Sample details: 6d66b183e20d5573adfc68753591a4d9 --

Hashes
MD5: 6d66b183e20d5573adfc68753591a4d9
SHA1: 86ebe1a5bc04d9d4fc56370b5cfb23df4ba60081
SHA256: 297692101013e46022a5da41cfefa80e2b64df3ed3964baa78344726ee5c9aa6
SSDEEP: 12288:Db0x4aQcubq0hDlkx1SYrNwqSDa0VsIppsOgqUnNzzpJdKZ4:30Ycubqw6xVNwqUpXgqoNz
Details
File Type: PE32
Yara Hits
YRP/Borland_Delphi_40_additional | YRP/Microsoft_Visual_Cpp_v50v60_MFC | YRP/Borland_Delphi_30_additional | YRP/Borland_Delphi_30_ | YRP/Borland_Delphi_Setup_Module | YRP/Borland_Delphi_40 | YRP/Borland_Delphi_v40_v50 | YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional | YRP/Borland_Delphi_v30 | YRP/Borland_Delphi_DLL | YRP/Borland | YRP/BobSoftMiniDelphiBoBBobSoft | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/borland_delphi | YRP/maldoc_find_kernel32_base_method_1 | YRP/domain | YRP/IP | YRP/contentis_base64 | YRP/VM_Generic_Detection | YRP/Dropper_Strings | YRP/Check_OutputDebugStringA_iat | YRP/anti_dbg | YRP/network_dropper | YRP/network_dns | YRP/keylogger | YRP/win_mutex | YRP/win_registry | YRP/win_files_operation | YRP/Big_Numbers0 | YRP/Big_Numbers1 | YRP/Advapi_Hash_API | YRP/MD5_Constants | YRP/BASE64_table | YRP/Delphi_Random | YRP/Delphi_CompareCall | YRP/Delphi_Copy | YRP/Windows_Malware | YRP/with_sqlite |
Source
http://193.124.117.153/crypt/without/AU2_EXE.exe
http://193.124.117.153/crypt/without/AU2_EXE.exe
Strings
		This program must be run under Win32
.idata
.reloc
P.rsrc
.idata
.reloc
P.rsrc
String$
WideString
YZ]_^[
YZ]_^[
_^[YY]
YZ]_^[
C<"u1S
Q<"u8S
~KxI[)
SOFTWARE\Borland\Delphi\RTL
FPUMaskValue
tVSVWU
YZ]_^[
YZ]_^[
_^[YY]
ST234LMUV56CklAopq78Brstuvwxyz01NOPQRmGHIJKWXYZabcdefgDEFhijn9+/
ST234LMUV56CklAopq78Brstuvwxyz01NOPQRmGHIJKWXYZabcdefgDEFhijn9+/
_^[YY]
DnsQuery_A
dnsapi.dll
mmfx1xPhcZbWGI7fLC9AWD1j+w2z5GRV
y9G7n8baxX3k8VuG+3dXJi/ooOhITNR0F248zrtugEh7fUxNSCycx3NDNP0F0cx8oV6z9ZTNacB8KTKs3VlXfnu7tkLJRx0s0x4o73QyE4N
 HTTP/1.0
Host: 
Connection: close
Content-Length: 
Accept-Language: en-US
Content-Type: image/jpeg
TConfig
TSwdPwd
	TPwdArray
GlobalVars
GlobalVars
AA6EEE0A-97B7-46FE-BD01-0FC54FD36163-ED03A8DD-6213-4535-8891-5D0A112A3F40
SOFT:		
HOST:		
USER:		
PASS:		
UNKN:		
YZ]_^[
TStringArray
GLOBALFUNC
IsWow64Process
kernel32.dll
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
QQQQQQQSV
QQQQQQSVW
YZ]_^[
QQQQQSVW
Windows
CheckTokenMembership
advapi32.dll
CheckTokenMembership
advapi32.dll
QQQQQQSVW
URLDownloadToFileW
urlmon.dll
ShellExecuteW
shell32.dll
WTSGetActiveConsoleSessionId
kernel32.dll
WTSQueryUserToken
wtsapi32.dll
CreateEnvironmentBlock
userenv.dll
NSS_Init
PK11_GetInternalKeySlot
PK11_Authenticate
PK11SDR_Decrypt
NSS_Shutdown
PK11_FreeSlot
,"logins":[{
timesUsed":
,"hostname":"
encryptedUsername":"
encryptedPassword":"
~/{"yP
PZ7tY!|i
rO$qY,=s$oP+rM
PZ?tY)|i
rO,qY$=s,oP#rM
+CSM*!N%<Sm6S&
_^[YY]
uvh){G
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
N;3r"3
OP_^[]
_^[YY]
ts;_LrA;_Ps<
q,_^[Y]
W8_^[]
_^[YY]
S(;S,r
_^[YY]
YF;sh|
XZRPWV
S\;STu%;CPu 
S\;STu%;CPu 
_^[YY]
_^[YY]
YF;sh|
_^[YY]
;ODu^j
_^[YY]
_^[YY]
Y_^[Y]
_^[YY]
_^[YY]
_^[YY]
;{Tt$V
S J#S t
Y;C,t'
_^[YY]
TCPf;V
\XPf;Z
v @;F,u
;F,uT3
v @;F,u
K4;Q$v
;B$~)h
C@ t S
_^[YY]
_^[YY]
C0_^[]
0_^[Y]
	Fd^[]
_^[YY]
CP#F8^[]
_^[YY]
Y_^[Y]
HtOHt$
XDf;ZDt
_^[YY]
G	@t	W
_^[YY]
_^[YY]
_^[YY]
K _^[]
_^[YY]
_^[YY]
	A8	Q<
	G8	W<
_^[YY]
_^[YY]
_^[YY]
N QjQW
_^[YY]
tpHt6H
S f;V t
_^[YY]
R f;S u
{@_^[]
_^[YY]
BRVjKS
W2RjKS
_^[YY]
_^[YY]
JM:KBt
e_^[Y]
Y_^[Y]
_^[YY]
B=rahcu
v=bolcu
k=txetu
`=bolbu
D=laeru	
4=aolfu	
$=buodu	
C0^[Y]
u6j	h 
G2f;C2
G6:C6t*
_^[YY]
G* u(3
_^[YY]
Y_^[Y]
_^[YY]
j;h,EG
f;Z t7
A* u>j
_^[YY]
P"RSjbW
G2f;F2t
W6:V6t
Y;5XOG
_^[YY]
_^[YY]
_^[YY]
E @PSj
_^[YY]
t|It<I
_^[YY]
BRWj_V
_^[YY]
P0f;V0}
P;G@t=
G<_^[Y]
_^[YY]
_^[YY]
C4_^[]
_^[YY]
_^[YY]
_^[YY]
VL#A(#Q,
f;y2uH
@* uNj
_^[YY]
Z jASP
	F 	V$_^[
_^[YY]
_^[YY]
N f;LCHt
F f;CHt
Jf;P u7
#A8#Q<
FD_^[]
C8;C0t
