General

  • Target

    mysql-installer-community-8.0.30.0.msi

  • Size

    448.3MB

  • Sample

    220907-l3zanabfh6

  • MD5

    c9cbd5d788f45605dae914392a1dfeea

  • SHA1

    49a2554ecc6364dfa180471b378f9081f5d7103e

  • SHA256

    5a2181b9875b0b025b7fc776d61947aed1884e1d752be6249fa9ce3541d22531

  • SHA512

    8267101af9c97c5e1426a16734d5f1e72610d105c185322d2160dfb45c91750b606ca246bae406ce45b0c9a654616c4e8825f3ef27f209dd2676937514645c5a

  • SSDEEP

    12582912:vqW8EYnIwBRyZuvLYSXb6trE25p5drTNDH8g7mNucQ8R:n8lBYKUSmtrE25p5dCg0a8R

Score
10/10

Malware Config

Extracted

Path

C:\Program Files\MySQL\MySQL Server 8.0\share\messages_to_clients.txt

Ransom Note
# Copyright (c) 2017, 2022, Oracle and/or its affiliates. # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License, version 2.0, # as published by the Free Software Foundation. # # This program is also distributed with certain software (including # but not limited to OpenSSL) that is licensed under separate terms, # as designated in a particular file or component or in included license # documentation. The authors of MySQL hereby grant you an additional # permission to link the program and your derivative works with the # separately licensed software that they have included with MySQL. # # Without limiting anything contained in the foregoing, this file, # which is part of C Driver for MySQL (Connector/C), is also subject to the # Universal FOSS Exception, version 1.0, a copy of which can be found at # http://oss.oracle.com/licenses/universal-foss-exception. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License, version 2.0, for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA ################################################################################ # DO NOT add messages for the error-log to this file; # they go in messages_to_error_log.txt in the same # directory as this file. # # This file is for messages the server sends to clients. # This explicitly does NOT include messages compiled into # the client-library (libmysql / C-API) itself. # # See the FAQ in errmsg_readme.txt in the # same directory as this file for more # information. ################################################################################ # If you add messages below that use a short language code that is not listed # here (as one of the bits after "="), the build will intentionally to catch # typos or different engineers using different short codes for the same language. # languages czech=cze latin2, danish=dan latin1, dutch=nla latin1, english=eng latin1, estonian=est latin7, french=fre latin1, german=ger latin1, greek=greek greek, hungarian=hun latin2, italian=ita latin1, japanese=jpn ujis, korean=kor euckr, norwegian-ny=norwegian-ny latin1, norwegian=nor latin1, polish=pol latin2, portuguese=por latin1, romanian=rum latin2, russian=rus koi8r, serbian=serbian cp1250, slovak=slo latin2, spanish=spa latin1, swedish=swe latin1, ukrainian=ukr koi8u, bulgarian=bgn cp1251; # The build process will use "eng" by default, but it harmless to repeat it here default-language eng ################################################################################ # Error numbers below 1000 are reserved for "global errors", that is to say, # error codes and messages provided by mysys that exist both in clients and # in the server. They are hard-coded in mysys/errors.cc + include/mysys_err.h # so we are not defining any messages here, but we do skip the the range to # prevent collisions with the server's