Analysis

Category Package Started Completed Duration Options Log(s)
FILE exe 2025-06-12 22:37:06 2025-06-12 23:07:50 1844 seconds Show Options Show Analysis Log
nohuman=yes
procmemdump=1
import_reconstruction=1
unpacker=2
no-iat=1
2024-11-25 13:37:15,225 [root] INFO: Date set to: 20250612T08:43:01, timeout set to: 1800
2025-06-12 09:43:01,735 [root] DEBUG: Starting analyzer from: C:\tmp_gell1p8
2025-06-12 09:43:01,750 [root] DEBUG: Storing results at: C:\uyHCokWh
2025-06-12 09:43:01,750 [root] DEBUG: Pipe server name: \\.\PIPE\IpEgLKC
2025-06-12 09:43:01,750 [root] DEBUG: Python path: C:\Users\Packager\AppData\Local\Programs\Python\Python310-32
2025-06-12 09:43:01,750 [root] INFO: analysis running as an admin
2025-06-12 09:43:01,750 [root] INFO: analysis package specified: "exe"
2025-06-12 09:43:01,750 [root] DEBUG: importing analysis package module: "modules.packages.exe"...
2025-06-12 09:43:02,125 [root] DEBUG: imported analysis package "exe"
2025-06-12 09:43:02,125 [root] DEBUG: initializing analysis package "exe"...
2025-06-12 09:43:02,125 [lib.common.common] INFO: wrapping
2025-06-12 09:43:02,125 [lib.core.compound] INFO: C:\Users\Packager\AppData\Local\Temp already exists, skipping creation
2025-06-12 09:43:02,125 [root] DEBUG: New location of moved file: C:\Users\Packager\AppData\Local\Temp\curl.exe
2025-06-12 09:43:02,125 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL option
2025-06-12 09:43:02,125 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL_64 option
2025-06-12 09:43:02,125 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader option
2025-06-12 09:43:02,125 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader_64 option
2025-06-12 09:43:02,406 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser"
2025-06-12 09:43:02,453 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig"
2025-06-12 09:43:02,469 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise"
2025-06-12 09:43:02,484 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human"
2025-06-12 09:43:02,500 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops'
2025-06-12 09:43:02,500 [lib.api.screenshot] ERROR: No module named 'PIL'
2025-06-12 09:43:02,500 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots"
2025-06-12 09:43:02,500 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump"
2025-06-12 09:43:02,500 [root] DEBUG: Initialized auxiliary module "Browser"
2025-06-12 09:43:02,500 [root] DEBUG: attempting to configure 'Browser' from data
2025-06-12 09:43:02,500 [root] DEBUG: module Browser does not support data configuration, ignoring
2025-06-12 09:43:02,500 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"...
2025-06-12 09:43:02,500 [root] DEBUG: Started auxiliary module modules.auxiliary.browser
2025-06-12 09:43:02,500 [root] DEBUG: Initialized auxiliary module "DigiSig"
2025-06-12 09:43:02,500 [root] DEBUG: attempting to configure 'DigiSig' from data
2025-06-12 09:43:02,500 [root] DEBUG: module DigiSig does not support data configuration, ignoring
2025-06-12 09:43:02,516 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"...
2025-06-12 09:43:02,516 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature
2025-06-12 09:43:02,641 [modules.auxiliary.digisig] DEBUG: File is not signed
2025-06-12 09:43:02,641 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json
2025-06-12 09:43:02,641 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig
2025-06-12 09:43:02,641 [root] DEBUG: Initialized auxiliary module "Disguise"
2025-06-12 09:43:02,641 [root] DEBUG: attempting to configure 'Disguise' from data
2025-06-12 09:43:02,641 [root] DEBUG: module Disguise does not support data configuration, ignoring
2025-06-12 09:43:02,641 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"...
2025-06-12 09:43:02,641 [modules.auxiliary.disguise] INFO: Disguising GUID to 88063f41-cb09-49fe-8433-82e8a31757b9
2025-06-12 09:43:02,641 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise
2025-06-12 09:43:02,641 [root] DEBUG: Initialized auxiliary module "Human"
2025-06-12 09:43:02,641 [root] DEBUG: attempting to configure 'Human' from data
2025-06-12 09:43:02,641 [root] DEBUG: module Human does not support data configuration, ignoring
2025-06-12 09:43:02,641 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"...
2025-06-12 09:43:02,641 [root] DEBUG: Started auxiliary module modules.auxiliary.human
2025-06-12 09:43:02,641 [root] DEBUG: Initialized auxiliary module "Screenshots"
2025-06-12 09:43:02,641 [root] DEBUG: attempting to configure 'Screenshots' from data
2025-06-12 09:43:02,641 [root] DEBUG: module Screenshots does not support data configuration, ignoring
2025-06-12 09:43:02,641 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"...
2025-06-12 09:43:02,641 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled
2025-06-12 09:43:02,641 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots
2025-06-12 09:43:02,641 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets"
2025-06-12 09:43:02,641 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data
2025-06-12 09:43:02,641 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring
2025-06-12 09:43:02,641 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"...
2025-06-12 09:43:02,641 [modules.auxiliary.tlsdump] INFO: lsass.exe found, pid 696
2025-06-12 09:43:02,687 [lib.api.process] INFO: Monitor config for <Process 696 lsass.exe>: C:\tmp_gell1p8\dll\696.ini
2025-06-12 09:43:02,687 [lib.api.process] INFO: Option 'procmemdump' with value '1' sent to monitor
2025-06-12 09:43:02,687 [lib.api.process] INFO: Option 'import_reconstruction' with value '1' sent to monitor
2025-06-12 09:43:02,687 [lib.api.process] INFO: Option 'unpacker' with value '2' sent to monitor
2025-06-12 09:43:02,687 [lib.api.process] INFO: Option 'no-iat' with value '1' sent to monitor
2025-06-12 09:43:02,687 [lib.api.process] INFO: Option 'tlsdump' with value '1' sent to monitor
2025-06-12 09:43:02,687 [lib.api.process] INFO: 64-bit DLL to inject is C:\tmp_gell1p8\dll\pQxbIz.dll, loader C:\tmp_gell1p8\bin\EPCPTrhb.exe
2025-06-12 09:43:02,734 [root] DEBUG: Loader: IAT patching disabled.
2025-06-12 09:43:02,750 [root] DEBUG: Loader: Injecting process 696 with C:\tmp_gell1p8\dll\pQxbIz.dll.
2025-06-12 09:43:02,766 [root] DEBUG: 696: Python path set to 'C:\Users\Packager\AppData\Local\Programs\Python\Python310-32'.
2025-06-12 09:43:02,766 [root] INFO: Disabling sleep skipping.
2025-06-12 09:43:02,766 [root] DEBUG: 696: Full process memory dumps enabled.
2025-06-12 09:43:02,766 [root] DEBUG: 696: Import reconstruction of process dumps enabled.
2025-06-12 09:43:02,766 [root] DEBUG: 696: Active unpacking of payloads enabled
2025-06-12 09:43:02,766 [root] DEBUG: 696: TLS secret dump mode enabled.
2025-06-12 09:43:02,781 [root] DEBUG: 696: InternalYaraScan: Scanning 0x00007FF84A790000, size 0x1f4542
2025-06-12 09:43:02,797 [root] DEBUG: 696: InternalYaraScan hit: RtlInsertInvertedFunctionTable
2025-06-12 09:43:02,797 [root] DEBUG: 696: RtlInsertInvertedFunctionTable 0x00007FF84A7A090E, LdrpInvertedFunctionTableSRWLock 0x00007FF84A8FB4F0
2025-06-12 09:43:02,797 [root] DEBUG: 696: Monitor initialised: 64-bit capemon loaded in process 696 at 0x00007FF8247D0000, thread 3696, image base 0x00007FF60D500000, stack from 0x0000008EFACF4000-0x0000008EFAD00000
2025-06-12 09:43:02,797 [root] DEBUG: 696: Commandline: C:\Windows\system32\lsass.exe
2025-06-12 09:43:02,813 [root] DEBUG: 696: Hooked 5 out of 5 functions
2025-06-12 09:43:02,813 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2025-06-12 09:43:02,813 [root] DEBUG: Successfully injected DLL C:\tmp_gell1p8\dll\pQxbIz.dll.
2025-06-12 09:43:02,813 [lib.api.process] INFO: Injected into 64-bit <Process 696 lsass.exe>
2025-06-12 09:43:02,813 [root] DEBUG: Started auxiliary module modules.auxiliary.tlsdump
2025-06-12 09:43:08,203 [root] INFO: Restarting WMI Service
2025-06-12 09:43:10,281 [root] DEBUG: package modules.packages.exe  <truncated>

    

    

    

Machine

Name Label Manager Started On Shutdown On Route
win10-2 win10-2 KVM 2025-06-12 22:37:06 2025-06-12 23:07:30 none

File Details

File Name
curl.exe
File Type PE32 executable (console) Intel 80386, for MS Windows
File Size 386560 bytes
MD5 a13ed3466516d2b60ac4ee4373ece977
SHA1 2b98c70b298af0b28d6d59f6a64dbeae97b2873c
SHA256 f15fc7fb329dde9cf492cd6172c58a4805013b0631fac394840144f5151bbbbe [VT] [MWDB] [Bazaar]
SHA3-384 f67ae4c4e3eb353c74188d1197183203db2340e09cfa974beef77f94b1610ae59c6e39228cacb5f01701cdfd40e67b4f
CRC32 31005291
TLSH T1F084AD72C5012173CE520070A6E35B33867DE9B52B262597A3E4CC84AF6D6E0F2767DB
Ssdeep 6144:A/EfJ1FeQbKl2l36OHN/quR81tOUU6HFMo9bw5ILj5vBeeH6lf9WwYLxI10VvrRk:A6eQbKlTyqK8W6HFM8U5ILj5vBeeH6lC
File BinGraph Vba2Graph VirusTotal