K8;K0t
B*f;A*v
A%@t&f
_^[YY]
_^[YY]
B(f;F0
#A8#Q<
#A(#Q,
Y_^[YY]
Y_^[YY]
C4#C8[]
_^[YY]
_^[YY]
Cannot Decrypt
CryptUnprotectData
crypt32.dll
Yiy|%6
*:7fuQkvSzjVknS
fKKTvOBNs[|N_jhH}]IwXfGY_`
\@*pK(Ck5~H(qs
lJ5?k&kN
tS<CV.Kf
z~wt+NI:
h4MO,JI>w
taString
uURLHistory
uIE7_decodeU
uIE7_decodeU
Software\Microsoft\Internet Explorer\IntelliForms\Storage2
Version
Software\Microsoft\Internet Explorer
QQQQQQSVW3
 [($^|^$)] 
ie9-11
InternetExplorer
PVAULT_CRED8
EdgePwds
CLSIDFromString
ole32.dll
vaultcli.dll
VaultOpenVault
VaultEnumerateItems
VaultGetItem
MicrosoftEdge
Cannot Decrypt
outlookDecrU
 Server
Outlook
-=FB[aZ\gHaXD^gBNzKIIzT{IRb^
[yaVXOgHSa{Xg^TzCaBDSqBJf
pp^NtJT{J
FX_fTNaHPI}OzKTyHNIbHaARzF
-=U~R3YJ4_X	`T6_R&B[!qr3KT6Had
eqr YQ:BV	}O:KT9HN	bH!AR:F
5M]f";A:<G(
x$>G".Z+)i
(A!2Z&
e?2S$1P>
z8)Y"2^
JUFQUERBVEElXGZpbGV6aWxsYVxyZWNlbnRzZXJ2ZXJzLnhtbA==
FileZilla
QQQQQSVW
WinSCP
</roster-cache>
<roster-cache>
PsiPlus
Pidgin
</account>
<account>
QQQQQQQSVW3
SELECT host, path, isSecure, expiry, name, value FROM moz_cookies
SELECT host_key, name, encrypted_value, value, path, secure, expires_utc FROM cookies
SELECT host_key, name, name, value, path, secure, expires_utc FROM cookies
1610149366
JUxPQ0FMQVBQREFUQSVcR29vZ2xlXENocm9tZVxVc2VyIERhdGFc
$4)h{OexMtdHe`M
hKK[kHQPg\~KYi
gtwhYWQ~
iI<FR&Fg
% TuUQdQT
|IityC|W`sJ}IuwzCly@vI
SELECT fieldname, value FROM moz_formhistory
SELECT name, value FROM autofill
SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted value FROM credit_cards
JUxPQ0FMQVBQREFUQSVcR29vZ2xlXENocm9tZVxVc2VyIERhdGFc
{pdvsfgocvkf
c~VQCRG{n^ISZ_uMH@LBEcrDZU
Browsers\Cookies
Browsers\AutoComplete
Software\Microsoft\Windows\CurrentVersion\Uninstall
Software\Microsoft\Windows\CurrentVersion\Uninstall\
GlobalMemoryStatusEx
kernel32.dll
CPU Count: 
GetRAM: 
GPU Info
CreateToolhelp32Snapshot
kernel32.dll
Process32FirstW
Process32NextW
MachineID :   
EXE_PATH  :   
DLL_PATH  :   
Windows    :   
d48qw4d6wq84d56as
MIOSHJD-VBDIS-HUIDV-DQEFDD
193.124.117.153/gate.php
getcfg=
Passwords.txt
CookieList.txt
SYSInfo.txt
reportdata=<info
</info
Runtime error     at 00000000
0123456789ABCDEF
3.14.2
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
******""""""""""""""""""""
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
				&&					
&&&&&&&&&&
BINARY
0123456789ABCDEF0123456789abcdef
thstndrd
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
SQLite format 3
  !!""##$$%%&&''(())**++,,--..//00112233445566778899
0123456789ABCDEF
onoffalseyestruextrafull
naturaleftouterightfullinnercross
 !"#$%&'()
+,-./012345
 !"#$%&'()
+,-./012345/012345=aa
12345F
 !"#$%&'()
+,-./012345
 !"#$%&'()Q+,-./01234578
 !"#$%&'()O+,-./012345
 !"#$%&'()
+,-./012345
 !"#$%&'()
+,-./012345
 !"#$%&'()
+,-./012345
 !"#$%&'()
+,-./012345
 !"#$%&'()
+,-./012345
 !"#$%&'()
+,-./012345
 !"#$%&'()
+,-./012345
 !"#$%&'()k+,-./012345
 !"#$%&'()
+,-./012345
 !"#$%&'()
+,-./012345
 !"#$%&'()
+,-./012345
cdefghi
lmn678
&'()S+,-./012345_
78Blmn
S+,-./012345_
ab78eab
78pabGd
_IaK78e
IUK&'()*+,-./012345
o%%8@z
777777777777777777777777777777777777777
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYWITHOUTERELEASEATTACHAVINGROUPDATEBEGINNERECURSIVEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTRIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLYLiuJ
xPq>.T
F*HhO?qJK
Ws}YZLt
SYSTEM_MALLOC
THREADSAFE=1
SQLITE_
20b:20e
20c:20e
40f-21a-21d
local time unavailable
localtime
unixepoch
weekday 
start of 
minute
second
%04d-%02d-%02d %02d:%02d:%02d
%02d:%02d:%02d
%04d-%02d-%02d
%06.3f
julianday
datetime
strftime
current_time
current_timestamp
current_date
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
(NULL)
922337203685477580
API call with %s database connection pointer
unopened
invalid
Savepoint
AutoCommit
Transaction
SorterNext
PrevIfOpen
NextIfOpen
Checkpoint
JournalMode
Vacuum
VFilter
VUpdate
InitCoroutine
MustBeInt
SeekLT
SeekLE