error-numbers. # The client library's range CR_ERROR_FIRST..CR_ERROR_LAST may overlap with # with this, but is disjunct. ################################################################################ # See the FAQ at the end of the file for more information! ################################################################################ # Error numbers starting at 1000: server-to-client messages =< 5.6 ################################################################################ # The build process automatically starts with this offset # for messages sent from the server to clients. Setting it # again here is harmless. start-error-number 1000 OBSOLETE_ER_HASHCHK eng "hashchk" OBSOLETE_ER_NISAMCHK eng "isamchk" ER_NO cze "NE" dan "NEJ" nla "NEE" eng "NO" est "EI" fre "NON" ger "Nein" greek "ΟΧΙ" hun "NEM" kor "아니오" nor "NEI" norwegian-ny "NEI" pol "NIE" por "NÃO" rum "NU" rus "HET" serbian "NE" slo "NIE" ukr "HI" ER_YES cze "ANO" dan "JA" nla "JA" eng "YES" est "JAH" fre "OUI" ger "Ja" greek "ΝΑΙ" hun "IGEN" ita "SI" kor "예" nor "JA" norwegian-ny "JA" pol "TAK" por "SIM" rum "DA" rus "ДA" serbian "DA" slo "Áno" spa "SI" ukr "TAК" ER_CANT_CREATE_FILE cze "Nemohu vytvořit soubor '%-.200s' (chybový kód: %d - %s)" dan "Kan ikke oprette filen '%-.200s' (Fejlkode: %d - %s)" nla "Kan file '%-.200s' niet aanmaken (Errcode: %d - %s)" eng "Can't create file '%-.200s' (errno: %d - %s)" est "Ei suuda luua faili '%-.200s' (veakood: %d - %s)" fre "Ne peut créer le fichier '%-.200s' (Errcode: %d - %s)" ger "Kann Datei '%-.200s' nicht erzeugen (Fehler: %d - %s)" greek "Αδύνατη η δημιουργία του αρχείου '%-.200s' (κωδικός λάθους: %d - %s)" hun "A '%-.200s' file nem hozhato letre (hibakod: %d - %s)" ita "Impossibile creare il file '%-.200s' (errno: %d - %s)" jpn "ファイル '%-.200s' を作成できません。(エラー番号: %d - %s)" kor "화일 '%-.200s'를 만들지 못했습니다. (에러번호: %d - %s)" nor "Kan ikke opprette fila '%-.200s' (Feilkode: %d - %s)" norwegian-ny "Kan ikkje opprette fila '%-.200s' (Feilkode: %d - %s)" pol "Nie można stworzyć pliku '%-.200s' (Kod błędu: %d - %s)" por "Não pode criar o arquivo '%-.200s' (erro no. %d - %s)" rum "Nu pot sa creez fisierul '%-.200s' (Eroare: %d - %s)" rus "HeBoзMoжHo coздaTb фaйл '%-.200s' (oшибкa: %d - %s)" serbian "Ne mogu da kreiram file '%-.200s' (errno: %d - %s)" slo "Nemôžem vytvoriť súbor '%-.200s' (chybový kód: %d - %s)" spa "No puedo crear archivo '%-.200s' (Error: %d - %s)" swe "Kan inte skapa filen '%-.200s' (Felkod: %d - %s)" ukr "He Moжy cTBopиTи фaйл '%-.200s' (пoMилкa: %d - %s)" ER_CANT_CREATE_TABLE cze "Nemohu vytvořit tabulku '%-.200s' (chybový kód: %d - %s)" dan "Kan ikke oprette tabellen '%-.200s' (Fejlkode: %d - %s)" nla "Kan tabel '%-.200s' niet aanmaken (Errcode: %d - %s)" eng "Can't create table '%-.200s' (errno: %d - %s)" est "Ei suuda luua tabelit '%-.200s' (veakood: %d - %s)" fre "Ne peut créer la table '%-.200s' (Errcode: %d - %s)" ger "Kann Tabelle '%-.200s' nicht erzeugen (Fehler: %d - %s)" greek "Αδύνατη η δημιουργία του πίνακα '%-.200s' (κωδικός λάθους: %d - %s)" hun "A '%-.200s' tabla nem hozhato letre (hibakod: %d - %s)" ita "Impossibile creare la tabella '%-.200s' (errno: %d - %s)" jpn "表 '%-.200s' を作成できません。