1.2
低危
53 个模型检测该样本为恶意！
重新分析
更多

25ea65ff667051edca5b8c323864d24dd59ee6e1f8257855d4bcaea58bafcd8a

25ea65ff667051edca5b8c323864d24dd59ee6e1f8257855d4bcaea58bafcd8a.exe

分析耗时

195s

最近分析

362天前

文件大小

257.5KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN ZUSY
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.76
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba Trojan:Win32/CryptInject.ea20c4e0 20190527 0.3.0.5
Avast Win32:TrojanX-gen [Trj] 20200925 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_60% (W) 20190702 1.0
Kingsoft None 20200925 2013.8.14.323
McAfee GenericRXKR-DK!63A23B602BD2 20200924 6.0.6.653
Tencent None 20200925 1.0.0.1
静态指标
此可执行文件具有 PDB 路径 (1 个事件)
pdb_path E:\2019.10.25desktop\新服务\srandnamesvc13\Release\QmServer.pdb
行为判定
动态指标
在 PE 资源中识别到外语 (1 个事件)
name RT_VERSION language LANG_CHINESE filetype None sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x000400a0 size 0x000001ec
网络通信
与未执行 DNS 查询的主机进行通信 (2 个事件)
host 114.114.114.114
host 8.8.8.8
文件已被 VirusTotal 上 53 个反病毒引擎识别为恶意 (50 out of 53 个事件)
ALYac Gen:Variant.Zusy.309668
APEX Malicious
AVG Win32:TrojanX-gen [Trj]
Ad-Aware Gen:Variant.Zusy.309668
AhnLab-V3 Trojan/Win32.Agent.R347403
Alibaba Trojan:Win32/CryptInject.ea20c4e0
Antiy-AVL Trojan/Win32.Wacatac
Arcabit Trojan.Zusy.D4B9A4
Avast Win32:TrojanX-gen [Trj]
Avira HEUR/AGEN.1112037
BitDefender Gen:Variant.Zusy.309668
BitDefenderTheta Gen:NN.ZexaF.34254.qu1@auFFTrkj
Bkav W32.AIDetectVM.malware1
CAT-QuickHeal Trojan.Multi
ClamAV Win.Malware.Zusy-9638741-0
Comodo Malware@#15fhbp7u3i04o
CrowdStrike win/malicious_confidence_60% (W)
Cylance Unsafe
Cynet Malicious (score: 100)
Cyren W32/S-4eb9485d!Eldorado
ESET-NOD32 a variant of Win32/Agent.ACCK
Elastic malicious (high confidence)
Emsisoft Gen:Variant.Zusy.309668 (B)
F-Secure Heuristic.HEUR/AGEN.1112037
FireEye Generic.mg.63a23b602bd23551
Fortinet W32/Agent.ACCK!tr
GData Gen:Variant.Zusy.309668
Ikarus Trojan.Win32.Agent
Invincea Troj/Agent-BELS
Jiangmin Trojan.Gofot.avz
K7AntiVirus Trojan ( 0056a4261 )
K7GW Trojan ( 0056a4261 )
Lionic Trojan.Multi.Generic.4!c
MAX malware (ai score=81)
McAfee GenericRXKR-DK!63A23B602BD2
McAfee-GW-Edition BehavesLike.Win32.Generic.dh
MicroWorld-eScan Gen:Variant.Zusy.309668
Microsoft Trojan:Win32/CryptInject!atmn
NANO-Antivirus Trojan.Win32.Graftor.hpqxtq
Paloalto generic.ml
Panda Trj/Genetic.gen
Qihoo-360 Generic/HEUR/QVM10.2.B5FB.Malware.Gen
Rising Trojan.Agent!8.B1E (TFE:5:YgtKgxwLiRI)
Sangfor Malware
Sophos Troj/Agent-BELS
Symantec ML.Attribute.HighConfidence
TrendMicro TROJ_GEN.R03BC0DI120
TrendMicro-HouseCall TROJ_GEN.R03BC0DI120
VBA32 Trojan.CryptInject
VIPRE Trojan.Win32.Generic!BT
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2020-07-03 13:56:20

PDB Path

E:\2019.10.25desktop\新服务\srandnamesvc13\Release\QmServer.pdb

PE Imphash

a587f630282df616e228ed37519c6e08

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000338cf 0x00033a00 6.418745124208236
.rdata 0x00035000 0x00009694 0x00009800 5.40326494320338
.data 0x0003f000 0x0000049c 0x00000200 1.8212225073010344
.rsrc 0x00040000 0x000003e8 0x00000400 4.476806956033956
.reloc 0x00041000 0x000029be 0x00002a00 6.427309003457445

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000400a0 0x000001ec LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED None
RT_MANIFEST 0x0004028c 0x0000015a LANG_ENGLISH SUBLANG_ENGLISH_US None