__fastcall
vLht'E
Content-Length: %I64d
CURL_SSLVERSION_TLSv1
suppress-connect-headers
;C<H<l<
@.data
VhlqE
Port number out of range
CURL_CA_BUNDLE
4)4.464c4
ENCRYPT
LIST "%s" *
HTh0JE
5ntel
cert-status
--key <key>
1.2.840.113549.1.1.1
FTP: The server failed to connect to data port
4*535Z5b5v5~5,6F6N6Z6
disabling EPRT usage
select/poll returned error
<==m=
CURLOPT_LOW_SPEED_LIMIT
212?2q2
Retry on connection refused (use with --retry)
Enable GSS-API auth for SOCKS5 proxies
remote-name-all
ldaps
Failure when receiving data from the peer
_initterm_e
=(=<=W=k=^>
login-options
Protocol family not supported
Gl9X0t
Proxy-Connection: Keep-Alive
WSAEventSelect
0C1g1z1
2@3[3v3U4y4
Saturday
CURL_HTTP_VERSION_2_0
Issue another request to this URL: '%s'
NTLM-proxy picked AND auth done set, clear picked!
Suppress proxy CONNECT response headers
SEC_E_NO_PA_DATA
Sunday
SEC_E_NO_IMPERSONATION
Use the TCP_NODELAY option
QQSVW
|$&bu
requested
Protocol is unsupported
SEC_E_LOGON_DENIED
, not IAC SE!)
IMAPS
CURLOPT_TIMEVALUE
SEC_E_CRYPTO_SYSTEM_INVALID
t|h8KE
Connected for transmit
|<>"?*
SEC_E_NOT_OWNER
Header
_controlfp_s
Use the header-provided filename
RhLdE
ftp@example.com
:V;d;r;
The requested URL returned error: %s
__thiscall
--proxy-crlfile <file>
QVVVV
dsa(p)
_time64
WPh`"E
dns-ipv6-addr
Network has been reset
8-8S8{8
%s://%s%s%s:%hu%s%s%s
%020B0f0
crlfile
SEC_E_NO_TGT_REPLY
time_redirect
tl;L$
tZj/P
X<[u#
--data-ascii <data>
Got a %03d response code instead of the assumed 200
/MATCH:
Content-Encoding:
PhxkE
CURLOPT_PROXY_CAPATH
9w$t%
keep-alive
</security>
Received too short packet
>*?5?o?
error initializing curl library
schannel: sent initial handshake data: sent %zd bytes
`local vftable constructor closure'
sha224
--key-type <type>
Unsupported SASL authentication mechanism
Couldn't resolve proxy '%s'
>/trh eE
Interval time for keepalive probes
0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ
3Q3y3
3Vh<qE
%s (0x%08X)
slist%d = curl_slist_append(slist%d, "%s");
IPv6 numerical address used in URL without brackets
SOCKS4 communication to %s:%d
7>7H7o7
8+8J8_8
CURLOPT_STDERR
abstract-unix-socket
040904b0
WhHXE
=$=4===p=v=|=
1(2;2_2
CURLOPT_INTERLEAVEDATA
`vector copy constructor iterator'
Use output FORMAT after completion
Failed to send SOCKS4 connect request.
9!999T9q9
HTTP POST binary data
YYj=X_^[
Sh4tD
CURLOPT_FAILONERROR
identity
-I, --head
Multiplexed connection found!
LoadLibraryExW
schannel: encrypted data buffer: offset %zu length %zu
Address in '%s' found illegal!
Digest
Setting custom HTTP method to HEAD with -X/--request may not work the way you want. Consider using -I/--head instead.
SEC_E_REVOCATION_OFFLINE_KDC
SEC_E_PKINIT_NAME_MISMATCH
ecdsa-with-SHA1
u3j.Wj
687p7
;+<c<
AUTH %s %s
schannel: failed to decrypt data, need more data
SEC_I_COMPLETE_AND_CONTINUE
new[]
6F7R7Z7
--no-keepalive
t2RRR
Accept timeout occurred while waiting server connect
--expect100-timeout <seconds>
PhH%E
Failed writing data
-C, --continue-at <offset>
Specify HTTP multipart POST data
schannel: failed to setup memory allocation
?J?h?
CURLOPT_LOGIN_OPTIONS
CURL_HTTP_VERSION_2TLS
0123456789
Closing connection %ld
time_namelookup
DEFINE %s %s
t*<#t&
CURLOPT_DNS_INTERFACE
-m, --max-time <time>
Vh %E
WS2_32.dll
t><=tb
--disable-epsv
SELECT
PhPOE
cookie-jar
;$;,;6;>;J;p;O<[<w<
hnd = curl_easy_init();
0 1\1
delegation
627=7h7p7x7
%s %s
8?8q8
9/9_9
Ready to accept data connection from server
1}Ij Z+
_initterm
WhH3E
SOCKS4 proxy on given host + port
0N0U0[0n0v0
Use TLSv1 for HTTPS proxy
%127[^= ]%*[ =]%255s
.idata$5
continue-at
--ftp-ssl-ccc-mode <active/passive>
Socket is not connected
9zHt*
-v, --verbose overrides an earlier trace/verbose option
Failure sending PORT command: %s
=> Send header
LOGOUT
NAOHTD
Hxu*hT(E
;filename=
CA directory to verify peer against for proxy
local_ip
WjOY+M
max-filesize
CURL_SSLVERSION_SSLv2
md5WithRSAEncryption
5#676C6y6
--cacert <CA certificate>
000k0y0
Name too long
dsa-with-sha1
_fileno
TrackMemory
;auto
=2=:=a=
************************************************************************/
tIj%Q
2.5.4.65
is badly used here
Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds
:-:5:R:Z:w:
schannel: failed to setup replay detection
SSL server certificate status verification FAILED
Malformed telnet option
>#>U>_>
?J?y?
tcp-nodelay
--proxy-cert-type <type>
`vector vbase copy constructor iterator'
image/jpeg
"%s"
Got unexpected imap-server response
< <B>o>s>w>{>
<j<t<
PASS %s
speed-limit
http_code
> u+F
AcquireCredentialsHandle
proxy-ssl-allow-beast
YYj@Y
In SUBOPTION processing, RCVD
__vectorcall
3;4E4
CURLOPT_WRITEFUNCTION
-----END CERTIFICATE-----
5=6P6c6o6
api-ms-win-crt-environment-l1-1-0.dll
9q:z:
--local-port <num/range>
Issuer
%s%s=%s
CURLOPT_SSL_ENABLE_NPN
No authentication method was acceptable.
394{4
Access denied to remote resource
VVRQh
%02x:
8@8`8
PROT %c
Failed to create the file %s: %s
buffer
_set_new_mode
6%696]6
%c%c%c%c%s%c%c
Maxdownload = %I64d
schannel: unable to allocate memory
j.XPh8tD
TLS password for HTTPS proxy
user-agent
proxy-cacert
>9Olt
%04d%02d%02d%02d%02d%02d
** Resuming transfer from byte position %I64d
:3;;;C;M;s;
basicConstraints
Maximum time allowed for the transfer
`virtual displacement map'
LoadLibraryA
Cookie:
t(h8KE
ssl-reqd
MAIL FROM:%s SIZE=%s
SEC_E_DELEGATION_POLICY
Rht[E
STATUS
Serial Number
:$;4;
connection refused
?!?/?7?C?N?Y?d?y?
Mailbox UIDVALIDITY has changed
YYVhp
`local static guard'
ShD{D
Use this proxy
chunk reading DONE
_exit
Too long hexadecimal number
Range:
limit-rate
100-continue
`local static thread guard'
Failed to open %s!
/FIND:
schannel: can't renogotiate, encrypted data available
we are done reading and this is set to close, stop send
374?4Q4
Sh VE
fwrite
4%5U5c5
Failed to connect to %s port %ld: %s
4J4T4
CURLOPT_SSL_VERIFYHOST
: :(:\=`=|=
HTTP error before end of send, stop sending
2b3v3
CURL *hnd;
CharConv
-0, --http1.0
QQSVWj
HTTP response code said error
Proxy CONNECT connection closed
Set-Cookie:
HTTP %3d
<S=f=p=
1!1+151?1I1T1k1p1{1
--http1.1
=2>P>k>
CURLOPT_PROXY_TLSAUTH_USERNAME
8D$'u
Ph\nE
Resolve names to IPv6 addresses
Remote access denied: %d
<no protocol>
--trace overrides an earlier trace/verbose option
Winsock library not initialised
api-ms-win-core-synch-l1-2-1.dll
description
Serial Number: %s
Penalized, skip
Using --anyauth or --proxy-anyauth with upload from stdin involves a big risk of it not working. Use a temporary file or a fixed auth type instead!
CURLAUTH_NONE
SEC_E_DOWNGRADE_DETECTED
<(=0=j=
ignoring failed cookie_init for %s
:B;U;
Retry request if transient problems occur
ecPublicKey
Signature Algorithm: %s
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
OPTIONS
Signature Algorithm
Not empty
CURLOPT_ERRORBUFFER
AUTHENTICATE %s
?'?\?
api-ms-win-crt-locale-l1-1-0.dll
SEC_E_CONTEXT_EXPIRED
7'7,7@7H7`7e7y7
Use HTTP 2
bind(port=%hu) failed: %s
getaddrinfo() failed for %s:%d; %s
Failed to send SSPI authentication request.
8?9b9z:
After %ldms connect time, move on!
Couldn't resolve host '%s'
6 6Z6c6q6
Written %I64u bytes, %I64u bytes are left for transfer
Chunky upload is not supported by HTTP 1.0
dns-servers
--disable-eprt
1.2.840.113549.1.1.4
0(080<0@0H0L0P0T0\0`0d0h0l0x0
WSAEnumNetworkEvents
8=8|8
6A7N7
--proxy-basic
TLS username for HTTPS proxy
t{QRhtYE
SOCKS5 access with%s protection granted.
filename_effective
List of hosts which do not use proxy
8;uEj
D$0=,
api-ms-win-crt-string-l1-1-0.dll
728=8i8w8
schannel: failed to send next handshake data: sent %zd of %lu bytes
Weird server reply
CURLOPT_PREQUOTE
=$=_=u=
4C5H5
Preparing for accepting server on data port
< !<<<<<<<"#$%&'()*+,-./0123456789:;
--crlfile <file>
max-time
SEC_I_CONTINUE_NEEDED
--test-event is ignored unless a debug build!
schannel: disabled server certificate revocation checks
RSASSA-PSS
6*6I6
;t<y<
netrc-file
515D5a5|5
.CRT$XIA
# Netscape HTTP Cookie File
expect100-timeout
Failed to set SIO_KEEPALIVE_VALS on fd %d: %d
D$$u(
G(Qt+
Pj`hh
SIZEu
CURLcode ret;
Maximum number of redirects allowed
CURLAUTH_ONLY
schannel: Curl_read_plain returned CURLE_AGAIN
mail-from
Specify the target for this request
CURLFTPSSL_CCC_NONE
%c-%c%c
PhPmE
SEC_E_CERT_WRONG_USAGE
<'<a<t<
Release-Date: %s
NTLM auth restarted
api-ms-win-core-rtlsupport-l1-1-0.dll
SEC_E_ENCRYPT_FAILURE
3270 REGIME
Content-Range:
8 8.8Y8
_,_^[
A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.
schannel: sending next handshake data: sending %lu bytes...
--pinnedpubkey <hashes>
operation aborted by callback
;T$`v(
;C;m;
Enter %s password for user '%s' on URL #%I64u:
(Empty suboption?)
7'8.858<8o8
error initializing curl
TFTP finished
--http2
Client certificate file and password
Failed writing received data to disk/application
3 3.3M3\3l3v3
Socket is already connected
Keep sending data to get tossed away!
FileDescription
%%%02X
Call interrupted
Use HTTP/1.0 proxy on given port
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
CURLSSLOPT_NO_REVOKE
Excess found in a non pipelined read: excess = %zu, size = %I64d, maxdownload = %I64d, bytecount = %I64d
_configthreadlocale
9_4u:
,u$F@;
invalid tsize -:%s:- value in OACK packet
TLS password
P5T5X5\5`5d5h5l5p5t5x5|5
2.5.4.7
Socket has been shut down
create-dirs
1<1o1
_gmtime64
Ph\gE
the -k (or --insecure) option.
v`h '
Invalid SSPI encryption response length (%lu).
CryptAcquireContextA
data-urlencode
-g, --globoff
;!;&;7;{;
server response timeout
dsa(g)
8!9A9G9P9}9
7*7U7l7t7|7
Can not set SSL crypto engine as default
hostpubmd5
SEND
keepalive
=d>y>
port=%ld
363<3G3Q3Z3v3
Pjihp
L$$_^[3
Error building form post!
Remembering we are in dir "%s"
2.5.4.5
7K8w8
t+j/X8
0`0|0
Local port: %hu
%sAuthorization: NTLM %s
;#;v;
%255[^=]=
0123456789abcdef
strtoul
DNS server addrs to use
Unsupported HTTP version in response
SEC_E_NO_IP_ADDRESSES
bind() failed; %s
Use TLSv1.0 or greater
ftp://%s:%s@%s
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
%sAuthorization: Digest %s
)hKxD
User was rejected by the SOCKS5 server (%u %u).
Use this proxy first
WSACreateEvent
5E5p5
Re-used connection seems dead, get a new one
`eh vector vbase copy constructor iterator'
[u%8\$
schannel: verifyhost setting prevents Schannel from comparing the supplied target name with the subject names in server certificates.
2+2F2
Chunk callback failed
CURLPROXY_SOCKS4
--fail-early
Address not available
HTTP POST data url encoded
APM0123456789:
::;\;p;};
FTP: The server did not accept the PRET command.
YY_^]
TLS-SRP
CURLOPT_SASL_IR
CURLOPT_POSTFIELDSIZE_LARGE
FALSE
HTTP/1.1 proxy connection set close!
jiXjaY
Rebuilt URL to: %s
--tr-encoding
?q?z?
3.4C4r4z4
%s (%ld)
Set CCC mode
Transfer-Encoding:
YYj@X
Couldn't parse CURLOPT_RESOLVE entry '%s'!
RPhp E
CURLOPT_GSSAPI_DELEGATION
upper
t$Hh0
Skip the IP address for PASV
Use either .netrc or URL
tlsauthtype
GetTickCount64
Use TLSv1.0
0/0;0
C;_H|
>%u]j
Failed to receive SOCKS4 connect request ack.
schannel: renegotiation failed
--negotiate
secur32.dll
OtvRht[E
:5;U;x;
5 5+545G5X5|5
CURLOPT_HTTPHEADER
Failed to send SSPI encryption type.
Use SSLv3
SOCKS5 server authencticated user %s with GSS-API.
http2-prior-knowledge
CURLOPT_TRANSFERTEXT
curl.pdb
RhlbE
Connect via abstract Unix domain socket
4E4Y4
Too many references
cwfWh
:E;j;
Can't resolve proxy host %s:%hu
>$>;>E>
?0?4?8?<?D?H?L?P?T?`?x?|?
_write
CURLOPT_INFILESIZE_LARGE
CURLOPT_TLSAUTH_TYPE
CURLOPT_IPRESOLVE
7h81E
--:--:--
021P1c1s1{1
Ignoring duplicate digest auth header.
7$7(70747<7@7H7L7T7X7`7d7l7p7x7|7
SUPDUP
Address family not supported
timeout
SEC_E_TARGET_UNKNOWN
schannel: failed to store credential handle
--compressed
--socks5-gssapi-nec
D$ PSSS
struct curl_httppost *postend;
struct curl_slist *slist%d;
the ioctl callback returned %d
CURL_SSLVERSION_TLSv1_0
%127[^,],%127s
Select failed
unrecognized delegation method '%s', using none
Try SSL/TLS
SOCKS5: server resolving disabled for hostnames of length > 255 [actual len=%zu]
SEC_E_SMARTCARD_CERT_EXPIRED
212R2^2q2z2
--location-trusted
%s auth using %s with user '%s'
Set TFTP BLKSIZE option
<.<3<L<U<
TerminateProcess
<= Recv SSL data
>u?}?
L$<_^[3
Received last DATA packet block %d again.
QPQQPP
%s (unsupported)
tftp_send_first: internal error
D$PQP
`string'
CURLOPT_PROXY_SERVICE_NAME
dRich
Connecting to hostname: %s
6 6H6
SSL crypto engine not found
%s %s %s
Require SSL/TLS for FTP login, clear for transfer
Ph$TE
<= Recv header
CURLOPT_TELNETOPTIONS
%-19s %s