(エラー番号: %d - %s)" kor "테이블 '%-.200s'를 만들지 못했습니다. (에러번호: %d - %s)" nor "Kan ikke opprette tabellen '%-.200s' (Feilkode: %d - %s)" norwegian-ny "Kan ikkje opprette tabellen '%-.200s' (Feilkode: %d - %s)" pol "Nie można stworzyć tabeli '%-.200s' (Kod błędu: %d - %s)" por "Não pode criar a tabela '%-.200s' (erro no. %d - %s)" rum "Nu pot sa creez tabla '%-.200s' (Eroare: %d - %s)" rus "HeBoзMoжHo coздaTb Taблицy '%-.200s' (oшибкa: %d - %s)" serbian "Ne mogu da kreiram tabelu '%-.200s' (errno: %d - %s)" slo "Nemôžem vytvoriť tabuľku '%-.200s' (chybový kód: %d - %s)" spa "No puedo crear tabla '%-.200s' (Error: %d - %s)" swe "Kan inte skapa tabellen '%-.200s' (Felkod: %d - %s)" ukr "He Moжy cTBopиTи Taблицю '%-.200s' (пoMилкa: %d - %s)" ER_CANT_CREATE_DB cze "Nemohu vytvořit databázi '%-.192s' (chybový kód: %d - %s)" dan "Kan ikke oprette databasen '%-.192s' (Fejlkode: %d - %s)" nla "Kan database '%-.192s' niet aanmaken (Errcode: %d - %s)" eng "Can't create database '%-.192s' (errno: %d - %s)" est "Ei suuda luua andmebaasi '%-.192s' (veakood: %d - %s)" fre "Ne peut créer la base '%-.192s' (Erreur %d - %s)" ger "Kann Datenbank '%-.192s' nicht erzeugen (Fehler: %d - %s)" greek "Αδύνατη η δημιουργία της βάσης δεδομένων '%-.192s' (κωδικός λάθους: %d - %s)" hun "Az '%-.192s' adatbazis nem hozhato letre (hibakod: %d - %s)" ita "Impossibile creare il database '%-.192s' (errno: %d - %s)" jpn "データベース '%-.192s' を作成できません。(エラー番号: %d - %s)" kor "데이타베이스 '%-.192s'를 만들지 못했습니다.. (에러번호: %d - %s)" nor "Kan ikke opprette databasen '%-.192s' (Feilkode: %d - %s)" norwegian-ny "Kan ikkje opprette databasen '%-.192s' (Feilkode: %d - %s)" pol "Nie można stworzyć bazy danych '%-.192s' (Kod błędu: %d - %s)" por "Não pode criar o banco de dados '%-.192s' (erro no. %d - %s)" rum "Nu pot sa creez baza de date '%-.192s' (Eroare: %d - %s)" rus "HeBoзMoжHo coздaTb бaзy дaHHыx '%-.192s' (oшибкa: %d - %s)" serbian "Ne mogu da kreiram bazu '%-.192s' (errno: %d - %s)" slo "Nemôžem vytvoriť databázu '%-.192s' (chybový kód: %d - %s)" spa "No puedo crear base de datos '%-.192s' (Error: %d - %s)" swe "Kan inte skapa databasen '%-.192s' (Felkod: %d - %s)" ukr "He Moжy cTBopиTи бaзy дaHHиx '%-.192s' (пoMилкa: %d - %s)" ER_DB_CREATE_EXISTS cze "Nemohu vytvořit databázi '%-.192s'; databáze již existuje" dan "Kan ikke oprette databasen '%-.192s'; databasen eksisterer" nla "Kan database '%-.192s' niet aanmaken; database bestaat reeds" eng "Can't create database '%-.192s'; database exists" est "Ei suuda luua andmebaasi '%-.192s': andmebaas juba eksisteerib" fre "Ne peut créer la base '%-.192s'; elle existe déjà" ger "Kann Datenbank '%-.192s' nicht erzeugen. Datenbank existiert bereits" greek "Αδύνατη η δημιουργία της βάσης δεδομένων '%-.192s'; Η βάση δεδομένων υπάρχει ήδη" hun "Az '%-.192s' adatbazis nem hozhato letre Az adatbazis mar letezik" ita "Impossibile creare il database '%-.192s'; il database esiste" jpn "データベース '%-.192s' を作成できません。データベースはすでに存在します。" kor "데이타베이스 '%-.192s'를 만들지 못했습니다.. 데이타베이스가 존재함" nor "Kan ikke opprette databasen '%-.192s'; databasen eksisterer" norwegian-ny "Kan ikkje opprette databasen '%-.192s'; databasen eksisterer" pol "Nie można stworzyć bazy danych '%-.192s'; baza danych już istnieje" por "Não pode criar o banco de dados '%-.192s'; este banco de dados já existe" rum "Nu pot sa creez baza de date '%-.192s'; baza de date exista deja" rus "HeBoзMoжHo coздaTb бaзy дaHHыx '%-.192s'. Бaзa дaHHыx yжe cyщecTByeT" serbian "Ne mogu da kreiram bazu '%-.192s'; baza već postoji." slo "Nemôžem vytvoriť databázu '%-.192s'; databáza existuje" spa "No puedo crear base de datos '%-.192s'; la base de datos ya existe" swe "Databasen '%-.192s' existerar redan" ukr "He Moжy cTBopиTи бaзy дaHHиx '%-.192s'. Бaзa дaHHиx icHyє" ER_DB_DROP_EXISTS cze "Nemohu zrušit databázi '%-.192s', databáze neexistuje" dan "Kan ikke slette (droppe) '%-.192s'; databasen eksisterer ikke" nla "Kan database '%-.192s' niet verwijderen; database bestaat niet" eng "Can't drop database '%-.192s'; database doesn't exist" est "Ei suuda kustutada andmebaasi '%-.192s': andmebaasi ei eksisteeri" fre "Ne peut effacer la base '%-.192s'; elle n'existe pas" ger "Kann Datenbank '%-.192s' nicht löschen; Datenbank nicht vorhanden" greek "Αδύνατη η διαγραφή της βάσης δεδομένων '%-.192s'. Η βάση δεδομένων δεν υπάρχει" hun "A(z) '%-.192s' adatbazis nem szuntetheto meg. Az adatbazis nem letezik" ita "Impossibile cancellare '%-.192s'; il database non esiste" jpn "データベース '%-.192s' を削除できません。データベースは存在しません。" kor "데이타베이스 '%-.192s'를 제거하지 못했습니다. 데이타베이스가 존재하지 않음 " nor "Kan ikke fjerne (drop) '%-.192s'; databasen eksisterer ikke" norwegian-ny "Kan ikkje fjerne (drop) '%-.192s'; databasen eksisterer ikkje" pol "Nie można usun?ć bazy danych '%-.192s'; baza danych nie istnieje" por "Não pode eliminar o banco de dados '%-.192s'; este banco de dados não existe" rum "Nu pot sa drop baza de date '%-.192s'; baza da date este inexistenta" rus "HeBoзMoжHo yдaлиTb бaзy дaHHыx '%-.192s'. Taкoй бaзы дaHHыx HeT" serbian "Ne mogu da izbrišem bazu '%-.192s'; baza ne postoji." slo "Nemôžem zmazať databázu '%-.192s'; databáza neexistuje" spa "No puedo eliminar base de datos '%-.192s'; la base de datos no existe" swe "Kan inte radera databasen '%-.192s'; databasen finns inte" ukr "He Moжy BидaлиTи бaзy дaHHиx '%-.192s'. Бaзa дaHHиx He icHyє" OBSOLETE_ER_DB_DROP_DELETE cze "Chyba při rušení databáze (nemohu vymazat '%-.192s', chyba %d - %s)" dan "Fejl ved sletning (drop) af databasen (kan ikke slette '%-.192s', Fejlkode %d - %s)" nla "Fout bij verwijderen database (kan '%-.192s' niet verwijderen, Errcode: %d - %s)" eng "Error dropping database (can't delete '%-.192s', errno: %d - %s)" est "Viga andmebaasi kustutamisel (ei suuda kustutada faili '%-.192s', veakood: %d - %s)" fre "Ne peut effacer la base '%-.192s' (erreur %d - %s)" ger "Fehler beim Löschen der Datenbank ('%-.192s' kann nicht gelöscht werden, Fehler: %d - %s)" greek "Παρουσιάστηκε πρόβλημα κατά τη διαγραφή της βάσης δεδομένων (αδύνατη η διαγραφή '%-.192s', κωδικός λάθους: %d - %s)" hun "Adatbazis megszuntetesi hiba ('%-.192s' nem torolheto, hibakod: %d - %s)" ita "Errore durante la cancellazione del database (impossibile cancellare '%-.192s', errno: %d - %s)" jpn "データベース削除エラー ('%-.192s' を削除できません。エラー番号: %d - %s)" kor "데이타베이스 제거 에러('%-.192s'를 삭제할 수 없읍니다, 에러번호: %d - %s)" nor "Feil ved fjerning (drop) av databasen (kan ikke slette '%-.192s', feil %d - %s)" norwegian-ny "Feil ved fjerning (drop) av databasen (kan ikkje slette '%-.192s', feil %d - %s)" pol "Bł?d podczas usuwania bazy danych (nie można usun?ć '%-.192s', bł?d %d - %s)" por "Erro ao eliminar banco de dados (não pode eliminar '%-.192s' - erro no. %d - %s)" rum "Eroare dropuind baza de date (nu pot sa sterg '%-.192s', Eroare: %d - %s)" rus "Oшибкa пpи yдaлeHии бaзы дaHHыx (HeBoзMoжHo yдaлиTb '%-.192s', oшибкa: %d - %s)" serbian "Ne mogu da izbrišem bazu (ne mogu da izbrišem '%-.192s', errno: %d - %s)" slo "Chyba pri mazaní databázy (nemôžem zmazať '%-.192s', chybový kód: %d - %s)" spa "Error eliminando la base de datos(no puedo borrar '%-.192s', error %d - %s)" swe "Fel vid radering av databasen (Kan inte radera '%-.192s'. Felkod: %d - %s)" ukr "He Moжy BидaлиTи бaзy дaHHиx (He Moжy BидaлиTи '%-.192s', пoMилкa: %d - %s)" ER_DB_DROP_RMDIR cze "Chyba při rušení databáze (nemohu vymazat adresář '%-.192s', chyba %d -
URLs