Imports

Library KERNEL32.dll:
• 0x435064 TerminateProcess
• 0x435068 lstrlenA
• 0x43506c lstrcpyA
• 0x435070 CreateThread
• 0x435074 DeleteFileA
• 0x435078 GetTempPathA
• 0x43507c CloseHandle
• 0x435084 LoadLibraryA
• 0x435098 SetLastError
• 0x43509c GetLastError
• 0x4350a0 GetTickCount
• 0x4350a4 SleepEx
• 0x4350a8 VerifyVersionInfoA
• 0x4350ac GetLocalTime
• 0x4350b4 GetProcAddress
• 0x4350b8 lstrcatA
• 0x4350bc Sleep
• 0x4350c4 OpenProcess
• 0x4350c8 GetCurrentProcess
• 0x4350cc FreeLibrary
• 0x4350d8 GetCurrentProcessId
• 0x4350dc GetCurrentThreadId
• 0x4350e4 IsDebuggerPresent
• 0x4350f0 lstrcmpA
• 0x4350f4 HeapSetInformation
• 0x4350fc InterlockedExchange
• 0x435100 DecodePointer
• 0x435104 EncodePointer
• 0x43510c GetStdHandle
• 0x435110 GetFileType
• 0x435118 PeekNamedPipe
• 0x43511c ReadFile
• 0x435120 FormatMessageA
• 0x435124 WaitForSingleObject
• 0x435128 VerSetConditionMask
Library USER32.dll:
• 0x4352d8 wsprintfA
Library ADVAPI32.dll:
• 0x435004 CryptDestroyKey
• 0x435008 CryptEncrypt
• 0x43500c CryptReleaseContext
• 0x435010 CryptImportKey
• 0x435014 OpenProcessToken
• 0x435018 CryptDestroyHash
• 0x43501c CryptGetHashParam
• 0x435020 CryptHashData
• 0x435024 CryptCreateHash
• 0x435028 RegCloseKey
• 0x43502c SetServiceStatus
• 0x435030 DuplicateTokenEx
• 0x435034 RegOpenKeyExA
• 0x43503c RegCreateKeyA
• 0x435040 RegQueryValueExA
• 0x435048 RegSetValueExA
• 0x43504c GetTokenInformation
Library SHELL32.dll:
Library MSVCP100.dll:
Library SensApi.dll:
• 0x4352d0 IsNetworkAlive
Library USERENV.dll:
Library WTSAPI32.dll:
• 0x4353a4 WTSQueryUserToken
Library WININET.dll:
• 0x4352e8 DeleteUrlCacheEntry
Library urlmon.dll:
• 0x4353ac URLDownloadToFileA
Library PSAPI.DLL:
• 0x4352c0 EnumProcesses
Library WS2_32.dll:
• 0x435334 getsockopt
• 0x435338 bind
• 0x43533c ntohs
• 0x435340 getsockname
• 0x435344 setsockopt
• 0x435348 WSAIoctl
• 0x43534c send
• 0x435350 recv
• 0x435354 select
• 0x435358 WSAGetLastError
• 0x43535c __WSAFDIsSet
• 0x435360 WSASetLastError
• 0x435364 WSAStartup
• 0x435368 WSACleanup
• 0x43536c getpeername
• 0x435370 closesocket
• 0x435374 socket
• 0x435378 gethostname
• 0x43537c connect
• 0x435380 freeaddrinfo
• 0x435384 ioctlsocket
• 0x435388 listen
• 0x43538c getaddrinfo
• 0x435390 sendto
• 0x435394 recvfrom
• 0x435398 accept
• 0x43539c htons
Library WLDAP32.dll:
• 0x4352f0 None
• 0x4352f4 None
• 0x4352f8 None
• 0x4352fc None
• 0x435300 None
• 0x435304 None
• 0x435308 None
• 0x43530c None
• 0x435310 None
• 0x435314 None
• 0x435318 None
• 0x43531c None
• 0x435320 None
• 0x435324 None
• 0x435328 None
• 0x43532c None
Library IPHLPAPI.DLL:
• 0x43505c GetAdaptersInfo
Library MSVCR100.dll:
• 0x43513c _open
• 0x435140 _close
• 0x435144 _strdup
• 0x435148 _stricmp
• 0x43514c _read
• 0x435150 _write
• 0x435154 _controlfp_s
• 0x435158 _invoke_watson
• 0x435160 ?terminate@@YAXXZ
• 0x435168 _crt_debugger_hook
• 0x43516c __set_app_type
• 0x435170 _fmode
• 0x435174 _commode
• 0x435178 __setusermatherr
• 0x43517c _configthreadlocale
• 0x435180 _initterm_e
• 0x435184 _CxxThrowException
• 0x435188 _strnicmp
• 0x43518c sprintf
• 0x4351a0 sscanf
• 0x4351a4 memmove
• 0x4351a8 printf
• 0x4351ac rand
• 0x4351b0 srand
• 0x4351b4 ??3@YAXPAX@Z
• 0x4351b8 _time64
• 0x4351bc ??2@YAPAXI@Z
• 0x4351c0 calloc
• 0x4351c4 realloc
• 0x4351c8 free
• 0x4351cc malloc
• 0x4351d0 memset
• 0x4351d4 _errno
• 0x4351d8 tolower
• 0x4351dc fwrite
• 0x4351e0 fread
• 0x4351e4 __iob_func
• 0x4351e8 strchr
• 0x4351ec strncpy
• 0x4351f0 memcpy
• 0x4351f4 strtol
• 0x4351f8 strrchr
• 0x4351fc isalpha
• 0x435200 strncmp
• 0x435204 isxdigit
• 0x435208 strstr
• 0x43520c strtoul
• 0x435210 strpbrk
• 0x435214 _strtoi64
• 0x435218 qsort
• 0x43521c fclose
• 0x435220 fputs
• 0x435224 fopen
• 0x435228 fgets
• 0x43522c isdigit
• 0x435230 fputc
• 0x435234 _beginthreadex
• 0x435238 strerror
• 0x43523c __sys_nerr
• 0x435240 isalnum
• 0x435244 isspace
• 0x435248 _getpid
• 0x43524c memchr
• 0x435250 _fstat64
• 0x435254 _lseeki64
• 0x435258 atoi
• 0x43525c getenv
• 0x435260 fflush
• 0x435264 fseek
• 0x435268 _gmtime64
• 0x43526c isupper
• 0x435270 toupper
• 0x435274 _stat64
• 0x435278 islower
• 0x43527c isprint
• 0x435280 isgraph
• 0x435284 _unlock
• 0x435288 __dllonexit
• 0x43528c _lock
• 0x435290 _onexit
• 0x435294 _amsg_exit
• 0x435298 __getmainargs
• 0x43529c _cexit
• 0x4352a0 _exit
• 0x4352a4 _XcptFilter
• 0x4352a8 exit
• 0x4352ac __initenv
• 0x4352b0 _initterm
• 0x4352b4 __CxxFrameHandler3
L!This program cannot be run in DOS mode.
+v+v+v
L0v+vvD
B*vRich+v
`.rdata
@.data
@.reloc
ESVW3h
i$M_^3[
SVW3}EPV}}}}3
u*EPhC
jD|WP+
fMMQSWWWRWP
P_^[]UE
^]UQVW"
_^]UjhGC
EVWPEd
-QREhC
Y_^M3E%
]UjhGC
MQURMQ
UERPhC
Y_^[]U<4C
EVEPh
u MQlC
UPQREhC
QRPMhC
3_^M3
RPQUhC
QRPMhC
QRPMhC
uFMQMUREPj
QRPMhC
RPQUhC
PL$$Qj
D$tQRP$
t$<D$P
\$L\$<
\$0\$ p
L$X\$h\$XQ
D$@D$p
t$l\$h\$X9|$4r
t$4\$0\$ 9|$Pr
t$P\$L\$<9$
ESVW3h
ESVW3h
]UjhVHC
\$|K3h
L$|5QC
t$DD$X
\$T\$D
\$8\$(H
T$`\$p\$`R
D$HD$x
t$t\$p\$`9|$<r
t$<\$8\$(9|$Xr
t$X\$T\$D9$
u8L$ QL$
T$ RD$,Pj
3EEEPE8C
USWtSO
[UjhPGC
u)EPME
_^[]_^8
[^]UW}
SV3W39]
_^[M3c
3;~/Mb
_^3[M3
M_^3[[
u(u$u P
_^[M3{
3;~/Mb
_^[M3D
_^3[M3/
OuM_^3[
USVWj<^
K_^3[]_^
F8WQhC
^]UQSVWjHj
_^3[]_^
_^3[]3U<4C
S~ WMQj
_^[M3"
MQUREPW
PSWhTTC
_^3[M3O
ME_^3[;
]VWPQhTC
u[_^UE
^]3^]U
@u+@SPEG8VP
MW8QVR3
_^]UQE
H8VBRSQ1
_^3[]G
_^3[M3
QR@hUC
O8FVSQ
RQRhhUC
O8FVSQ4
;u/RPQW
;t^PQRhTC
^]USVW}
3UVW=QC
_NhNlN@
VHVLV0
3^]USVh
0_^[]W3;
_^[]Ut8V3t0W}
MQVEU4
MRUPQR}
uE_^[]
SV3WuZ}
9Ut@7~@
MRUPQRU}
E_^[]_^[]
VXPQhLVC
3^UV5UC
F;r;tz;sU
E;Ew4+
W_^3[]U
ESVWh(WC
SV33W}
t=;v9+HE
t3t!;v
t2Et+@P
t<Et5@P
Et'URCSP
;Et'URFVP]
7_^3[]U
;u7}]u1
EEfEE90
IPhtWC
_3^M34
EFHE_]
EFHE_]
EFHE_]
;t>[_^]j
F_^[]_^7
V3uu;t9
9~Ht"j
SVW3}=
^[]_^T
^[]_^X
E[]=+N
Z_^E[]
=_^E[]
_^E[]
<_^E[]
_^[]hdXC
_^[]h\XC
_^[]hTXC
_^[]WE
n_^E[]
j_^E[]
M_^E[]
0_^E[]
e_^E[]
H_^E[]
+_^E[]
z_^E[]
]_^E[]
@_^E[]
#_^E[]
x_^E[]
[_^E[]
>_^E[]
!_^E[]
F8F<NHQ,;
F8~<FHx,
Q_^E[]
4_^E[]
E_^[],x@
[[[[[[[[[
[[[[[[
[[ [!"[[#$[[[[%&'[[[([)*[+[[[,-.[[/0123[[[[[[4[[[[[[[5[[[[[[6789:;[[[[[[[[<[[[=>?@ABCD[[[[E[[[[F%[[[[[G[[HI[[[[[JK[[[LL[[M[[[[[[[[[N[[O[PQRS[[T[[[[[[UVW[X[[%%Y[[Z{@
MMMMMMMMMMMMMMMMM
MM !"MMM#M$M%MM&M'()MMMM%MMMMMMMM*MMMMMMMMMMMM+MM,-MMMMMMMMMMM.M/MMMMMMMMMMMMMM01MM234MM56789MMMMMMMM:;MM<=>MM?MMMMM@ABMMMMMCMDMMMMMEMMFGHIJMMMKMLI
VDRhXC
[f_3^]
uP9V@uKH
bt"NDQhXC
_3^]SVW?
P QRSW?
^$_^[U S]
_^3[]hYC
CDPhpYC
^W>W'h
SVWhZC
SMQUR+PW]]
j:V5QC
URURU+RHPQ
_^[]UE
_^3[]SW[
KDPQhZC
_^[]U44C
EEEEfEEE
VMQh[C
t{>/u/~
@u+@PRV
>/t;j/V
Au+AQPV
VREPh[C
}$hp[C
@u+@PL3
@u+@PN
@u+@PRW
j#V5QC
M_^3[&
C@V3PuuuuuuE
ttEPMQWSUM)
RQhd]C
EM]}PQ
MQUREPVS
tBPGDPh
RQHDQh\C
t't#9x
^Wh$\C
u%9;uLM
_^[]9A
^]SW^,S
NHpuKE
$_[3^]
]UV339E
_^_3^3^
t%O,H8
F@;u[G,P|
_^[]^3[]U84C
VMMMMMW
tE UE}RPH
I RUQMVRQ
9u'VS
v39ubVP
I RUQj
]@E;F4
QURF P1
^4M_^3[<
Wx@tAVj
^_[]UQS
FD^3[]UU
_^[]USVWj
[]_^3[]U
RPQMQV
GD_^[]US]
_^[]UE
t8VW2~
u_^[]UW}
_]h@lB
b[^3_]^
UWVh]C
EWVPkv
8^_3[M3Dt
]U(W3}}};
PVh,_C
}FPNT#
t9QNpPFtPH
/FtNpPH
UREPSV
Yu/G0M
39UuQ9X
MMMQPd
u+EMPQV|
uGEPWS
}SDEMQRPW
l^_[]_
3]UQSVu
9_^3[]=
8_^3[]U
PRQhp_C
M_^3[a