Server
POP3S
XOAUTH2
_lseeki64
?3?A?L?T?c?k?s?
`udt returning'
CURL_SSLVERSION_MAX incompatible with CURL_SSLVERSION
getaddrinfo
<= Recv data
;0;e;
delete
ioctl callback returned error %d
failed to find WSAEventSelect function (%u)
Like --location, and send auth to other hosts
Protocols:
Dapi-ms-win-core-fibers-l1-1-1
Use TLSv1.2
="=&=*=.=2=6=:=>=B=F=J=N=R=V=Z=^=b=f=j=n=r=v=z=~=
Ph8UE
Disconnected
Problem with the local SSL certificate
u)9G`u"
<.<7<B<I<i<o<u<{<
STARTTLS not supported.
O(09_,
--service-name <name>
.CRT$XPZ
--tls-max <VERSION>
--proxy-anyauth
t'<.ux
RELOAD
010D0k0
GetModuleHandleA
;K<R<y<
G(ku-
TACACS UID
api-ms-win-core-processenvironment-l1-1-0.dll
__based(
WRh@kE
Start Date: %s
DMARK
RTSP CSeq mismatch or invalid CSeq
<)=A=
SEND LOCATION
RtlUnwind
* All curl_easy_setopt() options are documented at:
c2pnb163v1
proxy-pass
1)1<1O1b1r1
CH9CH|b
blank
QSRh4kE
Metalink: fetching (%s) from (%s) FAILED (%s)
Ph<^E
Content-disposition:
.xdata$x
8K8|8#949B9P9^9l9z9
--metalink option is ignored because the binary is built without the Metalink support.
Couldn't bind to interface '%s'
verbose
GetModuleHandleW
8Ph(lE
Error accept()ing server connect
WSAStartup failed (%d)
9 :J:_:~:
schannel: checking server certificate revocation
2^3j3
Upload failed (at start/before it took off)
#include <curl/curl.h>
WS2_32.DLL
CA directory to verify peer against
CURLOPT_UPLOAD
=] =%4999[^;
%%-%ds %%5.1f%%%%
post302
Proxy CONNECT aborted due to timeout
SOCKS5: error occurred during connection
SOCKS5 proxy service name for GSS-API
Ph(eE
hnd = NULL;
DecryptMessage
[%*45[0123456789abcdefABCDEF:.]%c
-h, --help
.rsrc
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.
%I64d
<none>
Convert LF to CRLF in upload
CURLOPT_SSLKEYTYPE
remote-time
_mbsnbcpy
0 0(0,04080@0D0L0P0X0\0d0h0p0t0|0
CURLPROTO_SMB
speed-time
<"t<3
CURLOPT_FOLLOWLOCATION
TFTP file name too long
select/poll on SSL socket, errno: %d
3:3^3c3l3
%s cookie %s="%s" for domain %s, path %s, expire %I64d
SOCKS4%s: connecting to HTTP proxy %s port %d
Ph8lE
failed to load WS2_32.DLL (%u)
strncpy
OriginalFilename
1[2{2
CURLOPT_DNS_LOCAL_IP6
Authentication cancelled
CURLOPT_PROXY
No data record of requested type
>AUTHu)
CURLOPT_SUPPRESS_CONNECT_HEADERS
SEC_E_KDC_UNKNOWN_ETYPE
realm
?8?k?u?
Host: %s%s%s
<<<<<<<<<<<<
CURLOPT_PROXY_SSLKEYTYPE
="='=3=<=A=F=
RVVRR
mail-auth
Make next URL use its separate set of options
;/;_;
PQRh0
Send PRET before PASV
; filename="%s"
Couldn't resume download
2*3^3z3
t0j?P
Failed to figure out path
WARNING: failed to save cookies in %s
ftp-ssl-ccc-mode
slist%d = NULL;
ftp_perform ends with SECONDARY: %d
2%2v2
GSSAPI
CURLOPT_NETRC_FILE
252h2q2
TFTP: Unknown transfer ID
SOCKS5 read timeout
Failed to open/read local data from file/application
CURLOPT_PROXY_TLSAUTH_PASSWORD
9S\tM
SOCKS5: no connection here
strcspn
Failed EPSV attempt. Disabling EPSV
Write the received headers to <filename>
getsockname() failed with errno %d: %s
2-2125292=2A2E2I2M2Q2U2Y2]2a2e2i2m2q2u2y2
CURLOPT_PROXY_KEYPASSWD
t&Phc'
unrecognized ftp file method '%s', using default
empty string within braces
junk-session-cookies
No error
7L7j7
had unsupported trailing garbage
_free_base
AddDllDirectory
-r, --range <range>
HELO %s
SEC_E_BAD_BINDINGS
D0H0L0P0T0\0d0x0
Y__^[
Connection time-out
1.1O1w1
?*?_?y?
2.2>2G2r2
GetFileType
t$ YY
?D?^?
4E4a4
Enable/disable PROTOCOLS on redirect
CURLOPT_XFERINFOFUNCTION
Hostname in DNS cache was stale, zapped
CURLOPT_FTP_ACCOUNT
PhTrE
--false-start
Received invalid version in initial SOCKS5 response.
Ph,tD
8D9S9d9e:
LFLOW
CloseHandle
SEC_E_INCOMPLETE_MESSAGE
`RTTI
invalid blocksize value in OACK packet
Problem with the SSL CA cert (path? access rights?)
334i4l5p5t5x5|5
__clrcall
@.reloc
EXPUNGE
CURLUSESSL_NONE
: ;5;
SEC_E_QOP_NOT_SUPPORTED
SEC_E_CERT_UNKNOWN
20383C3L3U3f3t3
Data conn was not available immediately
Connecting to %s (%s) port %d
WSACloseEvent failed (%d)
/LOOKUP:
proto
:*:7:G:
CURLPROTO_FTP
Cannot SEARCH without a query string.
List only mode
Malformed encoding found
http_proxy
The requested document is not new enough
tOh`eE
append
<<<<<
Send cookies from string/file
upload completely sent off: %I64d out of %I64d bytes
t~j?V
CURLOPT_USERAGENT
GetSystemTimeAsFileTime
skip unknown form field: %s
=Z>f>{>
Connection was aborted
curl_easy_setopt(hnd, %s, (long)%s);
rsaEncryption
Something is stale
CURLOPT_IGNORE_CONTENT_LENGTH
;M<`<h<
-d, --data <data>
81868;8
Couldn't open file %s
TTLSu
--crlf
%sAuthorization: Basic %s
CURLOPT_TRANSFER_ENCODING
Ph(^E
0G0]0
Wednesday
9@9p9
7,8>8D8x8
2 2$2,2024282<2H2`2d2h2l2t2x2|2
> >(>0>8>@>H>P>X>`>h>p>
8F9N9
1#151G1Y1k1}1
proxy_ssl_verify_result
<'=0=t=
> >$>(>,>0>}>
9N,t@
http2
C,u2j
=&>*>.>2>6>:>>>B>F>J>N>R>V>Z>^>b>f>j>n>4?
disable-epsv
CURLOPT_RESOLVE
Bad PASV/EPSV response: %03d
YYj4X
0j2o2
-c, --cookie-jar <filename>
Ignoring Content-Length in CONNECT %03d response
schannel: failed to send close msg: %s (bytes written: %zd)
STOR %s
3L3p3
SOCKS5 connect to IPv4 %s (locally resolved)
Retry only within this period
=+=r=
5ineI
%s (%d)
Fail on first transfer error, do not continue
proxy-basic
-X, --request <command>
CURLOPT_SSH_PUBLIC_KEYFILE
YYjCX
dh(g)
SetUnhandledExceptionFilter
ftp server doesn't support SIZE
t$<-uB
9X:p:
schannel: ALPN, offering %s
8hDGE
insufficient winsock version to support telnet
api-ms-win-crt-time-l1-1-0.dll
8,818O8r8
)383G3l3
user=%s
-S, --show-error
HTTP POST data
.text
LOGIN %s %s
restrict(
Ignore session cookies read from file
>:>L>T>
Version
?0?>?v?
CURL_SSLVERSION_SSLv3
__stdio_common_vsprintf
problem with the certificate (it might be expired, or the name might
-l, --list-only
Ignoring Transfer-Encoding in CONNECT %03d response
6 676B6Y6m6x6
Referer: %s
(){ %*]
fputc
6"7)7
CURL_HOME
<Q<W<y<
Throwing away %I64d bytes
SSL ciphers to use for proxy
__sys_nerr
No valid port number in connect to host string (%s)
CA certificate to verify peer against for proxy
8'9=9_9
schannel: failed to receive handshake, need more data
Request compressed response
streetAddress
CURLOPT_FTP_FILEMETHOD
Content-Type: multipart/mixed; boundary=%s
SOCKS5 connect to IPv6 %s (locally resolved)
CURLOPT_MAIL_AUTH
silent
Failed sending PUT request
1"2(242
6hD&E
ssrem inet_ntop() failed with errno %d: %s
api-ms-win-crt-heap-l1-1-0.dll
time_starttransfer
--tlsuser <name>
Trying %s...
Found pending candidate for reuse and CURLOPT_PIPEWAIT is set
schannel: encdata_buffer resized %zu
:I:S:Z:l:t:{:
939s9x9
Couldn't resolve proxy name
9=9W9j9v9
CURLOPT_PROXY_TLSAUTH_TYPE
<-<S<
isupper
AUTH=
2G2M2S2Y2_2e2k2
1.2.840.10040.4.1
# https://curl.haxx.se/docs/http-cookies.html
https://
--max-redirs <num>
-Q, --quote
Class Hierarchy Descriptor'
Features:
=w>)?J?R?
.idata$4
dump-header
jCX_^
In state %d with no easy_conn, bail out!
Wildcard - "%s" skipped by user
# Fatal libcurl error
INFO/REPLY
tEWVh
-D, --dump-header <filename>
More details here: https://curl.haxx.se/docs/sslcerts.html
SEC_E_OUT_OF_SEQUENCE
CURLOPT_PROXY_SSL_CIPHER_LIST
Server doesn't support multi-use yet, wait
SOCKS5: connecting to HTTP proxy %s port %d
0"0@0I0
oauth2-bearer
7A8[8x8
E$SVWu
schannel: received incomplete message, need more data
YYjGX
3%4/4J4\4c4v4
7+7A7S7e7x7
`managed vector destructor iterator'
fclose
_close
--socks4 <host[:port]>
UIDVALIDITY
VerSetConditionMask
1996 - 2017 Daniel Stenberg, <daniel@haxx.se>.
SEC_E_KDC_INVALID_REQUEST
Use HTTP 1.1
REST %d
remote_port
api-ms-win-crt-stdio-l1-1-0.dll
Content-Disposition: form-data; name="
error trying read config from the '%s' file
Could multiplex, but not asked to!
%s %d %d
g0f1n1
9)979>9D9Y9l9
CURLOPT_SSL_CIPHER_LIST
j-X:G
schannel: failed to retrieve ALPN result
>:t<3
FhP:E
%s/%s
Failure sending EPRT command: %s
-B, --use-ascii
CURLUSESSL_TRY
speed_download
RhL3E
schannel: WinSSL version is old and may not be able to connect to some servers due to lack of SNI, algorithms, etc.
y\h8JE
fopen
CURLPROTO_SMTP
t$`+D$d
Interface to use for DNS requests
SOCKS5 server supports GSS-API %s data protection.
strerror
BINARY
Bad URL, colon is first character
0<1S1]1n1
PRET RETR %s
remote_ip
uU8L$
PhT,E
data-raw
curl_easy_setopt(hnd, %s, %s);
schannel: re-using existing credential handle
9O:W:_:k:
text/plain
D$@PW
%d - %d
EHLO %s
range
AUTH %s
3/4_4
ftp-ssl-reqd
Weirdly formatted EPSV reply
CertFreeCertificateContext
SEC_E_UNFINISHED_CONTEXT_DELETED
>&>0>:>D>N>X>b>l>v>
Failed to set SO_KEEPALIVE on fd %d
CURLPROTO_TELNET
141y1
CURLPROTO_HTTPS
061B1U1m1
STARTTLS denied, code %d
--ftp-ssl-ccc
LoadLibraryExA
_d_^[]
Pipe broke: handle %p, url = %s
UQPXY]Y[
CURLSSLOPT_ALLOW_BEAST
CURL_NETRC_OPTIONAL
CURLOPT_SSLENGINE
CURLPROTO_DICT
http_connect
schannel: timed out sending data (bytes sent: %zd)
%03ld
=)>T>
<'t.j
curl_formadd(&post%d, &postend,
Failed to initialise SSL crypto engine
--suppress-connect-headers
CURL_TIMECOND_NONE
CRAM-MD5
Operate through a HTTP proxy tunnel (using CONNECT)
CURLOPT_HTTPAUTH
SEC_E_CERT_EXPIRED
User-Agent:
SetLastError
CURLOPT_DNS_SERVERS
.rsrc$01
;E;T;e;u;~;
QueryCredentialAttributes
CURLOPT_DIRLISTONLY
_read
POST (-d, --data)
5!5?5N5e5m5
GSSAPI handshake failure (empty security message)
-x, --proxy [protocol://]host[:port]
>*?A?k?
--interface <name>
VhHHE
Set the remote file's time on the local output
_beginthreadex
If this HTTPS server uses a certificate signed by a CA represented in
STARTTLS denied
Last-Modified: %s, %02d %s %4d %02d:%02d:%02d GMT
--ftp-skip-pasv-ip
Include protocol response headers in the output
--proxy-insecure
Last-Modified:
dhpublicnumber
; ;$;(;,;0;
ftp-alternative-to-user
2$3F3b3j3r3
FETCH %s BODY[%s]
2.16.840.1.101.3.4.2.3
IDN support not present, can't parse Unicode domains
--proxy-service-name <name>
SSL/TLS connection timeout
0M1R1b1
SUPDUP OUTPUT
SEC_E_BAD_PKGID
Show document info only
<+<:<J<S<
Write cookies to <filename> after operation
WWW-Authenticate:
j/Y8N
PVhdgE
InitializeSListHead
MAIL FROM:%s
WinSSL
Content-Range: bytes 0-%I64d/%I64d
1054585<5@5D5H5
Whl>E
sha224WithRSAEncryption
;t$,v-
t<W9S\t"
dsa(q)
%s%c%s%c
Host:
Maximum (%ld) redirects followed
0-050p0v0|0
__stdio_common_vfprintf
PVh0$E
retry
proxy-tlsv1
-u, --user <user:password>
u$9D$
CURLOPT_LOCALPORT
SEC_E_CANNOT_PACK
<+<B<
w<_^[
TELNET
sha256
LeaveCriticalSection
Binary output can mess up your terminal. Use "--output -" to tell curl to output it to your terminal anyway, or consider "--output <FILE>" to save to a file.
MATCH %s %s %s
strtoll
init_resolve_thread() failed for %s; %s
Empty reply from server
606B6R6f6
Proxy replied OK to CONNECT request
2.16.840.1.101.3.4.2.4
3m4,5j6
Timed out
--engine <name>
}'h4ZE
OK [UIDVALIDITY %19[0123456789]]
__restrict
CURLOPT_LOCALPORTRANGE
Error while waiting for server connect
Login denied
Add time stamps to trace/verbose output
socks
959O9W9d9l9v9
--proxy-key <key>
post%d = NULL;
time_pretransfer
Disables POST, goes with %s
k0t0r1z1
::;G;V;^;h;
Operation was aborted by an application callback
.jpeg
Metalink: fetching (%s) from (%s) FAILED (HTTP status code %ld)
failed to resume file:// transfer
>2>O>y>
090D0O0W0
3S4i4
ACCT rejected by server: %03d
Failed to set filetime %ld on outfile: CreateFile failed: GetLastError %u
telnet
ssl-no-revoke
%s%ldL);
CURLOPT_TIMEOUT_MS
SPNEGO
D$HPf
1.2.840.113549.1.1.11
F80dC
use-ascii
2.5.4.3
Do HTTPS proxy connections without verifying the proxy
SetEndOfFile
=!>+>1>
2V2t2
Unnecessary use of -X or --request, %s is already inferred.
VhhFE
Leftovers after chunking: %zu bytes
Failed to send SSPI authentication token.
socks5h
5H5P5b5j5v5~5
-P, --ftp-port <address>
Operation timed out after %ld milliseconds with %I64d out of %I64d bytes received
_stat64
curl:
`local vftable'
CURLFORM_FILENAME, "%s",
GSSAPI handshake failure (invalid security layer)
zu%j X
tftp-no-options
XDISPLOC
2J3X3
--netrc-file <filename>
%.2x
api-ms-win-core-localization-l1-2-0.dll
RCPT failed: %d
1;2l2x2
retry-max-time
--ssl-reqd
2L2|2
OAUTHBEARER
8I8_8
RSA Public Key
L$,_^[3
time_total
1 1$1(1,1014181<1@1D1H1P1h1p1t1
Please URL encode %% as %%25, see RFC 6874.
-b, --cookie <data>
Connection accepted from server
5!5(575]5h5
CURLOPT_TCP_KEEPALIVE
Unexpected continuation response
isspace
8%hsE
--oauth2-bearer <token>
2)343;3O3q3
Use Digest authentication on the proxy
--tlsv1.3
Type Descriptor'
--stderr
No valid port number in proxy string (%s)
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
>$>(>0>4><>@>H>L>T>X>`>d>l>p>x>|>
%sAuthorization: Negotiate %s