http://oss.oracle.com/licenses/universal-foss-exception

Extracted

Path

C:\Program Files\MySQL\MySQL Server 8.0\share\messages_to_error_log.txt

Ransom Note
# Copyright (c) 2017, 2022, Oracle and/or its affiliates. # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License, version 2.0, # as published by the Free Software Foundation. # # This program is also distributed with certain software (including # but not limited to OpenSSL) that is licensed under separate terms, # as designated in a particular file or component or in included license # documentation. The authors of MySQL hereby grant you an additional # permission to link the program and your derivative works with the # separately licensed software that they have included with MySQL. # # Without limiting anything contained in the foregoing, this file, # which is part of C Driver for MySQL (Connector/C), is also subject to the # Universal FOSS Exception, version 1.0, a copy of which can be found at # http://oss.oracle.com/licenses/universal-foss-exception. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License, version 2.0, for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA ################################################################################ # DO NOT add server-to-client messages here; # they go in messages_to_clients.txt # in the same directory as this file. # # This file is for messages intended for the error log only. # # See the FAQ in errmsg_readme.txt in the # same directory as this file for more # information. ################################################################################ # "languages" and "default-language" directives should not be set in this # file; their values are carried over from messages_to_clients.txt. ################################################################################ # # Start of 8.0 error messages (error log). # # The build process automatically starts with this offset # for messages intended for the error-log. Setting it again # here would be harmless; changing it would not as this # offset is mentioned in the documentation and #defined in # the source: # start-error-number 10000 ER_PARSER_TRACE XX999 eng "Parser saw: %s" ER_BOOTSTRAP_CANT_THREAD eng "Can't create thread to handle bootstrap (errno: %d)" ER_TRIGGER_INVALID_VALUE eng "Trigger for table '%s'.'%s': invalid %s value (%s)." ER_OPT_WRONG_TREE eng "Wrong tree: %s" ER_DD_FAILSAFE eng "Error: Invalid %s" ER_DD_NO_WRITES_NO_REPOPULATION eng "Skip re-populating collations and character sets tables in %s%sread-only mode." ER_DD_VERSION_FOUND eng "Using data dictionary with version '%d'." ER_DD_VERSION_INSTALLED eng "Installed data dictionary with version %d" ER_DD_VERSION_UNSUPPORTED eng "Data Dictionary version '%d' not supported." OBSOLETE_ER_LOG_SYSLOG_FACILITY_FAIL eng "Failed to set syslog facility to \"%s\", setting to \"%s\" (%d) instead." ER_LOG_SYSLOG_CANNOT_OPEN eng "Cannot open %s; check privileges, or remove syseventlog from --log-error-services!" ER_LOG_SLOW_CANNOT_OPEN eng " either restart the query logging by using \"SET GLOBAL SLOW_QUERY_LOG=ON\" or" ER_LOG_GENERAL_CANNOT_OPEN eng " either restart the query logging by using \"SET GLOBAL GENERAL_LOG=ON\" or" ER_LOG_CANNOT_WRITE eng "Failed to write to %s: %s" ER_RPL_ZOMBIE_ENCOUNTERED eng "While initializing dump thread for slave with %s <%s>, found a zombie dump thread with the same %s. Master is killing the zombie dump thread(%u)." ER_RPL_GTID_TABLE_CANNOT_OPEN eng "Gtid table is not ready to be used. Table '%s.%s' cannot be opened." ER_SYSTEM_SCHEMA_NOT_FOUND eng "System schema directory does not exist." ER_DD_INIT_UPGRADE_FAILED eng "Error in initializing dictionary, upgrade will do a cleanup and exit" ER_VIEW_UNKNOWN_CHARSET_OR_COLLATION eng "View '%s'.'%s': unknown charset name and/or collation name (client: '%s'; connection: '%s')." ER_DD_VIEW_CANT_ALLOC_CHARSET eng "Error in allocating memory for character set name for view %s.