EPWSQV$
_^[]UM
3[]PVhR
_^[]UE
t:;uvEtH
u[_3^]
[_^]WPh_C
[_^]h_C
^]USVu
_^]UVu
[3{._^
@u+W;s
_^[]VP
;Ms;3u
uu_^]UQEPQj
_^3[M3V
FuuUPh
G,3;tZ8"u
:G ;t6VP'
+Pj/Se
t!VSPU
_^3[M3Q
QRPh4`C
u;t,8*;u
M_^3[hM
u_^3[]_
uu^_3[]
@:;rD3V
^_[]_3[]UVu
u_[^]UQE
^[]UVu
SPEPEPWVRQh,aC
,_^[]UQSVE
t{WhxaC
t5ShpaC
_^3[]hTaC
[]^3[]U
SV33W}
PERPQ3Sh
_^]UVu
PWhlbC
_^[]_^[]U
SVW8t3x
PQVhcC
@u+pPVR
t!VhcC
RPQVhdcC
WcxRWU,}
f~lR|PV
_^3[M3)?
u+j.WF
PWhDdC
_^[M37=
_^[M3<
_^[M3q<
_M^3[;
]UQV7d
^]hldC
RPRPj3`Q
9G@t6uE
_^]UVu
_3^]WV
F<N8WP
,R<RPQ0
P8VhdC
_[3^M37
8URhdC
uoLR6AP<PSWW
P8URhdC
4_[^M3u5
[^M3J5
_[^M3+5
_^3[]U
u_LPtWQ
tP^E[t
E]UX4C
_^3[M32
UVhxeC
UPEQRP
DPtjj.MQP=VW$
MPREPh@eC
QTPE(z
_^3[M350
EM_^3[/
;t>9]u
9]tEPcU
VE^_[]V
^E_[]USVj
_^[]UQVu
^]3^]UQE
t[>9_Ht
^[]UVu
_^]U]w5US
G9_^[]_^3[]W=
_^[]_^[]
%u$Wj%
u0N~+I
u+~&Qj N
ut1~-$
tORPQS!
t-~ Sj0N
t,~'Rj N
EEEEEEfEEfM
t.9]u)9]t
R]]]]e
t.9]u)9]t
t;HtHt
.......
..........
 !"#$%&'()...................*+,.......-UQSVW
ku&PWVPSPh
SSh<vC
0W3}]E
.u2t.}
^[]_^3[]UE
;tu~h/A
G;|^_3[]
3_^]UM
_^3[]UM
_^3[]US]
u_^3[]
_^[]UVu
^]UQW}
|^[_]UM
1A3;r^3u
^]3^]UE
QRh`vC
@u+t,;E
3^]UVu
A;rEPj
QSWRVh
|cMjdQjjJ
$tEhvC
uUPjRPjjPVq
_^3[]UE
_^]UVu
3^]US]
VQhTwC
_^[]U8U
P`XdEAM]
u#ESj Pj
_^3[]
xEh@yC
t.h4yC
S]S]S]
RQPhhxC
u.h0xC
u+h0xC
QPS Rj
_^[]hwC
^]3^]UQE
_^3[]Sh@{C
t>5DRC
Cuh({C
@u+PRS
_^3[]UQSVu
ty;$utW
^[]USV3
t(<-uLE
_^[]_^3[]UU
VQ3hD|C
PpLpTpdpl
PSWh|C
G;rURWS
_^[]h}C
[]_^3[]
_3x_UQW>EPQD
;_]h}C
u!u;Qm
[_^[]3
E_^[]VQ
_[]VMURE
URWSPV
_^[]_^3[]UV
_3^]UQV3Wj
VFPFTcD
^]h4~C
VPRQ|8
uE]];t
_^3[]US]
_^[]US]
^]UQSV,
s$t6%N
P|RspM
[]UQ3fEEEj
3EEEEEfEEE(
SXP+XpMHT
fNAK j/f^9fF;3u
_^[]UQV$
^AC[]fH f
zC^3[]U
QuW}3;
HTPPQRP3
O\HPW`PT
HTPPQRP/3
HtPpQRP,2
HtPpQRP1
_^3[]dA
^]USVu
_^3[]U}
^]W=QC
3_^]Uj
9-ERRu
@u+WP@
]UQSVWH
H;vV<<t
G;r_^[]+Ht8C
t_^[]UQE
=STLSu
[]=USERu
CNuE_^[]
g_^E[]
-EE_^[]
UQVW>EPQH
_^]h}C
GXPV|z
_3^]UE
^]]^]UQVW;j
WGPGT$
_^]UVu
W>uS9
_^]hxC
3_^]UQSVW}
t6MWhC
^UQSVu
W>33P3
OWh,~C
_^[]US
3bG8_[]
QURSP_
u;Et4K8I
ww$pyA
u_^[]PV
_^[]US]
^[]UQSVW<
u;t<> u7F]
[]_^3[]U
t-_^3[]hC
t&UhDC
VcXU}RWV
RQPWhC
}E9~pu.9Ftu)j
jjjS6;
3E_^]j
3mE_^]
>E_^]U3
jjjVb:
,3_]U3
]3]USV13
[]3F_^[]V398
u^V0Wj
jjjP8
_^]_^]UVu
W>/uS9
_^]hDC
~hVdADR
_^]UQU
SVW333
Fu;tgv
R+PQMQ,
SEP+PQR
UREPE+RQP
u;>?u6F
W+PQR*
]UQVW@
EPQVWec
SQRVh<C
^]'^]UQS]
Gu_^3[]
u+?SASLu-
?AUTHu)
vaUQVW>EPQ@
I_^]h}C
W3*uWEP
]y_^[M3
u^_[]S^
PUwPhj3e^_
_^[]UQV
uJtFu%t
GPPVLV
_3^]UQV7j
ESP8^u
t_[]SV39
F4V0gfff
F4V0gfff
F F RPWQ
_^3[V1
]uSVhpC
@u+PhhC
@u+Ph$C
_^3[]hC
@u+@]USVF
f~@kfF@`
_^3[]PWh
_^3[]3
PRPh_C
_^3[]hC
N@QhhC
PQqPh_C
W|G|PQWX
O|WxQRW
3[]QhDC
tRcjwD
3^]USVWhh
@_^]U}
F0_^+[]USVu
_^3[]UVF
]]UT4C
;C ~_C
PWSuxK
QWSu6S
PR+PEh_C
_E^M3a
u)xR|P
_^3[M3
B_^[M3-
StKtSpQRS
t$_^[M3
3_^[]UVu
F,^_[]uF
^_[]Uj
u#;u|%
F`VdF`Fd3^]UE
3^]UX4C
VWj\Q]E
EEN$EU
QPVEMA
uJUERPV
SV0W3E|}}}
}}!x|Vt
_^3[M3
UWRh@xC
RUQMRUl
UQRPhC
QP)UWRV
D_^[M3
u$xtRPV
u'E_^[M3
M_^3[~
t\@;E|h
3[]hhC
_FZ^]j?P
EPMQVE
tFtIj?W
t3W39~
YUVj j
c3[7^]U<E
SV0W3h
P}9 E;t P
E9]u-tMEPj
MQMRPQeF
t[UPRj
MUQhpC
URUQSVEP3VQR
_^3[]
t+Gj:W
MWVh,C
j:W=QC
tB@j:PE
_^3[]U
t"Ph\C
t2RWShC
_PWShC
_PVShtC
JtdJVt5Ju/
3+tFJuh
Jt[JVt2Ju,
3+t@Ju
_UQSW394
t+j|R
ux_^[M3i
Mx_^3[
|QRhPC
+Q5RgDT
REfMag@
+QT5RPWE
^[]UVW}
(|_^UQ}
j>5LSC
Q3E;u8
]UE;u8
]j!PEP
u$MQUUR
_^3[M3\
UMRVEPQ
};EVURVVVP
UEVMQh
tAMU}QR
}MVEPh
M]EPQSuUu*
t`MUEPh?
QtH;uAE;~:]PEPSc
;u#E90t
MVjVVjjjQ
_M^3[Y
]S39^<t8W39^@~
;~@|F<P
^<^@_NHQ
WMQURSEE
EPMQSE
M_33[6X
EQMRPQ
^]_3^]
SRQ^VL
PVKGpPhTC
P|QR~Nl
u7lpWh C
u1WVEPph
QRxPV
fzhtPxQR
uXPVDpP
uWGf;`
PVwDpPhTC
]PV9DpP
]f;`v6phC
thPxQR
PVCPhTC
pPGtQV
PV2CPh
SE8pPhhC
$t2S7pPh<C
3_[US]
[]Vh_C
I_^3[]U
;s/JHQh
(3r_^[]hC
PjPPjjjSA
^_^3[]
'3_^[]V|
t'PhpC
9Ftu^U
3^]F`Fd3^]UVu
^]3W9P
tUhL}C
_PbG8;t 69
_^3[]U
9G@|TW<
u(hpWC
G@thj/V
/tbt^>
GHu!h0C
t'9OHu"U9J
;u'QO`QV
_^3[]UVW}
_^]hDC
_UQVp,W>QURPE
EM}};t
EQjjP8
t*AHt#PhC
_T_U(4C
MQUREPMQURGh
EPMQUREPMQURhC
QMRUQMRQhXC
EMRUPQRh`vC
t5MUQRJ
tl_^[M35
8_^[M3u5
_^[M3[5
UREPMQUREPMQ
MEEPEQM
UURUPQRhC
x~MQRP
RUQMRUl
UQRPhC
M_^3[2
u?MW$U
QG REP[
Eu3_^[]
[]UQV3
_^]UQS
[]G@@t
t,83~'h
REVPQm
[]VW>hC
t.H<@h
Ght_39Oh~
A;Oh|t@
WlPh_C
_^[]UQVW>=
t<S3R]
[u*9Eu
_3^]Y_^]U
t\}tW}
3_^[]ShXC
GdO`9E|;
9Mv4|0
UOPGT/H
UUPQh8C
_^3[]K_^[]U
M;u$9Uu
F`t%PhC
QF REP
SQPRhC
uWP_Tu
;t#9O`u
u%9Eu 9E
EE_^[]
u+AHt$Ph
_^]e^]j
\^[]UQ}
;t3SWh@xC
$ugSWV}
u SWVw}
EE_^[]U
PHRhxC
q^d3_^[]U
t!_^[]
SjSSjjjV
_^[]UQ}
3[]UVu
_^]UQSVW>j
,_^[]USV
_^[]hC
_^]SPM]
uHGlWh
WlOhGh
},@GpGl
[_^]o[_^]
;EuJ39P
[_^]9P
uu:/tphC
VG8&O8
VG8G8M
u=WhG<Gl
^]GhGhGl
t+GpPWpu
gOhW<DPh
r[_^]QU
[_^]PQV}
[_^]PY
[_^]PVx
_^]UVu
_^]_3^]V
_^]Uj`j
u_^3[]
_^[]US]
u_^3[]
_^[]USVW}
_^3[];v
N;w+FV
3SW8MM9M
MQURPVW
^uV9Eu
_3^]Sh
Z(]Z,]t
u[QPhC
[_3^]UQM
PEWQh(C
3_^]USVu
3_^[]UQ}
Fu_^3[]
_^3[]3
FX_^P^T^[]_^
QPERPW
tuU;te]
^3[]FX
_^[]US]
_^3[]UU
KF;s[_3^][_
3^]US]
F$VWpGt
V$OpWtE
[]3_^[]U
@u+PSRS
][]UQFX
FTF`NTWPQ
3_]US]
u]j V5QC
_^[]UQSVW}
_^3[]9
uk9]uf
_^[]UM
^]UW3R
MS3VWE
3_^[]U,4C
UQMRUQMl
E3EE]h
]]]]9<
UESRPW
tFh4yC
@u+HPC
CuU++]
EMU+QPR
<At^<DtZ<ItV
QMQPhhC
RQMQPhTC
tx;wtM;
RPQhpC
9Et%E$
PQRhXC
@u+EPRS
]S]S]S]S]S]S]S]SRUQPEPMQh
RUQPhC
tHuD9]
URPEhC
_^[M3x
QMHPQj
t_QPVEH
;Er0QMQSPhC
E_^[M3
u2hXxC
EMPQh@xC
UUERPVG
QWS Et"hxC
]3QPEPq]3
QPEP^M
u3hXxC
QRh@xC
u0hXxC
EMPQh@xC
E3GEE|}
RPSnMU
EtTMQh
MUQRVB
tXM_^3[
QHPEPBB
EFd@F\+F`P
Nhu~X
NhShxC
WURhhC
FXNhSPQj
VXFhMRPQS
tEVhRN
t7FhhC
t7NhhC
u7VhhC
W~ Nhj
EFhUUR
uRVh3=
uiFhPP
@FhFh8
@FhFxd|e=
^HNPt5+
^h+SPQRRz
^3[]h\iC
FxPhlC
N`PSQj
3_^[]UE
t6G$N$t'G(N(wt
G,N,ht
^]_3^]USVu
^,G(;t
~$_^]U=C
uTVWkE
^]USVu
3W;ta}
^_]3_]UVu
C@VWPE
SK@QESu
QN,QN(QPRVDVRhC
$_^[]3[]
@@SVWtAP*S
t40t.]
u_^3[]
@@SVWtF]
@u+PSR
u_^3[]
W3tMh@lB
:_^3[]U
^]3^]UVu
^]3^]UE
_^[]UVu
~]EPVWSc
uHE;t-t:+
_^[]Uh
j@QVUREPMQURhHC
PVWWQe
_^3[M3
PQRhhC
P5b _^
vPh8C
3;t6;t,P
L3FQhC
_^3[M3B
PP<u$t
^3[]W(
UUUEhC
MUQMRUPEPQSh
+URPQSNR
UMQPRSE
MQWPSXM
E_^[]j
VNQE+E
GEM+MEPQW
rMQh<C
E+EH;t
3_^[]U`Vu
3WRPWV
3_^]UE
_^[]US]
t%t%PRE
_^[]UW}
Ou^_]U
]U]wUE
^]OSt}
BFOUuM
;uehlC
8tm9t*VQ=
uPQ3h\C
S,Vh@C
VWPEQM
Q$[_^]j
[_^]US]
txdhlp\`TXP,;U+D
xt`X;|
33QPURSEVPMUQREP
RUPRV|,
MSQRP`
RPQuxM
PtRPSQup0
HM_^33[
3^]UVu
];v-EhC
tVWh(C
^]_3^]
;w0hdC
^3[];|
EPSQRW/
F$u/N(
A4t#URMQWS
UREPWSE
w*M~&URMQWS
UF\WRP
tlF\URQPW*w
t?UF$N RV
RQShHC
)V$F N
EPA4WR
u>9HXu9
[]33~N
]B@;|;t
W,G(RPVH
t<QK PC$PH
C$K PH
t7S {$;u
3_^[]UM
R,V1W33t
MQURh0C
_[]Vh@C
t]titej/VO
^_[]UQSVu
G/_^[]
[]j W]
t_+tB+
_^3[]U
7uEUREPVWE
_^]US]
_^[]_^3[]UE
^X]$^h
VPNT[u
t W=DRC
Fu_SV#8
SV0Wt,4
W+PhLC
RWPQSV)
URPh,C
3[]UVu
@u+PVSpV
_[]UVp
tCEPVqMQ
]UQSVW}
3_^[]UVW}
[_^]UE
tbWMQPxpURp
V7EPupN
uu^[_]UM
EPQoUR
EPEPEPRQWb
URPhTC
]S]S]SRQPSb
uW9EtP
URPhTC
3_^[]UVu
_3^]j?Vu
nE[t"+EM
@u+@PQWt
MMMSVMU
_^[]UE
_1^]PQWVV
^]Uh.C
W3;tLF
>_^]USVu
Gu_^3[]
_^[]UM
H;s3]U}
|_^]_^]VWC
|_^_^VWC
t"W=@RC
^]U`4C
EEEEEEfEEEPhtC
9]uV=QC
UREPMQhdC
9]u'UREPhXC
uc9Uu^9UuY9UuTh
uiEu+9U
u]9UuXM
_^[M3e
]UME}u
;v&E_^
^3[M3d
SX,VW;
p(H$P QRhRP
PQ@RPi
_^[]UVu
F V$^]U
SRV$KV
@u+WME
[G W$_3^]UM
UPF4WQR
MACM;|;uk=
v;t'W~
^[]_^3[]_^
QWRPg3
F V$3_^]UVu
]3]UQS]
RQjPe\
[]|RPEP
u7u"Mh
_^[]UQM
=uw9"u
^]UQSP
[]VMQhlC
^3[]UE
]UQSVW}
<_^[]UVp
@u+^u+h
]3]U$4C
@u+PPWhC
UPEQRPh
@:u+tL9=tGEPURQ
3_[]U$
E8Pj@URh
dj@Px7
SSQPSWVhC
Uj!R12hC
@u+PPPWVX
@u+P PxPV"
@u+PPWV
@u+PNPMQVS
]j PV
@u+P~PdQV
@u+P~PURV
@u+P~~PEPV
@u+PN~PMQVS
j @RV7
PSMQURdPxQRhC
_M^3[<Q
L3HM$XDP@9G u
\j!Rf-\
@QPRP\PSE
]:XHPQh
PG RPQURhC
EPQURh
tBW MQXPG
QRPShC
,t'G "X
PQRSh<C
t"PVh,C
Fu+D13M_^3[M
_^]UVu
^]UVPQh$C
]UQSVW3}9=C
_u8}G}<
J_^3[]
^[]UQVu
E_[^]_E
E[^]UE
EPEQRP
tgEPEMQ
uu9Et3
MURUPQ
RUPQRW$E
QPVSkK
t!=DRC
3_^]UM
t_3EEEEEuufE
3^M3L>
EPMQWj
]=M 3F
]UV3t$
t\UMQj
_^3[]UE
3^]US]
_^[]U(4C
QRF,P->
MQ(RPEj
3M_3^=9
@u+PadPMVQ6E
SV3W]]
+E^[]UE
A=u<1=u
1PERh`C
1PERhC
1PERhC
3~8x,t
3~0x0t
~,@ 3;t
u'VWU%
[]VW8%
VLI9NLr-FHND
[_^]u uW
N N$^Uj
[_^][G
]WSPg(
_^3[M3?$
^3[M3#
V0t.W~
Vj/Wj\W
^_UQVp,W3};u
[_^]UM
++;w:PA
_^[]UU
_^[M3!
9C$tPP
QR!C(Qt,{,
uu9s$t'RhC
1u'QhC
_^[M3p
M_^33[
H0H ]U
U~N$F ;|
_^3[]E
_F(^[]
w1$d%C
wA0r<W
@:u+t':=t"EPMQR
_^[]33;v
PyxWVj Qj
P{?QXi?U\RPQ
xUREPWQVR
tQpRSXPMQ7
phiEPQRW
PRPdRj
QPQPPj
QRV`PVPlj
jXWPWPj
=M=U=E===
M_^3[d
t@EEd$
_^]USVu
_^3[]UW}
1222222
1A;r^_]U$4C
E3SVWEEEE
M_^33[e
3EESEEM
^t]!tX\u6
<*uD8F
]_^3[M3x
^[@M3_
EEPEPu
YH]%QC
Wt%Vh GC
WVS3D$
+SVW4C
1E3PeuEEEEd
Y__^[]Q
EE8csmt
8csmu*x
;r_^%RC
B(;r3_^[]
1E3PEd
Y_^[]%RC
E3E3;u
easy handle already used in multi handle
Could not resolve %s: %s
getaddrinfo() failed for %s:%d; %s
init_resolve_thread() failed for %s; %s
Hostname in DNS cache was stale, zapped
Hostname %s was found in DNS cache
Added %s:%d:%s to DNS cache
Address in '%s' found illegal!
Couldn't parse CURLOPT_RESOLVE entry '%s'!
%255[^:]:%d:%255s
Couldn't parse CURLOPT_RESOLVE removal entry '%s'!
%255[^:]:%d
<no protocol>
Connected to %s (%s) port %ld (#%ld)
IDN support not present, can't parse Unicode domains
Protocol "%s" not supported or disabled in libcurl
%I64u-
ALL_PROXY
all_proxy
http_proxy
_proxy
NO_PROXY
no_proxy
Port number out of range
%s://%s%s%s:%hu%s%s%s
;type=%c
[%*45[0123456789abcdefABCDEF:.]%c
Couldn't find host %s in the _netrc file; using defaults
ftp@example.com
anonymous
Couldn't resolve host '%s'
Couldn't resolve proxy '%s'
User-Agent: %s
Set-Cookie:
RELOAD
identity
CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!
Closing connection %ld
Connection %ld seems to be dead!
Multiplexed connection found!
Connection #%ld isn't open enough, can't reuse
Penalized, skip
Pipe is full, skip (%zu)
Connection #%ld is still name resolving, can't reuse
Server doesn't support multi-use (yet)
Server doesn't support multi-use yet, wait
Found bundle for host %s: %p
Connection cache is full, closing the oldest one.
Invalid IPv6 address format
Please URL encode %% as %%25, see RFC 6874.
socks4
socks4a
socks5
socks5h
Connection #%ld to host %s left intact
Rebuilt URL to: %s
<url> malformed
/?]%[^
:]://%[^
/?]%[^
%15[^:]:%[^
Illegal characters found in URL
No connections available.
No connections available in cache
No more connections allowed to host: %d
NTLM-proxy picked AND auth done set, clear picked!
NTLM picked AND auth done set, clear picked!
Re-using existing connection! (#%ld) with %s %s
We can reuse, but we want a new connection anyway
Found connection %ld, with requests in the pipe (%zu)
memory shortage
%s://%s
Internal error removing splay node = %d
Internal error clearing splay node = %d
Curl_poll(%d ds, %d ms)
In state %d with no easy_conn, bail out!
Hostname was found in DNS cache
Operation timed out after %ld milliseconds with %I64d bytes received
Operation timed out after %ld milliseconds with %I64d out of %I64d bytes received
Connection timed out after %ld milliseconds
Resolving timed out after %ld milliseconds
Pipe broke: handle %p, url = %s
[%s %s %s]
Header
Send failure: %s
Recv failure: %s
Failed writing header
Failed writing body (%zu != %zu)
Write callback asked for PAUSE when not supported!
%s cookie %s="%s" for domain %s, path %s, expire %I64d
Replaced
#HttpOnly_
expires
max-age
version
skipped cookie with bad tailmatch domain: %s
domain
httponly
secure
%1023[^;
=] =%4999[^;
%s%s%s
unknown
# Fatal libcurl error
# Netscape HTTP Cookie File
# http://curl.haxx.se/docs/http-cookies.html
# This file was generated by libcurl! Edit at your own risk.
ignoring failed cookie_init for %s
WARNING: failed to save cookies in %s
Failed to set SIO_KEEPALIVE_VALS on fd %d: %d
Failed to set SO_KEEPALIVE on fd %d
bind failed with errno %d: %s
Local port: %hu
Couldn't bind to '%s'
getsockname() failed with errno %d: %s
Bind to local port %hu failed, trying next
Name '%s' family %i resolved to '%s' family %i
Couldn't bind to interface '%s'
Local Interface %s is ip %s using address family %i
ssloc inet_ntop() failed with errno %d: %s
ssrem inet_ntop() failed with errno %d: %s
getpeername() failed with errno %d: %s
TCP_NODELAY set
Could not set TCP_NODELAY: %s
Immediate connect fail for %s: %s
Trying %s...
sa_addr inet_ntop() failed with errno %d: %s
Connection time-out
Failed to connect to %s port %ld: %s
connect to %s port %ld failed: %s
Connection failed
After %ldms connect time, move on!
0123456789abcdefghijklmnopqrstuvwxyz
0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ
Unknown error
SSL server certificate status verification FAILED
SSL public key does not match pinned public key
The max connection limit is reached
Chunk callback failed
Unable to parse FTP file list
RTSP session error
RTSP CSeq mismatch or invalid CSeq
Socket not ready for send/recv
Error in the SSH layer
Remote file not found
Caller must register CURLOPT_CONV_ callback options
Conversion failed
TFTP: No such user
Remote file already exists
TFTP: Unknown transfer ID
TFTP: Illegal operation
Disk full or allocation exceeded
TFTP: Access Violation
TFTP: File Not Found
Login denied
Send failed since rewinding of the data stream failed
Issuer check against peer certificate failed
Failed to load CRL file (path? access rights?, format?)
Failed to shut down the SSL connection
Requested SSL level failed
Maximum file size exceeded
Invalid LDAP URL
Unrecognized or bad HTTP Content or Transfer-Encoding
Problem with the SSL CA cert (path? access rights?)
Peer certificate cannot be authenticated with given CA certificates
Couldn't use specified SSL cipher
Problem with the local SSL certificate
Failure when receiving data from the peer
Failed sending data to the peer
Failed to initialise SSL crypto engine
Can not set SSL crypto engine as default
SSL crypto engine not found
Server returned nothing (no headers, no data)
SSL peer certificate or SSH remote key was not OK
Malformed telnet option
An unknown option was passed in to libcurl
Number of redirects hit maximum amount
Failed binding local connection end
A libcurl function was given a bad argument
Operation was aborted by an application callback
A required function in the library was not found
LDAP: search failed
LDAP: cannot bind
Couldn't read a file:// file
Couldn't resume download
SSL connect error
Internal problem setting up the POST
Requested range was not delivered by the server
FTP: command REST failed
FTP: command PORT failed
Timeout was reached
Out of memory
Failed to open/read local data from file/application
Upload failed (at start/before it took off)