<6=>=Z=p=x=
num_connects
Proxy-
schannel: SNI or certificate check failed: %s
Bad protocol
schannel: Curl_read_plain returned CURLE_RECV_ERROR
api-ms-win-crt-multibyte-l1-1-0.dll
<3 ut
CURLOPT_NOBODY
CURLOPT_PROXY_SSLVERSION
Ignore %I64d bytes of response-body
? ?*?4?>?H?R?\?f?p?z?
Unwillingly accepted illegal URL using %d slash%s!
=I=R=n=u=|=
757^7p7
Switch from POST to GET
-F, --form <name=content>
/**** End of sample code ****/
multicwd
CURL_HTTP_VERSION_1_1
<5=A=M=
;[;m;
SMTPS
Request has same path as previous transfer
`vector vbase constructor iterator'
Failed to shut down the SSL connection
strtok
couldn't open file "%s"
USER,%s
;&<.<F<V<_<
LegalCopyright
Too many users
LINEMODE
application/xml
%ld%s
CryptGenRandom
CURLOPT_PROXY_CAINFO
Where to redirect stderr
%d,%d,%d,%d,%d,%d
xdigit
QQSVW3
Connect to host
>">(>.>4>:>@>F>L>R>X>^>
generationQualifier
-A, --user-agent <name>
schannel: remote party requests renegotiation
givenName
proxy-header
schannel: server closed the connection
%s%s%s%s
--disable
resolve
--proxy-digest
CURLOPT_FTP_SSL_CCC
%s:%d: warning: '%s' %s
ignoring --proxy-capath, not supported by libcurl
SOCKS5 reply has wrong version, version should be 5.
all_proxy
61666N6S6o6t6
IPv4 address to use for DNS requests
Failed to do PORT
<a<k<
_^[Y]
L$4_^[3
Enter %s password for user '%s':
Connecting to port: %d
CURLOPT_REFERER
proto-default
%0*lu
>,>>>P>b>t>
Display transfer progress as a bar
3<3V3g3
UnixSockets
<)</<F<R<X<z<
We got a 421 - timeout!
nocwd
Blocking call in progress
Send command(s) to server before transfer
L$4t$
Compatibility with NEC SOCKS5 server
ntdll
--dns-interface <interface>
%s - %s
--resolve <host:port:address>
serially
?%?-?B?
Write error
auth=Bearer %s
5 5&5,52585>5D5J5P5V5\5b5h5n5t5z5
Gl9X,t
Rewinding stream by : %zu bytes on url %s (size = %I64d, maxdownload = %I64d, bytecount = %I64d, nread = %zd)
alpha
FLtIh@
schannel: incremented credential handle refcount = %d
YYjCX^
EXTERNAL
--proto-redir <protocols>
3:3B3J3V3
:-ERRu
File already completely downloaded
fread
curl_formfree(post%d);
G0+G(P
.rdata$zzzdbg
InitSecurityInterfaceA
D$$PR
4S4[4
YYj#X
vxjDhD
out GSS-API data
Failed to send SSPI encryption request.
PhXJE
:X;o;z;
%s== Info: %s
; <w<
tcp-fastopen
Rewinding stream by : %zd bytes on url %s (zero-length body)
SOCKS5 nothing to read
realloc
~h9|$
No space left on the file system that will contain the directory %s.
NEW-ENVIRON
.rdata
Use Basic authentication on the proxy
GSS-API delegation permission
Uploaded unaligned file size (%I64d out of %I64d bytes)
9HXu2
api-ms-win-core-errorhandling-l1-1-0.dll
=F=P=
748M8
<%=4=<=
Failed to read data
2.5.4.72
--krb <level>
Use HTTP Digest Authentication
<+=A=O=X=a=
CURLFORM_FILECONTENT, "%s",
YY_^Y
--delegation <LEVEL>
Maximum file size to download
CURLOPT_REDIR_PROTOCOLS
tftp_rx: internal error
%s; boundary=%s
Uploading to a URL without a file name!
_isatty
4'4<4
CURLOPT_COOKIE
2.5.4.8
CURL_SSLVERSION_TLSv1_3
Invalid SSPI encryption response type (%u %u).
KX;KH~H
Simulate a HTTP 304 response!
Ctrl conn has data while waiting for data conn
%s%lx
TFTP: Access Violation
Invalid LDAP URL
Start Date
3+4B4d4
Content-Type: application/x-www-form-urlencoded
OAuth 2 Bearer Token
SEC_E_INCOMPLETE_CREDENTIALS
PRPPRR
scheme
Unrecognized parameter passed via CURLOPT_SSLVERSION
--capath <dir>
2.5.4.45
>/t3V
request-target
Allow insecure server connections when using SSL
<A<V<v<
%02d:%02d:%02d.%06ld
O(@9_<
9&:U:
8F!t+
AsynchDNS
CURLOPT_PROXYTYPE
HTTPS-proxy has similar options --proxy-cacert and --proxy-insecure.
Operation not supported
<><H<R<\<a<x<
0b0u0
2 2$2,20282<2D2H2P2T2\2`2h2l2t2x2
Use HTTP 1.0
CURLPROXY_SOCKS5_HOSTNAME
basic
%I64d-
HTTP error before end of send, keep sending
YYj@_
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
qsort
Instructs server to resume from offset %I64d
t_Wj/S
Qh8tD
<+>F>a>
0%0F0S0`0|0
Enable Kerberos with security <level>
%s%s%s%s%s%s%s%s%s%s%s
Use PASV/EPSV instead of PORT
Ph`-E
Found %I64u bytes to download
595W5u5
max-redirs
CURLOPT_BUFFERSIZE
GetModuleFileNameA
of Certificate Authority (CA) public keys (CA certs). If the default
getpeername() failed with errno %d: %s
:*:j:x:}:
525s5y5
http;
Pick any authentication method
SOCKS5 read error occurred
Inhibit using EPSV
HTTP2
%s IAC %d
proxy-digest
_register_thread_local_exe_atexit_callback
ftp-skip-pasv-ip
-K, --config <file>
print
_proxy
VWjdX
t4VhL
api-ms-win-core-sysinfo-l1-1-0.dll
Server login options
--tlspassword
unsupported rate unit. Use G, M, K or B!
SSL_CERT_DIR environment variable
2@2o2
random-file
localhost/
9&929Z9
6'7/7?7h8
--xattr
tlsv1
test-event
LOGINDISABLED
.idata$3
9J9[9e9t9
CURLOPT_MAX_RECV_SPEED_LARGE
uc8FHu^
Remote file not found
expires
:!;\;p;
RPhD E
Use TCP Fast Open
Offset (%I64d) was beyond file size (%I64d)
No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)
upload-file
YY_^[
Received 101
CURLFORM_COPYNAME, "%s",
SOCKS4a proxy on given host + port
Unrecognized parameter value passed via CURLOPT_SSLVERSION
%4I64dk
--tlsv1.1
QQQQR
CURLPROTO_SCP
9zXtE
--data-raw <data>
CURLOPT_ABSTRACT_UNIX_SOCKET
schannel: SSL/TLS connection renegotiated
manual
No more connections allowed to host: %d
We can reuse, but we want a new connection anyway
fflush
3/464E4N4
Ph`dE
referer
TERM TYPE
Added %s:%d:%s to DNS cache
YYj7X
Can't open '%s'!
8$9U9]9k9
%02d:%02d:%02d%n
Vht.E
-z, --time-cond <time>
5W5}5
xattr
/********* Sample code generated by the curl command line tool **********
--include and --remote-header-name cannot be combined.
<9<S<o<t<~<
CURLOPT_EXPECT_100_TIMEOUT_MS
Set telnet option
Failed writing body (%zu != %zu)
101_1
bind failed with errno %d: %s
8;8`8
`eh vector vbase constructor iterator'
:%:/:v:
PRET command not accepted: %03d
Ignore chunked response-body
%2d Subject: %s
-v, --verbose
--noproxy <no-proxy-list>
negotiate
SetFileTime
Error in the HTTP2 framing layer
expected a positive numerical parameter
u$hPfE
__setusermatherr
requires parameter
ftp-port
Host not found, try again
=!>'><>
CURLUSESSL_ALL
u<VWj
Enable TLS False Start
D$'Pj
--remote-name-all
Range: bytes=%s
D$PQPj
SOCKS5 proxy, pass host name to proxy
Failed EPSV attempt, exiting
SOCKS5 communication to %s:%d
Rewind stream after send
--socks5-basic
CURLOPT_MAIL_RCPT
FTP: unknown PASS reply
3"3-3R3
Cannot create directory %s because you exceeded your quota.
Silent mode
schannel: failed to receive handshake, SSL/TLS connection failed
Proxy CONNECT aborted
Couldn't interpret the 227-response
1.2.840.10045.4.1
retry-connrefused
Couldn't parse CURLOPT_RESOLVE removal entry '%s'!
?G?S?[?n?
;!;-;|;
1.2.840.10040.4.3
Friday
9)929E9O9
Failure sending ABOR command: %s
netrc-optional
_4_^[
Failed to receive SOCKS5 connect request ack.
schannel: ApplyControlToken failure: %s
D$dj#P
Lying server, not serving HTTP/2
6"6(6.646:6@6F6L6R6X6^6d6j6p6v6|6
tuj-XPW
Unable to negotiate SOCKS5 GSS-API context.
size_request
#HttpOnly_
sasl-ir
Could pipeline, but not asked to!
DIGEST-MD5
9%9g9o9
Content-Length
fseek
SEC_E_REVOCATION_OFFLINE_C
%s(long)%s%s
Retrieve only the bytes within RANGE
If you'd like to turn off curl's verification of the certificate, use
--request-target
jPXVf
them yourself.
DICT.
proxy-key
* https://curl.haxx.se/libcurl/c/curl_easy_setopt.html
=> Send SSL data
multipart formpost (-F, --form)
AUTHENTICATE %s %s
Failed sending HTTP request
QhH3E
NTLM handshake failure (empty type-2 message)
FTP: Accepting server connect has timed out
You can only select one HTTP request method! You asked for both %s and %s.
Wh@VE
323?3L3U3
Transient problem: %s Will retry in %ld seconds. %ld retries left.
httponly
Vh8#E
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.
Phl^E
schannel: decrypted data returned %zu
>(>D>L>i>q>
Pj4hX
%2I64d.%0I64dG
Allow security flaw to improve interop
2B2I2
HTTP POST ASCII data
WSAEnumNetworkEvents failed (%d)
_c_exit
Bad message size
quote
schannel: decrypted data cached: offset %zu length %zu
unknown proxytype option given
9N:t:
>T>{>
ftp-create-dirs
CURLOPT_FTP_SKIP_PASV_IP
schannel: decrypted data length: %lu
5?5t5
7 8u8{8
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
--ftp-method <method>
Cannot FETCH without a UID.
%4I64dP
--ssl-allow-beast
3 303:3B3L3m3
5'5K5_5m5
operator
CURLOPT_APPEND
SEC_E_ALGORITHM_MISMATCH
PLAIN
_access
--login-options <options>
Winsock version not supported
--hostpubmd5 <md5>
<-<5<=<O<
4!40454Y4d4
_open
TUUUwQ
%1023[^;
.rdata$sxdata
secure
5&6/6n6w6
String to replace USER [name]
api-ms-win-core-libraryloader-l1-2-1.dll
space
88888
SEC_E_STRONG_CRYPTO_NOT_SUPPORTED
list-only
.CRT$XTA
--ntlm
Got unexpected pop3-server response
tls-max
Verify the status of the server certificate
Unknown error
%d (unknown)
SEC_E_INSUFFICIENT_MEMORY
Could not resolve %s: %s
Received HTTP code %d from proxy after CONNECT
IPv6 address to use for DNS requests
--ssl-no-revoke
--tlsauthtype <type>
Pj+h`
`managed vector copy constructor iterator'
EGD socket path for random data
SEC_I_INCOMPLETE_CREDENTIALS
tsize
<url> malformed
Proxy
TIMING MARK
SSL connect error
?b?j?
ftp-account
Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)
CURLPROXY_HTTP_1_0
SITE NAMEFMT 1
CURLOPT_HTTPPROXYTUNNEL
Could only read %I64d bytes from the input
<T<g<
read function returned funny value
=+=3=m=r=|=
Content-Disposition: attachment
5]6e6
Phh!E
the installed libcurl version doesn't support this
CURLOPT_SSL_ENABLE_ALPN
ARh`sE
api-ms-win-crt-convert-l1-1-0.dll
Connection #%ld to host %s left intact
@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
COLUMNS
NAOLFD
/:]:%[^
tlsv1.3
Use network INTERFACE (or address)
digest
9D$Dv
SEC_E_NO_S4U_PROT_SUPPORT
+wlF)0
.CRT$XCAA
api-ms-win-core-sysinfo-l1-2-0.dll
Host: %s
SSPI error: %s failed: %s
can pipeline
Getting file with size: %I64d
GF;2r
Disable .curlrc
j?Yj&Z
CURLOPT_UNIX_SOCKET_PATH
Version: %lu (0x%lx)
t9h8KE
SEC_I_LOCAL_LOGON
_initialize_onexit_table
can multiplex
.CRT$XTZ
:/;T;
--data-urlencode <data>
>(?n?
Kerberos
api-ms-win-crt-filesystem-l1-1-0.dll
path-as-is
Bad URL
+APOP
%d.%d.%d.%d
--_curl_--
Failed to receive SSPI encryption type.
.00cfg
RCPT TO:%s
;8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
No known authentication mechanisms supported!
;+<@<H<P<_<g<w<
Inhibit using EPRT or LPRT
%s%s
FreeLibrary
%s:%d
?@u,G
HTTP 1.0, assume close after body
bad output glob!
:C:K:
PhX|E
u-SWj
RhL{E
1Y2k2}2
error retrieving curl library information
api-ms-win-crt-math-l1-1-0.dll
vLh /E
initials
Bad content-encoding found
unknown
X3 PAD
Establish HTTP proxy tunnel to %s:%hu
sha256WithRSAEncryption
PRET STOR %s
Authorization:
Expire Date
qPhd_E
post301
--cert-status
SEC_E_INTERNAL_ERROR
NAOHTS
Remote file name has no length!
tftp-blksize
<B=G=d=j=
CompanyName
2.5.4.6
Php9E
jIYjAX
Timeout was reached
Signature: %s
[%s %s %s]
9_lt#3
Failed FTP upload: %0d
GetCurrentThreadId
blksize is smaller than min supported
1.2.840.113549.1.1.5
-J, --remote-header-name
CURLOPT_WRITEDATA
md2WithRSAEncryption
CURL_HTTP_VERSION_1_0
%04d%02d%02d %02d:%02d:%02d GMT
474V4j4
CURLOPT_KEYPASSWD
? ?$?,?0?8?<?D?H?P?T?\?`?h?l?t?x?
--retry-max-time <seconds>
CURLOPT_FTP_USE_EPRT
failed to find WSACreateEvent function (%u)
2.5.29.18
D$$Vhd
Private key for HTTPS proxy
--random-file <file>
;+;X;
is unknown
CURLOPT_PROXY_SSL_OPTIONS
progress-bar
Enable/disable PROTOCOLS
CURLOPT_POSTFIELDS
CURLOPT_PROXY_SSLCERTTYPE
CURLAUTH_DIGEST_IE
CURLOPT_MAXREDIRS
Bad quota
An unknown option was passed in to libcurl
BYTE MACRO
CURLOPT_MAIL_FROM
QueryContextAttributes
%s %s %d
calloc
--tcp-nodelay
%u%.2s-%.2s-%.2s %.2s:%.2s:%.2s %.*s
CURLOPT_SSH_KNOWNHOSTS
2.5.4.17
Private key file type (DER/PEM/ENG)
Sleep
Location:
>d?v?
Ph8NE
FETCH %s BODY[%s]<%s>
NTLM handshake rejected
GSS-API
Content-Type: %s
Got a %03d ftp-server response when 220 was expected
!"<<<<<<<#$%&'()*+,-<./0123456789:;
Schannel: TLS 1.3 is not yet supported
%% Total %% Received %% Xferd Average Speed Time Time Time Current
;type=
--no-sessionid
isalnum
Accept: */*
bytes
SEC_E_WRONG_PRINCIPAL
api-ms-
--keepalive-time <seconds>
CURLOPT_PROXY_SSL_VERIFYPEER
;V<j<
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
%127[^/]/%127[^;,
=*=9=y=
tsize parsed from OACK
1K1P1
login
getenv
3]4j4{4
Connection closure while negotiating auth (HTTP 1.0?)
D$ YY
ntlm-wb
CURLOPT_PINNEDPUBLICKEY
GSS-API integrity
5Z6_6u6}6
num_redirects
CURLOPT_POSTQUOTE
='=M=h=
9_@uU
;%;1;6;;;b;n;s;x;
CURLOPT_READDATA