SeekGE
SeekGT
NoConflict
NotFound
SeekRowid
NotExists
IsNull
NotNull
BitAnd
ShiftLeft
ShiftRight
Subtract
Multiply
Divide
Remainder
Concat
SorterSort
BitNot
Rewind
RowSetRead
RowSetTest
Program
FkIfZero
IfNotZero
DecrJumpZero
IncrVacuum
Return
EndCoroutine
HaltIfNull
Integer
String
SoftNull
Variable
IntCopy
ResultRow
CollSeq
Function0
Function
AddImm
RealAffinity
Permutation
Compare
Column
Affinity
String8
MakeRecord
ReadCookie
SetCookie
ReopenIdx
OpenRead
OpenWrite
OpenAutoindex
OpenEphemeral
SorterOpen
SequenceTest
OpenPseudo
ColumnsUsed
Sequence
NewRowid
Insert
InsertInt
Delete
ResetCount
SorterCompare
SorterData
RowKey
RowData
NullRow
SorterInsert
IdxInsert
IdxDelete
IdxRowid
Destroy
ResetSorter
CreateIndex
CreateTable
ParseSchema
LoadAnalysis
DropTable
DropIndex
DropTrigger
IntegrityCk
RowSetAdd
FkCounter
MemMax
OffsetLimit
AggStep0
AggStep
AggFinal
Expire
TableLock
VBegin
VCreate
VDestroy
VColumn
VRename
Pagecount
MaxPgcnt
CursorHint
Explain
AreFileApisANSI
CharLowerW
CharUpperW
CloseHandle
CreateFileA
CreateFileW
CreateFileMappingA
CreateFileMappingW
CreateMutexW
DeleteFileA
DeleteFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentProcessId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesW
GetFileAttributesExW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetProcAddressA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
SystemTimeToFileTime
UnlockFile
UnlockFileEx
UnmapViewOfFile
WideCharToMultiByte
WriteFile
CreateEventExW
WaitForSingleObject
WaitForSingleObjectEx
SetFilePointerEx
GetFileInformationByHandleEx
MapViewOfFileFromApp
CreateFile2
LoadPackagedLibrary
GetTickCount64
GetNativeSystemInfo
OutputDebugStringA
OutputDebugStringW
GetProcessHeap
CreateFileMappingFromApp
InterlockedCompareExchange
UuidCreate
UuidCreateSequential
FlushViewOfFile
OsError 0x%lx (%lu)
os_win.c:%d: (%lu) %s(%s) - %s
delayed %dms for lock/sharing conflict at line %d
winSeekFile
winClose
winRead
winWrite1
winWrite2
winTruncate1
winTruncate2
winSync1
winSync2
winFileSize
winUnlockReadLock
winUnlock
%s-shm
winOpenShm
winShmMap1
winShmMap2
winShmMap3
winUnmapfile1
winUnmapfile2
winMapfile1
winMapfile2
etilqs_
winGetTempname1
winGetTempname2
winGetTempname3
winGetTempname4
winGetTempname5
etilqs_
winOpen
winDelete
winAccess
%s%c%s
winFullPathname1
winFullPathname2
winFullPathname3
winFullPathname4
win32-longpath
win32-none
win32-longpath-none
recovered %d pages from %s
-journal
nolock
immutable
recovered %d frames from WAL file %s
cannot limit WAL size: %s
:memory:
invalid page number %d
2nd reference to page %d
Failed to read ptrmap key=%d
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
%d of %d pages missing from overflow list starting at %d
failed to get page %d
freelist leaf count too big on page %d
free-page count in header is too small
Page %d: 
unable to get the page. error code=%d
btreeInitPage() returns error code %d
On tree page %d cell %d: 
On page %d at right child: 
Offset %d out of range %d..%d
Extends off end of page
Rowid %lld out of order
Child page depth differs
Multiple uses for byte %u of page %d
Fragmentation of %d bytes reported as %d on page %d
Main freelist: 
Page %d is never used
Pointer map page %d is referenced
out of memory
unknown database %s
destination database is in use
source and destination must be distinct
%!.15g
BINARY
(%.20s)
%s(%d)
(blob)
vtab:%p
program
%s-mjXXXXXX9XXz
MJ delete: %s
MJ collide: %s
-mj%06X9%02X
FOREIGN KEY constraint failed
API called with finalized prepared statement
API called with NULL prepared statement
string or blob too big
unable to use function %s in the requested context
bind on a busy prepared statement: [%s]
%!.15g
'%.*q'
zeroblob(%d)
NOT NULL
UNIQUE
FOREIGN KEY
%s constraint failed
%z: %s
abort at %d in [%s]: %s
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot release savepoint - SQL statements in progress
