unknown database %T
corrupt database
object name reserved for internal use: %s
sqlite_
duplicate column name: %s
too many columns on %s
CREATE TABLE 
unknown column "%s" in foreign key definition
number of columns in foreign key does not match the number of columns in the referenced table
foreign key on %s should reference only one column of table %T
a JOIN clause is required before %s
cannot modify %s because it is a view
table %s may not be modified
Cforeign key mismatch
BINARY
error during initialization: %s
no entry point [%s] in shared library [%s]
unable to open shared library [%s]
sqlite3_extension_init
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
only a single result allowed for a SELECT that is part of an expression
USE TEMP B-TREE FOR %s
COMPOUND SUBQUERIES %d AND %d %s(%s)
USING TEMP B-TREE 
no such index: %s
name='%q' AND type='table'
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
sqlite_master
sqlite_temp_master
CREATE VIRTUAL TABLE %T
 hidden
hidden
vtable constructor did not declare schema: %s
vtable constructor failed: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
%s (~%lld rows)
%s VIRTUAL TABLE INDEX %d:%s
%s (rowid<?)
%s (rowid>?)
%s (rowid>? AND rowid<?)
%s (rowid=?)
%s USING INTEGER PRIMARY KEY
%s USING %s%sINDEX%s%s%s
AUTOMATIC 
COVERING 
%s AS %s
%s TABLE %s
%s SUBQUERY %d
SEARCH
parser stack overflow
near "%T": syntax error
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
unopened
%!.15g
foreign key constraint failed
unable to use function %s in the requested context
zeroblob(%d)
'%.*q'
tbl_name=%Q
DELETE FROM %Q.%s WHERE tbl=%Q
CREATE TABLE %Q.%s(%s)
%s %T cannot reference objects in database %s
default value of column [%s] is not constant
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
COMMIT
no such collation sequence: %s
integer overflow
ESCAPE expression must be a single character
LIKE or GLOB pattern too complex
%s - %s
malformed database schema (%s)
cannot join using column %s - column not present in both tables
cannot have both ON and USING clauses in the same join
a NATURAL join may not have an ON or USING clause
bind on a busy prepared statement: [%s]
%s: %s
%s: %s.%s
%s: %s.%s.%s
ambiguous column name
no such column
misuse of aliased aggregate %s
parameters prohibited in CHECK constraints
wrong number of arguments to function %.*s()
no such function: %.*s
misuse of aggregate function %.*s()
not authorized to use function: %s
subqueries prohibited in CHECK constraints
too many terms in %s BY clause
EXECUTE %s%s SUBQUERY %d
CORRELATED 
SCALAR
%.*s"%w"%s
%s%.*s"%w"
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
Cannot add a column with non-constant default
Cannot add a NOT NULL column with default value NULL
Cannot add a REFERENCES column with non-NULL default value
Cannot add a UNIQUE column
Cannot add a PRIMARY KEY column
invalid name: "%s"
integer
automatic extension loading failed: %s
DISTINCT aggregates must have exactly one argument
B}Tunable to delete/modify user-function due to active statements
unable to delete/modify collation sequence due to active statements
%04d-%02d-%02d %02d:%02d:%02d
%02d:%02d:%02d
%04d-%02d-%02d
%06.3f
M@%03d
%r ORDER BY term does not match any column in the result set
too many terms in ORDER BY clause
aggregate functions are not allowed in the GROUP BY clause
a GROUP BY clause is required before HAVING
SELECTs to the left and right of %s do not have the same number of result columns
LIMIT clause should come after %s not before
ORDER BY clause should come after %s not before
auto-index
BmTindexed columns are not unique
%s-shm
Recovered %d frames from WAL file %s
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
Failed to read ptrmap key=%d
failed to get page %d
%d of %d pages missing from overflow list starting at %d
freelist leaf count too big on page %d
Fragmentation of %d bytes reported as %d on page %d
Multiple uses for byte %d of page %d
Corruption detected in cell %d on page %d
Rowid %lld out of order (min less than parent max of %lld)
Rowid %lld out of order (max larger than parent max of %lld)
Rowid %lld out of order (min less than parent min of %lld)
Rowid %lld out of order (max larger than parent min of %lld)
On page %d at right child: 
Child page depth differs
Rowid %lld out of order (previous was %lld)
On tree page %d cell %d: 
btreeInitPage() returns error code %d
unable to get the page. error code=%d
Page %d: 
Outstanding page count goes from %d to %d during this analysis
Pointer map page %d is referenced
Page %d is never used
List of tree roots: 
Main freelist: 
sqlite3_get_table() called with two or more incompatible queries
-journal
%s-mj%08X
:memory:
database %s is locked
cannot DETACH database within transaction
cannot detach database %s
no such database: %s
unable to open a temporary database file for storing temporary tables
temporary storage cannot be changed from within a transaction
type='trigger' AND name='%q'
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
unable to close due to unfinished backup operation
unable to close due to unfinalised statements
unknown database: %s
unknown database %s
source and destination must be distinct
 is not unique
 are not unique
column 
columns 
PRIMARY KEY must be unique
%s.%s may not be NULL
database schema is locked: %s
statement too long
INSERT INTO vacuum_db.sqlite_master   SELECT type, name, tbl_name, rootpage, sql    FROM main.sqlite_master   WHERE type='view' OR type='trigger'      OR (type='table' AND rootpage=0)
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence' 
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence'   AND rootpage>0