%s." ER_DD_INIT_FAILED eng "Data Dictionary initialization failed." ER_DD_UPDATING_PLUGIN_MD_FAILED eng "Failed to update plugin metadata in dictionary tables." ER_DD_POPULATING_TABLES_FAILED eng "Failed to Populate DD tables." ER_DD_VIEW_CANT_CREATE eng "Error in Creating View %s.%s" ER_DD_METADATA_NOT_FOUND eng "Unable to start server. Cannot find the meta data for data dictionary table '%s'." ER_DD_CACHE_NOT_EMPTY_AT_SHUTDOWN eng "Dictionary cache not empty at shutdown." ER_DD_OBJECT_REMAINS eng "Dictionary objects used but not released." ER_DD_OBJECT_REMAINS_IN_RELEASER eng "Dictionary objects left in default releaser." ER_DD_OBJECT_RELEASER_REMAINS eng "Dictionary object auto releaser not deleted" ER_DD_CANT_GET_OBJECT_KEY eng "Error: Unable to create primary object key" ER_DD_CANT_CREATE_OBJECT_KEY eng "Error: Unable to create object key" ER_CANT_CREATE_HANDLE_MGR_THREAD eng "Can't create handle_manager thread (errno= %d)" ER_RPL_REPO_HAS_GAPS eng "It is not possible to change the type of the relay log's repository because there are workers' repositories with gaps. Please, fix the gaps first before doing such change." ER_INVALID_VALUE_FOR_ENFORCE_GTID_CONSISTENCY eng "option 'enforce-gtid-consistency': value '%s' was not recognized. Setting enforce-gtid-consistency to OFF." ER_CHANGED_ENFORCE_GTID_CONSISTENCY eng "Changed ENFORCE_GTID_CONSISTENCY from %s to %s." ER_CHANGED_GTID_MODE eng "Changed GTID_MODE from %s to %s." ER_DISABLED_STORAGE_ENGINE_AS_DEFAULT eng "%s is set to a disabled storage engine %s." ER_DEBUG_SYNC_HIT eng "Debug sync points hit: %22s" ER_DEBUG_SYNC_EXECUTED eng "Debug sync points executed: %22s" ER_DEBUG_SYNC_THREAD_MAX eng "Debug sync points max active per thread: %22s" ER_DEBUG_SYNC_OOM eng "Debug Sync Facility disabled due to lack of memory." ER_CANT_INIT_TC_LOG eng "Can't init tc log" ER_EVENT_CANT_INIT_QUEUE eng "Event Scheduler: Can't initialize the execution queue" ER_EVENT_PURGING_QUEUE eng "Event Scheduler: Purging the queue. %u events" ER_EVENT_LAST_EXECUTION eng "Event Scheduler: Last execution of %s.%s. %s" ER_EVENT_MESSAGE_STACK eng "%*s" ER_EVENT_EXECUTION_FAILED eng "Event Scheduler: [%s].[%s.%s] event execution failed." ER_CANT_INIT_SCHEDULER_THREAD eng "Event Scheduler: Cannot initialize the scheduler thread" ER_SCHEDULER_STOPPED eng "Event Scheduler: Stopped" ER_CANT_CREATE_SCHEDULER_THREAD eng "Event scheduler: Failed to start scheduler, Can not create thread for event scheduler (errno=%d)" ER_SCHEDULER_WAITING eng "Event Scheduler: Waiting for the scheduler thread to reply" ER_SCHEDULER_STARTED eng "Event Scheduler: scheduler thread started with id %u" ER_SCHEDULER_STOPPING_FAILED_TO_GET_EVENT eng "Event Scheduler: Serious error during getting next event to execute. Stopping" ER_SCHEDULER_STOPPING_FAILED_TO_CREATE_WORKER eng "Event_scheduler::execute_top: Can not create event worker thread (errno=%d). Stopping event scheduler" ER_SCHEDULER_KILLING eng "Event Scheduler: Killing the scheduler thread, thread id %u" ER_UNABLE_TO_RESOLVE_IP eng "IP address '%s' could not be resolved: %s" ER_UNABLE_TO_RESOLVE_HOSTNAME eng "Host name '%s' could not be resolved: %s" ER_HOSTNAME_RESEMBLES_IPV4 eng "IP address '%s' has been resolved to the host name '%s', which resembles IPv4-address itself." ER_HOSTNAME_DOESNT_RESOLVE_TO eng "Hostname '%s' does not resolve to '%s'." ER_ADDRESSES_FOR_HOSTNAME_HEADER eng "Hostname '%s' has the following IP addresses:" ER_ADDRESSES_FOR_HOSTNAME_LIST_ITEM eng " - %s" ER_TRG_WITHOUT_DEFINER eng "Definer clause is missing in Trigger of Table %s. Rebuild Trigger to fix definer." ER_TRG_NO_CLIENT_CHARSET eng "Client character set is missing for trigger of table %s. Using default character set." ER_PARSING_VIEW eng "Error in parsing view %s.