cannot commit transaction - SQL statements in progress
cannot start a transaction within a transaction
cannot rollback - no transaction is active
cannot commit - no transaction is active
database schema has changed
sqlite_temp_master
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
too many levels of trigger recursion
cannot change %s wal mode from within a transaction
out of
database table is locked: %s
statement aborts at %d: [%s] %s
string or blob too big
out of memory
cannot open value of type %s
integer
no such rowid: %lld
cannot open virtual table: %s
cannot open table without rowid: %s
cannot open view: %s
no such column: "%s"
foreign key
indexed
cannot open %s column for writing
misuse of aliased aggregate %s
no such column
ambiguous column name
%s: %s.%s.%s
%s: %s.%s
%s: %s
partial index WHERE clauses
index expressions
CHECK constraints
%s prohibited in %s
the "." operator
functions
second argument to likelihood() must be a constant between 0.0 and 1.0
not authorized to use function: %s
non-deterministic functions
misuse of aggregate function %.*s()
no such function: %.*s
wrong number of arguments to function %.*s()
subqueries
parameters
%r %s BY term out of range - should be between 1 and %d
too many terms in ORDER BY clause
%r ORDER BY term does not match any column in the result set
too many terms in %s BY clause
a GROUP BY clause is required before HAVING
aggregate functions are not allowed in the GROUP BY clause
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
too many SQL variables
too many columns in %s
_ROWID_
EXECUTE %s%s SUBQUERY %d
CORRELATED 
SCALAR
hex literal too big: %s
misuse of aggregate: %s()
unknown function: %s()
RAISE() may only be used within a trigger-program
%.*s"%w"%s
%s%.*s"%w"
%.*s"%w"%s
sqlite_rename_table
sqlite_rename_trigger
sqlite_rename_parent
name=%Q
%s OR name=%Q
type='trigger' AND (%s)
tbl_name=%Q
sqlite_
table %s may not be altered
there is already another table or index with this name: %s
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
sqlite_temp_master
sqlite_master
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
sqlite_temp_master
sqlite_master
sqlite_sequence
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Cannot add a PRIMARY KEY column
Cannot add a UNIQUE column
Cannot add a REFERENCES column with non-NULL default value
Cannot add a NOT NULL column with default value NULL
Cannot add a column with non-constant default
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
sqlite_temp_master
sqlite_master
virtual tables may not be altered
Cannot add a column to a view
sqlite_altertab_%s
sqlite_stat1
tbl,idx,stat
sqlite_stat3
sqlite_stat4
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE %s=%Q
stat_init
stat_push
stat_get
sqlite_%
unordered*
sz=[0-9]*
noskipscan*
sqlite_stat1
SELECT tbl,idx,stat FROM %Q.sqlite_stat1
too many attached databases - max %d
cannot ATTACH database within transaction
database %s is already in use
database is already attached
attached databases must use the same text encoding as main database
out of memory
unable to open database: %s
no such database: %s
cannot detach database %s
cannot DETACH database within transaction
database %s is locked
sqlite_detach
sqlite_attach
%s %T cannot reference objects in database %s
%s cannot use variables
authorizer malfunction
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
not authorized
no such view
no such table
%s: %s.%s
%s: %s
sqlite_temp_master
sqlite_master
corrupt database
unknown database %T
sqlite_
object name reserved for internal use: %s
sqlite_temp_master
sqlite_master
temporary table name must be unqualified
sqlite_temp_master
sqlite_master
table %T already exists
there is already an index named %s
sqlite_sequence
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
INTEGER
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
CREATE TABLE 
AUTOINCREMENT not allowed on WITHOUT ROWID tables