Failed writing received data to disk/application
HTTP response code said error
Quote command returned error
FTP: couldn't retrieve (RETR failed) the specified file
Transferred a partial file
FTP: couldn't set file type
Error in the HTTP2 framing layer
FTP: can't figure out the host in the PASV response
FTP: unknown 227 response format
FTP: unknown PASV reply
FTP: unknown PASS reply
FTP: The server did not accept the PRET command.
FTP: Accepting server connect has timed out
FTP: The server failed to connect to data port
Access denied to remote resource
FTP: weird server reply
Couldn't connect to server
Couldn't resolve host name
Couldn't resolve proxy name
A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.
URL using bad/illegal format or missing URL
Failed initialization
Unsupported protocol
No error
Host not found, try again
Unrecoverable error in call to nameserver
No data record of requested type
Host not found
Winsock version not supported
Winsock library not initialised
Winsock library is not ready
Disconnected
Remote error
Something is stale
Bad quota
Too many users
Process limit reached
Not empty
Host unreachable
Host down
Name too long
Loop??
Connection refused
Timed out
Too many references
Socket has been shut down
Socket is not connected
Socket is already connected
No buffer space
Connection was reset
Connection was aborted
Network has been reset
Network unreachable
Network down
Address not available
Address already in use
Protocol family not supported
Address family not supported
Operation not supported
Socket is unsupported
Protocol is unsupported
Protocol option is unsupported
Bad protocol
Bad message size
Need destination address
Descriptor is not a socket
Blocking call in progress
Call would block
Out of file descriptors
Invalid arguments
Bad argument
Bad access
Bad file
Call interrupted
Unknown error %d (%#x)
0123456789
%d.%d.%d.%d
GOPHER
Failed sending Gopher request
Got an RTP Receive with a CSeq of %ld
The CSeq of this request %ld did not match the response %ld
Got invalid RTSP request
Got invalid RTSP request: RTSPREQ_LAST
Failed sending RTSP request
Content-Type: application/sdp
Content-Type: text/parameters
Content-Type:
Content-Length: %I64d
Content-Length:
%s%s%s%s%s%s
Session: %s
%s %s RTSP/1.0
CSeq: %ld
Session ID cannot be set as a custom header.
Session:
CSeq cannot be set as a custom header.
Range: %s
Range:
Referer: %s
Referer:
User-Agent:
Accept-Encoding: %s
Accept-Encoding:
Accept: application/sdp
Accept:
Refusing to issue an RTSP SETUP without a Transport: header.
Transport: %s
Transport:
Refusing to issue an RTSP request [%s] without a session ID.
RECORD
SET_PARAMETER
GET_PARAMETER
TEARDOWN
ANNOUNCE
DESCRIBE
OPTIONS
Failed writing RTP data
Cannot pause RTP
Cannot write a 0 size RTP packet.
Got RTSP Session ID Line [%s], but wanted ID [%s]
Got a blank Session ID
Unable to read the CSeq header: [%s]
Got an error writing an RTP packet
EHLO %s
HELO %s
STARTTLS
AUTH %s
AUTH %s %s
No known authentication mechanisms supported!
MAIL FROM:%s SIZE=%s
MAIL FROM:%s AUTH=%s SIZE=%s
MAIL FROM:%s AUTH=%s
MAIL FROM:%s
RCPT TO:<%s>
RCPT TO:%s
Got unexpected smtp-server response: %d
STARTTLS denied. %c
STARTTLS not supported.
Remote access denied: %d
Authentication cancelled
Command failed: %d
MAIL failed: %d
RCPT failed: %d
DATA failed: %d
SMTPS not supported!
localhost
Failed to alloc scratch buffer!
NT LM 0.12
i386-pc-win32
Invalid input packet
USER %s
APOP %s %s
Got unexpected pop3-server response
STLS not supported.
Authentication failed: %d
PASS %s
Access denied. %c
POP3S not supported!
Unexpected continuation response
EXPUNGE
SEARCH
EXAMINE
SELECT
CAPABILITY
Bad tagged response
Failed to parse FETCH response.
Written %I64u bytes, %I64u bytes are left for transfer
Found %I64u bytes to download
IMAPS not supported!
%c%03d
PARTIAL
SECTION
UIDVALIDITY
LOGIN %s %s
AUTHENTICATE %s
AUTHENTICATE %s %s
LIST "%s" *
SELECT %s
Cannot SELECT without a mailbox.
FETCH %s BODY[%s]
FETCH %s BODY[%s]<%s>
Cannot FETCH without a UID.
APPEND %s (\Seen) {%I64d}
Cannot APPEND with unknown input file size
Cannot APPEND without a mailbox.
SEARCH %s
Cannot SEARCH without a query string.
LOGOUT
Got unexpected imap-server response
LOGINDISABLED
Select failed
Mailbox UIDVALIDITY has changed
OK [UIDVALIDITY %19[0123456789]]
set timeouts for state %d; Total %ld, retry %d maxtry %d
invalid tsize -:%s:- value in OACK packet
%s (%ld)
server requested blksize larger than allocated
blksize is smaller than min supported
%s (%d)
blksize is larger than max supported
invalid blocksize value in OACK packet
Malformed ACK packet, rejecting
%s (%ld)
tsize parsed from OACK
%s (%d) %s (%d)
blksize parsed from OACK
requested
blksize
got option=(%s) value=(%s)
tftp_rx: internal error
Timeout waiting for block %d ACK. Retries = %d
Received unexpected DATA packet block %d, expecting block %d
Received last DATA packet block %d again.
tftp_tx: internal error, event: %i
tftp_tx: giving up waiting for block %d ack
Received ACK for block %d, expecting %d
bind() failed; %s
;mode=
Connected for transmit
Connected for receive
tftp_send_first: internal error
timeout
%s%c%s%c
netascii
Internal state machine error
TFTP finished
Internal error: Unexpected packet
Received too short packet
TFTP response timeout
Can't get the size of %s
Can't open %s for writing
failed to resume file:// transfer
Can't get the size of file.
Last-Modified: %s, %02d %s %4d %02d:%02d:%02d GMT
Accept-ranges: bytes
Couldn't open file %s
subtree
onetree
There are more than %d entries
;binary
LDAP remote: %s
LDAP local: ldap_simple_bind_s %s
LDAP local: Cannot connect to %s:%ld
LDAP local: trying to establish %s connection
cleartext
encrypted
LDAP local: %s
LDAP local: %s
LDAP local: LDAP Vendor = %s ; LDAP Version = %d
Microsoft Corporation.
CLIENT libcurl 7.44.0
MATCH %s %s %s
CLIENT libcurl 7.44.0
DEFINE %s %s
default
lookup word is missing
Failed sending DICT request
CLIENT libcurl 7.44.0
/LOOKUP:
/DEFINE:
/FIND:
/MATCH:
TELNET
NEW-ENVIRON
ENCRYPT
AUTHENTICATION
OLD-ENVIRON
XDISPLOC
LINEMODE
TERM SPEED
X3 PAD
3270 REGIME
TTYLOC
OUTPUT MARKING
TACACS UID
END OF RECORD
TERM TYPE
SEND LOCATION
SUPDUP OUTPUT
SUPDUP
DE TERMINAL
BYTE MACRO
EXTEND ASCII
NAOLFD
NAOVTD
NAOVTS
NAOFFD
NAOHTD
NAOHTS
NAOCRD
TIMING MARK
STATUS
SUPPRESS GO AHEAD
BINARY
insufficient winsock version to support telnet
WSAStartup failed (%d)
%s %d %d
%s %s %d
%s %s %s
%s IAC %d
%s IAC %s
Sending data failed (%d)
Width: %hu ; Height: %hu
INFO/REPLY
%d (unknown)
%s (unsupported)
(Empty suboption?)
, not IAC SE!)
(terminated by
%s IAC SB
Unknown telnet option %s
Syntax error in telnet option: %s
%hu%*[xX]%hu
NEW_ENV
%127[^= ]%*[ =]%255s
USER,%s
%c%c%c%c%s%c%c
%c%s%c%s
%127[^,],%127s
%c%c%c%c
In SUBOPTION processing, RCVD
FreeLibrary(wsock2) failed (%d)
WSACloseEvent failed (%d)
Time-out
WSAEnumNetworkEvents failed (%d)
WSACreateEvent failed (%d)
failed to find WSAEnumNetworkEvents function (%d)
WSAEnumNetworkEvents
failed to find WSAEventSelect function (%d)