CURLOPT_SSL_VERIFYPEER
SEC_I_RENEGOTIATE
SOCKS4%s request granted.
CURLOPT_SSL_VERIFYSTATUS
necessary data rewind wasn't possible
tkSh4
no_proxy
?+?=?Z?l?
Use NTLM authentication on the proxy
D$HPW
TTYLOC
`2h2p2x2
tm9\$
Allow security flaw for interop for HTTPS proxy
ALPN, server did not agree to a protocol
Ph,fE
SEC_E_INVALID_TOKEN
SEC_E_TIME_SKEW
%s/%sssh/known_hosts
Excessive server response line length received, %zd bytes. Stripping
ExpandEnvironmentStringsA
t$,j*_
default
libcurl
curl: (%d) %s
;!;a;h;o;
5/6F6
575d5
schannel: failed to setup sequence detection
1B1e1
_localtime64
issuerAltName
;&;];
5k6u6
Host unreachable
Added
8#8.8?8J8[8f8s8x8
4(5@5_5d5
=!>k>"?=?a?
657>7r7{7
CURLOPT_SOCKS5_AUTH
SEC_E_WRONG_CREDENTIAL_HANDLE
Host: %s%s%s:%hu
<<<<<<
No connections available in cache
3,484Z4q4
content_type
t?hd.E
proxy-user
CURLOPT_SSL_SESSIONID_CACHE
TLS user name
Quote command returned error
6h7q7y7
Operation timed out after %ld milliseconds with %I64d bytes received
8#8'8+8/83878;8?8C8G8K8O8S8W8[8_8p8x8
=;>B>9?
trace-ascii
Resolving timed out after %ld milliseconds
9L:q:
proxy-tlspassword
`vftable'
CURLPROTO_FILE
CURLOPT_CRLFILE
Use HTTP Negotiate (SPNEGO) authentication on the proxy
CURLOPT_PROXY_CRLFILE
SSSSShKxD
`dynamic atexit destructor for '
ABORT
FTP: unknown 227 response format
Ignoring the response-body
_fstat64
Connect data stream actively
L$D_^[3
--ftp-alternative-to-user <command>
deflate
^8hH3E
compressed
__stdcall
SEC_E_INVALID_PARAMETER
sessionid
Request compressed transfer encoding
Server:
CURLPROTO_TFTP
WaitForMultipleObjects
CURLOPT_UNRESTRICTED_AUTH
connect-to
fcntl failed on fd=%d: %s
Callback aborted
%s in column %zu
7F7e7
ftp-ssl
1.2.840.113549.1.1.2
Conn: %ld (%p) Receive pipe weight: (%I64d/%zu), penalized: %s
connect-timeout
t$ Ph
domain
NTLM handshake failure (internal error)
Expect: 100-continue
D$HRj
CURLPROTO_SFTP
Ph8CE
PVhh3E
CURLPROTO_IMAPS
X9G }
%255[^:]:%d:%255s
%s://%s
--mail-rcpt <address>
include
SEC_E_CANNOT_INSTALL
%*15[^
=!=I=
<,=B=J=Z=c=
FILE/HASHES Public key to verify peer against
NAOVTD
CURLOPT_XFERINFODATA
sa_addr inet_ntop() failed with errno %d: %s
DE TERMINAL
schannel: clear security context handle
LOGIN
schannel: failed to read data from server: %s
<7<><Q<]<j<v<
%s set to a %s
lower
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.
sha512
The directory name %s is too long.
>:>N>Z>
>STARu\
sslv2
.rtc$TAA
TTYPE
5_6j6y6
88888888888888888
:@;H;b;
SEC_E_MESSAGE_ALTERED
Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.
5(585@5k5z5
--unix-socket <path>
CURLOPT_SEEKFUNCTION
schannel: decrypted data buffer: offset %zu length %zu
</trustInfo>
pseudonym
STARTTLS
Disable the NPN TLS extension
1V1|1
CURLOPT_CRLF
?<us8]
not match the domain name in the URL).
capath
curl: (%d) [globbing] %s
Failure sending QUIT command: %s
YYj!X
1O385
schannel: stored credential handle in session cache
Can't complete SOCKS5 connection to %s:%d. (%d)
SEC_E_UNKNOWN_CREDENTIALS
proxytunnel
keepalive-time
--proxy-tlsv1
t&Phi'
vghpfE
--mail-from <address>
1$1(10141<1@1H1L1T1X1`1d1l1p1x1|1
09_ltX3
Invalid SSPI authentication response type (%u %u).
CURLOPT_NOPROXY
ftp-method
GET (-G, --get)
7%73797H7Z7`7
:I:v:
7 727C7O7
t=<=ta
Crypto engine to use
t-GSW
041]1l1
343<3e3
Cannot SELECT without a mailbox.
--raw
<:t)<\uNG
Bj.X:
--trace-time
Failed to parse FETCH response.
_configure_narrow_argv
%s (%d) %s (%d)
??uoG
RTSP session error
.rtc$IZZ
proxy-capath
0,060>0M0s0}0
Enable initial response in SASL authentication
`vbtable'
:B:W:k:z:
__eabi
wine_get_version
title
CURLOPT_PROXYAUTH
TLS authentication type
--capath
Failed to receive SSPI encryption response.
3%444D4L4}4
Connect me again please
%s%s%s:%hu
`vector deleting destructor'
%s:%d: warning: '%s' uses unquoted white space in the line that may cause side-effects!
%I64u-
<requestedPrivileges>
9W8ub
>4?<?Q?
Send failure: %s
CRYPT_E_REVOKED
pkcs11:
CURLOPT_CUSTOMREQUEST
--ftp-pasv
2"3q3
egd-file
TFTP: No such user
<[un3
9&:q:
-6, --ipv6
server requested blksize larger than allocated
http:
request
SEC_E_INVALID_HANDLE
4"4.4O4
CURLOPT_TLSAUTH_USERNAME
select/poll on SSL/TLS socket, errno: %d
STLS not supported.
SEC_E_KDC_CERT_EXPIRED
3X4j4z4
t&PhQ'
ReadFile
post303
.rtc$IAA
? ?(?@?H?P?X?`?h?p?x?
cert-type
SEC_I_COMPLETE_NEEDED
/* Here is a list of options the curl code used that cannot get generated
EncryptMessage
CURL_SSLVERSION_DEFAULT
--proxy-capath <dir>
ED$@P3
Use ASCII/text transfer
='=B=J=_=g=
Failed sending HTTP POST request
--proxy-ciphers <list>
FTP: couldn't set file type
; ;@;q;
VarFileInfo
4G5\5
CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!
SEC_E_NO_KERB_KEY
schannel: failed to setup stream orientation
--ftp-create-dirs
-i, --include
t7RQh
Warning:
(nil)
0$0.050c0
Build-time engines:
FreeLibrary(wsock2) failed (%u)
?!?)?8?E?O?W?m?x?
CURLOPT_SSH_PRIVATE_KEYFILE
Pj-XPh\
Complete Object Locator'
041Y2
\3d3p3t3
Call would block
Resolve the host+port to this address
*0@0j0
`omni callsig'
`vector constructor iterator'
URL using bad/illegal format or missing URL
Require SSL/TLS
7H8P8X8n8v8
Client certificate type for HTTS proxy
<stdout>
Error in the SSH layer
Cannot APPEND with unknown input file size
1.2.840.113549.1.1.14
%3I64d %s %3I64d %s %3I64d %s %s %s %s %s %s %s
tr-encoding
the given option can't be reversed with a --no- prefix
api-ms-win-core-libraryloader-l1-2-0.dll
CURLOPT_TCP_KEEPIDLE
CURL_NETRC_IGNORED
Pipe is full, skip (%zu)
8$9K9
ignore-content-length
5*6>6P6X6e6
CURLOPT_RANGE
curl_easy_setopt(hnd, %s, "%s");
CURLOPT_PROXY_SSLCERT
Connection %ld seems to be dead!
Illegal characters found in URL
4N4c4k4
partial download completed, closing connection
netascii
--proxy-cert <cert[:passwd]>
HTTP/
CONNECT
CONNECT response too large!
socket failure: %s
7L7{7
>#>y>
Connection failed
A specified range MUST include at least one dash (-). Appending one for you!
4$4(40444<4@4H4L4T4X4`4d4l4p4x4|4
cookie
CURLOPT_REQUEST_TARGET
Trigger 'speed-limit' abort after this time
APOP %s %s
%02x
_seh_filter_exe
schannel: an unrecoverable error occurred in a prior call
L$d_^[3
0&1V1
--no-npn
`eh vector copy constructor iterator'
-s, --silent
http_version
Illegal date format for -z, --time-cond (and not a file name). Disabling time condition. See curl_getdate(3) for valid date syntax.
--limit-rate <speed>
Do not switch to GET after following a 303
CURLOPT_DEBUGFUNCTION
%s/?%s
api-ms-win-core-processenvironment-l1-2-0.dll
STORE
ssl-allow-beast
__acrt_iob_func
%%%02x
Accept:
j.X:G
--max-filesize <bytes>
2(272?2T2
show-error
No URL set!
InitializeCriticalSectionAndSpinCount
curl-ca-bundle.crt
%s:%s
QPQQh
9p t7h
<security>
NEW_ENV
CURLOPT_TCP_FASTOPEN
Show version number and quit
SEC_E_NO_AUTHENTICATING_AUTHORITY
Transfer-Encoding: chunked
627E7M7
p=t=|=
Control CWD usage
curl_easy_setopt(hnd, %s,
=?=X=w=
t!VhP
trace
easy handle already used in multi handle
Append to target file when uploading
.rtc$TZZ
Disk full or allocation exceeded
unsupported parameter to CURLOPT_FTPSSLAUTH: %d
schannel: client wants to read %zu bytes
uAh@sD
Use TLSv1.1
7.55.1
9+9L9f9
ftp_entry_path
DeleteCriticalSection
SEC_E_MAX_REFERRALS_EXCEEDED
Ph\1E
Hostname '%s' was found in DNS cache
9(:6:A:L:}:
--netrc-optional
Use TLSv1.3
CURLFORM_FILE, "%s",
Network down
Connection timed out after %ld milliseconds
0123456789abcdefghijklmnopqrstuvwxyz
Put the post data in the URL and use GET
: :$:(:,:0:4:@:D:H:L:`:d:h:l:
CURLOPT_HEADEROPT
_initialize_narrow_environment
CURLOPT_DNS_LOCAL_IP4
<F<N<e<n<~<
There is negative response in cache while serv connect
;1<=<R<d<~<
Use HTTP NTLM authentication
server did not report OK, got %d
CURLUSESSL_CONTROL
RhX7E
CURLOPT_KRBLEVEL
Ph(CE
Failed to send SOCKS5 sub-negotiation request.
Send CCC after authenticating
7I8n8z8
_curlrc
t(h@JE
failed to find WSACloseEvent function (%u)
Content-Length: 0
--socks5-hostname <host[:port]>
%15[^?&/:]://%c
--dns-ipv6-addr <address>
Content-Range: bytes %s%I64d/%I64d
CURLOPT_INTERFACE
t"j:Y:
singlecwd
ftp-ssl-control
version
socks5-basic
8(848@8
373d3
0W1s1
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
REST %I64d
AUTHENTICATION
http://
metalink
CURLOPT_HTTP_VERSION
;3<M<c<
Can't get the size of %s
D$$h<
--%s--
-q, --disable
GetStdHandle
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
application/octet-stream
CURLPROTO_RTSP
6L6q6
1)4H4R4Y4^4i4
1$1-1
SSL ciphers to use
QPPQQ
Peer certificate cannot be authenticated with given CA certificates
trh$=E
:':7:
YYjC_
__stdio_common_vsscanf
9@9I9
818x8
Vh`#E
%255[^:]:%d
8-:?:_:
ciphers
Loop??
URPQQh@'D
YYVhH
CURLOPT_TFTP_NO_OPTIONS
Failed to resolve "%s" for SOCKS4 connect.
CURLOPT_SOCKS5_GSSAPI_NEC
RETR %s
FTP: command REST failed
--socks4a <host[:port]>
<4<u<
terminate
5#6+636?6_6
--proto <protocols>
Debug
Done waiting for 100-continue
SOCKS5 request granted.
unmatched close brace/bracket
TYPE %c
t!QPh
\$ YY
WSAIoctl
1)111:1?1D1I1N1S1X1^1b1g1m1u1
Set client certificate for proxy
CURLOPT_FTP_USE_EPSV
SOCKS4 connection to %s not supported
schannel: can't renogotiate, an error is pending
CURLPROTO_GOPHER
FTP response timeout
FTP: command PORT failed
CURLAUTH_ANYSAFE
failed to find WSAEnumNetworkEvents function (%u)
Last-Modified
Wh0XE
form-string
--basic
Unable to parse FTP file list
172Z2x2
Unable to receive SOCKS5 sub-negotiation response.
api-ms-win-core-processthreads-l1-1-0.dll
CURL_HTTP_VERSION_NONE
confidentiality
YYjCX_^
SEC_E_KDC_UNABLE_TO_REFER
[unreleased]
Use the remote file name for all URLs
_set_app_type
NAOCRD
sha384
9F,t7S
CURLOPT_HTTPPOST
Checking for server connect
;#;';+;/;3;7;;;?;C;G;K;O;S;W;[;_;c;g;k;
# This file was generated by libcurl! Edit at your own risk.
User-Agent: %s
1.2.840.113549.2.2
7'70797J7X7q7y7
1.3.14.3.2.26
6R6q6
Resolve names to IPv4 addresses
0 0(00080@0P0X0`0p0x0
3htlE
--socks5-gssapi
proxy-insecure
ACCT %s
CURLOPT_MAXFILESIZE_LARGE
a specified protocol is unsupported by libcurl
sha1WithRSAEncryption
Port number ended with '%c'
Usage: curl [options...] <url>
--ssl
Content-Type:
Undocumented SOCKS5 mode attempted to be used by server.
the bundle, the certificate verification probably failed due to a
Tuesday
\%03o
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
u&9x t!
444S5c5v5~5
t$8YY
EXOPL
GSS-API confidentiality
close
SECTION
WDigest
CURLOPT_HEADERFUNCTION
> >0>9>A>M>i>t>
NTLM picked AND auth done set, clear picked!
2QhLBE
Thursday
3#3'3+3/33373;3?3C3G3K3O3S3W3[3_3c3g3k3o3s3w3{3
Content-Type: multipart/form-data
CURLOPT_TFTP_BLKSIZE
A libcurl function was given a bad argument
Wh,>E
30494l4t4|4
APPDATA
set timeouts for state %d; Total %ld, retry %d maxtry %d
FETCH
=0>8>@>H>P>`>h>
QueryPerformanceCounter
Do HTTP "raw"; no transfer decoding
--post302
SOCKS4 connect to IPv4 %s (locally resolved)
CURLOPT_VERBOSE
CURLOPT_SSL_OPTIONS
--tcp-fastopen
%c%s%c%s
Show error even when -s is used
`scalar deleting destructor'
jGX[_^]
%hu%*[xX]%hu
error initializing curl easy handle
:(:=:E:M:b:
2+252@2V2b2q2
454\4
-y, --speed-time <seconds>
t 9_
QQSV3
CURLOPT_SEEKDATA
Hostname %s was found in DNS cache
curl_formadd failed!
SSL peer certificate or SSH remote key was not OK
CURLOPT_SSLCERT
5<5}5
sha512WithRSAEncryption
StringFileInfo
2.5.4.42
PSRh(kE
Create the remote dirs if not present
%3I64dd %02I64dh
Use PORT instead of PASV
type=
api-ms-win-core-handle-l1-1-0.dll
-2, --sslv2
Unrecognized or bad HTTP Content or Transfer-Encoding
schannel: server closed abruptly (missing close_notify)
Dload Upload Total Spent Left Speed
`copy constructor closure'
2=2T2
schannel: SSL/TLS connection with %s port %hu (step 1/3)
_setmode
QUOT command failed with %03d
socks5
HTTP POST data, '@' allowed
6-6A6^6
anonymous
D$h j
CLIENT libcurl 7.55.1
curl_easy_cleanup(hnd);
Pass phrase for the private key for HTTPS proxy
tlsv1.0
postalCode
MKD %s
:K:u:
config
.text$mn
<#<*<0<D<V<^<
--post301
666B6
Proxy-authenticate:
1#1*181K1_1n1
>%?W?
ssloc inet_ntop() failed with errno %d: %s
88 8!"#8888
Bad tagged response
9.9D9
CURLAUTH_NTLM
file:
>#>`>m>s>{>
Referer:
rsa(n)
setlocale
-a, --append
6I6a6y6
CURLOPT_PROXYHEADER
proxy-tlsuser
Couldn't set desired mode
NAOFFD
; ;;;
%c%c%c=
2(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
C$:G$u"3
L$|_^[3
L$$j!P
--socks5-gssapi-service <name>
fgets
tlspassword
/1.1;A
CURLOPT_RANDOM_FILE
GetSystemDirectoryA
CryptHashData
-o, --output <file>
FLUSH
142V2\2h2~2
KV9K`
%s%s%s
Requested SSL level failed
--url
Store metadata in extended file attributes