PRIMARY KEY missing on table %s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
sqlite_temp_master
sqlite_master
CREATE TABLE %Q.sqlite_sequence(name,seq)
tbl_name='%q' AND type!='trigger'
parameters are not allowed in views
view %s is circularly defined
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
sqlite_temp_master
sqlite_master
sqlite_stat%d
DELETE FROM %Q.%s WHERE %s=%Q
DELETE FROM %Q.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
sqlite_temp_master
sqlite_master
sqlite_temp_master
sqlite_master
sqlite_
sqlite_stat
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
cannot create a TEMP index on non-TEMP table "%s"
sqlite_
altertab_
table %s may not be indexed
views may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
sqlite_temp_master
sqlite_master
expressions prohibited in PRIMARY KEY and UNIQUE constraints
conflicting ON CONFLICT clauses specified
CREATE%s INDEX %.*s
 UNIQUE
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
sqlite_temp_master
sqlite_master
name='%q' AND type='index'
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
sqlite_temp_master
sqlite_master
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
sqlite_temp_master
sqlite_master
a JOIN clause is required before %s
COMMIT
ROLLBACK
RELEASE
ROLLBACK
unable to open a temporary database file for storing temporary tables
index '%q'
%s.rowid
unable to identify the object to be reindexed
duplicate WITH table name: %s
no such collation sequence: %s
table %s may not be modified
cannot modify %s because it is a view
rows deleted
integer
integer overflow
LIKE or GLOB pattern too complex
ESCAPE expression must be a single character
%!.15g
%!.20e
not authorized
integer overflow
load_extension
load_extension
sqlite_compileoption_used
sqlite_compileoption_get
unlikely
likelihood
likely
typeof
length
printf
unicode
ifnull
random
randomblob
nullif
sqlite_version
sqlite_source_id
sqlite_log
last_insert_rowid
changes
total_changes
replace
zeroblob
substr
substr
group_concat
group_concat
coalesce
coalesce
coalesce
foreign key mismatch - "%w" referencing "%w"
FOREIGN KEY constraint failed
table %S has no column named %s
table %S has %d columns but %d values were supplied
%d values for %d columns
rows inserted
not authorized
sqlite3_extension_init
unable to open shared library [%s]
sqlite3_
no entry point [%s] in shared library [%s]
error during initialization: %s
automatic extension loading failed: %s
application_id
auto_vacuum
automatic_index
busy_timeout
cache_size
cache_spill
case_sensitive_like
cell_size_check
checkpoint_fullfsync
collation_list
compile_options
count_changes
data_store_directory
data_version
database_list
default_cache_size
defer_foreign_keys
empty_result_callbacks
encoding
foreign_key_check
foreign_key_list
foreign_keys
freelist_count
full_column_names
fullfsync
ignore_check_constraints
incremental_vacuum
index_info
index_list
index_xinfo
integrity_check
journal_mode
journal_size_limit
legacy_file_format
locking_mode
max_page_count
mmap_size
page_count
page_size
query_only
quick_check
read_uncommitted
recursive_triggers
reverse_unordered_selects
schema_version
secure_delete
short_column_names
shrink_memory
soft_heap_limit
synchronous
table_info
temp_store
temp_store_directory
threads
user_version
wal_autocheckpoint
wal_checkpoint
writable_schema
exclusive
normal
incremental
memory
temporary storage cannot be changed from within a transaction
SET NULL
SET DEFAULT
CASCADE
RESTRICT
NO ACTION
delete
persist
truncate
memory
result
cache_size
page_size
secure_delete
normal
exclusive
locking_mode
journal_mode
journal_size_limit
auto_vacuum
cache_size
cache_spill
mmap_size
temp_store
temp_store_directory
not a writable directory
data_store_directory
not a writable directory
synchronous
Safety level may not be changed inside a transaction
notnull
dflt_value
issisi
height
unique