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21)   FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14)  FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %' 
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14)   FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence'   AND rootpage>0
BEGIN EXCLUSIVE;
PRAGMA vacuum_db.synchronous=OFF
ATTACH '' AS vacuum_db;
ATTACH ':memory:' AS vacuum_db;
cannot VACUUM - SQL statements in progress
cannot VACUUM from within a transaction
NOCASE
no such vfs: %s
unknown function: %.*s()
misuse of aggregate: %s()
RAISE() may only be used within a trigger-program
invalid rootpage
constraint failed at %d in [%s]
abort at %d in [%s]: %s
database table is locked: %s
cannot change %s wal mode from within a transaction
out of
too many levels of trigger recursion
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot commit - no transaction is active
cannot rollback - no transaction is active
cannot commit transaction - SQL statements in progress
cannot start a transaction within a transaction
cannot rollback transaction - SQL statements in progress
cannot %s savepoint - SQL statements in progress
release
rollback
no such savepoint: %s
cannot open savepoint - SQL statements in progress
statement aborts at %d: [%s] %s
cannot use index: %s
at most %d tables in a join
no such rowid: %lld
cannot open value of type %s
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
unsupported file format
attached databases must use the same text encoding as main database
no such trigger: %S
unable to open database: %s
database is already attached
database %s is already in use
cannot ATTACH database within transaction
too many attached databases - max %d
no such table
no such view
sqlite_sequence
there is already an index named %s
table %T already exists
temporary table name must be unqualified
DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
no such index: %S
unable to identify the object to be reindexed
too many columns in result set
no tables specified
no such table: %s
sqlite_subquery_%p_
ORDER BY
GROUP BY
DISTINCT
too many terms in compound SELECT
cannot create INSTEAD OF trigger on table: %S
cannot create %s trigger on view: %S
BEFORE
cannot create trigger on system table
trigger %T already exists
cannot create triggers on virtual tables
temporary trigger may not have qualified name
_rowid_
cannot open %s column for writing
no such column: "%s"
indexed
foreign key
cannot open view: %s
cannot open virtual table: %s
sqlite_altertab_%s
Cannot add a column to a view
virtual tables may not be altered
name='%q' AND type='index'
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
CREATE%s INDEX %.*s
 UNIQUE
conflicting ON CONFLICT clauses specified
table %s has no column named %s
sqlite_autoindex_%s_%d
index %s already exists
there is already a table named %s
virtual tables may not be indexed
views may not be indexed
table %s may not be indexed
altertab_
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
table "%s" has more than one primary key
tbl_name='%q'
CREATE TABLE %Q.sqlite_sequence(name,seq)
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE %s %.*s
view %s is circularly defined
rows inserted
table %S has no column named %s
%d values for %d columns
table %S has %d columns but %d values were supplied
wrong # of entries in index 
 missing from index 
rowid 
*** in database %s ***
wal_autocheckpoint
wal_checkpoint
compile_option
compile_options
freelist_count
user_version
schema_version
unsupported encoding: %s
encoding
quick_check
integrity_check
case_sensitive_like
on_delete
on_update
foreign_key_list
collation_list
database_list
unique
index_list
index_info
dflt_value
notnull
table_info
Safety level may not be changed inside a transaction
synchronous
not a writable directory
temp_store_directory
temp_store
incremental_vacuum
auto_vacuum
journal_size_limit
journal_mode
locking_mode
max_page_count
page_count
secure_delete
page_size
cache_size
default_cache_size
rows updated
no such column: %s
there is already another table or index with this name: %s
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
view %s may not be altered
table %s may not be altered
parameters are not allowed in views
-- TRIGGER %s
rows deleted
DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %s.sqlite_sequence WHERE name=%Q
use DROP VIEW to delete view %s
use DROP TABLE to delete table %s
table %s may not be dropped
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
qualified table names are not allowed on INSERT, UPDATE, and DELETE statements within triggers
too many arguments on function %T
set list
unrecognized token: "%T"
interrupt
ProcessorNameString
HARDWARE\DESCRIPTION\System\CentralProcessor\0
DisplayVersion
DisplayName
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Unknown
ProductName
SOFTWARE\Microsoft\Windows NT\CurrentVersion
MachineGuid
SOFTWARE\Microsoft\Cryptography
kernel32.dll
GlobalMemoryStatusEx
DISPLAY
---------- 
----------
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@>@@@?456789:;<=@@@@@@@
@@@@@@
 !"#$%&'()*+,-./0123@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
screenshot.jpg
raB3G%p
ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
<unknown>
C:\Windows\System32\cmd.exe
 & exit
 /f & erase 
/c taskkill /im 
Qkkbal
-ct_tally: bad match
invalid length
output buffer too small for in-memory compression
wild scan
no future
insufficient lookahead
more < 2
inconsistent bit counts
too many codes
not enough codes
bad d_code
bad pack level
ct_init: 256+dist != 512
ct_init: dist != 256
ct_init: length != 256
bad compressed size
generic
iostream
system
iostream stream error
Unknown exception
bad allocation
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Visual C++ CRT: Not enough memory to complete call to strerror.