`eh vector constructor iterator'
Rewinding %zu bytes
Network unreachable
Failed to query security context attributes.
sslv3
CURLOPT_CONNECT_TO
size_header
NAME
bad range input
D$4QP
SEC_E_SHUTDOWN_IN_PROGRESS
TERM SPEED
_mbschr
socks5-hostname
Vh4#E
tn<a|
Connection died, retrying a fresh connect
api-ms-win-crt-utility-l1-1-0.dll
connect to %s port %ld failed: %s
`placement delete[] closure'
--proxy-tlspassword <string>
proxy
CURLAUTH_BASIC
telnet-option
4k5|5I6f6
<0<;<G<R<d<q<
schannel: AcquireCredentialsHandle failed: %s
max-age
SOCKS5: connection timeout
cacert
@f9F@v
D$`SVW
-O, --remote-name
_mbspbrk
>B?b?
socks5-gssapi
FTP: can't figure out the host in the PASV response
STARu
Set a CRL list for proxy
--proxy-ssl-allow-beast
CURLFTPSSL_CCC_PASSIVE
Conversion failed
151b1
output
?,?8?u?
9C:O:\:z:
pPhd_E
u#8D$
-U, --proxy-user <user:password>
D$pYY
unexpected close bracket
PhxzD
HTTP server doesn't seem to support byte ranges. Cannot resume.
FTP response aborted due to select/poll error: %d
Could not seek stream
CURLOPT_PRE_PROXY
CURLOPT_USE_SSL
Expect:
write-out
?$?O?W?
SEC_E_ILLEGAL_MESSAGE (0x%08X) - This error usually occurs when a fatal SSL/TLS alert is received (e.g. handshake failed). More detail may be available in the Windows System event log.
memory shortage
--socks5 <host[:port]>
j/YN8
Issuer check against peer certificate failed
unmatched brace
schannel: SSL/TLS handshake complete
7.7Y7c7r7
;(;6;:;>;B;F;J;N;R;V;Z;^;b;f;j;n;r;v;z;~;
Public Key Algorithm: %s
option %s: %s
CURLOPT_TCP_KEEPINTVL
data-ascii
CURLOPT_PROXYUSERPWD
SEC_E_TOO_MANY_PRINCIPALS
Do not switch to GET after following a 302
IsDebuggerPresent
979[9s9
transfer closed with outstanding read data remaining
This help text
SPNEGO proxy service name
Disable URL sequences and ranges using {} and []
CURLOPT_URL
local_port
tH@SP
Negotiate
schannel: decrypted data added: %zu
CURLAUTH_ANY
Ph(YE
host=%s
--connect-timeout <seconds>
4$4B4Y4b4
--proto-default <protocol>
InitializeSecurityContext
-#, --progress-bar
--ftp-account <data>
CURLOPT_EGDSOCKET
?STLSu
Authentication problem. Ignoring this.
SearchPathA
--egd-file <file>
curl/7.55.1
APPEND %s (\Seen) {%I64d}
using the --cacert option.
schannel: server indicated shutdown in a prior call
stale
netrc
j=X_^]
Failed to clear the command channel (CCC)
SEC_E_BUFFER_TOO_SMALL
%s in chunked-encoding
__unaligned
-H, --header <header/@file>
SEC_E_CROSSREALM_DELEGATION_FAILURE
SOCKS5 GSSAPI per-message authentication is not supported.
CURLOPT_FTP_ALTERNATIVE_TO_USER
tHh4AE
-L, --location
8X>t>
proxy-anyauth
Base Class Descriptor at (
>;?m?v?
5 6/6=6L6Z6m6
SEARCH %s
Monday
PARTIAL
jIXjDY
ret = curl_easy_perform(hnd);
Maximum time allowed for connection
islower
-V, --version
CURLFORM_END);
.CRT$XCA
Address already in use
CryptReleaseContext
DATA failed: %d
socks5-gssapi-nec
response reading failed
KERNEL32.dll
tftp_tx: internal error, event: %i
fputs
:Q;f;
%c%c==
888]8b8m8
Expire Date: %s
Fail silently (no output at all) on HTTP errors
Accept-ranges: bytes
CURLOPT_RESUME_FROM_LARGE
A required function in the library was not found
7+7C7J7V7o7w7
Descriptor is not a socket
Timeout waiting for block %d ACK. Retries = %d
UnhandledExceptionFilter
_set_fmode
blksize
7h|%E
tlsv1.2
Use HTTP Basic Authentication
Could not get Content-Type header line!
Connected for receive
Authentication failed: %d
__p___argc
NTLM send, close instead of sending %I64d bytes
?SASL
CURLFORM_COPYCONTENTS, "%s",
CURLPROXY_HTTP
u*8D$
Unsupported proxy scheme for '%s'
%s IAC %s
<#<K<s<
3'303B3W3m3
no memory
no chunk, no close, no size. Assume close to signal end
HTTP/2 %d
FTP: couldn't retrieve (RETR failed) the specified file
MAIL FROM:%s AUTH=%s SIZE=%s
dsa(pub_key)
666d6x6
3)313T3c3s3{3
No data was received!
CURLOPT_PATH_AS_IS
Unrecoverable error in call to nameserver
>#>G>
VS_VERSION_INFO
j+X_]
(curl_off_t)%I64d
schannel: schannel_recv cleanup
0123456789-
api-ms-win-core-synch-l1-2-0.dll
9 9*949>9H9R9\9f9p9z9
Subject
interface
2.5.4.41
--anyauth
263D3d3r3
1)1d1
Protocol "%s" not supported or disabled in libcurl
Failed writing header
GSSAPI handshake failure (invalid security data)
cPWVh8tE
.CRT$XCZ
Proxy user and password
return (int)ret;
Follow redirects
image/gif
tlsv1.1
Illegally formatted input field!
1"1*191y1
digit
-f, --fail
schannel: SSL/TLS connection with %s port %hu (step 2/3)
curl performs SSL certificate verification by default, using a "bundle"
curl_formadd failed, possibly the file %s is bad!
CURLOPT_ACCEPT_ENCODING
SOCKS5 connection to %s not supported
mail-rcpt
364U4s4
--cert-type <type>
CURLOPT_CAINFO
size_download
SEC_E_KDC_CERT_REVOKED
OS/400
--ntlm-wb
LDAP: search failed
CURLAUTH_GSSNEGOTIATE
RQQRR
0(030:0H0O0\0g0x0
CONNECT %s HTTP/%s
CURLOPT_READFUNCTION
Internal problem setting up the POST
Time-out
kernel32
__pascal
bundle file isn't adequate, you can specify an alternate file
#h|`E
--retry <num>
TCP_NODELAY set
Unable to receive initial SOCKS5 response.
WhHVE
5`6&7Q7
.CRT$XPA
[%zd bytes data]
-G, --get
%s: %s
ftp-ssl-ccc
.data
--dns-servers <addresses>
1.2.840.10045.2.1
<%<0<y<
w+hX5E
SEC_E_DECRYPT_FAILURE
6*7\7d7{7
CRYPT32.dll
6J6m6
<<<<<<<
%2I64d:%02I64d:%02I64d
failed to truncate, exiting
schannel: sending initial handshake data: sending %lu bytes...
Failed to acquire credentials.
curl.exe
integrity
PBSZ %d
-j, --junk-session-cookies
Disable SSL session-ID reusing
false-start
CONNECT responded chunked
CURLOPT_HTTP_CONTENT_DECODING
-1, --tlsv1
Couldn't bind to '%s'
--trace-ascii <file>
6)717
7N7S7\7d7i7y7
SleepEx
_except1
URL to work with
unknown error
Access denied: %03d
PhDRE
%4I64dG
CURLOPT_LOW_SPEED_TIME
CURLOPT_SSLCERTTYPE
1.2.840.113549.1.1.12
Certificate file type (DER/PEM/ENG)
%4I64dT
CreateFileA
_crt_atexit
Acceptable MD5 hash of the host public key
stderr
Server doesn't support multi-use (yet)
127.0.0.1/
Connection
-Y, --speed-limit <speed>
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
Do not send any TFTP options
GetProcAddress
SEC_E_ILLEGAL_MESSAGE
!<\uK
PeekNamedPipe
proxy-key-type
ProductName
D$$F@
Phx9E
failed to resolve the address provided to PORT: %s
Illegal or missing hexadecimal sequence
2.5.4.12
<+<1<9<H<N<
curl: unknown --write-out variable: '%s'
%s%s, %zd bytes (0x%zx)
%02d:%02d%n
?!?3?Z?b?u?
octet
dnQualifier
Proxy-Connection:
Transfer local FILE to destination
SIZE %s
.idata$6
Mail from this address
1.2.840.113549.1.1.10
socks5-gssapi-service
:%:P;g;
unrecognized ftp CCC method '%s', using default
Skip %d.%d.%d.%d for data connection, re-use %s instead
Couldn't resolve host name
Failed to receive SSPI authentication response.
t,Pj@h
location
3;3k3
The curl executable
(%d) Failed writing body
The requested document is not old enough
schannel: unable to re-allocate memory
546<6G6S6
2U3|3
schannel: failed to setup confidentiality
tGS<"tA<\u3A
Lh<sD
>+?0?4?8?<?
Connection #%ld is still name resolving, can't reuse
CURLAUTH_NTLM_WB
41484C4
_strdup
Failed to load CRL file (path? access rights?, format?)
isxdigit
D$4u6
engine
>SASLu
Connection:
curl, https://curl.haxx.se/
Server user and password
7#8C8Q8
uXSQhT@E
-T, --upload-file <file>
Maximum file size exceeded
9%:U:
jPXjC
RSA Public Key (%lu bits)
Wait time between retries
8<:G:s:y:
<7=c=
serialNumber
Do not squash .. sequences in URL path
FileVersion
D$hSVW
tolower
imaps
Illegal port number in EPSV reply
OUTPUT MARKING
?L?y?
strncmp
proxy1.0
SEC_E_NO_CREDENTIALS
TlsAlloc
CAPABILITY
CURL_TIMECOND_LASTMOD
0"1J1w1
3/3J3W3g3}3
Width: %hu ; Height: %hu
--ignore-content-length
ext-ms-
SOCKS5 proxy on given host + port
Remote file already exists
SEC_E_MUST_BE_KDC
CURLOPT_SERVICE_NAME
Access denied. %c
Use HTTP 2 without HTTP/1.1 Upgrade
%c%03d
%.4s-%.2s-%.2s %.2s:%.2s:%c%c%s%.*s%s%.*s
3!3.3E3`3
Failed to alloc memory for big header!
Wh$tD
D$ uT
^h(dE
CURLOPT_QUOTE
SEC_E_PKINIT_CLIENT_FAILURE
7`8S9
CURLOPT_PROXY_SSL_VERIFYHOST
?USERu
VerifyVersionInfoA
CURLOPT_FTP_CREATE_MISSING_DIRS
;type=%c
Accept-Encoding:
CURLOPT_AUTOREFERER
Invalid IPv6 address format
Got unexpected smtp-server response: %d
unsupported MDTM reply format
Protocol option is unsupported
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
dns-ipv4-addr
pop3s
MAIL FROM:%s AUTH=%s
Private key file name
Immediate connect fail for %s: %s
WSACloseEvent
5(5d5
operator ""
4$5T5
Ph4_E
Qhx&E
3 3(3,34383@3D3L3P3X3\3d3h3p3t3|3
-:, --next
>)>H>W>h>z>
4a4g4
Failed to create/open output
CURLOPT_PROTOCOLS
CURL_TIMECOND_IFUNMODSINCE
Remote filename has no length!
api-ms-win-security-cryptoapi-l1-1-0.dll
Can't open %s for writing
8 8K8P8
rwx-tTsS
subjectAltName
`dynamic initializer for '
CURLPROTO_SMBS
api-ms-win-crt-runtime-l1-1-0.dll
time-cond
Couldn't find host %s in the _netrc file; using defaults
j0X^]
YYj$X
j@_9}
Internal error clearing splay node = %d
Name '%s' family %i resolved to '%s' family %i
Vh@#E
__ptr64
dh(p)
Use HTTP NTLM authentication with winbind
NAOVTS
tTj:V
3=3w3
>0u)j0
%USERPROFILE%\Application Data
isgraph
Dump libcurl equivalent code of this command line
isalpha
operator co_await
--proxy1.0 <host[:port]>
size_upload
freeaddrinfo
ftp://
CURLPROTO_SMTPS
ftp-pret
<V=d=?>v>
Write a debug trace to FILE
9_DtE9_H~$
too many globs
PRET %s
SEC_I_CONTEXT_EXPIRED
:,;4;`;k;
CURLOPT_XOAUTH2_BEARER
CURL_TIMECOND_IFMODSINCE
socks4
TLS authentication type for HTTPS proxy
2.16.840.1.101.3.4.2.2
Unsupported proxy '%s', libcurl is built without the HTTPS-proxy support.
schannel: a client certificate has been requested
8!8)858=8I8Q8]8e8q8y8
(terminated by
Use SSLv2
SPNEGO service name
PhpeE
curl_easy_setopt(hnd, %s, slist%d);
Replaced
EXAMINE
--libcurl <file>
CURLPROTO_POP3S
--proxy-key-type <type>
2.5.4.11
https
9o:}:
__p___argv
2Q3Z3
PPPPj
1.2.840.113549.1.9.1
WhDVE
Phh`E
as source easily. You may select to either not use them or implement
-E, --cert <certificate[:password]>
2.5.4.46
schannel: encrypted data got %zd
1.2.840.10045.3.0.1
2.5.29.19
CURL_NETRC_REQUIRED
Invalid TIMEVALUE
2"272?2T2
Resumed transfer offset
9E(td;U
internal error: invalid pattern type (%d)
DIGEST-MD5 handshake failure (empty challenge message)
retry-delay
7L7e7
2.5.4.10
Couldn't connect to server
Make the operation more talkative
%s resides on a read-only file system.
SSL_CERT_FILE
191j1
--dns-ipv4-addr <address>
3=3L3
bad range
TFTP: File Not Found
Originator address of the original email
CURLOPT_TCP_NODELAY
?L?s?
Bad argument
Given file does not exist
2J2q2
:9;N;.<?<x<
Failed to set filetime %ld on outfile: SetFileTime failed: GetLastError %u
FlsFree
active
_getch
2#2'2+2/23272;2?2C2G2K2O2S2W2[2_2c2g2k2o2s2w2{2
<stdin>
--proxy-negotiate
Command failed: %d
9A:\:
CURLOPT_MAX_SEND_SPEED_LARGE
-k, --insecure
<"<&<4<
-4, --ipv4
speed_upload
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
j8Z=3'
CLOCK$
Ignore the size of the remote resource
http1.0
RCPT TO:<%s>
InternalName
password
Disable buffering of the output stream
CURLPROXY_SOCKS5
malloc
8*989U9_9
How long to wait for 100-continue
MAIL failed: %d
--tlsv1.0
CURLAUTH_DIGEST
Create necessary local directory hierarchy
Private key file type for proxy
--connect-to <HOST1:PORT1:HOST2:PORT2>
Out of memory
7)71797C7g7
redirect_url
schannel: failed to retrieve remote cert context
WSACreateEvent failed (%d)
IsProcessorFeaturePresent
Read callback asked for PAUSE when not supported!
--http2-prior-knowledge
: :.:_:l:~:
Gl+GpP
`vector destructor iterator'
Refusing to overwrite %s: %s
Use HTTP Negotiate (SPNEGO) authentication
--no-alpn
2139344
proxy-crlfile
remote-name
SEC_E_ISSUING_CA_UNTRUSTED_KDC
Basic
.rsrc$02
TTLSuS
CURLPROTO_FTPS
6(626Q6\6d6p6{6
schannel: SSL/TLS connection with %s port %hu (step 3/3)
response_code
T$8Sj
Re-using existing connection! (#%ld) with %s %s
2.5.4.44
machine
--data-binary <data>
5+6[6
MDTM %s
>2>:>N>a>i>q>{>$?P?
uE9s\u@
= =(=0=8=@=H=P=X=`=h=p=x=
Failed to MKD dir: %03d
curl: try 'curl --help' for more information
Disable cert revocation checks (WinSSL)
CURLOPT_COOKIESESSION
passive
Internal state machine error
The entire document is already downloaded
FP(pD
curl: Saved to filename '%s'
SEC_E_UNTRUSTED_ROOT
security.dll
TlsSetValue
<"<1<B<T<i<
--proxy-cacert <file>
Requested range was not delivered by the server
If-Modified-Since
@hP=E
TFTP response timeout
api-ms-win-core-kernel32-legacy-l1-1-2.dll
-n, --netrc
allocate connect buffer!
9t&9Q
t$DWV
CURL_SSLVERSION_TLSv1_2
FlsAlloc
.html
Couldn't use specified SSL cipher
t2h$gE
--proxy-ntlm
host!
schannel: shutting down SSL/TLS connection with %s port %hu
617^7h7
Failed to alloc scratch buffer!
no URL specified!
<"<&<
curl_easy_setopt(hnd, %s, %ldL);
Server returned nothing (no headers, no data)
Remote error
schannel: encrypted data length: %lu
Windows
2.5.29.17
int main(int argc, char *argv[])
unrecognized protocol '%s'
SEC_E_POLICY_NLTM_ONLY
88888888$888888888888%88&'88888888888(8)88888888888888*+88,-.88/01238488888856887
QhhKE
Ph dE
Get a CRL list in PEM format from the given file
Connected to %s (%s) port %ld (#%ld)
File for reading random data from
Failed binding local connection end
Failed to receive SSPI authentication token.
Issuer: %s
Bind to local port %hu failed, trying next
GetCurrentProcessId
-3, --sslv3
060[0
CURLOPT_USERPWD
rsa(e)
7C8J8O8U8m8r8
`default constructor closure'
pubkey
2+252>2O2^2u2
dns-interface
%c%c%c%c
t"hPiE
`vbase destructor'
Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)
<@<c<
CURLPROTO_ALL
-t, --telnet-option <opt=val>
Base Class Array'
--preproxy [protocol://]host[:port]
%c%c%c%u%c
control connection looks dead
CURLOPT_FTP_USE_PRET
j#XjMY
;';T;q;y;
-p, --proxytunnel
%31[ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
CURLOPT_HTTP_TRANSFER_DECODING
9_0u]
--abstract-unix-socket <path>
api-ms-win-core-file-l1-1-0.dll
--metalink
CURLOPT_DEFAULT_PROTOCOL
CURLOPT_HEADER
CURLOPT_TLSAUTH_PASSWORD
`placement delete closure'
--retry-connrefused
filename=
Failed initialization
393H3M3X3z3
SEC_E_SMARTCARD_LOGON_REQUIRED
disable
WaitForSingleObjectEx
CURLOPT_SSLKEY
chunked
User was rejected by the SOCKS5 server (%d %d).
--url <url>
SOCKS5 GSS-API protection not yet implemented.
CURLPROTO_IMAP
Microsoft Unified Security Protocol Provider
X500UniqueIdentifier
SWhhLE
--retry-delay <seconds>
CURLOPT_COOKIEFILE
Do not switch to GET after following a 301
9,:8:E:
<A>x>
--proxy-pass <phrase>
70\0z0
`vcall'
060@0F0
%5I64d
libcurl/7.55.1
Signature
preproxy
9G$t=
Ph mE
ACCT requested but none available
2.5.4.13
location-trusted
built-in manual was disabled at build-time!
digest_sspi: MakeSignature failed, error 0x%08lx
IMAP.
CURL_SSLVERSION_TLSv1_1
Can't resolve new host %s:%hu
1.2.840.10046.2.1
4 40494M4
Recv failure: %s
CURLOPT_DEBUGDATA
Server denied you to change to the given directory
081A1
Like --trace, but without hex output
smtps
SEC_E_SMARTCARD_CERT_REVOKED
text/html
Unable to send initial SOCKS5 request.
gopher
lookup word is missing
-----BEGIN CERTIFICATE-----
time_appconnect
%2I64d.%0I64dM
.CRT$XIZ
service-name
SEC_I_NO_LSA_CONTEXT
Avoided giant realloc for header (max is %d)!
RQhL,E
9W0u
Failed to determine user name.
CURLPROTO_LDAPS
2!222
tlsuser
<9<|<y=~=
CURLOPT_POSTREDIR
InitializeCriticalSectionEx
bind(port=%hu) on non-local address failed: %s
Proxy-authorization:
!This program cannot be run in DOS mode.
SEC_E_MULTIPLE_ACCOUNTS
9B:V:
header
Number of redirects hit maximum amount
CURLPROTO_HTTP
2.5.4.9
%s IAC SB
%s:%hu
proxy-ntlm
CURLOPT_CONNECTTIMEOUT_MS
%s://%s%s
HTTPS-proxy
Syntax error in telnet option: %s
6%6-696A6M6e6m6
PhLkE
SSH Public key file name
Process given URLs as metalink XML file
ignoring %s, not supported by libcurl
trace-time
6M6`6
END OF RECORD
tUPhq'
2E2e2m2u2
Whx2E
L$l_^[3
Pass custom header(s) to proxy
EXTEND ASCII
NTLM handshake failure (type-3 message): Status=%x
6 6(6,64686@6D6L6P6X6\6d6h6p6t6|6
6?6V6^6
Metalink: fetching (%s) from (%s) OK
You don't have permission to create %s.
<[t"<{uN
Write to file instead of stdout
9t$$ts
SSL public key does not match pinned public key
`eh vector destructor iterator'
0.1L1T1\1o1
x-gzip
CURLPROXY_SOCKS4A
CURLPROTO_POP3
proto-redir
=,>7>
Bad file
;%;e;y;
Display the full manual
Transferred a partial file
9Ndt,
api-ms-win-core-synch-l1-1-0.dll
unix-socket
schannel: initial InitializeSecurityContext failed: %s
CURLPROTO_LDAP
SEC_E_ISSUING_CA_UNTRUSTED
Unknown error %d (%#x)
Write callback asked for PAUSE when not supported!
HTTP/1.%d %d
jKX:B
emailAddress
Internal error: Unexpected packet
pinnedpubkey
Can't get the size of file.
schannel: encrypted data cached: offset %zu length %zu
disable-eprt
schannel: failed to send initial handshake data: sent %zd of %lu bytes
bind() failed, we ran out of ports!
-e, --referer <URL>
j@Xj
=d=m=
--tlsv1.2
1)131:1]1d1n1x1
Disable the ALPN TLS extension
617]7j7
t"jQX;
D$TSPQ
Process limit reached
%7I64dd
Malformed ACK packet, rejecting
postend = NULL;
EnterCriticalSection
Send User-Agent <name> to server
YYj:V
NTLM_WB
0O0t0
_errno
SSL_CERT_DIR
-R, --remote-time
HTTP/1.0 connection set to keep alive!
data-binary
noproxy
t<WVVh
3M4a4
=-=Y=
Illegally formatted content-type field!
8)9';h;
Connection cache is full, closing the oldest one.
-w, --write-out <format>
121:1O1W1l1t1
transfer closed with %I64d bytes remaining to read
`typeof'
QUOT string not accepted: %s
key-type
==>_>t>|>
--trace <file>
--pubkey <key>
Specify FILE for netrc
--digest
YY_^[]
SPNEGO handshake failure (empty challenge message)
graph
strpbrk
--trace-ascii overrides an earlier trace/verbose option
--ciphers <list of ciphers>
t7< t
3'3:3
VPWPh
CryptGetHashParam
Pass custom header(s) to server
Ph\2E
CURLOPT_NOPROGRESS
_mkdir
isdigit
Wildcard - START of "%s"
</requestedPrivileges>
Couldn't read data from file "%s", this makes an empty POST.
YYj=X
FTP: unknown PASV reply
v0RWV
GetCurrentProcess
http1.1
Connection #%ld isn't open enough, can't reuse
Socket not ready for send/recv
;$<*=3=x=
time_connect
Ph`WE
qPhp_E
Read config from a file
%s%c%s
Send failed since rewinding of the data stream failed
_get_osfhandle
SUPPRESS GO AHEAD
HEAD (-I, --head)
sha384WithRSAEncryption
blksize is larger than max supported
__cdecl
RhX[E
Couldn't read a file:// file
%s HTTP/%s
schannel: ALPN, server accepted to use %.*s
0$060H0Z0l0~0
url_effective
Found connection %ld, with requests in the pipe (%zu)
Transfer based on a time condition
Public Key Algorithm
Need destination address
License
got option=(%s) value=(%s)
0'0Q0h0v0
%s: %s, %02d %s %4d %02d:%02d:%02d GMT
Can't complete SOCKS5 connection to %02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%d. (%d)
Connection refused
</assembly>
Failed sending POST request
D$$YY
Enable username/password auth for SOCKS5 proxies
schannel: next InitializeSecurityContext failed: %s
;'<`<
_netrc
Referrer URL
schannel: old credential handle is stale, removing
1.2.840.113549.1.1.13
/:]:%3[/]%[^
Stop transfers slower than this
Translation
SEC_E_SECPKG_NOT_FOUND
Failed to open %s
FlsSetValue
818_8
--proxy-header <header/@file>
9B:W:(;3;D;
1/2N2Y2d2
--proxy-tlsuser <name>
CURLOPT_CAPATH
PhtzD
GetEnvironmentVariableA
range overflow
9m9v9
--create-dirs
TlsFree
alnum
8&8/8>8H8V8
Ph@=E
SEC_E_SECURITY_QOS_FAILED
Must read .netrc for user name and password
PQWQh
RTSP/%d.%d %3d
--sasl-ir
u*Ph8
skipped cookie with bad tailmatch domain: %s
="=)=/=i=r=
OLD-ENVIRON
delete[]
The max connection limit is reached
Couldn't use REST
Entry path is '%s'
CURLOPT_HEADERDATA
Skipping time comparison
0"010=0
Server %s is blacklisted
CURLOPT_FTPPORT
TFTP: Illegal operation
>:t7j:V
objectpointer
CryptCreateHash
wcsncmp
always
Stream error in the HTTP/2 framing layer
<%=.=H>
0G1P1
CA certificate to verify peer against
Could not set TCP_NODELAY: %s
globoff
%s %02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x
.CRT$XIAC
Site %s:%d is pipeline blacklisted
ProductVersion
SPSSPP
=5=g=
<6=S=_=
t$8VRQ
989f9
isprint
3#3/3S3w3~3
HTTP/%1d.%1d%c%3d
`managed vector constructor iterator'
ftp-pasv
__p__commode
9!:):E:Z:
Wj@Xj
Specify request command to use
9Q9]9e9p9v9
G j2X9G ~
proxy-ciphers
--post303
9+959=9^9k9
Caller must register CURLOPT_CONV_ callback options
SEARCH
3K3_3j3v3}3
CURLOPT_TIMECONDITION
CURLFORM_CONTENTTYPE, "%s",
Account data string
Note:
Connect through this Unix domain socket
&0T0~0
Invalid file://hostname/, expected localhost or 127.0.0.1 or none
7#7'7+7/73777;7?7C7G7K7O7S7W7[7_7c7g7k7o7s7w7{7
seek callback returned error %d
9^,t)
Largefile
CWD %s
.CRT$XIAA
: ;I;b;|;
|$4Yj
ssl_verify_result
5&595v5
@D t/8
2.16.840.1.101.3.4.2.1
9X,t]
Wh`sD
--pass <phrase>
HTTPS
%0*ld
t>9_ u9
CURLOPT_SSH_HOST_PUBLIC_KEY_MD5
Wh<VE
out of memory
CURLOPT_FILETIME
FTP error
_register_onexit_function
--proxy-tlsauthtype <type>
Disable TCP keepalive on the connection
N0X0`0j0
--tftp-no-options
functionpointer
LDAP: cannot bind
We are completely uploaded and fine
http/1.1
warning: unsupported value passed to CURLOPT_SOCKS5_AUTH: %lu
%4I64dM
Doing the SSL/TLS handshake on the data stream
CURLOPT_SSLVERSION
APPE %s
SELECT %s
1&2O2
Found bundle for host %s: %p [%s]
.idata$2
%15[^
=> Send data
Connection was reset
SEC_E_UNSUPPORTED_FUNCTION
--ftp-pret
Content-Range: bytes %s/%I64d
File already completely uploaded
2:2N2v2
proxy-cert
0'1E1i1
5 5$5,50585<5D5H5P5T5\5`5h5l5t5x5
:#:A:
SVWUj
Unsupported protocol
No connections available.
1A2m2
7\7k7
787B7z7
CURLFTPSSL_CCC_ACTIVE
L$,RP
Received unexpected DATA packet block %d, expecting block %d
bad range specification
schannel: enough decrypted data is already available
FormatMessageA
Out of file descriptors
/?#]%[^
Failed sending data to the peer
struct curl_httppost *post%d;
5$5.565@5
CURLOPT_COOKIEJAR
CURLPROXY_HTTPS
5@5H5P5\5
748<8[8`8}8
QPhtUE
?$?9?F?
nested brace
:#;N;
FlQh8
.gfids
2a2j2}2
api-ms-win-core-synch-l1-2-0
Wildcard - Parsing started
uUj V
remote-header-name
Error creating directory %s.
>F>R>c>k>
Received ACK for block %d, expecting %d
Too long SOCKS proxy name, can't use!
CryptDestroyHash
Failed sending CONNECT to proxy
api-ms-win-core-namedpipe-l1-1-0.dll
Bad access
Host not found
%s |%d|%s|%hu|
646D6R6k6s6
SEC_E_DELEGATION_REQUIRED
schannel: Curl_read_plain returned error %d
3@4D4H4L4P4T4X4
Failed to resolve "%s" for SOCKS5 connect.
Failed to open %s to write libcurl code!
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
SOCKS4 reply has wrong version, version should be 4.
Negative content-length: %I64d, closing after transfer
-M, --manual
%04zx:
0-050J0R0g0o0
--mail-auth <address>
Ph ZE
Pick any proxy authentication method
SMTP.
ALL_PROXY
curl_slist_free_all(slist%d);
Failed to send SOCKS5 connect request.
%s%luUL);
PhtsD
insecure
CURLOPT_PROXY_SSLKEY
Winsock library is not ready
SEC_I_SIGNATURE_NEEDED
9_ tI
2.5.4.4
GSSAPI handshake failure (empty challenge message)
_cexit
--ftp-ssl-control
proxy-tlsauthtype
local-port
The requested URL returned error: %d
api-ms-win-crt-conio-l1-1-0.dll
Content-Length:
YYj?X
select/poll error
SEC_E_UNSUPPORTED_PREAUTH
wPhX5E
HTTP/1.0 proxy connection set to keep alive!
9FLr6
4&4X4
,%d,%d
<3=8=V=
Qh8&E
CONNECT phase completed!
Failed to initialise security context.
https://curl.haxx.se/docs/copyright.html
Unknown telnet option %s
CURLOPT_SSL_FALSESTART
schannel: using IP address, SNI is not supported by OS.
proxy-negotiate
u+h\6E
2.5.4.43
Failed sending DICT request
GetLastError
414@4j4
InitializeSecurityContext failed: %s
LDAP.
t&RQh
Invalid character is found in given range. A specified range MUST have only digits in 'start'-'stop'. The server's response to this request is uncertain.
Connect data stream passively
total
is ambiguous
YYj?W
ugj/S
;A;q;
9+:2:9:C:L:h:v:
%.*s=%s
anyauth
Pass phrase for the private key
HTTP error
3*4J4U4[4p4
Use PROTOCOL for any URL missing a scheme
tftp_tx: giving up waiting for block %d ack
Limit transfer speed to RATE
0123456789ABCDEF
Cannot APPEND without a mailbox.
;mode=
1#2+2P3}3
POP3.
dh(pub_key)
USER %s
policy
Host down
?3?D?I?N?o?t?
proxy-cert-type
2'252?2e2
YYj*X
9Q$t'
If-Unmodified-Since
Ph@nE
_get_initial_narrow_environment
RETR response: %03d
A\_^3
Wh LE
4(4?4{4
32373
localhost
strtod
6 6$6
curl_easy_setopt(hnd, %s, post%d);
CURLOPT_NETRC
socks4a
getsockname() failed: %s
Sending data failed (%d)
3F3L3r3
1.2.840.113549.2.5
`.rdata
Qh@KE
/DEFINE:
Invalid arguments
5<7R7Z7b7n7v7
-N, --no-buffer
proxy-service-name
Force use of RANGE for local port numbers
fail-early
curl 7.55.1 (Windows) %s
NO_PROXY
Write output to a file named as the remote file
--path-as-is
[%lu/%lu]: %s --> %s
5O5V5
7hX$E
schannel: renegotiating SSL/TLS connection
<DIR>
blksize parsed from OACK
strtol
No buffer space
Cookie:
787Q7V7u7
7i7q7y7
--tftp-blksize <value>
Socket is unsupported
expected a proper numerical parameter
:":,:6:@:G:N:U:\:c:j:q:x:
Accept-Encoding: %s
=5=[=e=
too large number
Failed to read %s
Received only partial file: %I64d bytes
--form-string <name=string>
ferror
Internal error removing splay node = %d
L$t_^[3

PE Information

Image Base Entry Point Reported Checksum Actual Checksum Minimum OS Version PDB Path Compile Time Import Hash
0x00400000 0x00041070 0x00061512 0x00061512 6.0 curl.pdb 2017-11-14 21:07:45 b2564b0936830c66b3860ad63ff14547

Version Infos

CompanyName curl, https://curl.haxx.se/
FileDescription The curl executable
FileVersion 7.55.1
InternalName curl
OriginalFilename curl.exe
ProductName The curl executable
ProductVersion 7.55.1
LegalCopyright ร‚ยฉ 1996 - 2017 Daniel Stenberg, <daniel@haxx.se>.
License https://curl.haxx.se/docs/copyright.html
Translation 0x0409 0x04b0

Sections

Name RAW Address Virtual Address Virtual Size Size of Raw Data Characteristics Entropy
.text 0x00000400 0x00001000 0x0004419a 0x00044200 IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6.59
.rdata 0x00044600 0x00046000 0x000151cc 0x00015200 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5.53
.data 0x00059800 0x0005c000 0x00000688 0x00000200 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1.01
.rsrc 0x00059a00 0x0005d000 0x000005b0 0x00000600 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3.98
.reloc 0x0005a000 0x0005e000 0x00004480 0x00004600 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 6.73

Name Offset Size Language Sub-language Entropy File type
RT_VERSION 0x0005d0a0 0x0000038c LANG_ENGLISH SUBLANG_ENGLISH_US 3.45 None
RT_MANIFEST 0x0005d430 0x0000017d LANG_ENGLISH SUBLANG_ENGLISH_US 4.91 None

Imports

Name Address
WSAIoctl 0x44603c
bind 0x446040
select 0x446044
__WSAFDIsSet 0x446048
freeaddrinfo 0x44604c
getaddrinfo 0x446050
WSASetLastError 0x446054
recvfrom 0x446058
listen 0x44605c
accept 0x446060
gethostname 0x446064
htonl 0x446068
ntohl 0x44606c
getpeername 0x446070
getsockname 0x446074
socket 0x446078
ntohs 0x44607c
connect 0x446080
getsockopt 0x446084
htons 0x446088
setsockopt 0x44608c
send 0x446090
closesocket 0x446094
recv 0x446098
WSAGetLastError 0x44609c
WSACleanup 0x4460a0
WSAStartup 0x4460a4
sendto 0x4460a8
ioctlsocket 0x4460ac
Name Address
CertFreeCertificateContext 0x446000
Name Address
SetFileTime 0x4460c0
CreateFileA 0x4460c4
SetEndOfFile 0x4460c8
GetFileType 0x4460cc
ReadFile 0x4460d0
Name Address
SearchPathA 0x446128
Name Address
ExpandEnvironmentStringsA 0x446118
GetEnvironmentVariableA 0x44611c
GetStdHandle 0x446120
Name Address
SetLastError 0x4460b4
GetLastError 0x4460b8
Name Address
CloseHandle 0x4460d8
Name Address
FreeLibrary 0x4460e8
GetModuleFileNameA 0x4460ec
GetModuleHandleA 0x4460f0
LoadLibraryExW 0x4460f4
GetProcAddress 0x4460f8
Name Address
Sleep 0x446168
Name Address
GetTickCount64 0x446178
GetSystemDirectoryA 0x44617c
Name Address
FormatMessageA 0x446108
Name Address
VerifyVersionInfoA 0x4460e0
Name Address
LoadLibraryA 0x446100
Name Address
VerSetConditionMask 0x446184
Name Address
WaitForMultipleObjects 0x446170
Name Address
PeekNamedPipe 0x446110
Name Address
CryptGetHashParam 0x44633c
CryptAcquireContextA 0x446340
CryptCreateHash 0x446344
CryptReleaseContext 0x446348
CryptGenRandom 0x44634c
CryptDestroyHash 0x446350
CryptHashData 0x446354
Name Address
calloc 0x4461c8
_free_base 0x4461cc
malloc 0x4461d0
free 0x4461d4
_set_new_mode 0x4461d8
realloc 0x4461dc
Name Address
__p__commode 0x44626c
__stdio_common_vfprintf 0x446270
fclose 0x446274
_get_osfhandle 0x446278
_lseeki64 0x44627c
fseek 0x446280
fputc 0x446284
fgets 0x446288
fread 0x44628c
fputs 0x446290
fwrite 0x446294
fflush 0x446298
__acrt_iob_func 0x44629c
fopen 0x4462a0
puts 0x4462a4
_fileno 0x4462a8
_setmode 0x4462ac
_isatty 0x4462b0
_open 0x4462b4
_close 0x4462b8
_read 0x4462bc
_write 0x4462c0
__stdio_common_vsprintf 0x4462c4
_set_fmode 0x4462c8
feof 0x4462cc
ferror 0x4462d0
__stdio_common_vsscanf 0x4462d4
Name Address
_localtime64 0x446324
_gmtime64 0x446328
_time64 0x44632c
Name Address
isgraph 0x4462dc
isalpha 0x4462e0
strtok 0x4462e4
strpbrk 0x4462e8
strncpy 0x4462ec
strncmp 0x4462f0
isspace 0x4462f4
strcspn 0x4462f8
isdigit 0x4462fc
isalnum 0x446300
isupper 0x446304
isprint 0x446308
islower 0x44630c
_strdup 0x446310
tolower 0x446314
wcsncmp 0x446318
isxdigit 0x44631c
Name Address
strtoul 0x446194
atoi 0x446198
strtoll 0x44619c
strtod 0x4461a0
strtol 0x4461a4
Name Address
exit 0x44620c
_beginthreadex 0x446210
_initterm_e 0x446214
_initterm 0x446218
_exit 0x44621c
_initialize_narrow_environment 0x446220
_configure_narrow_argv 0x446224
__p___argc 0x446228
_set_app_type 0x44622c
_seh_filter_exe 0x446230
_register_thread_local_exe_atexit_callback 0x446234
__p___argv 0x446238
_cexit 0x44623c
__sys_nerr 0x446240
terminate 0x446244
_controlfp_s 0x446248
_errno 0x44624c
_get_initial_narrow_environment 0x446250
strerror 0x446254
_crt_atexit 0x446258
_c_exit 0x44625c
_register_onexit_function 0x446260
_initialize_onexit_table 0x446264
Name Address
_stat64 0x4461b4
_mkdir 0x4461b8
_access 0x4461bc
_fstat64 0x4461c0
Name Address
_configthreadlocale 0x4461e4
setlocale 0x4461e8
Name Address
getenv 0x4461ac
Name Address
_mbspbrk 0x4461fc
_mbschr 0x446200
_mbsnbcpy 0x446204
Name Address
qsort 0x446334
Name Address
RtlUnwind 0x446140
Name Address
TlsAlloc 0x446130
TlsSetValue 0x446134
TlsFree 0x446138
Name Address
__setusermatherr 0x4461f0
_except1 0x4461f4
Name Address
_getch 0x44618c


Reports: JSON

Usage


Processing ( 10.29 seconds )

  • 9.625 ProcessMemory
  • 0.64 CAPE
  • 0.019 BehaviorAnalysis
  • 0.007 AnalysisInfo
  • 0.001 Debug

Signatures ( 0.05 seconds )

  • 0.008 ransomware_files
  • 0.005 antianalysis_detectfile
  • 0.005 antiav_detectreg
  • 0.005 ransomware_extensions
  • 0.003 ursnif_behavior
  • 0.002 antiav_detectfile
  • 0.002 infostealer_bitcoin
  • 0.002 infostealer_ftp
  • 0.002 infostealer_im
  • 0.002 poullight_files
  • 0.002 territorial_disputes_sigs
  • 0.001 antianalysis_detectreg
  • 0.001 antivm_vbox_files
  • 0.001 antivm_vbox_keys
  • 0.001 geodo_banking_trojan
  • 0.001 browser_security
  • 0.001 disables_backups
  • 0.001 disables_browser_warn
  • 0.001 disables_power_options
  • 0.001 azorult_mutexes
  • 0.001 cryptbot_files
  • 0.001 echelon_files
  • 0.001 infostealer_mail
  • 0.001 masquerade_process_name
  • 0.001 revil_mutexes
  • 0.001 modirat_behavior

Reporting ( 0.01 seconds )

  • 0.005 CAPASummary
  • 0.001 JsonDump

Signatures

The PE file contains a PDB path
pdbpath: curl.pdb
SetUnhandledExceptionFilter detected (possible anti-debug)
Yara detections observed in process dumps, payloads or dropped files
Hit: PID 6212 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 59 }', '{ E8 00 00 00 00 58 }']'
Anomalous binary characteristics
anomaly: Entrypoint of binary is located outside of any mapped sections

Screenshots

No screenshots available.

Hosts

No hosts contacted.

DNS

No domains contacted.

Summary

C:\Users\Packager\AppData\Roaming\_curlrc
C:\Users\Packager\AppData\Local\Temp\_curlrc
C:\Windows\System32\kernel.appcore.dll
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
No results
Sorry! No behavior.
Sorry! No strace.
Sorry! No tracee.

No hosts contacted.

No TCP connections recorded.

No UDP connections recorded.

No domains contacted.

HTTP Requests

No HTTP(s) requests performed.

SMTP traffic

No SMTP traffic performed.

IRC traffic

No IRC requests performed.

No ICMP traffic performed.

CIF Results

No CIF Results

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Suricata HTTP

No Suricata HTTP

Sorry! No Suricata Extracted files.
Sorry! No dropped files.
Sorry! No process dumps.
Sorry! No process dumps.