origin
partial
on_update
on_delete
iissssss
parent
integrity_check
*** in database %s ***
NULL value in %s.%s
 missing from index 
non-unique entry in index 
wrong # of entries in index 
UTF-16le
UTF-16be
UTF16le
UTF16be
UTF-16
encoding
unsupported encoding: %s
compile_option
checkpointed
restart
truncate
wal_autocheckpoint
timeout
soft_heap_limit
threads
malformed database schema (%s)
%z - %s
create 
invalid rootpage
sqlite_temp_master
sqlite_master
CREATE TABLE x(type text,name text,tbl_name text,rootpage integer,sql text)
attached databases must use the same text encoding as main database
unsupported file format
SELECT name, rootpage, sql FROM "%w".%s ORDER BY rowid
database schema is locked: %s
statement too long
opcode
comment
selectid
detail
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
only a single result allowed for a SELECT that is part of an expression
UNION ALL
INTERSECT
EXCEPT
USE TEMP B-TREE FOR %s
COMPOUND SUBQUERIES %d AND %d %s(%s)
USING TEMP B-TREE 
INTEGER
column%d
%.*z:%u
recursive aggregate queries not supported
ORDER BY clause should come after %s not before
LIMIT clause should come after %s not before
all VALUES must have the same number of terms
SELECTs to the left and right of %s do not have the same number of result columns
no such index: %s
'%s' is not a function
multiple references to recursive table: %s
circular reference: %s
table %s has %d values for %d columns
multiple recursive references: %s
recursive reference in a subquery: %s
sqlite_sq_%p
too many references to "%s": max 65535
%s.%s.%s
no such table: %s
no tables specified
too many columns in result set
DISTINCT aggregates must have exactly one argument
SCAN TABLE %s%s%s
 USING COVERING INDEX 
expected %d columns for '%s' but got %d
DISTINCT
GROUP BY
DISTINCT
RIGHT PART OF ORDER BY
ORDER BY
sqlite3_get_table() called with two or more incompatible queries
temporary trigger may not have qualified name
trigger
cannot create triggers on virtual tables
trigger %T already exists
sqlite_
cannot create trigger on system table
cannot create %s trigger on view: %S
BEFORE
cannot create INSTEAD OF trigger on table: %S
sqlite_temp_master
sqlite_master
trigger
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
sqlite_temp_master
sqlite_master
type='trigger' AND name='%q'
no such trigger: %S
sqlite_temp_master
sqlite_master
DELETE FROM %Q.%s WHERE name=%Q AND type='trigger'
sqlite_temp_master
sqlite_master
-- TRIGGER %s
no such column: %s
rows updated
cannot VACUUM from within a transaction
cannot VACUUM - SQL statements in progress
ATTACH ':memory:' AS vacuum_db;
ATTACH '' AS vacuum_db;
PRAGMA vacuum_db.synchronous=OFF
BEGIN;
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14)   FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence'   AND coalesce(rootpage,1)>0
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14)  FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %' 
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21)   FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence'   AND coalesce(rootpage,1)>0
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence' 
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
INSERT INTO vacuum_db.sqlite_master   SELECT type, name, tbl_name, rootpage, sql    FROM main.sqlite_master   WHERE type='view' OR type='trigger'      OR (type='table' AND rootpage=0)
CREATE VIRTUAL TABLE %T
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
sqlite_temp_master
sqlite_master
name='%q' AND type='table'
vtable constructor called recursively: %s
vtable constructor failed: %s
vtable constructor did not declare schema: %s
hidden
no such module: %s
no such module: %s
<expr>
ANY(%s)
SEARCH
 SUBQUERY %d
 TABLE %s
 AS %s
PRIMARY KEY
AUTOMATIC PARTIAL COVERING INDEX
AUTOMATIC COVERING INDEX
COVERING INDEX %s
INDEX %s
 USING 
>? AND rowid<
 USING INTEGER PRIMARY KEY (rowid%s?)
