Trojan.GenericKD.3687237_f97162f035

Trojan.GenericKD.3687237 (B) (Emsisoft), Trojan.GenericKD.3687237 (AdAware), GenericPhysicalDrive0.YR (Lavasoft MAS)Behaviour: Trojan

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

d-d-d d:d:d

d-d-d d:d:d

d:d:d

d:d:d

d-d-d

d-d-d

view %s is circularly defined

view %s is circularly defined

recursive aggregate queries not supported

recursive aggregate queries not supported

LIMIT clause should come after %s not before

LIMIT clause should come after %s not before

ORDER BY clause should come after %s not before

ORDER BY clause should come after %s not before

zeroblob(%d)

zeroblob(%d)

sqlite3_get_table() called with two or more incompatible queries

sqlite3_get_table() called with two or more incompatible queries

ANY(%s)

ANY(%s)

VIRTUAL TABLE INDEX %d:%s

VIRTUAL TABLE INDEX %d:%s

USING INTEGER PRIMARY KEY (rowid%s?)

USING INTEGER PRIMARY KEY (rowid%s?)

INDEX %s

INDEX %s

COVERING INDEX %s

COVERING INDEX %s

PRIMARY KEY

PRIMARY KEY

AS %s

AS %s

TABLE %s

TABLE %s

SUBQUERY %d

SUBQUERY %d

, T.c%d

, T.c%d

%Q.'%q_%s'

%Q.'%q_%s'

parse error in "%s"

parse error in "%s"

reserved fts5 table name: %s

reserved fts5 table name: %s

no such column: %s

no such column: %s

{%ssegid=%d h=%d pgno=%d}

{%ssegid=%d h=%d pgno=%d}

{id=%d leaves=%d..%d}

{id=%d leaves=%d..%d}

{lvl=%d nMerge=%d nSeg=%d

{lvl=%d nMerge=%d nSeg=%d

%d(%lld)

%d(%lld)

porter

porter

?API call with %s database connection pointer

?API call with %s database connection pointer

cannot limit WAL size: %s

cannot limit WAL size: %s

2nd reference to page %d

2nd reference to page %d

invalid page number %d

invalid page number %d

automatic index on %s(%s)

automatic index on %s(%s)

database corruption at line %d of [%.10s]

database corruption at line %d of [%.10s]

recovered %d frames from WAL file %s

recovered %d frames from WAL file %s

bind on a busy prepared statement: [%s]

bind on a busy prepared statement: [%s]

%z - %s

%z - %s

malformed database schema (%s)

malformed database schema (%s)

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

Failed to read ptrmap key=%d

Failed to read ptrmap key=%d

failed to get page %d

failed to get page %d

%d of %d pages missing from overflow list starting at %d

%d of %d pages missing from overflow list starting at %d

freelist leaf count too big on page %d

freelist leaf count too big on page %d

recovered %d pages from %s

recovered %d pages from %s

unknown database: %s

unknown database: %s

Fragmentation of %d bytes reported as %d on page %d

Fragmentation of %d bytes reported as %d on page %d

Multiple uses for byte %u of page %d

Multiple uses for byte %u of page %d

Offset %d out of range %d..%d

Offset %d out of range %d..%d

On page %d at right child:

On page %d at right child:

On tree page %d cell %d:

On tree page %d cell %d:

unable to get the page. error code=%d

unable to get the page. error code=%d

btreeInitPage() returns error code %d

btreeInitPage() returns error code %d

Page %d:

Page %d:

Pointer map page %d is referenced

Pointer map page %d is referenced

Page %d is never used

Page %d is never used

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

at most %d tables in a join

at most %d tables in a join

unknown database %s

unknown database %s

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

MJ delete: %s

MJ delete: %s

-mjX9X

-mjX9X

MJ collide: %s

MJ collide: %s

%s-mjXXXXXX9XXz

%s-mjXXXXXX9XXz

database %s is locked

database %s is locked

cannot detach database %s

cannot detach database %s

no such database: %s

no such database: %s

database schema is locked: %s

database schema is locked: %s

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0

PRAGMA vacuum_db.synchronous=OFF

PRAGMA vacuum_db.synchronous=OFF

cannot VACUUM - SQL statements in progress

cannot VACUUM - SQL statements in progress

SELECT %s WHERE rowid = ?

SELECT %s WHERE rowid = ?

INSERT INTO %Q.'%q_content' VALUES(%s)

INSERT INTO %Q.'%q_content' VALUES(%s)

SELECT %s WHERE rowid=?

SELECT %s WHERE rowid=?

SELECT %s FROM %s AS T

SELECT %s FROM %s AS T

REPLACE INTO %Q.'%q_content' VALUES(%s)

REPLACE INTO %Q.'%q_content' VALUES(%s)

SELECT %s FROM %s T WHERE T.%Q=?

SELECT %s FROM %s T WHERE T.%Q=?

SELECT %s FROM %s T WHERE T.%Q = ? ORDER BY T.%Q DESC

SELECT %s FROM %s T WHERE T.%Q = ? ORDER BY T.%Q DESC

SELECT %s FROM %s T WHERE T.%Q >= ? AND T.%Q

SELECT %s FROM %s T WHERE T.%Q >= ? AND T.%Q

CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);

CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);

CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);

CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);

CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));

CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));

CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);

CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);

CREATE TABLE %Q.'%q_content'(%s)

CREATE TABLE %Q.'%q_content'(%s)

%z, 'c%d%q'

%z, 'c%d%q'

docid INTEGER PRIMARY KEY

docid INTEGER PRIMARY KEY

ALTER TABLE %Q.'%q_%s' RENAME TO '%q_%s';

ALTER TABLE %Q.'%q_%s' RENAME TO '%q_%s';

fts5: error creating shadow table %q_%s: %s

fts5: error creating shadow table %q_%s: %s

CREATE TABLE %Q.'%q_%q'(%s)%s

CREATE TABLE %Q.'%q_%q'(%s)%s

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

unsupported file format

unsupported file format

no such trigger: %S

no such trigger: %S

no such table column: %s.%s

no such table column: %s.%s

malformed MATCH expression: [%s]

malformed MATCH expression: [%s]

FTS expression tree is too large (maximum depth %d)

FTS expression tree is too large (maximum depth %d)

statement aborts at %d: [%s] %s

statement aborts at %d: [%s] %s

abort at %d in [%s]: %s

abort at %d in [%s]: %s

%s constraint failed

%s constraint failed

%s constraint failed: %s

%s constraint failed: %s

database table is locked: %s

database table is locked: %s

cannot change %s wal mode from within a transaction

cannot change %s wal mode from within a transaction

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

cannot commit transaction - SQL statements in progress

cannot commit transaction - SQL statements in progress

cannot release savepoint - SQL statements in progress

cannot release savepoint - SQL statements in progress

no such savepoint: %s

no such savepoint: %s

cannot open savepoint - SQL statements in progress

cannot open savepoint - SQL statements in progress

sqlite_sequence

sqlite_sequence

there is already an index named %s

there is already an index named %s

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

no such index: %S

no such index: %S

unable to identify the object to be reindexed

unable to identify the object to be reindexed

unsupported encoding: %s

unsupported encoding: %s

NULL value in %s.%s

NULL value in %s.%s

*** in database %s ***

*** in database %s ***

no such table: %s

no such table: %s

%s.%s.%s

%s.%s.%s

'%s' is not a function

'%s' is not a function

too many references to "%s": max 65535

too many references to "%s": max 65535

sqlite_sq_%p

sqlite_sq_%p

expected %d columns for '%s' but got %d

expected %d columns for '%s' but got %d

cannot create INSTEAD OF trigger on table: %S

cannot create INSTEAD OF trigger on table: %S

cannot create %s trigger on view: %S

cannot create %s trigger on view: %S

cannot open value of type %s

cannot open value of type %s

cannot open %s column for writing

cannot open %s column for writing

no such column: "%s"

no such column: "%s"

cannot open view: %s

cannot open view: %s

cannot open table without rowid: %s

cannot open table without rowid: %s

cannot open virtual table: %s

cannot open virtual table: %s

indexed

indexed

foreign key

foreign key

EXECUTE %s%s SUBQUERY %d

EXECUTE %s%s SUBQUERY %d

there is already another table or index with this name: %s

there is already another table or index with this name: %s

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

view %s may not be altered

view %s may not be altered

sqlite_altertab_%s

sqlite_altertab_%s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

CREATE%s INDEX %.*s

CREATE%s INDEX %.*s

expressions prohibited in PRIMARY KEY and UNIQUE constraints

expressions prohibited in PRIMARY KEY and UNIQUE constraints

sqlite_autoindex_%s_%d

sqlite_autoindex_%s_%d

index %s already exists

index %s already exists

there is already a table named %s

there is already a table named %s

virtual tables may not be indexed

virtual tables may not be indexed

views may not be indexed

views may not be indexed

table %s may not be indexed

table %s may not be indexed

cannot create a TEMP index on non-TEMP table "%s"

cannot create a TEMP index on non-TEMP table "%s"

PRAGMA %Q.page_size

PRAGMA %Q.page_size

SELECT 1 FROM %Q.sqlite_master WHERE tbl_name='%q_stat'

SELECT 1 FROM %Q.sqlite_master WHERE tbl_name='%q_stat'

%s_segments

%s_segments

SELECT stat FROM %Q.sqlite_stat1 WHERE tbl = '%q_rowid'

SELECT stat FROM %Q.sqlite_stat1 WHERE tbl = '%q_rowid'

CREATE TABLE "%w"."%w_node"(nodeno INTEGER PRIMARY KEY, data BLOB);CREATE TABLE "%w"."%w_rowid"(rowid INTEGER PRIMARY KEY, nodeno INTEGER);CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY, parentnode INTEGER);INSERT INTO '%q'.'%q_node' VALUES(1, zeroblob(%d))

CREATE TABLE "%w"."%w_node"(nodeno INTEGER PRIMARY KEY, data BLOB);CREATE TABLE "%w"."%w_rowid"(rowid INTEGER PRIMARY KEY, nodeno INTEGER);CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY, parentnode INTEGER);INSERT INTO '%q'.'%q_node' VALUES(1, zeroblob(%d))

invalid fts5 file format (found %d, expected %d) - run 'rebuild'

invalid fts5 file format (found %d, expected %d) - run 'rebuild'

wrong number of arguments to function %s

wrong number of arguments to function %s

segid, term, pgno, PRIMARY KEY(segid, term)

segid, term, pgno, PRIMARY KEY(segid, term)

id INTEGER PRIMARY KEY, block BLOB

id INTEGER PRIMARY KEY, block BLOB

%s_data

%s_data

SELECT segid, term, (pgno>>1), (pgno&1) FROM %Q.'%q_idx' WHERE segid=%d

SELECT segid, term, (pgno>>1), (pgno&1) FROM %Q.'%q_idx' WHERE segid=%d

SELECT rowid, rank FROM %Q.%Q ORDER BY %s(%s%s%s) %s

SELECT rowid, rank FROM %Q.%Q ORDER BY %s(%s%s%s) %s

no such function: %s

no such function: %s

SELECT %s

SELECT %s

SELECT count(*) FROM %Q.'%q_%s'

SELECT count(*) FROM %Q.'%q_%s'

no such fts5 table: %s.%s

no such fts5 table: %s.%s

SELECT pw=sqlite_crypt(?1,pw), isAdmin FROM "%w".sqlite_user WHERE uname=?2

SELECT pw=sqlite_crypt(?1,pw), isAdmin FROM "%w".sqlite_user WHERE uname=?2

INSERT INTO sqlite_user(uname,isAdmin,pw) VALUES(%Q,%d,sqlite_crypt(?1,NULL))

INSERT INTO sqlite_user(uname,isAdmin,pw) VALUES(%Q,%d,sqlite_crypt(?1,NULL))

CREATE TABLE sqlite_user(

CREATE TABLE sqlite_user(

uname TEXT PRIMARY KEY,

uname TEXT PRIMARY KEY,

UPDATE sqlite_user SET isAdmin=%d, pw=sqlite_crypt(?1,NULL) WHERE uname=%Q

UPDATE sqlite_user SET isAdmin=%d, pw=sqlite_crypt(?1,NULL) WHERE uname=%Q

DELETE FROM sqlite_user WHERE uname=%Q

DELETE FROM sqlite_user WHERE uname=%Q

unable to open database: %s

unable to open database: %s

Invalid key value

Invalid key value

database %s is already in use

database %s is already in use

too many attached databases - max %d

too many attached databases - max %d

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

table "%s" has more than one primary key

table "%s" has more than one primary key

CREATE TABLE %Q.sqlite_sequence(name,seq)

CREATE TABLE %Q.sqlite_sequence(name,seq)

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE %s %.*s

CREATE %s %.*s

PRIMARY KEY missing on table %s

PRIMARY KEY missing on table %s

%d %d %d %d

%d %d %d %d

k PRIMARY KEY, v

k PRIMARY KEY, v

id INTEGER PRIMARY KEY, sz BLOB

id INTEGER PRIMARY KEY, sz BLOB

, c%d

, c%d

id INTEGER PRIMARY KEY

id INTEGER PRIMARY KEY

misuse of aggregate: %s()

misuse of aggregate: %s()

SELECT %s WHERE rowid BETWEEN %lld AND %lld ORDER BY rowid %s

SELECT %s WHERE rowid BETWEEN %lld AND %lld ORDER BY rowid %s

SELECT %s ORDER BY rowid %s

SELECT %s ORDER BY rowid %s

%s: table does not support scanning

%s: table does not support scanning

cannot %s contentless fts5 table: %s

cannot %s contentless fts5 table: %s

%d values for %d columns

%d values for %d columns

table %S has %d columns but %d values were supplied

table %S has %d columns but %d values were supplied

table %S has no column named %s

table %S has no column named %s

-- TRIGGER %s

-- TRIGGER %s

use DROP VIEW to delete view %s

use DROP VIEW to delete view %s

use DROP TABLE to delete table %s

use DROP TABLE to delete table %s

table %s may not be dropped

table %s may not be dropped

sqlite_stat

sqlite_stat

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

CREATE TABLE x(%s %Q HIDDEN, docid HIDDEN, %Q HIDDEN)

CREATE TABLE x(%s %Q HIDDEN, docid HIDDEN, %Q HIDDEN)

missing %s parameter in fts4 constructor

missing %s parameter in fts4 constructor

error parsing prefix parameter: %s

error parsing prefix parameter: %s

unrecognized order: %s

unrecognized order: %s

unrecognized matchinfo: %s

unrecognized matchinfo: %s

unrecognized parameter: %s

unrecognized parameter: %s

notindexed

notindexed

%s, %s

%s, %s

CREATE TABLE x(%s

CREATE TABLE x(%s

CREATE TABLE x(key,value,type,atom,id,parent,fullkey,path,json HIDDEN,root HIDDEN)

CREATE TABLE x(key,value,type,atom,id,parent,fullkey,path,json HIDDEN,root HIDDEN)

%z, %Q HIDDEN, %s HIDDEN)

%z, %Q HIDDEN, %s HIDDEN)

%z%s%Q

%z%s%Q

Visual C CRT: Not enough memory to complete call to strerror.

Visual C CRT: Not enough memory to complete call to strerror.

Broken pipe

Broken pipe

Inappropriate I/O control operation

Inappropriate I/O control operation

Operation not permitted

Operation not permitted

%S#[k

%S#[k

?#%X.y

?#%X.y

GetProcessWindowStation

GetProcessWindowStation

KERNEL32.dll

KERNEL32.dll

GetCPInfo

GetCPInfo

sqlite3.dll

sqlite3.dll

sqlite3_aggregate_context

sqlite3_aggregate_context

sqlite3_aggregate_count

sqlite3_aggregate_count

sqlite3_auto_extension

sqlite3_auto_extension

sqlite3_backup_finish

sqlite3_backup_finish

sqlite3_backup_init

sqlite3_backup_init

sqlite3_backup_pagecount

sqlite3_backup_pagecount

sqlite3_backup_remaining

sqlite3_backup_remaining

sqlite3_backup_step

sqlite3_backup_step

sqlite3_bind_blob

sqlite3_bind_blob

sqlite3_bind_blob64

sqlite3_bind_blob64

sqlite3_bind_double

sqlite3_bind_double

sqlite3_bind_int

sqlite3_bind_int

sqlite3_bind_int64

sqlite3_bind_int64

sqlite3_bind_null

sqlite3_bind_null

sqlite3_bind_parameter_count

sqlite3_bind_parameter_count

sqlite3_bind_parameter_index

sqlite3_bind_parameter_index

sqlite3_bind_parameter_name

sqlite3_bind_parameter_name

sqlite3_bind_text

sqlite3_bind_text

sqlite3_bind_text16

sqlite3_bind_text16

sqlite3_bind_text64

sqlite3_bind_text64

sqlite3_bind_value

sqlite3_bind_value

sqlite3_bind_zeroblob

sqlite3_bind_zeroblob

sqlite3_bind_zeroblob64

sqlite3_bind_zeroblob64

sqlite3_blob_bytes

sqlite3_blob_bytes

sqlite3_blob_close

sqlite3_blob_close

sqlite3_blob_open

sqlite3_blob_open

sqlite3_blob_read

sqlite3_blob_read

sqlite3_blob_reopen

sqlite3_blob_reopen

sqlite3_blob_write

sqlite3_blob_write

sqlite3_busy_handler

sqlite3_busy_handler

sqlite3_busy_timeout

sqlite3_busy_timeout

sqlite3_cancel_auto_extension

sqlite3_cancel_auto_extension

sqlite3_changes

sqlite3_changes

sqlite3_clear_bindings

sqlite3_clear_bindings

sqlite3_close

sqlite3_close

sqlite3_close_v2

sqlite3_close_v2

sqlite3_collation_needed

sqlite3_collation_needed

sqlite3_collation_needed16

sqlite3_collation_needed16

sqlite3_column_blob

sqlite3_column_blob

sqlite3_column_bytes

sqlite3_column_bytes

sqlite3_column_bytes16

sqlite3_column_bytes16

sqlite3_column_count

sqlite3_column_count

sqlite3_column_database_name

sqlite3_column_database_name

sqlite3_column_database_name16

sqlite3_column_database_name16

sqlite3_column_decltype

sqlite3_column_decltype

sqlite3_column_decltype16

sqlite3_column_decltype16

sqlite3_column_double

sqlite3_column_double

sqlite3_column_int

sqlite3_column_int

sqlite3_column_int64

sqlite3_column_int64

sqlite3_column_name

sqlite3_column_name

sqlite3_column_name16

sqlite3_column_name16

sqlite3_column_origin_name

sqlite3_column_origin_name

sqlite3_column_origin_name16

sqlite3_column_origin_name16

sqlite3_column_table_name

sqlite3_column_table_name

sqlite3_column_table_name16

sqlite3_column_table_name16

sqlite3_column_text

sqlite3_column_text

sqlite3_column_text16

sqlite3_column_text16

sqlite3_column_type

sqlite3_column_type

sqlite3_column_value

sqlite3_column_value

sqlite3_commit_hook

sqlite3_commit_hook

sqlite3_compileoption_get

sqlite3_compileoption_get

sqlite3_compileoption_used

sqlite3_compileoption_used

sqlite3_complete

sqlite3_complete

sqlite3_complete16

sqlite3_complete16

sqlite3_config

sqlite3_config

sqlite3_context_db_handle

sqlite3_context_db_handle

sqlite3_create_collation

sqlite3_create_collation

sqlite3_create_collation16

sqlite3_create_collation16

sqlite3_create_collation_v2

sqlite3_create_collation_v2

sqlite3_create_function

sqlite3_create_function

sqlite3_create_function16

sqlite3_create_function16

sqlite3_create_function_v2

sqlite3_create_function_v2

sqlite3_create_module

sqlite3_create_module

sqlite3_create_module_v2

sqlite3_create_module_v2

sqlite3_data_count

sqlite3_data_count

sqlite3_db_config

sqlite3_db_config

sqlite3_db_filename

sqlite3_db_filename

sqlite3_db_handle

sqlite3_db_handle

sqlite3_db_mutex

sqlite3_db_mutex

sqlite3_db_readonly

sqlite3_db_readonly

sqlite3_db_release_memory

sqlite3_db_release_memory

sqlite3_db_status

sqlite3_db_status

sqlite3_declare_vtab

sqlite3_declare_vtab

sqlite3_enable_load_extension

sqlite3_enable_load_extension

sqlite3_enable_shared_cache

sqlite3_enable_shared_cache

sqlite3_errcode

sqlite3_errcode

sqlite3_errmsg

sqlite3_errmsg

sqlite3_errmsg16

sqlite3_errmsg16

sqlite3_errstr

sqlite3_errstr

sqlite3_exec

sqlite3_exec

sqlite3_expired

sqlite3_expired

sqlite3_extended_errcode

sqlite3_extended_errcode

sqlite3_extended_result_codes

sqlite3_extended_result_codes

sqlite3_file_control

sqlite3_file_control

sqlite3_finalize

sqlite3_finalize

sqlite3_free

sqlite3_free

sqlite3_free_table

sqlite3_free_table

sqlite3_get_autocommit

sqlite3_get_autocommit

sqlite3_get_auxdata

sqlite3_get_auxdata

sqlite3_get_table

sqlite3_get_table

sqlite3_global_recover

sqlite3_global_recover

sqlite3_initialize

sqlite3_initialize

sqlite3_interrupt

sqlite3_interrupt

sqlite3_key

sqlite3_key

sqlite3_key_v2

sqlite3_key_v2

sqlite3_last_insert_rowid

sqlite3_last_insert_rowid

sqlite3_libversion

sqlite3_libversion

sqlite3_libversion_number

sqlite3_libversion_number

sqlite3_limit

sqlite3_limit

sqlite3_load_extension

sqlite3_load_extension

sqlite3_log

sqlite3_log

sqlite3_malloc

sqlite3_malloc

sqlite3_malloc64

sqlite3_malloc64

sqlite3_memory_alarm

sqlite3_memory_alarm

sqlite3_memory_highwater

sqlite3_memory_highwater

sqlite3_memory_used

sqlite3_memory_used

sqlite3_mprintf

sqlite3_mprintf

sqlite3_msize

sqlite3_msize

sqlite3_mutex_alloc

sqlite3_mutex_alloc

sqlite3_mutex_enter

sqlite3_mutex_enter

sqlite3_mutex_free

sqlite3_mutex_free

sqlite3_mutex_leave

sqlite3_mutex_leave

sqlite3_mutex_try

sqlite3_mutex_try

sqlite3_next_stmt

sqlite3_next_stmt

sqlite3_open

sqlite3_open

sqlite3_open16

sqlite3_open16

sqlite3_open_v2

sqlite3_open_v2

sqlite3_os_end

sqlite3_os_end

sqlite3_os_init

sqlite3_os_init

sqlite3_overload_function

sqlite3_overload_function

sqlite3_prepare

sqlite3_prepare

sqlite3_prepare16

sqlite3_prepare16

sqlite3_prepare16_v2

sqlite3_prepare16_v2

sqlite3_prepare_v2

sqlite3_prepare_v2

sqlite3_profile

sqlite3_profile

sqlite3_progress_handler

sqlite3_progress_handler

sqlite3_randomness

sqlite3_randomness

sqlite3_realloc

sqlite3_realloc

sqlite3_realloc64

sqlite3_realloc64

sqlite3_rekey

sqlite3_rekey

sqlite3_rekey_v2

sqlite3_rekey_v2

sqlite3_release_memory

sqlite3_release_memory

sqlite3_reset

sqlite3_reset

sqlite3_reset_auto_extension

sqlite3_reset_auto_extension

sqlite3_result_blob

sqlite3_result_blob

sqlite3_result_blob64

sqlite3_result_blob64

sqlite3_result_double

sqlite3_result_double

sqlite3_result_error

sqlite3_result_error

sqlite3_result_error16

sqlite3_result_error16

sqlite3_result_error_code

sqlite3_result_error_code

sqlite3_result_error_nomem

sqlite3_result_error_nomem

sqlite3_result_error_toobig

sqlite3_result_error_toobig

sqlite3_result_int

sqlite3_result_int

sqlite3_result_int64

sqlite3_result_int64

sqlite3_result_null

sqlite3_result_null

sqlite3_result_subtype

sqlite3_result_subtype

sqlite3_result_text

sqlite3_result_text

sqlite3_result_text16

sqlite3_result_text16

sqlite3_result_text16be

sqlite3_result_text16be

sqlite3_result_text16le

sqlite3_result_text16le

sqlite3_result_text64

sqlite3_result_text64

sqlite3_result_value

sqlite3_result_value

sqlite3_result_zeroblob

sqlite3_result_zeroblob

sqlite3_result_zeroblob64

sqlite3_result_zeroblob64

sqlite3_rollback_hook

sqlite3_rollback_hook

sqlite3_rtree_geometry_callback

sqlite3_rtree_geometry_callback

sqlite3_rtree_query_callback

sqlite3_rtree_query_callback

sqlite3_set_authorizer

sqlite3_set_authorizer

sqlite3_set_auxdata

sqlite3_set_auxdata

sqlite3_shutdown

sqlite3_shutdown

sqlite3_sleep

sqlite3_sleep

sqlite3_snprintf

sqlite3_snprintf

sqlite3_soft_heap_limit

sqlite3_soft_heap_limit

sqlite3_soft_heap_limit64

sqlite3_soft_heap_limit64

sqlite3_sourceid

sqlite3_sourceid

sqlite3_sql

sqlite3_sql

sqlite3_status

sqlite3_status

sqlite3_status64

sqlite3_status64

sqlite3_step

sqlite3_step

sqlite3_stmt_busy

sqlite3_stmt_busy

sqlite3_stmt_readonly

sqlite3_stmt_readonly

sqlite3_stmt_status

sqlite3_stmt_status

sqlite3_strglob

sqlite3_strglob

sqlite3_stricmp

sqlite3_stricmp

sqlite3_strnicmp

sqlite3_strnicmp

sqlite3_table_column_metadata

sqlite3_table_column_metadata

sqlite3_test_control

sqlite3_test_control

sqlite3_thread_cleanup

sqlite3_thread_cleanup

sqlite3_threadsafe

sqlite3_threadsafe

sqlite3_total_changes

sqlite3_total_changes

sqlite3_trace

sqlite3_trace

sqlite3_transfer_bindings

sqlite3_transfer_bindings

sqlite3_update_hook

sqlite3_update_hook

sqlite3_uri_boolean

sqlite3_uri_boolean

sqlite3_uri_int64

sqlite3_uri_int64

sqlite3_uri_parameter

sqlite3_uri_parameter

sqlite3_user_add

sqlite3_user_add

sqlite3_user_authenticate

sqlite3_user_authenticate

sqlite3_user_change

sqlite3_user_change

sqlite3_user_data

sqlite3_user_data

sqlite3_user_delete

sqlite3_user_delete

sqlite3_value_blob

sqlite3_value_blob

sqlite3_value_bytes

sqlite3_value_bytes

sqlite3_value_bytes16

sqlite3_value_bytes16

sqlite3_value_double

sqlite3_value_double

sqlite3_value_dup

sqlite3_value_dup

sqlite3_value_free

sqlite3_value_free

sqlite3_value_int

sqlite3_value_int

sqlite3_value_int64

sqlite3_value_int64

sqlite3_value_numeric_type

sqlite3_value_numeric_type

sqlite3_value_subtype

sqlite3_value_subtype

sqlite3_value_text

sqlite3_value_text

sqlite3_value_text16

sqlite3_value_text16

sqlite3_value_text16be

sqlite3_value_text16be

sqlite3_value_text16le

sqlite3_value_text16le

sqlite3_value_type

sqlite3_value_type

sqlite3_vfs_find

sqlite3_vfs_find

sqlite3_vfs_register

sqlite3_vfs_register

sqlite3_vfs_unregister

sqlite3_vfs_unregister

sqlite3_vmprintf

sqlite3_vmprintf

sqlite3_vsnprintf

sqlite3_vsnprintf

sqlite3_vtab_config

sqlite3_vtab_config

sqlite3_vtab_on_conflict

sqlite3_vtab_on_conflict

sqlite3_wal_autocheckpoint

sqlite3_wal_autocheckpoint

sqlite3_wal_checkpoint

sqlite3_wal_checkpoint

sqlite3_wal_checkpoint_v2

sqlite3_wal_checkpoint_v2

sqlite3_wal_hook

sqlite3_wal_hook

sqlite3_win32_is_nt

sqlite3_win32_is_nt

sqlite3_win32_mbcs_to_utf8

sqlite3_win32_mbcs_to_utf8

sqlite3_win32_set_directory

sqlite3_win32_set_directory

sqlite3_win32_sleep

sqlite3_win32_sleep

sqlite3_win32_utf8_to_mbcs

sqlite3_win32_utf8_to_mbcs

sqlite3_win32_write_debug

sqlite3_win32_write_debug

zcÁ

zcÁ

2,292}: ;

2,292}: ;

7074787

7074787

)0:0&171

)0:0&171

? ?$?(?,?

? ?$?(?,?

2 2.272^2

2 2.272^2

6(7,7074709

6(7,7074709

8Å’8-:2:o:t:

8Å’8-:2:o:t:

6(7,70747|7

6(7,70747|7

0 0$0(0,0004080

0 0$0(0,0004080

Software\\Microsoft\\Windows\\CurrentVersion\\Run

Software\\Microsoft\\Windows\\CurrentVersion\\Run

\\.\PhysicalDrive0000000-000000-000000-000000-000000

\\.\PhysicalDrive0000000-000000-000000-000000-000000

@Windows 10

@Windows 10

Windows Server Technical Preview

Windows Server Technical Preview

Windows Vista

Windows Vista

Windows Server 2008

Windows Server 2008

Windows 7

Windows 7

Windows Server 2008 R2

Windows Server 2008 R2

Windows 8

Windows 8

Windows Server 2012

Windows Server 2012

Windows 8.1

Windows 8.1

Windows Server 2012 R2

Windows Server 2012 R2

Windows 2000

Windows 2000

Windows XP

Windows XP

Windows Server 2003 R2

Windows Server 2003 R2

Windows Storage Server 2003

Windows Storage Server 2003

Windows Home Server

Windows Home Server

Windows XP Professional x64 Edition

Windows XP Professional x64 Edition

Windows Server 2003

Windows Server 2003

Windows 98

Windows 98

Web Server Edition

Web Server Edition

{"code":"{Code}","type":{type},"ver":"{Ver}","browser":"{Browser}","user":"{User}","pass":"{Pass}","cookies":"{Cookies}","aid":{Aid},"utype":{uType}}

{"code":"{Code}","type":{type},"ver":"{Ver}","browser":"{Browser}","user":"{User}","pass":"{Pass}","cookies":"{Cookies}","aid":{Aid},"utype":{uType}}

{Pass}

{Pass}

hXXp://api.faceboolad.com/api//send

hXXp://api.faceboolad.com/api//send

WinHttp.WinHttpRequest.5.1

WinHttp.WinHttpRequest.5.1

hXXp://VVV.facebook.com

hXXp://VVV.facebook.com

Server-Key

Server-Key

Chrome

Chrome

Firefox

Firefox

facebook.com

facebook.com

select name,encrypted_value from cookies where host_key = '.facebook.com'

select name,encrypted_value from cookies where host_key = '.facebook.com'

\Local\Google\Chrome\User Data

\Local\Google\Chrome\User Data

\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies

\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies

\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies

\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies

\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cookies

\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cookies

hXXps://VVV.facebook.com/

hXXps://VVV.facebook.com/

select name,value from moz_cookies where host = '.facebook.com'

select name,value from moz_cookies where host = '.facebook.com'

\Roaming\Mozilla\Firefox\Profiles

\Roaming\Mozilla\Firefox\Profiles

\cookies.sqlite

\cookies.sqlite

Login Data

Login Data

select username_value, password_value, signon_realm from logins

select username_value, password_value, signon_realm from logins

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

hXXp://api.faceboolad.com/api//GetTask?code=

hXXp://api.faceboolad.com/api//GetTask?code=

[ImageUrl]

[ImageUrl]

Dalvik/2.1.0 (Linux; U; Android 6.0.1; MI NOTE LTE MIUI/6.8.11)

Dalvik/2.1.0 (Linux; U; Android 6.0.1; MI NOTE LTE MIUI/6.8.11)

twitter.com

twitter.com

select name,encrypted_value from cookies where host_key = '.twitter.com'

select name,encrypted_value from cookies where host_key = '.twitter.com'

hXXps://VVV.twitter.com/

hXXps://VVV.twitter.com/

select name,value from moz_cookies where host = '.twitter.com'

select name,value from moz_cookies where host = '.twitter.com'

hXXps://m.facebook.com/

hXXps://m.facebook.com/

hXXps://VVV.facebook.com/settings

hXXps://VVV.facebook.com/settings

VBScript.RegExp

VBScript.RegExp

hXXps://m.facebook.com/composer/mbasic/?av={c_user}&refid=8

hXXps://m.facebook.com/composer/mbasic/?av={c_user}&refid=8

fb_dtsg={fb_dtsg}&charset_test=€,´,€,´,水,Д,Є&privacyx={privacyx}&target={c_user}&c_src=feed&cwevent=composer_entry&referrer=feed&ctype=inline&cver=amber&rst_icv=&xc_message=&view_privacy=

fb_dtsg={fb_dtsg}&charset_test=€,´,€,´,水,Д,Є&privacyx={privacyx}&target={c_user}&c_src=feed&cwevent=composer_entry&referrer=feed&ctype=inline&cver=amber&rst_icv=&xc_message=&view_privacy=

hXXps://m.facebook.com/home.php

hXXps://m.facebook.com/home.php

hXXps://m.facebook.com

hXXps://m.facebook.com

hXXps://VVV.facebook.com/notes/composer/photos/?thumb_height=116&thumb_width=149&av={c_user}&dpr=1

hXXps://VVV.facebook.com/notes/composer/photos/?thumb_height=116&thumb_width=149&av={c_user}&dpr=1

hXXps://m.facebook.com/composer/mbasic/?av={c_user}&refid=7&ref=wizard

hXXps://m.facebook.com/composer/mbasic/?av={c_user}&refid=7&ref=wizard

fb_dtsg={fb_dtsg}&charset_test=€,´,€,´,水,Д,Є&privacyx={privacyx}&target={c_user}&c_src=feed&cwevent=composer_entry&referrer=feed&ctype=inline&cver=amber&rst_icv=&xc_message={text}&view_post=发布

fb_dtsg={fb_dtsg}&charset_test=€,´,€,´,水,Д,Є&privacyx={privacyx}&target={c_user}&c_src=feed&cwevent=composer_entry&referrer=feed&ctype=inline&cver=amber&rst_icv=&xc_message={text}&view_post=发布

hXXps://m.facebook.com/home.php?ref=wizard&_rdr

hXXps://m.facebook.com/home.php?ref=wizard&_rdr

hXXps://m.facebook.com/composer/mbasic/?csid=94c178a8-8774-424a-8c53-9994984e3fba&incparms[0]=xc_message&av={c_user}

hXXps://m.facebook.com/composer/mbasic/?csid=94c178a8-8774-424a-8c53-9994984e3fba&incparms[0]=xc_message&av={c_user}

------WebKitFormBoundarydDyitWHTKuC21cBZ

------WebKitFormBoundarydDyitWHTKuC21cBZ

€,´,€,´,水,Д,Є

€,´,€,´,水,Д,Є

94c178a8-8774-424a-8c53-9994984e3fba

94c178a8-8774-424a-8c53-9994984e3fba

web_m_touch

web_m_touch

发布

发布

Content-Disposition: form-data; name="file0"; filename="test.jpg"

Content-Disposition: form-data; name="file0"; filename="test.jpg"

------WebKitFormBoundarydDyitWHTKuC21cBZ--

------WebKitFormBoundarydDyitWHTKuC21cBZ--

hXXps://m.facebook.com/composer/mbasic/?mnt_query&csid=94c178a8-8774-424a-8c53-9994984e3fba

hXXps://m.facebook.com/composer/mbasic/?mnt_query&csid=94c178a8-8774-424a-8c53-9994984e3fba

multipart/form-data; boundary=----WebKitFormBoundarydDyitWHTKuC21cBZ

multipart/form-data; boundary=----WebKitFormBoundarydDyitWHTKuC21cBZ

hXXps://m.facebook.com/home.php?stype=phs&sk=live&gfid=

hXXps://m.facebook.com/home.php?stype=phs&sk=live&gfid=

hXXps://VVV.facebook.com/notes/composer/?dpr=1

hXXps://VVV.facebook.com/notes/composer/?dpr=1

hXXps://VVV.facebook.com

hXXps://VVV.facebook.com

hXXps://VVV.facebook.com/notes

hXXps://VVV.facebook.com/notes

hXXps://VVV.facebook.com/notes/composer/upload/coverphoto/?media_type=photo&note_id={NoteId}&__a=1&fb_dtsg={fb_dtsg}

hXXps://VVV.facebook.com/notes/composer/upload/coverphoto/?media_type=photo&note_id={NoteId}&__a=1&fb_dtsg={fb_dtsg}

------WebKitFormBoundaryy1orVA8O3OLUfzBE

------WebKitFormBoundaryy1orVA8O3OLUfzBE

Content-Disposition: form-data; name="file"; filename="test.jpg"

Content-Disposition: form-data; name="file"; filename="test.jpg"

------WebKitFormBoundaryy1orVA8O3OLUfzBE--

------WebKitFormBoundaryy1orVA8O3OLUfzBE--

multipart/form-data; boundary=----WebKitFormBoundaryy1orVA8O3OLUfzBE

multipart/form-data; boundary=----WebKitFormBoundaryy1orVA8O3OLUfzBE

hXXps://VVV.facebook.com/notes/composer/publish/?av={c_user}&dpr=1

hXXps://VVV.facebook.com/notes/composer/publish/?av={c_user}&dpr=1

{"offset":{offset},"length":{length},"key":{Index}}

{"offset":{offset},"length":{length},"key":{Index}}

{URL}

{URL}

"{Index}":{"id":null,"type":7,"data":{"url":"{URL}"}}

"{Index}":{"id":null,"type":7,"data":{"url":"{URL}"}}

hXXps://m.facebook.com/friends/center/friends/?ppk={page}&tid=u_u_0

hXXps://m.facebook.com/friends/center/friends/?ppk={page}&tid=u_u_0

hXXps://m.facebook.com/friends/center/friends/?mff_nav=1&fb_ref=fbm&ref=bookmarks

hXXps://m.facebook.com/friends/center/friends/?mff_nav=1&fb_ref=fbm&ref=bookmarks

XMLHttpRequest

XMLHttpRequest

hXXps://mobile.twitter.com/settings

hXXps://mobile.twitter.com/settings

hXXps://api.twitter.com/1.1/users/lookup.json?include_blocking=true&include_blocked_by=true&include_can_dm=true&include_followed_by=true&include_mute_edge=true&screen_name=

hXXps://api.twitter.com/1.1/users/lookup.json?include_blocking=true&include_blocked_by=true&include_can_dm=true&include_followed_by=true&include_mute_edge=true&screen_name=

Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs=1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA

Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs=1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA

hXXps://api.twitter.com/1.1/friendships/create.json

hXXps://api.twitter.com/1.1/friendships/create.json

hXXps://api.twitter.com/1.1/statuses/update.json

hXXps://api.twitter.com/1.1/statuses/update.json

&media_type=image/jpeg

&media_type=image/jpeg

hXXps://upload.twitter.com/i/media/upload.json?command=INIT&total_bytes=

hXXps://upload.twitter.com/i/media/upload.json?command=INIT&total_bytes=

hXXps://mobile.twitter.com/compose/tweet

hXXps://mobile.twitter.com/compose/tweet

hXXps://upload.twitter.com/i/media/upload.json?command=APPEND&media_id=

hXXps://upload.twitter.com/i/media/upload.json?command=APPEND&media_id=

------WebKitFormBoundaryUbnK77J90KHiGB65

------WebKitFormBoundaryUbnK77J90KHiGB65

------WebKitFormBoundaryUbnK77J90KHiGB65--

------WebKitFormBoundaryUbnK77J90KHiGB65--

hXXps://mobile.twitter.com

hXXps://mobile.twitter.com

multipart/form-data; boundary=----WebKitFormBoundaryUbnK77J90KHiGB65

multipart/form-data; boundary=----WebKitFormBoundaryUbnK77J90KHiGB65

hXXps://upload.twitter.com/i/media/upload.json?command=FINALIZE&media_id=

hXXps://upload.twitter.com/i/media/upload.json?command=FINALIZE&media_id=

select count(*) from sqlite_master where type='table' and tbl_name='

select count(*) from sqlite_master where type='table' and tbl_name='

select tbl_name from sqlite_master where type='table' and tbl_name'sqlite_sequence'

select tbl_name from sqlite_master where type='table' and tbl_name'sqlite_sequence'

application/x-www-form-urlencoded

application/x-www-form-urlencoded

SetClientCertificate

SetClientCertificate

TempObj=JSON.parse(str);

TempObj=JSON.parse(str);

var obj=JSON.parse(str);

var obj=JSON.parse(str);

Lobj.push(obj);

Lobj.push(obj);

return Lobj.length;

return Lobj.length;

function GetAllKey(){

function GetAllKey(){

Lobj = JSON.parse(str);

Lobj = JSON.parse(str);

var str=JSON.stringify(Lobj);

var str=JSON.stringify(Lobj);

return Lobj.str;

return Lobj.str;

if (typeof Date.prototype.toJSON !== 'function') {

if (typeof Date.prototype.toJSON !== 'function') {

Date.prototype.toJSON = function (key) {

Date.prototype.toJSON = function (key) {

return isFinite(this.valueOf())

return isFinite(this.valueOf())

? this.getUTCFullYear() '-'

? this.getUTCFullYear() '-'

f(this.getUTCMonth() 1) '-'

f(this.getUTCMonth() 1) '-'

f(this.getUTCDate()) 'T'

f(this.getUTCDate()) 'T'

f(this.getUTCHours()) ':'

f(this.getUTCHours()) ':'

f(this.getUTCMinutes()) ':'

f(this.getUTCMinutes()) ':'

f(this.getUTCSeconds()) 'Z'

f(this.getUTCSeconds()) 'Z'

String.prototype.toJSON =

String.prototype.toJSON =

Number.prototype.toJSON =

Number.prototype.toJSON =

Boolean.prototype.toJSON = function (key) {

Boolean.prototype.toJSON = function (key) {

return this.valueOf();

return this.valueOf();

'"' : '\\"',

'"' : '\\"',

'\\': '\\\\'

'\\': '\\\\'

escapable.lastIndex = 0;

escapable.lastIndex = 0;

return escapable.test(string) ? '"' string.replace(escapable, function (a) {

return escapable.test(string) ? '"' string.replace(escapable, function (a) {

: '\\u' ('0000' a.charCodeAt(0).toString(16)).slice(-4);

: '\\u' ('0000' a.charCodeAt(0).toString(16)).slice(-4);

function str(key, holder) {

function str(key, holder) {

k, // The member key.

k, // The member key.

value = holder[key];

value = holder[key];

typeof value.toJSON === 'function') {

typeof value.toJSON === 'function') {

value = value.toJSON(key);

value = value.toJSON(key);

value = rep.call(holder, key, value);

value = rep.call(holder, key, value);

if (Object.prototype.toString.apply(value) === '[object Array]') {

if (Object.prototype.toString.apply(value) === '[object Array]') {

length = value.length;

length = value.length;

v = partial.length === 0

v = partial.length === 0

? '[\n' gap partial.join(',\n' gap) '\n' mind ']'

? '[\n' gap partial.join(',\n' gap) '\n' mind ']'

: '[' partial.join(',') ']';

: '[' partial.join(',') ']';

length = rep.length;

length = rep.length;

partial.push(quote(k) (gap ? ': ' : ':') v);

partial.push(quote(k) (gap ? ': ' : ':') v);

if (Object.prototype.hasOwnProperty.call(value, k)) {

if (Object.prototype.hasOwnProperty.call(value, k)) {

v = partial.length === 0

v = partial.length === 0

? '{\n' gap partial.join(',\n' gap) '\n' mind '}'

? '{\n' gap partial.join(',\n' gap) '\n' mind '}'

: '{' partial.join(',') '}';

: '{' partial.join(',') '}';

if (typeof JSON.stringify !== 'function') {

if (typeof JSON.stringify !== 'function') {

JSON.stringify = function (value, replacer, space) {

JSON.stringify = function (value, replacer, space) {

typeof replacer.length !== 'number')) {

typeof replacer.length !== 'number')) {

throw new Error('JSON.stringify');

throw new Error('JSON.stringify');

if (typeof JSON.parse !== 'function') {

if (typeof JSON.parse !== 'function') {

JSON.parse = function (text, reviver) {

JSON.parse = function (text, reviver) {

function walk(holder, key) {

function walk(holder, key) {

var k, v, value = holder[key];

var k, v, value = holder[key];

if (Object.prototype.hasOwnProperty.call(value, k)) {

if (Object.prototype.hasOwnProperty.call(value, k)) {

return reviver.call(holder, key, value);

return reviver.call(holder, key, value);

cx.lastIndex = 0;

cx.lastIndex = 0;

if (cx.test(text)) {

if (cx.test(text)) {

text = text.replace(cx, function (a) {

text = text.replace(cx, function (a) {

('0000' a.charCodeAt(0).toString(16)).slice(-4);

('0000' a.charCodeAt(0).toString(16)).slice(-4);

.test(text.replace(/\\(?:["\\\/bfnrt]|u[0-9a-fA-F]{4})/g, '@')

.test(text.replace(/\\(?:["\\\/bfnrt]|u[0-9a-fA-F]{4})/g, '@')

.replace(/"[^"\\\n\r]*"|true|false|null|-?\d (?:\.\d*)?(?:[eE][ \-]?\d )?/g, ']')

.replace(/"[^"\\\n\r]*"|true|false|null|-?\d (?:\.\d*)?(?:[eE][ \-]?\d )?/g, ']')

.replace(/(?:^|:|,)(?:\s*\[) /g, ''))) {

.replace(/(?:^|:|,)(?:\s*\[) /g, ''))) {

throw new SyntaxError('JSON.parse');

throw new SyntaxError('JSON.parse');

JSON.stringify(Lobj['

JSON.stringify(Lobj['

Lobj.push("

Lobj.push("

Lobj.push(

Lobj.push(

Lobj.push('

Lobj.push('

Lobj.length

Lobj.length

JSON.stringify(Lobj[

JSON.stringify(Lobj[

Lobj.splice(

Lobj.splice(

JSON.stringify(Lobj

JSON.stringify(Lobj

GetAllKey

GetAllKey

var keyStr = "ABCDEFGHIJKLMNOP"

var keyStr = "ABCDEFGHIJKLMNOP"

for (var i=0; i

for (var i=0; i

var c = strNative.charAt(i);

var c = strNative.charAt(i);

var cc = strNative.charCodeAt(i);

var cc = strNative.charCodeAt(i);

return hexChars.charAt(nH) hexChars.charAt(nL);

return hexChars.charAt(nH) hexChars.charAt(nL);

var posTo = strAscii.indexOf("\\u", posFrom);

var posTo = strAscii.indexOf("\\u", posFrom);

output = strAscii.substring(posFrom, posTo);

output = strAscii.substring(posFrom, posTo);

output = toChar(strAscii.substr(posTo, 6));

output = toChar(strAscii.substr(posTo, 6));

posTo = strAscii.indexOf("\\u", posFrom);

posTo = strAscii.indexOf("\\u", posFrom);

output = strAscii.substr(posFrom);

output = strAscii.substr(posFrom);

if (str.substr(0, 2) != "\\u") return str;

if (str.substr(0, 2) != "\\u") return str;

for (var i=2; i

for (var i=2; i

var cc = str.charCodeAt(i);

var cc = str.charCodeAt(i);

return String.fromCharCode(code);

return String.fromCharCode(code);

function URlEncode(temp){return(encodeURIComponent(temp));}

function URlEncode(temp){return(encodeURIComponent(temp));}

function URlDecode(temp){return(decodeURIComponent(temp));}

function URlDecode(temp){return(decodeURIComponent(temp));}

function Utf8Decode(temp){return(URlDecode(decodeURI(temp)));}

function Utf8Decode(temp){return(URlDecode(decodeURI(temp)));}

URlDecode

URlDecode

URlEncode

URlEncode

Adodb.Stream

Adodb.Stream

kernel32.dll

kernel32.dll

advapi32.dll

advapi32.dll

shlwapi.dll

shlwapi.dll

ntdll.dll

ntdll.dll

Kernel32.dll

Kernel32.dll

ole32.dll

ole32.dll

shell32.dll

shell32.dll

crypt32.dll

crypt32.dll

wininet.dll

wininet.dll

psapi.dll

psapi.dll

RegOpenKeyA

RegOpenKeyA

RegCloseKey

RegCloseKey

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

program internal error number is %d.

program internal error number is %d.

:"%s"

:"%s"

:"%s".

:"%s".

c:\%original file name%.exe

c:\%original file name%.exe

Vkk\.BP

Vkk\.BP

O%ST/D

O%ST/D

^}.Ix

^}.Ix

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

- floating point support not loaded

- floating point support not loaded

USER32.DLL

USER32.DLL

operator

operator

`5/.LV@t

`5/.LV@t

ez%sw

ez%sw

%DtHo%

%DtHo%

S.BB2

S.BB2

kcxS%UR

kcxS%UR

.ooNM

.ooNM

.QakOZL

.QakOZL

Z9.Is

Z9.Is

9R%dy

9R%dy

|O%7X3

|O%7X3

/:.UV

/:.UV

!{.Nc20

!{.Nc20

7.EIS

7.EIS

%d*Nt

%d*Nt

p^.cq

p^.cq

VdS%SJ

VdS%SJ

;z%Dr

;z%Dr

2.OX^)

2.OX^)

@!<.rud>

@!<.rud>

9.fsG

9.fsG

F^?/.Xe

F^?/.Xe

4S,]%Di

4S,]%Di

F^>..Xg

F^>..Xg

X&UTz

X&UTz

"%fgJ

"%fgJ

;8-Q}n

;8-Q}n

$.dqB

$.dqB

3.JZ]-

3.JZ]-

%uY8:

%uY8:

cMD)#

cMD)#

L_0'.Wm

L_0'.Wm

48.nZ

48.nZ

i(\;$%c

i(\;$%c

n.UMv8

n.UMv8

6Z)#.Km

6Z)#.Km

%U;M%]

%U;M%]

Mr.hPaOx

Mr.hPaOx

%/%fq

%/%fq

B%X-\:|

B%X-\:|

d.RFw?

d.RFw?

'.Uiv

'.Uiv

'S&N%C

'S&N%C

x%SZ~?

x%SZ~?

%U%O%C

%U%O%C

&U%O%C

&U%O%C

~%S\}>

~%S\}>

e.RFv?

e.RFv?

x%S[|9

x%S[|9

y%S[}>

y%S[}>

e.QFw

e.QFw

M&E%U]

M&E%U]

.StD)

.StD)

n%XL}5

n%XL}5

'U&N%C

'U&N%C

z%XX}4

z%XX}4

{%SZ}>

{%SZ}>

IU! %Fi

IU! %Fi

x%UZ|9

x%UZ|9

x%UZ}8

x%UZ}8

L^

L^

>;.jY

>;.jY

]do%ST&TQ

]do%ST&TQ

wEb*.

wEb*.

N.EyOc`Wl~

N.EyOc`Wl~

%s9?}

%s9?}

%Scj^

%Scj^

N OF%U

N OF%U

&*4.HLWv$

&*4.HLWv$

0 0

0 0

CRYPT32.dll

CRYPT32.dll

:%xtI

:%xtI

Y0%dMq'

Y0%dMq'

w.XiC

w.XiC

[4E%X

[4E%X

W>.ZS

W>.ZS

O.ZVi

O.ZVi

%S%Mw

%S%Mw

Z.TJM

Z.TJM

.PtZ;l

.PtZ;l

!CZ%d

!CZ%d

"Z%sJ

"Z%sJ

B!#%xKa

B!#%xKa

/u.iA

/u.iA

DTM.mX

DTM.mX

.rdfZ9

.rdfZ9

F.QY[Z=s

F.QY[Z=s

U'Z%c_

U'Z%c_

%Ze.xvu

%Ze.xvu

xzX%U

xzX%U

td.Ys/

td.Ys/

J.SX#

J.SX#

zX.xB

zX.xB

c@.ZM4

c@.ZM4

:%C,w

:%C,w

Zv2%u

Zv2%u

9.LxZ

9.LxZ

V0"_

V0"_

^%_:&4\"

^%_:&4\"

t.IWTi[ri

t.IWTi[ri

GP.ZL

GP.ZL

X=$V%d

X=$V%d

.tR9Za

.tR9Za

[.ar_

[.ar_

:.ZN*

:.ZN*

%SZq0

%SZq0

A.Xo%C

A.Xo%C

U2.Zw

U2.Zw

&ZmB\.MX

&ZmB\.MX

.VJf

.VJf

aZ.yX

aZ.yX

.YfR`

.YfR`

y%.XF

y%.XF

PZmW.ke

PZmW.ke

bM.ZP

bM.ZP

tQ%4X|

tQ%4X|

Y z.PwZ

Y z.PwZ

\.ZX'

\.ZX'

Ztcp

Ztcp

JJ%xXM

JJ%xXM

Z.Pg=

Z.Pg=

Z%c.#d

Z%c.#d

.jZl7

.jZl7

Z.VUo t

Z.VUo t

4\.vZI

4\.vZI

:$.Zz

:$.Zz

Z:h%d

Z:h%d

Xj%CYZ

Xj%CYZ

jÔZ

jÔZ

Y ,.IZoe

Y ,.IZoe

%x(Zp

%x(Zp

ZFtP

ZFtP

Z*,_.Zy

Z*,_.Zy

K%XloU-

K%XloU-

[.msT&

[.msT&

vZ%cM

vZ%cM

ZG .Vj

ZG .Vj

_Z%u7

_Z%u7

-M.hZ

-M.hZ

6%c:~0

6%c:~0

>%CZl

>%CZl

OZ.KI

OZ.KI

.qoT*

.qoT*

ZcjW%U

ZcjW%U

.Dk=Z

.Dk=Z

.tAT=

.tAT=

h%sXZ

h%sXZ

YZ.tr

YZ.tr

[h^%UI

[h^%UI

.EZ;AZw

.EZ;AZw

A.xzW

A.xzW

X.ke[c

X.ke[c

^W%X

^W%X

.Zba0'o9U(p

.Zba0'o9U(p

Hi.EP

Hi.EP

beD*%x

beD*%x

#zq%F

#zq%F

!!.WF

!!.WF

.FU"^

.FU"^

ADVAPI32.dll

ADVAPI32.dll

PSAPI.DLL

PSAPI.DLL

WININET.dll

WININET.dll

-9.GV

-9.GV

n.d%F

n.d%F

8ole32.dll

8ole32.dll

SHLWAPI.dll

SHLWAPI.dll

SHELL32.dll

SHELL32.dll

USER32.dll

USER32.dll

B8%C'

B8%C'

OLEAUT32.dll

OLEAUT32.dll

Mnl%d

Mnl%d

m=CmD\

m=CmD\

e.GXp!

e.GXp!

.sy7t[6

.sy7t[6

C.Zsf

C.Zsf

^x3@%CV

^x3@%CV

,.zoNg\

,.zoNg\

v1%F;

v1%F;

%(~WR.qC8

%(~WR.qC8

Å“V]{

Å“V]{

O:J%S9

O:J%S9

nP%Cq

nP%Cq

f:\ET

f:\ET

÷zc

÷zc

EQ.qe

EQ.qe

%x kg7

%x kg7

G%X2X

G%X2X

hI.paz

hI.paz

WZ%u_Gq

WZ%u_Gq

U%ct=

U%ct=

5B.wc

5B.wc

I, %8x5}

I, %8x5}

/.ZhS

/.ZhS

)%XZd

)%XZd

~%D-".$I$#EyX

~%D-".$I$#EyX

1`.ZY

1`.ZY

,.nDnPn

,.nDnPn

J.JNJ

J.JNJ

.Obv7

.Obv7

-3N}E

-3N}E

ForceRemove {148D5E31-0D7E-44EE-B5C2-291B822351EA} = s 'TheGfxUILauncher Class'

ForceRemove {148D5E31-0D7E-44EE-B5C2-291B822351EA} = s 'TheGfxUILauncher Class'

val ServerExecutable = s '%MODULE_RAW%'

val ServerExecutable = s '%MODULE_RAW%'

TypeLib = s '{D6DCE90A-557C-40D8-ABE9-BD1336674C95}'

TypeLib = s '{D6DCE90A-557C-40D8-ABE9-BD1336674C95}'

stdole2.tlbWWW

stdole2.tlbWWW

Created by MIDL version 8.00.0603 at Mon Apr 04 10:47:17 2016

Created by MIDL version 8.00.0603 at Mon Apr 04 10:47:17 2016

.---(((('

.---(((('

(-((('('''

(-((('('''

>?

>?

3311100

3311100

j-h}I'

j-h}I'

jl).aE

jl).aE

x.Len

x.Len

x:\fu

x:\fu

mscoree.dll

mscoree.dll

KERNEL32.DLL

KERNEL32.DLL

WUSER32.DLL

WUSER32.DLL

SQLite

SQLite

SQLite3 Database Library

SQLite3 Database Library

3.9.2.1

3.9.2.1

SQLite3

SQLite3

Error at initialization of bundled DLL: %s

Error at initialization of bundled DLL: %s

Error at hooking API "%S"

Error at hooking API "%S"

Dumping first %d bytes:

Dumping first %d bytes:

6.15.10.4425

6.15.10.4425

GFXUIEX.EXE

GFXUIEX.EXE

%original file name%.exe_2340_rwx_00542000_0011C000:

Vkk\.BP

Vkk\.BP

O%ST/D

O%ST/D

^}.Ix

^}.Ix

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

- floating point support not loaded

- floating point support not loaded

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

operator

operator

`5/.LV@t

`5/.LV@t

c:\%original file name%.exe

c:\%original file name%.exe

ez%sw

ez%sw

%DtHo%

%DtHo%

S.BB2

S.BB2

kcxS%UR

kcxS%UR

.ooNM

.ooNM

.QakOZL

.QakOZL

Z9.Is

Z9.Is

9R%dy

9R%dy

|O%7X3

|O%7X3

/:.UV

/:.UV

!{.Nc20

!{.Nc20

7.EIS

7.EIS

%d*Nt

%d*Nt

p^.cq

p^.cq

VdS%SJ

VdS%SJ

;z%Dr

;z%Dr

2.OX^)

2.OX^)

@!<.rud>

@!<.rud>

9.fsG

9.fsG

F^?/.Xe

F^?/.Xe

4S,]%Di

4S,]%Di

F^>..Xg

F^>..Xg

X&UTz

X&UTz

"%fgJ

"%fgJ

;8-Q}n

;8-Q}n

$.dqB

$.dqB

3.JZ]-

3.JZ]-

%uY8:

%uY8:

cMD)#

cMD)#

L_0'.Wm

L_0'.Wm

48.nZ

48.nZ

i(\;$%c

i(\;$%c

n.UMv8

n.UMv8

6Z)#.Km

6Z)#.Km

%U;M%]

%U;M%]

Mr.hPaOx

Mr.hPaOx

%/%fq

%/%fq

B%X-\:|

B%X-\:|

d.RFw?

d.RFw?

'.Uiv

'.Uiv

'S&N%C

'S&N%C

x%SZ~?

x%SZ~?

%U%O%C

%U%O%C

&U%O%C

&U%O%C

~%S\}>

~%S\}>

e.RFv?

e.RFv?

x%S[|9

x%S[|9

y%S[}>

y%S[}>

e.QFw

e.QFw

M&E%U]

M&E%U]

.StD)

.StD)

n%XL}5

n%XL}5

'U&N%C

'U&N%C

z%XX}4

z%XX}4

{%SZ}>

{%SZ}>

IU! %Fi

IU! %Fi

x%UZ|9

x%UZ|9

x%UZ}8

x%UZ}8

L^

L^

>;.jY

>;.jY

]do%ST&TQ

]do%ST&TQ

wEb*.

wEb*.

N.EyOc`Wl~

N.EyOc`Wl~

%s9?}

%s9?}

%Scj^

%Scj^

N OF%U

N OF%U

&*4.HLWv$

&*4.HLWv$

0 0

0 0

KERNEL32.DLL

KERNEL32.DLL

mscoree.dll

mscoree.dll

Error at initialization of bundled DLL: %s

Error at initialization of bundled DLL: %s

Error at hooking API "%S"

Error at hooking API "%S"

Dumping first %d bytes:

Dumping first %d bytes:

%original file name%.exe_2340_rwx_0076D000_00001000:

WININET.dll

WININET.dll

user32.dll

user32.dll

-9.GV

-9.GV

%original file name%.exe_2340_rwx_00772000_00001000:

SHLWAPI.dll

SHLWAPI.dll