WSAEventSelect
failed to find WSACloseEvent function (%d)
WSACloseEvent
failed to find WSACreateEvent function (%d)
WSACreateEvent
failed to load WS2_32.DLL (%d)
WS2_32.DLL
Connection accepted from server
Error accept()ing server connect
Failure sending PORT command: %s
,%d,%d
Failure sending EPRT command: %s
%s |%d|%s|%hu|
bind() failed, we ran out of ports!
bind(port=%hu) failed: %s
bind(port=%hu) on non-local address failed: %s
socket failure: %s
failed to resolve the address provided to PORT: %s
getsockname() failed: %s
Connect data stream passively
%s%s%s
STOR %s
APPE %s
Failed to read data
File already completely uploaded
Could not seek stream
SIZE %s
Failed EPSV attempt. Disabling EPSV
Failed EPSV attempt, exiting
unknown proxytype option given
RETR %s
REST %I64d
Instructs server to resume from offset %I64d
File already completely downloaded
Offset (%I64d) was beyond file size (%I64d)
ftp server doesn't support SIZE
PBSZ %d
Access denied: %03d
ACCT requested but none available
ACCT %s
ACCT rejected by server: %03d
Connecting to %s (%s) port %d
Failure sending QUIT command: %s
Request has same path as previous transfer
Uploading to a URL without a file name!
no memory
;type=
FTPS not supported!
Doing the SSL/TLS handshake on the data stream
We got a 421 - timeout!
FTP response aborted due to select/poll error: %d
FTP response timeout
MDTM %s
Bad PASV/EPSV response: %03d
Can't resolve new host %s:%hu
Can't resolve proxy host %s:%hu
Skip %d.%d.%d.%d for data connection, re-use %s instead
Couldn't interpret the 227-response
%d,%d,%d,%d,%d,%d
Weirdly formatted EPSV reply
Illegal port number in EPSV reply
%c%c%c%u%c
Skipping time comparison
The requested document is not old enough
The requested document is not new enough
%04d%02d%02d %02d:%02d:%02d GMT
%04d%02d%02d%02d%02d%02d
Given file does not exist
unsupported MDTM reply format
QUOT string not accepted: %s
Wildcard - Parsing started
Wildcard - "%s" skipped by user
Wildcard - START of "%s"
Error while waiting for server connect
Ctrl conn has data while waiting for data conn
Ready to accept data connection from server
There is negative response in cache while serv connect
Accept timeout occurred while waiting server connect
Checking for server connect
Preparing for accepting server on data port
CWD %s
Data conn was not available immediately
Failed FTP upload: %0d
Getting file with size: %I64d
Maxdownload = %I64d
bytes
RETR response: %03d
No data was received!
Received only partial file: %I64d bytes
Uploaded unaligned file size (%I64d out of %I64d bytes)
server did not report OK, got %d
partial download completed, closing connection
control connection looks dead
Failure sending ABOR command: %s
Remembering we are in dir "%s"
ftp_perform ends with SECONDARY: %d
PRET RETR %s
PRET STOR %s
PRET %s
REST %d
Got a %03d response code instead of the assumed 200
Couldn't set desired mode
Couldn't use REST
TYPE %c
Connection to proxy confirmed
Connect data stream actively
Failed to do PORT
disabling EPRT usage
PRET command not accepted: %03d
Failed to MKD dir: %03d
Server denied you to change to the given directory
MKD %s
QUOT command failed with %03d
SITE NAMEFMT 1
OS/400
Failed to figure out path
Entry path is '%s'
Failed to clear the command channel (CCC)
PROT %c
unsupported parameter to CURLOPT_FTPSSLAUTH: %d
Got a %03d ftp-server response when 220 was expected
%sAuthorization: Basic %s
Proxy-
Rewind stream after send
NTLM send, close instead of sending %I64d bytes
%s auth using %s with user '%s'
Server
Authorization:
Proxy-authorization:
Digest
Authentication problem. Ignoring this.
Ignoring duplicate digest auth header.
Empty reply from server
Failed to alloc memory for big header!
Avoided giant realloc for header (max is %d)!
The requested URL returned error: %d
The requested URL returned error: %s
Expect: 100-continue
100-continue
Expect:
Connection
Content-Length
If-Unmodified-Since: %s
Last-Modified: %s
If-Modified-Since: %s
%s, %02d %s %4d %02d:%02d:%02d GMT
Invalid TIMEVALUE
Failed sending HTTP POST request
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Failed sending POST request
Could not get Content-Type header line!
Internal HTTP POST error!
Failed sending PUT request
upload completely sent off: %I64d out of %I64d bytes
Failed sending HTTP request
%s%s=%s
Cookie:
%s HTTP/%s
%s%s%s%s%s%s%s%s%s%s%s
Proxy-Connection: Keep-Alive
Proxy-Connection:
ftp://%s:%s@%s
Content-Range: bytes %s/%I64d
Content-Range: bytes %s%I64d/%I64d
Content-Range: bytes 0-%I64d/%I64d
Content-Range:
Range: bytes=%s
Could only read %I64d bytes from the input
File already completely uploaded
Host: %s%s%s:%hu
Host: %s%s%s
Accept: */*
ftp://
Transfer-Encoding: chunked
Chunky upload is not supported by HTTP 1.0
chunked
Transfer-Encoding:
Cookie:
Keep sending data to get tossed away!
HTTP error before end of send, stop sending
Connection closure while negotiating auth (HTTP 1.0?)
no chunk, no close, no size. Assume close to signal end
Received 101
Location:
Proxy-authenticate:
WWW-Authenticate:
Last-Modified:
Content-Encoding:
x-gzip
deflate
HTTP/1.0 connection set to keep alive!
Connection:
HTTP/1.1 proxy connection set close!
HTTP/1.0 proxy connection set to keep alive!
keep-alive
Server:
Negative content-length: %I64d, closing after transfer
HTTP 1.0, assume close after body
RTSP/%d.%d %3d
HTTP %3d
Lying server, not serving HTTP/2
HTTP/%d.%d %d
WARNING: Using weak random seed
Conn: %ld (%p) Receive pipe weight: (%I64d/%zu), penalized: %s
Site %s:%d is pipeline blacklisted
Server %s is blacklisted
Failed to receive SOCKS4 connect request ack.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.
SOCKS4%s request granted.
SOCKS4 reply has wrong version, version should be 4.
Failed to send SOCKS4 connect request.
Too long SOCKS proxy name, can't use!
Failed to resolve "%s" for SOCKS4 connect.
SOCKS4 connect to %s (locally resolved)
%hu.%hu.%hu.%hu
SOCKS4 communication to %s:%d
Unable to send initial SOCKS5 request.
Unable to receive initial SOCKS5 response.
Undocumented SOCKS5 mode attempted to be used by server.
No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)
No authentication method was acceptable.
SOCKS5 GSSAPI per-message authentication is not supported.
Failed to send SOCKS5 sub-negotiation request.
Unable to receive SOCKS5 sub-negotiation response.
Failed to send SOCKS5 connect request.
Failed to receive SOCKS5 connect request ack.
Can't complete SOCKS5 connection to %02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%d. (%d)
Can't complete SOCKS5 connection to %s:%d. (%d)
Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)
Failed to resolve "%s" for SOCKS5 connect.
SOCKS5 reply has wrong version, version should be 5.
User was rejected by the SOCKS5 server (%d %d).
Received invalid version in initial SOCKS5 response.
SOCKS5 read error occurred
SOCKS5 read timeout
SOCKS5 nothing to read
SOCKS5: error occurred during connection
SOCKS5: connection timeout
SOCKS5: no connection here
SOCKS5: server resolving disabled for hostnames of length > 255 [actual len=%zu]
Proxy replied OK to CONNECT request
Received HTTP code %d from proxy after CONNECT
Connect me again please
Proxy CONNECT aborted due to timeout
TUNNEL_STATE switched to: %d
Proxy CONNECT aborted due to select/poll error
Proxy CONNECT followed by %zd bytes of opaque data. Data ignored (known bug #39)
%zd bytes of chunk left
Ignore %I64d bytes of response-body
HTTP/1.%d %d
CONNECT responded chunked
Read %zd bytes of chunk, continue
chunk reading DONE
Proxy CONNECT aborted
Proxy CONNECT connection closed
Failed sending CONNECT to proxy
CONNECT %s HTTP/%s
%s%s%s%s
Host: %s
%s%s%s:%hu
CONNECT
%s:%hu
Establish HTTP proxy tunnel to %s:%hu
machine
password
_netrc
%7I64dd
%3I64dd %02I64dh
%2I64d:%02I64d:%02I64d
--:--:--
%4I64dP
%4I64dT
%4I64dG
%2I64d.%0I64dG
%4I64dM
%2I64d.%0I64dM
%4I64dk
%5I64d
%3I64d %s %3I64d %s %3I64d %s %s %s %s %s %s %s
%% Total %% Received %% Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
** Resuming transfer from byte position %I64d
Callback aborted
@@Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds
read function returned funny value
Read callback asked for PAUSE when not supported!
operation aborted by callback
necessary data rewind wasn't possible
ioctl callback returned error %d
the ioctl callback returned %d
seek callback returned error %d
we are done reading and this is set to close, stop send
%s in chunked-encoding
Failed writing data
Simulate a HTTP 304 response!
HTTP server doesn't seem to support byte ranges. Cannot resume.
The entire document is already downloaded
Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)
Excess found in a non pipelined read: excess = %zu, size = %I64d, maxdownload = %I64d, bytecount = %I64d
Rewinding stream by : %zu bytes on url %s (size = %I64d, maxdownload = %I64d, bytecount = %I64d, nread = %zd)
Rewinding %zu bytes
Leftovers after chunking: %zu bytes
Ignoring the response-body
Rewinding stream by : %zd bytes on url %s (zero-length body)
We are completely uploaded and fine
transfer closed with outstanding read data remaining
transfer closed with %I64d bytes remaining to read
Done waiting for 100-continue
select/poll returned error
No URL set!
%15[^?&/:]://%c
Switch from POST to GET
Disables POST, goes with %s
Issue another request to this URL: '%s'
Maximum (%ld) redirects followed
Re-used connection seems dead, get a new one
Connection died, retrying a fresh connect
%sAuthorization: Digest %s
%sAuthorization: NTLM %s
NTLM handshake failure (internal error)
NTLM handshake rejected
NTLM auth restarted
Sunday
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
%02d:%02d
%02d:%02d:%02d
%31[ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
Excessive server response line length received, %zd bytes. Stripping
response reading failed
select/poll error
server response timeout
XOAUTH2
EXTERNAL
GSSAPI
DIGEST-MD5
CRAM-MD5
auth-conf
auth-int
%s %02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x
algorithm=
realm="
nonce="
username="%s",realm="%s",nonce="%s",cnonce="%s",nc="%s",digest-uri="%s",response=%s,qop=%s
%08x%08x%08x%08x
md5-sess
AUTHENTICATE
00000001
%s, algorithm="%s"
%s, opaque="%s"
username="%s", realm="%s", nonce="%s", uri="%s", response="%s"
username="%s", realm="%s", nonce="%s", uri="%s", cnonce="%s", nc=%08x, qop=%s, response="%s"
%s:%s:%08x:%s:%s:%s
d41d8cd98f00b204e9800998ecf8427e
%s:%s:%s
user=%s
auth=Bearer %s
Unsupported SASL authentication mechanism
MD5-sess
algorithm
opaque
KGS!@#$%
%c%c%c%c
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_
%c%c==
%c%c%c=
rwx-tTsS
total
APM0123456789:
0123456789-
application/xml
text/html
text/plain
image/jpeg
image/gif
; filename="%s"
------------------------%08x%08x
--%s--
--%s--
couldn't open file "%s"
Content-Type: %s
Content-Disposition: attachment
Content-Type: multipart/mixed; boundary=%s
Content-Disposition: form-data; name="
%s; boundary=%s
Content-Type: multipart/form-data
Bad content-encoding found
Write error
Malformed encoding found
Illegal or missing hexadecimal sequence
Too long hexadecimal number
NTLM handshake failure (bad type-2 message). Target Info Offset Len is set incorrect by the peer
NTLM handshake failure (bad type-2 message)
NTLMSSP
NTLM handshake failure (empty type-2 message)
NTLMSSP%c
%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%s%s
user + domain + host name too big
NTLMSSP%c
%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c
gethostname() failed, continuing without!
xdigit
\Windows\explorer.exe
SeDebugPrivilege
%02X%c
ntdll.dll
RtlGetNtVersionNumbers
Major is %d
Minor is %d
Windows XP
Windows 2003
Windows Vista
Win8.1
Software\Microsoft\Windows\CurrentVersion\czhandle
%4d%d%d
record
dayflys.ini
http://down.xz345.cn/dayflys.ini
counts
Switch1
Switch2
interval
page_interval
http://down.xz345.cn/minicfg/dayflys.ini
config
minute
bind_already
%d%d%d
already
{"mac":"%s","channel":"%s","sys":"%s"}
data=%s
http://union.xz345.cn/api/live/server
\dayflys.ini
DayFlySvc
string too long
invalid string position
RSDSnUHI`|ez
E:\2019.10.25desktop\
\srandnamesvc13\Release\QmServer.pdb
lstrcmpA
lstrlenA
FreeLibrary
GetCurrentProcess
OpenProcess
GetPrivateProfileIntA
lstrcatA
GetProcAddress
GetPrivateProfileStringA
GetLocalTime
LoadLibraryA
ProcessIdToSessionId
CloseHandle
GetTempPathA
DeleteFileA
CreateThread
lstrcpyA
KERNEL32.dll
wsprintfA
USER32.dll
CreateProcessAsUserA
OpenProcessToken
StartServiceCtrlDispatcherA
GetTokenInformation
RegSetValueExA
RegisterServiceCtrlHandlerA
RegQueryValueExA
RegCreateKeyA
LookupPrivilegeValueA
RegOpenKeyExA
DuplicateTokenEx
SetServiceStatus
RegCloseKey
ADVAPI32.dll
SHGetSpecialFolderPathA
SHELL32.dll
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
MSVCP100.dll
IsNetworkAlive
SensApi.dll
CreateEnvironmentBlock
USERENV.dll
WTSQueryUserToken
WTSAPI32.dll
DeleteUrlCacheEntry
WININET.dll
URLDownloadToFileA
urlmon.dll
EnumProcesses
GetProcessImageFileNameA
PSAPI.DLL
WSAIoctl
freeaddrinfo
getaddrinfo
WS2_32.dll
WLDAP32.dll
GetAdaptersInfo
IPHLPAPI.DLL
sprintf
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
sscanf
memmove
printf
??3@YAXPAX@Z
_time64
??2@YAPAXI@Z
calloc
realloc
malloc
memset
_errno
tolower
fwrite
__iob_func
strchr
strncpy
memcpy
strtol
strrchr
isalpha
strncmp
isxdigit
strstr
strtoul
strpbrk
_strtoi64
fclose
isdigit
_beginthreadex
strerror
__sys_nerr
isalnum
isspace
_getpid
memchr
_fstat64
_lseeki64
getenv
fflush
_gmtime64
isupper
toupper
_stat64
islower
isprint
isgraph
MSVCR100.dll
_unlock
__dllonexit
_onexit
_amsg_exit
__getmainargs
_cexit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
GetTickCount
SleepEx
VerifyVersionInfoA
VerSetConditionMask
WaitForSingleObject
FormatMessageA
ReadFile
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
ExpandEnvironmentStringsA
EncodePointer
DecodePointer
InterlockedExchange
InterlockedCompareExchange
HeapSetInformation
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
CryptDestroyKey
CryptEncrypt
CryptReleaseContext
CryptImportKey
CryptAcquireContextA
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
_stricmp
_strdup
_close
_write
_strnicmp
_CxxThrowException
__CxxFrameHandler3
.?AVtype_info@@
.?AVexception@std@@
.?AVbad_alloc@std@@
ibU\!jWW
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGX
0+0N000
1!111X1_1111
212>2E2]2u223F4U4444
5E5v555555
6#6:6U6a6m6y66666666
7!737@7W7^7k7777789$919S9`9m99999999999999
::-:2:B:G:L:S:`::::::
;';-;;;@;R;Z;_;o;t;y;;;;;;;
<@<G<U<h<<<<<
=*=B=I=V=x========
>O>d>>>>>>>>
?+?2???W?^?k????????
0A0V00000000F1R1^1v1}1111111
2+2Y2k2|22222
3/363O3^3i3x3
333333331474>4[4j44445555
6P6n66666666666+70757;7h7777
8@8^8w8|888888888
9 9%9+9X99999
:3:8:>:H:R:\:b:h:n:t:y:::::::::2;8;?;V;e;;;;<<<<
=%=2===Q=d=========6><>B>G>N>u>|>>>a?g???
000(1.111
2:2?2J2l222"3(3Z3`3
44$4/4K4Q44444
5!5L5t5|5555555555555
6+6F67888*;5;?;j<>>
)020?0000'1=1p11111
2,2[2q2222
3(3F3k3w33L4\47555
6.6?666657Q777B888
9%9999+:2:H::
<'<,<1<<
=&=====
>a>>T?[?`?e?l?~??
0/0Y000000
2G2\2223333333
4,4?4R4e4x4444444&5?5v88888
;*;D;f<x<<<.=;=B=V=\==
>->D>>>>
?R?i???
0'0D000000
1*1;1j1112293X3l33333
4444X5r5y555555=6{66666
7e777777
8=8$9999
:Y:l:::
;;2;E;~;;;>>
??????
0;0]0~000#1*19;
2Q2u22235:::|;<
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?
X0\0`0d0h0l0p0t0x0|000000000000000000000000000000000
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|11111111111111112222222222222222222333333]44t5/6Z6z667O:h:::
;;;;$<G<j<~<<<==C=q=====(>L>R>a>x>>>>>6??
070f0u0
000011W222222
4&4?4U4n4444444
525N55526L66 777777777
8@829J9d9~99999999999J:r:::
<<+=O>y>>>>>??
<0L0Z0m111!2&2+2}222F34
5 5$5(5,5054585<5@5D5H56
<<<~==g>X?
445G6677'8X889<#=<=
00Y11333333333333333333
425557666$8.8Z88888888
9 9$9:99
;@;V;|;
<&<L<<==.>>W?????
0 0*040>0H0R0\0c0
11E1J1P111111
20252;2h2r22*3h33333
4 444!5_555-6Q6~6666*7G7}7(8W8g888
939]99999
:<:\:b:t:z::::::
;!;&<0<:<D<N<X<b<l<<<<<H=L=P=T=X=\=`=M>
?X?x????
00000
1%131C1J1S1Z1x1111111
2)2?2P2f22222
3#3D3T3z333
4405555G6Q6X6Z77 818888
:C:j:::::
;6;U;;;;
<<<?=I=Y====
>>r>>>>
?:?D?????
1]11!2Z222.34445g77\88
9B9::::&;m;;;
<2<9<K<<<<
=V======
>%>g>n>?
#0*0;0W0^0p0t0e1l111172z222
5555555555555
6d6h6l6p6t6x6|66666666666666666666N77
8J889::D;U;<<?
2 2$2(2,2E2
383e3333333333
4$4+42494@4G4N4U4\4c4j4q4x4
4444444444444444444
5 5'5.555<5C5J5Q5X5_5f5m5t5{5555555555555555555
6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|666666666666666666666666666666666
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|777777777777
8"828;8K8T8d8m8}88888888888
9,959E9N9^9g9w999999999999
:&:/:?:H:X:a:q:z:::::::::::
; ;);9;B;R;[;k;t;;;;;;;;;;;
<#<3<<<L<U<u<~<<<<<<<<<<<<<<<<<<<<<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x==
> >F>Q>a>>>>>
P0b000
1811133'5G5556777
8 898899
:::::::::::::E;n;s;;;;;;
<)<;<Y<w<<<<<
=5=G=]=o=====
>E>\>????
0'0Q0071>1X1\1`1d1h1l1p1t1x1|111111#2E2L2x22222%3=3X33
4)4"5<5m5555:66a7777R88888
9'9.9[9j9p99999
:':9:K:R:\:::::
>>]????
11111111111112222233V3:44444e555~666
8F8U8\879d9|999:
>">0>:>E>>
677777777777777*8?8V8h8
9,9Q999g:l::::
;7;b;;!<h<|<<Q=====
Y00/1[11111l2223[4h4n4z442557h7C88p9t9x9|999999999:'<|<<<<<%=B=v===
>N>~>>>+?d?h?l?p?t?x??
00(1O1a11<333
4!4.4;4H4U4b4o4
5(5.5:5555F6
77;9x999(:2::::1;Q;;
<*<1<c<y<
=I=P=g======
>->`>>>>>>
?C?S????
2~222222d3334X5\5`5d5h5l5p5t5x5|5555555778899F:&;C;[;;;;;;;;(<B<a<f<<<<<=T====:>D>T>w>>>>>P?b?g????????
0W0a0q00,161F1111
2w22222222
3 3$3(3,303333
4Z4|444
55(6M6b6w666
7G7d7w77Z888
9@9\99999g::::::::::::
; ;$;(;,;:;;;
<<<<D=H=L=P====9????
i0000@1W11112
33F4s4444H55
77718I8[8p88888
:M:a:::
;M;;;;;;;I<N<<<<<<<Q=m======
><>R>X>y>>>>$?6?g????
d0000041Q1b1}1111
2 272U2\2s22263^3v33333
4W4444444
5o5|555555*6>6H6j666C7J7[7s777777777
8H8R8X8m8;;;;
<,<2<:<R<X<l<r<z<<<<<<<<<<!=&=-=4=;=v======.>B>X>\>p>t>x>|>>>s?????
,0w00000/1@1`11c2222
3H3V3b33333
4E4O4[45F6Z6666(7178
9<9l99A:s::;;;;;;;;;;;;;;;;k<q<~<<<<<<<<
=#=)=3=E=K=a======
>G>>>%?u??
N0m0s00000
1&1C1w11111
3:333334_5555|666666777
8788888&9^9q999B:L:Y::::
;Y;^;;;;;<<<<:=N=u==========>>??
0l0000
2 2$2(222 3333
5;5k55566
7,7R77
8'8D8888d9w9999V:p:v::::
;7;W;;
=&=b=o=u=======>?
000v111
2*212`22222
3e3y33
4r4U5555
6=6666b777(88888
9/9@9^9999.:H::
;8;a;;<<<<<
=/=`===
>7>\>%??
2<2W222'333344444
5-5516k66/7b777^8888
97999P:n::;;;5<\<<j=
111F2L2{222R333
4A44444425>5p5x555
6.6G6u66*7X77
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|999i:;;;
<q<<<<<<>
?]?????
0020=0a01'2>2o222F4`4j45K6X66666L7g78
9998:r:~::::%;7;Y;<<<
=======
?M?s?????
0W00000
1 1+1W111
2n2222222
3/3H333333
4r4444
5B5K5Y5p555"6}66'7L7S777&8:88'909=9L9Y9b9v99l:::::
;;;m;;;;
<K<<<<<===>>>
?0?=?c??
070A0001J1{1152m2222$3f333n444444455
656666677777788888I9P9
;;;'<<<U<<<<<!=&=8=a=f=x=====
>B>h>>>>&?=?`?????
0o000A1b111#2E22d33445
8@8b888888
959I9V999999:-;
>C>X>n>>>???
3e33S4Z444
6r66666
7q77)898G8l8p8t8x88
9I9999W:g:::H<O=
90m0z00000000011111
2 2+2F2]2p222222
383m3}344:5c5
6(6y66666666
7D7K77@8u888
;C;J;;$<<<<<<<<<<<<<<<<<<<<<<<<<<<*>9>Z>p>>
00000000
151L1111
2A2H2a2u222222!3-3E3W3~333334
5`5556n666697P8T8X8\8`8d8h8l8p8t89 :;<<==Q=
00(1N222B333334+5>5\5o5|5
6F6L8899::O<w<<<<
22293n3c55
7,737p777777*8V888
:-:q:::::';s;a<v<
?0?@?Q??????
D0[0}00Z1_1d11
5!5b5n5u5
6,6666<7g77777
8+848M8f8~888<9l99p;y;=>>K>>>
?!?S???
222222
3'3I66c77748
9*91:Y::;;+<<=======L>>>N?i???????
E00001122353Q3p33333
4&4.474B4L4T4`44P5`555
676p666-7w7777
8@8p888
9'9X99
:|::::
;+;=;C;Q;o;;;;%<2<^<o<<<<<
=+=8=E=R=_====.>B>Q>>>>>
222344455
686<6@6D6H6L6P6T6X6\6`6d6h6l6p666-7G7u77777
8$8B8[8q888888
9&9@9Y9v992:D:;;><M<<<<
=e=w==
>4>R>n>>>>>>'?{????
0001111(272222,333e344K55!6G6v666688
99>:}:::
;&;x;;;<)=/=K=^=o====V>>
1I1~11!224444444444444444444444
5L5P5T5X5\5`5d5h5l5p5t5x5|55555
6t666^7h77777/8`8s8888L9S9p99::I;P;s;;;;O<z<<<U===e>w>>>>>>i???
0$0^0k0i111F3`3444
5/545;5B5I5P5W5^5d5h5l5p5t5x555v666
757K7S7777
8J8888h9J<<
=U>>>>??
2W222G333t4495
656_6666666
77777777G88?9P9^9l9z99999::::::::
;#;;;E;;;;;;;;;;;
<$<1<><R<[<v<<<<<<<<<<<<
= =&=.=4=:=G=M=V=u=}=============
>>%>7>?>E>Q>\>p>v>|>>>>
11111111
22&2.262>2J2S2X2^2h2q2|2222222222222
3[3`3q33r4x4444444x5}55555.646l666666666
7"7(7.747:7@7b777+8{88888888
33333555555555555
x6666666
7;;;;;;;;;;;;;;
<>>>>>>>>>(?,?0?4?<?@?D?H?L?X?l?|???????
00000000000000
1x4|44444444488888
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|??????????????????????????????
H4L4P4T4X4\4`4d4h4l4p4x44444
h2l2p2t2|22
0000000000000000000000000055555555888888D:H:L:P:T:X:\:`:d:h:l:p:>>>>
l1p1t111(2,2<2@2H2`2p2t222222222203L3P3l3p33333333333
444D4X4l4x44444444
5$5,585
[*AT*]A4D88FC0C2D9489980A75AFA78769DF7
@@@@@@@
AAAAAA
BBBBBB
Cjjjjjjjjjjjjjjjjjjh
jjjjjjjjjj
CCCCCCCCC
CCCCCCCC
VS_VERSION_INFO
StringFileInfo
080404b0
FileDescription
FileVersion
1.1.4.0
LegalCopyright
Copyright (C) 2019
ProductName
ProductVersion
1.1.4.0
VarFileInfo
Translation

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 61714 8.8.8.8 53
192.168.56.101 56933 8.8.8.8 53
192.168.56.101 138 192.168.56.255 138
192.168.56.101 58485 114.114.114.114 53
192.168.56.101 57665 114.114.114.114 53

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.