 VIRTUAL TABLE INDEX %d:%s
regexp
BINARY
NOCASE
BINARY
too many arguments on %s() - max %d
automatic index on %s(%s)
auto-index
out of memory
%s.xBestIndex malfunction
no query solution
at most %d tables in a join
too many terms in compound SELECT
syntax error after column name "%.*s"
parser stack overflow
unknown table option: %.*s
set list
near "%T": syntax error
too many arguments on function %T
qualified table names are not allowed on INSERT, UPDATE, and DELETE statements within triggers
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
near "%T": syntax error
unrecognized token: "%T"
create
trigger
temporary
explain
2016-09-12 18:50:49 29dbef4b8585f753861a36d6dd102ca634197bd6
unable to close due to unfinalized statements or unfinished backups
not an error
SQL logic error or missing database
access permission denied
callback requested query abort
database is locked
database table is locked
out of memory
attempt to write a readonly database
interrupted
disk I/O error
database disk image is malformed
unknown operation
database or disk is full
unable to open database file
locking protocol
table contains no data
database schema has changed
string or blob too big
constraint failed
datatype mismatch
library routine called out of sequence
large file support is disabled
authorization denied
auxiliary database format error
bind or column index out of range
file is encrypted or is not a database
unknown error
abort due to ROLLBACK
unable to delete/modify user-function due to active statements
unknown database: %s
unable to delete/modify collation sequence due to active statements
localhost
invalid uri authority: %.*s
shared
private
memory
access
no such %s mode: %s
%s mode not allowed: %s
no such vfs: %s
NOCASE
%s at line %d of [%.10s]
database corruption
misuse
cannot open file
INTEGER
no such table column: %s.%s
kernel32.dll
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
user32.dll
GetKeyboardType
MessageBoxA
CharNextA
advapi32.dll
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32.dll
SysFreeString
SysReAllocStringLen
SysAllocStringLen
kernel32.dll
GetModuleHandleA
advapi32.dll
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyW
RegEnumValueA
RegEnumKeyW
RegEnumKeyA
RegCreateKeyExW
RegCloseKey
LookupAccountSidA
GetUserNameW
FreeSid
CreateProcessAsUserW
AllocateAndInitializeSid
kernel32.dll
lstrlenA
WriteFile
WideCharToMultiByte
WaitForSingleObjectEx
WaitForSingleObject
UnmapViewOfFile
UnlockFileEx
UnlockFile
TryEnterCriticalSection
SystemTimeToFileTime
SetFilePointer
SetEnvironmentVariableW
SetEndOfFile
SetCurrentDirectoryW
ReadFile
QueryPerformanceCounter
OutputDebugStringW
OutputDebugStringA
MultiByteToWideChar
MoveFileW
MapViewOfFile
LockFileEx
LockFile
LocalFree
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
HeapValidate
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapCompact
HeapAlloc
GetVersionExW
GetVersionExA
GetTickCount
GetTempPathW
GetTempPathA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileSize
GetFileAttributesExW
GetFileAttributesW
GetFileAttributesA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetComputerNameW
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FormatMessageA
FlushViewOfFile
FlushFileBuffers
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnterCriticalSection
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateMutexW
CreateMutexA
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateFileA
CopyFileW
CloseHandle
AreFileApisANSI
user32.dll
wvsprintfA
EnumDisplayDevicesA
ole32.dll
OleInitialize
CoCreateInstance
advapi32.dll
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
0 020:0B0J0R0Z0b0j0r0z0
0&1.161>1F1N1V1^1g1
8)838I8O8]8p8z8
9"9,969@9L9W9h9n9v9
:'<4<g<m<
=f>l>|>
0"0@0F0N0x0~0
1*1N1V1\1b1
1Y2d2m2s2
515B5W5d5n5
:1;F;Z;b;x;
=*=D=L=w=
#060J0~0
1&1K1U1_1g1m1{1
;&;=;N;[;b;f;l;p;v;};
<"<-<><J<O<T<[<b<l<
=&=.=6=>=F=N=V=^=f=n=v=~=
>&>.>6>>>F>N>V>^>f>n>v>~>
?&?.?6?>?F?N?V?^?f?n?v?~?
0&0.060>0F0N0V0^0f0n0v0~0
6A6\6n6
:":9:G:T:a:n:{:
? ?2?8?M?U?`?u?}?
3"3'303C3H3Q3d3i3r3
3)4?4G4s4
0O0W0t0y0
1!1C1H1U1w1|1
5%5F5Y5z5
8#8_8t8
;4<R<s<8=
5%6[6v6{6
7K8X8t8
;A<L<Q<c<h<z<
; ;8;J;_;q;
=F=a=v=
191Y1z1+878D8V8c8o8|8
;';;;s;
<,<=<T<[<
>2>Q>g>
5#5'5+535`5~5
8z8{;M<
=_=h=s=|=
=1>d>{>
>)?6?F?Z?n?
0!060D0R0f0
0(191c1o1x1
3"3,343:3@3P3f3q3z3
4+4?4H4c4i4
6I6Q6Y6d6l6r6
8+9:9C9\9
>#?*???C?G?K?O?S?W?
1#1'1+1/13171;1?1C1G1K1s3
505S5d5
2Z2e3j3
1X1`102^2z2
5'5>5K5U5h5r5
;*;H;V;l;
<%<0<k<
= =B=w=
=#>^>c>U?y?
232D2W2
8 9(949=9]:w:
1^1j1}1
2	3.3=3J3]3
5/5F5K5`5
5Y6s6x6
;L;^;k;
=->D>I>
1Q2a2g2
3#3(323A3P3_3
262X2s2
6(6L6U6^6
;-;:;A;g;
<7=K>i>2?c?