%s" ER_COMPONENTS_INFRASTRUCTURE_BOOTSTRAP eng "Failed to bootstrap components infrastructure." ER_COMPONENTS_INFRASTRUCTURE_SHUTDOWN eng "Failed to shutdown components infrastructure." ER_COMPONENTS_PERSIST_LOADER_BOOTSTRAP eng "Failed to bootstrap persistent components loader." ER_DEPART_WITH_GRACE eng "Giving %d client threads a chance to die gracefully" ER_CA_SELF_SIGNED eng "CA certificate %s is self signed." ER_SSL_LIBRARY_ERROR eng "Failed to set up SSL because of the following SSL library error: %s" ER_NO_THD_NO_UUID eng "Failed to generate a server UUID because it is failed to allocate the THD." ER_UUID_SALT eng "Salting uuid generator variables, current_pid: %lu, server_start_time: %lu, bytes_sent: %llu, " ER_UUID_IS eng "Generated uuid: '%s', server_start_time: %lu, bytes_sent: %llu" ER_UUID_INVALID eng "The server_uuid stored in auto.cnf file is not a valid UUID." ER_UUID_SCRUB eng "Garbage characters found at the end of the server_uuid value in auto.cnf file. It should be of length '%d' (UUID_LENGTH). Clear it and restart the server. " ER_CREATING_NEW_UUID eng "No existing UUID has been found, so we assume that this is the first time that this server has been started. Generating a new UUID: %s." ER_CANT_CREATE_UUID eng "Initialization of the server's UUID failed because it could not be read from the auto.cnf file. If this is a new server, the initialization failed because it was not possible to generate a new UUID." ER_UNKNOWN_UNSUPPORTED_STORAGE_ENGINE eng "Unknown/unsupported storage engine: %s" ER_SECURE_AUTH_VALUE_UNSUPPORTED eng "Unsupported value 0 for secure-auth" ER_INVALID_INSTRUMENT eng "Invalid instrument name or value for performance_schema_instrument '%s'", ER_INNODB_MANDATORY eng "The use of InnoDB is mandatory since MySQL 5.7. The former options like '--innodb=0/1/OFF/ON' or '--skip-innodb' are ignored." OBSOLETE_ER_INNODB_CANNOT_BE_IGNORED eng "ignore-builtin-innodb is ignored and will be removed in future releases." OBSOLETE_ER_OLD_PASSWORDS_NO_MIDDLE_GROUND eng "Invalid old_passwords mode: 1. Valid values are 2 and 0" ER_VERBOSE_REQUIRES_HELP eng "--verbose is for use with --help; did you mean --log-error-verbosity?" ER_POINTLESS_WITHOUT_SLOWLOG eng "options --log-slow-admin-statements, --log-queries-not-using-indexes and --log-slow-replica-statements have no effect if --slow-query-log is not set" ER_WASTEFUL_NET_BUFFER_SIZE eng "net_buffer_length (%lu) is set to be larger than max_allowed_packet (%lu). Please rectify." ER_DEPRECATED_TIMESTAMP_IMPLICIT_DEFAULTS eng "TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details)." ER_FT_BOOL_SYNTAX_INVALID eng "Invalid ft-boolean-syntax string: %s" ER_CREDENTIALLESS_AUTO_USER_BAD eng "'NO_AUTO_CREATE_USER' sql mode was not set." ER_CONNECTION_HANDLING_OOM eng "Could not allocate memory for connection handling" ER_THREAD_HANDLING_OOM eng "Could not allocate memory for thread handling" ER_CANT_CREATE_TEST_FILE eng "Can't create test file %s" ER_CANT_CREATE_PID_FILE eng "Can't start server: can't create PID file: %s" ER_CANT_REMOVE_PID_FILE eng "Unable to delete pid file: %s" ER_CANT_CREATE_SHUTDOWN_THREAD eng "Can't create thread to handle shutdown requests (errno= %d)" ER_SEC_FILE_PRIV_CANT_ACCESS_DIR eng "Failed to access directory for --secure-file-priv. Please make sure that directory exists and is accessible by MySQL Server. Supplied value : %s" ER_SEC_FILE_PRIV_IGNORED eng "Ignoring --secure-file-priv value as server is running with --initialize(-insecure)." ER_SEC_FILE_PRIV_EMPTY eng "Insecure configuration for --secure-file-priv: Current value does not restrict location of generated files. Consider setting it to a valid, non-empty path." ER_SEC_FILE_PRIV_NULL eng "--secure-file-priv is set to NULL. Operations related to importing and exporting data are disabled" ER_SEC_FILE_PRIV_DIRECTORY_INSECURE eng "Insecure configuration for --secure-file-priv: %s is accessible through --secure-file-priv. Consider choosing a different directory." ER_SEC_FILE_PRIV_CANT_STAT eng "Failed to get stat for directory pointed out by --secure-file-priv" ER_SEC_FILE_PRIV_DIRECTORY_PERMISSIONS eng "Insecure configuration for --secure-file-priv: Location is accessible to all OS users. Consider choosing a different directory." ER_SEC_FILE_PRIV_ARGUMENT_TOO_LONG eng "Value for --secure-file-priv is longer than maximum limit of %d" ER_CANT_CREATE_NAMED_PIPES_THREAD eng "Can't create thread to handle named pipes (errno= %d)" ER_CANT_CREATE_TCPIP_THREAD eng "Can't create