bad exception
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
CorExitProcess
(null)
`h````
xpxxxx
`h`hhh
xppwpp
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
UTF-16LE
UNICODE
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
Illegal byte sequence
Directory not empty
Function not implemented
No locks available
Filename too long
Resource deadlock avoided
Result too large
Domain error
Broken pipe
Too many links
Read-only file system
Invalid seek
No space left on device
File too large
Inappropriate I/O control operation
Too many open files
Too many open files in system
Invalid argument
Is a directory
Not a directory
No such device
Improper link
File exists
Resource device
Unknown error
Bad address
Permission denied
Not enough space
Resource temporarily unavailable
No child processes
Bad file descriptor
Exec format error
Arg list too long
No such device or address
Input/output error
Interrupted function call
No such process
No such file or directory
Operation not permitted
No error
 Complete Object Locator'
 Class Hierarchy Descriptor'
 Base Class Array'
 Base Class Descriptor at (
 Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
 delete[]
 new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
 delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
1#QNAN
1#SNAN
LocalFree
WideCharToMultiByte
HeapAlloc
GetProcessHeap
HeapFree
lstrlenA
LocalAlloc
CloseHandle
WriteFile
CreateFileA
ExitProcess
FindClose
FindNextFileW
DeleteFileW
lstrcmpW
FindFirstFileW
lstrcatW
lstrcpyW
CopyFileW
CreateDirectoryW
GetDriveTypeA
GetLogicalDriveStringsA
DeleteFileA
GetCurrentProcessId
SetCurrentDirectoryA
CreateDirectoryA
GetLastError
CreateMutexA
MultiByteToWideChar
ReadFile
GetFileSize
GetVersionExA
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetProcAddress
LoadLibraryA
FreeLibrary
GetPrivateProfileSectionNamesA
GetFileAttributesW
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
AreFileApisANSI
SetFilePointer
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
LockFileEx
UnlockFileEx
GetFileAttributesA
GetFileAttributesExW
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetSystemTime
GetSystemTimeAsFileTime
UnmapViewOfFile
GetTempPathA
GetTempPathW
FormatMessageA
FormatMessageW
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileW
GetSystemInfo
MapViewOfFile
CreateFileMappingA
GetComputerNameA
IsWow64Process
GetCurrentProcess
GlobalMemoryStatus
GetModuleHandleA
GetUserDefaultLocaleName
TzSpecificLocalTimeToSystemTime
GetTimeZoneInformation
GetLocaleInfoA
GetFileSizeEx
FileTimeToSystemTime
GetFileInformationByHandle
SystemTimeToFileTime
GetLocalTime
KERNEL32.dll
MessageBoxA
EnumDisplayDevicesW
CharToOemA
wsprintfA
ReleaseDC
GetKeyboardLayoutList
GetSystemMetrics
GetDesktopWindow
USER32.dll
GetDeviceCaps
CreateDCA
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GDI32.dll
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegGetValueA
RegCloseKey
RegGetValueW
RegOpenKeyExW
GetCurrentHwProfileA
GetUserNameA
ADVAPI32.dll
ShellExecuteA
SHGetFolderPathA
SHELL32.dll
CoUninitialize
CoCreateInstance
ole32.dll
PathMatchSpecW
SHLWAPI.dll
CryptUnprotectData
CryptStringToBinaryA
CRYPT32.dll
GetModuleFileNameExA
GetModuleBaseNameA
EnumProcessModules
PSAPI.DLL
InternetReadFile
InternetOpenUrlA
InternetOpenA
HttpAddRequestHeadersA
HttpQueryInfoA
InternetSetFilePointer
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetSetOptionA
WININET.dll
GdipFree
GdipAlloc
GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusShutdown
GdiplusStartup
GdipCloneImage
gdiplus.dll
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
EncodePointer
DecodePointer
RaiseException
RtlUnwind
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
SetHandleCount
InitializeCriticalSectionAndSpinCount
HeapCreate
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
GetStringTypeW
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
CompareStringW
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVruntime_error@std@@
.?AVfacet@locale@std@@
.?AUctype_base@std@@
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_iostream@DU?$char_traits@D@std@@@std@@
.?AV?$ctype@D@std@@
.?AVsystem_error@std@@
.?AVfailure@ios_base@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AVbad_cast@std@@
.?AVcodecvt_base@std@@
.?AV?$codecvt@DDH@std@@
.?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ofstream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ifstream@DU?$char_traits@D@std@@@std@@
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
.?AVImage@Gdiplus@@
.?AVGdiplusBase@Gdiplus@@
.?AVBitmap@Gdiplus@@
.?AV?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$numpunct@D@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AV_Locimp@locale@std@@
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AV_System_error_category@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVtype_info@@
.?AVbad_exception@std@@
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