354B4P4.5
:(:L:Q:c:u:|:
;1U7r8
5K6O6S6W6[6_6c6g6k6o6s6w6{6
0*1U1j1
6#6'6+6/63676;6?6C6G6K6O6S6W6[6_6c6g6k6o6s6w6{6
7#7'7+7/73777;7?7C7G7K7O7S7W7[7_7c7g7k7o7s7w7{7
6j<n<r<v<z<~< ?B?
0e1V3G;
1V3a3n3w3
6.7`7s8
;!;a?h?t?{?
<!<%<)<-<1<5<9<=<A<
?0F0O0z0
0"2;2`2
2$3G3N3W3D4b4
6%636>6
4!4=4u4
;?<F<q<
6l7s7z7
=H>O>X>_>
0D0K0`0
245;5L5
3x5f617
8b9i9o9
D1K1Q1
304N4N6~6
o0v0}0
7(7I7@8U8
2K3]3n3
<_<f<q<{<
C>L>U>^>
>*>H>P>
3&3.3N3t3
4%4>4G4
5=7D7K7R7Y7q7 8
:":&:*:.:2:6:::>:B:F:J:N:R:V:m:
4'444A4]4y4
6 8Y9z9
1Q2A3q3x3
0)0R062
7*:.:2:6:::>:B:F:J:N:R:V:Z:^:b:f:
0b4?6^6
8$8V8o8
7	8P8`8t8
k7r7"?B?I?
<,=3=G=
:5:U:n:
#0*0<0~0
1J1[1i1w1
8*858H8W8~8
8#9'9+9/93979;9?9C9G9K9O9S9W9[9_9c9g9k9o9s9w9{9
:#:':+:/:3:7:;:?:C:G:K:O:S:W:[:_:c:g:k:o:s:w:{:
;#;';+;/;3;7;;;?;C;G;K;O;S;W;[;_;c;g;k;o;s;w;{;
<#<'<+</<3<7<;<?<C<G<K<O<S<W<[<_<c<g<k<o<s<w<{<
=#='=+=/=3=7=;=?=C=G=K=O=S=W=[=_=c=
;%<F<V<Z<^<b<f<j<n<r<v<z<~<
8*848D8J8S8e8}8
9"9(919?9U9i9o9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:l:t:
;-;>;J;U;f;r;};
<$<4<D<
-0,151r1
1$2=2q2
434@4M4e4u4
5&6J6_6
7?7H7X7a7q7z7
4C4O4\4n4v4{4
8-8Q8r8
:7:D:p:
;.;T;a;
;'<7<l<
<'=7=r=
=->=>x>
>3?C?~?
090I0s0
6,6>6K6W6d6v6~6
9"9*979C9P9b9o9{9
0&0D0}0
1'141F1S1_1l1~1
4"4S4o4{5
5C6O6\6n6t6
9":S:|:
=6>]>h>
1X2{284F4i4
6*6C6Q6
7(707J7R7
:(:::X:
2>3N3]3p3
4#454}4
9+;7;D;V;{;
<3<8<P<U<b<~<
<">0>W>
(0n0y0
3D3d3q3
4*5C5\5u5
5(6h7~7
7k8+9:9}9
:.:G:`:y:
=.>B>Q>
141X1y1
585c5{5
6u6X7|7
8-8P8]8j8
;N;1<A<s<
=9=I={=
0"0i0w0
1,1Q1b1
2)2:2_2r2
>&>L>l>y>
2x2]3s3
;;;I;j;
;C<-===o=
>5>E>w>
8$868=8G8
<%=3=D=g=
>!>&>d>
?'?4?F?s?
0K1[2g2t2
4/4M4}4
6%7C7H7l7
8O8m8r8
+0L0a0
1F2K2|2
2O4Z4_4
666\6z6
8)8.8@8E8X8]8
:8:H:M:]:m:r:
:G<S<`<r<
=?=E=M=c=
?5?U?p?
1)1]1d1l1s1x1}1
1"2:2?2D2\2h2z2
273F3t3_7k7x7
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9,979A9
004080
4(505D5L5`5h5|5
6 6(6,6064686<6@6
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <(<4<@<D<L<P<X<\<d<h<p<t<|<
=$=(=0=4=<=@=H=L=T=X=`=d=l=p=x=|=
> >$>,>0>8><>D>H>P>T>\>`>h>l>t>x>
? ?(?4?8?@?L?X?\?t?x?|?
1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1
2,3034383
4 4(4,40484L4T4h4p4
5(585@5T5\5p5x5
6 646<6P6X6l6t6
7074787L7T7h7p7
8,848H8P8d8l8
9(909D9L9`9h9|9
:$:,:@:D:H:\:`:d:x:|:
; ;(;4;<;D;`;|;
< <$<(<,<0<4<8<<<@<D<H<L<X<\<`<d<h<l<p<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?`?l?x?
0 0,080D0P0\0h0t0
1(141@1L1X1d1p1|1
2X2\2`2d2h2l2
3 3$3(3,3034383<3@3D3H3L3P3h3p3x3
3\4d4l4t4
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x90:8:H:P:X:`:
d?h?l?p?t?x?|?