thread to handle TCP/IP (errno= %d)" ER_CANT_CREATE_SHM_THREAD eng "Can't create thread to handle shared memory (errno= %d)" ER_CANT_CREATE_INTERRUPT_THREAD eng "Can't create interrupt-thread (error %d, errno: %d)" ER_WRITABLE_CONFIG_REMOVED eng "World-writable config file '%s' has been removed." ER_CORE_VALUES eng "setrlimit could not change the size of core files to 'infinity'; We may not be able to generate a core file on signals" ER_WRONG_DATETIME_SPEC eng "Wrong date/time format specifier: %s" ER_RPL_BINLOG_FILTERS_OOM eng "Could not allocate replication and binlog filters: %s" ER_KEYCACHE_OOM eng "Cannot allocate the keycache" ER_CONFIRMING_THE_FUTURE eng "Current time has got past year 2038. Validating current time with %d iterations before initiating the normal server shutdown process." ER_BACK_IN_TIME eng "Iteration %d: Obtained valid current time from system" ER_FUTURE_DATE eng "Iteration %d: Current time obtained from system is greater than 2038" ER_UNSUPPORTED_DATE eng "This MySQL server doesn't support dates later then 2038" ER_STARTING_AS eng "%s (mysqld %s) starting as process %lu" ER_SHUTTING_DOWN_SLAVE_THREADS eng "Shutting down slave threads" ER_DISCONNECTING_REMAINING_CLIENTS eng "Forcefully disconnecting %d remaining clients" ER_ABORTING eng "Aborting" ER_BINLOG_END eng "Binlog end" ER_CALL_ME_LOCALHOST eng "gethostname failed, using '%s' as hostname" ER_USER_REQUIRES_ROOT eng "One can only use the --user switch if running as root" ER_REALLY_RUN_AS_ROOT eng "Fatal error: Please read \"Security\" section of the manual to find out how to run mysqld as root!" ER_USER_WHAT_USER eng "Fatal error: Can't change to run as user '%s' ; Please check that the user exists!" ER_TRANSPORTS_WHAT_TRANSPORTS eng "Server is started with --require-secure-transport=ON but no secure transports (SSL or Shared Memory) are configured." ER_FAIL_SETGID eng "setgid: %s" ER_FAIL_SETUID eng "setuid: %s" ER_FAIL_SETREGID eng "setregid: %s" ER_FAIL_SETREUID eng "setreuid: %s" ER_FAIL_CHROOT eng "chroot: %s" ER_WIN_LISTEN_BUT_HOW eng "TCP/IP, --shared-memory, or --named-pipe should be configured on NT OS" ER_NOT_RIGHT_NOW eng "CTRL-C ignored during startup" ER_FIXING_CLIENT_CHARSET eng "'%s' can not be used as client character set. '%s' will be used as default client character set." ER_OOM eng "Out of memory" ER_FAILED_TO_LOCK_MEM eng "Failed to lock memory. Errno: %d" ER_MYINIT_FAILED eng "my_init() failed." ER_BEG_INITFILE eng "Execution of init_file \'%s\' started." ER_END_INITFILE eng "Execution of init_file \'%s\' ended." ER_CHANGED_MAX_OPEN_FILES eng "Changed limits: max_open_files: %lu (requested %lu)" ER_CANT_INCREASE_MAX_OPEN_FILES eng "Could not increase number of max_open_files to more than %lu (request: %lu)" ER_CHANGED_MAX_CONNECTIONS eng "Changed limits: max_connections: %lu (requested %lu)" ER_CHANGED_TABLE_OPEN_CACHE eng "Changed limits: table_open_cache: %lu (requested %lu)" ER_THE_USER_ABIDES eng "Ignoring user change to '%s' because the user was set to '%s' earlier on the command line" ER_RPL_CANT_ADD_DO_TABLE eng "Could not add do table rule '%s'!" ER_RPL_CANT_ADD_IGNORE_TABLE eng "Could not add ignore table rule '%s'!" ER_TRACK_VARIABLES_BOGUS eng "The variable session_track_system_variables either has duplicate values or invalid values." ER_EXCESS_ARGUMENTS
URLs

http://oss.oracle.com/licenses/universal-foss-exception

http://bugs.mysql.com"

Targets

    • Target

      mysql-installer-community-8.0.30.0.msi

    • Size

      448.3MB

    • MD5

      c9cbd5d788f45605dae914392a1dfeea

    • SHA1

      49a2554ecc6364dfa180471b378f9081f5d7103e

    • SHA256

      5a2181b9875b0b025b7fc776d61947aed1884e1d752be6249fa9ce3541d22531

    • SHA512

      8267101af9c97c5e1426a16734d5f1e72610d105c185322d2160dfb45c91750b606ca246bae406ce45b0c9a654616c4e8825f3ef27f209dd2676937514645c5a

    • SSDEEP

      12582912:vqW8EYnIwBRyZuvLYSXb6trE25p5drTNDH8g7mNucQ8R:n8lBYKUSmtrE25p5dCg0a8R

    Score
    10/10
    • Blocklisted process makes network request

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks