5e5ba61531d74e45b11cadb79e7394a1

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2019-Jul-10 18:09:25
Detected languages English - United States
TLS Callbacks 2 callback(s) detected.
Debug artifacts Embedded COFF debugging symbols
CompanyName SQLite Development Team
FileDescription SQLite is a software library that implements a self-contained, serverless, zero-configuration, transactional SQL database engine.
FileVersion 3.29.0
InternalName sqlite3
LegalCopyright http://www.sqlite.org/copyright.html
ProductName SQLite
ProductVersion 3.29.0
SourceId 2019-07-10 17:32:03 fc82b73eaac8b36950e527f12c4b5dc1e147e6f4ad2217ae43ad82882a88bfa6

Plugin Output

Suspicious The PE is possibly packed. Unusual section name found: /4
Unusual section name found: /19
Unusual section name found: /31
Unusual section name found: /45
Unusual section name found: /57
Unusual section name found: /70
Unusual section name found: /81
Unusual section name found: /92
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryA
  • LoadLibraryW
Can create temporary files:
  • CreateFileA
  • CreateFileW
  • GetTempPathA
  • GetTempPathW
Suspicious The file contains overlay data. 127099 bytes of data starting at offset 0xc3200.
Safe VirusTotal score: 0/70 (Scanned on 2019-07-31 20:22:19) All the AVs think this file is safe.

Hashes

MD5 5e5ba61531d74e45b11cadb79e7394a1
SHA1 677224e14aac9dd35f367d5eb1704b36e69356b8
SHA256 99e91ae250c955bd403ec1a2321d6b11fcb715bdcc7cb3f63ffb46b349afde5c
SHA3 8e8f27d05086e06b650d795f355ad8fd00b781e937b17d521c4be0748850d8d8
SSDeep 24576:oI0H1fcKoDde/KBkI/njv7UU5vrVGFWG/Pi:obaRdeyBkI/jjUU5vJ8S
Imports Hash 596770193a7f877d586dad91b1eeebc1

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 18
TimeDateStamp 2019-Jul-10 18:09:25
PointerToSymbolTable 0xc3200
NumberOfSymbols 4136
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 2.0
SizeOfCode 0x97600
SizeOfInitializedData 0xb2600
SizeOfUninitializedData 0xa00
AddressOfEntryPoint 0x00001400 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x99000
ImageBase 0x61e00000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 1.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0xce000
SizeOfHeaders 0x600
Checksum 0xf0844
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
SizeofStackReserve 0x200000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 b276d5b4c161967c686af51a04ca2485
SHA1 499e9a377a8a5ec57d44a9ac1b2c0f2f3040233a
SHA256 759824778d33d2b18e325724fa727b9b8446db481f381c49533b5d6b1f6a0bcc
SHA3 5dc39ad9b406a886ba7e05f21f24e429cd002153aea56b03e4906a794b7b81f7
VirtualSize 0x97480
VirtualAddress 0x1000
SizeOfRawData 0x97600
PointerToRawData 0x600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_2048BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_8BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.40906

.data

MD5 37f93268bae8f4ab0ed8a01e1e96068a
SHA1 c35388b927adb6a281dcd4d37c96c12d67b217ca
SHA256 eb9bbb68c3c597c962b1024f6a9bf8da33277f6e5151621e182d769fa352b567
SHA3 10d37f277f20c0a44856a076e5315585b33f8cb75722ee4956f69111a04062e9
VirtualSize 0x1c7c
VirtualAddress 0x99000
SizeOfRawData 0x1e00
PointerToRawData 0x97c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_2048BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_8BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.63581

.rdata

MD5 bc6dc711f24c289ab87a6b6c78cb6ee7
SHA1 453711bca95da1b51a3e826b34848ce91eef32ea
SHA256 77e5f1b9a445323cbb922af17e9db549bd622dd147b8b1b259e8eb938813e020
SHA3 0de7b45fbd5dbd4ef1fc7cd576569ad71ea0c710ac187646bb1aa26375d73cc5
VirtualSize 0x123b4
VirtualAddress 0x9b000
SizeOfRawData 0x12400
PointerToRawData 0x99a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_2048BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_8BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.41705

.bss

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x828
VirtualAddress 0xae000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_2048BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_8BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata

MD5 3b45ad6c03afb7f0f999de37b897338b
SHA1 dc00d864ac35215d88444cfa0dc47b9162a3f116
SHA256 8f15494530913abdb6bb6df47c4c8c05c7621f46e41b6ad29deafc56a1a65098
SHA3 d21e364ec404516a221cc532ffa65a51a2b028eea6d8e3f1032fa329798bfa71
VirtualSize 0x20df
VirtualAddress 0xaf000
SizeOfRawData 0x2200
PointerToRawData 0xabe00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.33453

.idata

MD5 f5b99fc7bc46b094b565a81607cfdf74
SHA1 e85755256cf45619b62647ec4f95a8ba36a72da5
SHA256 1f7a4d7141e7caf11ac56c2d7f941ac9ae4521577f190b827d7987c8f22db517
SHA3 79409c25334387429d5f39aaee586846282d673bf75a04623b19d0709c6ef775
VirtualSize 0xc48
VirtualAddress 0xb2000
SizeOfRawData 0xe00
PointerToRawData 0xae000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.8872

.CRT

MD5 889f08652337aecdc62093d0b56eef3e
SHA1 76148600ceced771eff3f7cf9cae23c39781ddcb
SHA256 2a85ed42f19338b2cb9326943ee946fea92dc7b22d4cb16a8a4c098228ca12cc
SHA3 6ff4804c65419eec044a8769c97078cf61da732fdbfce635eb0ab136e8408973
VirtualSize 0x2c
VirtualAddress 0xb3000
SizeOfRawData 0x200
PointerToRawData 0xaee00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.20692

.tls

MD5 33cf63a4b50126b6c0a05bd2d5ea50b0
SHA1 63d316b37c56d51b6fc83e83fb4c74b36b5dad61
SHA256 78bce3ade22d4c78282d5e44d2b7c2a0dee626cd89ed15f8ecb513865409340a
SHA3 f82064aabba7b2616c11a53f10ecc91ae7b3d801614479ac8a89c1ede28ed0eb
VirtualSize 0x20
VirtualAddress 0xb4000
SizeOfRawData 0x200
PointerToRawData 0xaf000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.276495

.rsrc

MD5 f8632036c10cd4ce6e5cfcfab1492390
SHA1 c7a0a08f43e764d75f80b04f450ed17b9da04fb2
SHA256 5f7dedc333b2d4eda8361febaa7a20c4c20edd4a02903d211e2f9e7649015ee7
SHA3 13cec2bc50d97d6631713560f8414dac3c7babc7474a13bafb938c67960e1f09
VirtualSize 0x4a8
VirtualAddress 0xb5000
SizeOfRawData 0x600
PointerToRawData 0xaf200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.83181

.reloc

MD5 e5ab349bbccbfdbf41695087dc63570c
SHA1 7aa67ce11289a7dfc37c8a06c456bf7fcc67f4de
SHA256 39ebf6e7f4ff7265f25f6838bac415b6d2775b2b8ee90727d66bad8a87fa12da
SHA3 1bc329e8937b0f4463f76156b9841696252258a15555c64209752df41ea6f88d
VirtualSize 0x33e4
VirtualAddress 0xb6000
SizeOfRawData 0x3400
PointerToRawData 0xaf800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.5338

/4

MD5 55af68b6b604a393fe1c5d0165767090
SHA1 f4bc098e0ffddea78c3b72230a34f2863ee254ad
SHA256 f26bd63aa408d4f47349f4d48adcedb851dd49619854c824c0513e800d962c86
SHA3 0c43d1450f23c43534a2bd17a2621df8fa1cd4b4fbba007356a0ecae73025357
VirtualSize 0x2d8
VirtualAddress 0xba000
SizeOfRawData 0x400
PointerToRawData 0xb2c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_2048BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_8BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 1.86851

/19

MD5 61e60b770d55bf6a15888c35fdd1d9e0
SHA1 c0a7d448a8519b8d3d3946b0753f2cf352fe20cf
SHA256 7cc18a03f99410b3bb9aed363c317a750e8d70f72f0e22e13d99f6e2946e1e7c
SHA3 f8687c6a9a94bc1901022078ca8477f69d95ea95d42d9ae9d95c8c8170d9c2ee
VirtualSize 0x98d8
VirtualAddress 0xbb000
SizeOfRawData 0x9a00
PointerToRawData 0xb3000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.07015

/31

MD5 753db644544111f9c503cc0526862547
SHA1 da68d81b4467cbc18e889087150cb09d661b979b
SHA256 385c2d736b7847f1a976b2911326abcffd28530a695ed2f422fb74d91cd9b3ce
SHA3 f0f2964c20539adabf52282d62cc145f7b53068ef4af8ac2b265635891827248
VirtualSize 0x1af5
VirtualAddress 0xc5000
SizeOfRawData 0x1c00
PointerToRawData 0xbca00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.55552

/45

MD5 286f1b05986cd5e7978e4251f7e51c48
SHA1 505475f2d3885d2c6d207e9fe1f0250cddfa1366
SHA256 b50fedaef19e9816a0d31e9e5392ffbd586a9d06ecd60f7d8c8ba9c5938b8a3c
SHA3 e45a4e798c19f507cd7778134ac98866dd98d6f9ed0d66d78a5b1f25a8532d54
VirtualSize 0x1a80
VirtualAddress 0xc7000
SizeOfRawData 0x1c00
PointerToRawData 0xbe600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.59521

/57

MD5 59baaff98a46fbf05fcf177417b08c30
SHA1 806350a45d2e9d507b05fb20b94467554127acca
SHA256 887f2f37f1a0e8a6cbd3fa784a1304f8e4f7ee3180545d809eb37faa9dc51c00
SHA3 3f4673418d62fdb637b8a75dee7e2d602e90f655eef68cfb8f1645b2e89e6757
VirtualSize 0x8bc
VirtualAddress 0xc9000
SizeOfRawData 0xa00
PointerToRawData 0xc0200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_2BYTES
IMAGE_SCN_ALIGN_32BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_512BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_8192BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.56475

/70

MD5 5d378e69cc09af8f71cb4aab401a1677
SHA1 989af42e451066a3af5634a8f53c055fb151b41a
SHA256 4b5c338de7ede840e1b9e159d416b6b3aa280754c7fc893ea0a5af2d20b68ced
SHA3 099bb03e497d721437c8c4a2a6143cfe9f0c902d53dfbc8eac496ab93941c454
VirtualSize 0x269
VirtualAddress 0xca000
SizeOfRawData 0x400
PointerToRawData 0xc0c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 3.5575

/81

MD5 40255577f476db168db99d73923ba8e8
SHA1 12bbda62e3c683bf19b00c002cf4aa7dee37e287
SHA256 e1ab7004449c804da787bddc17dbf7d56dd8aa3967418fd92a7fd7f152461731
SHA3 052d47a07bbde0c4f50a8c404968eefec1bdf96241bbb60eb5fd6c742e884b7c
VirtualSize 0x1cd3
VirtualAddress 0xcb000
SizeOfRawData 0x1e00
PointerToRawData 0xc1000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 3.28919

/92

MD5 b357f131638074799bae955708dbf875
SHA1 abe6f39dd1499802e5f3ef3faa4bacfed9d92edd
SHA256 8346436664f144eb9e56870d441eb714b0e571ef133684830ecbbd2961d076ed
SHA3 b905c60beb02b2947b41f6e276d893fa21518c608f72e8f7c45e85cf6dde5428
VirtualSize 0x290
VirtualAddress 0xcd000
SizeOfRawData 0x400
PointerToRawData 0xc2e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_ALIGN_1024BYTES
IMAGE_SCN_ALIGN_16BYTES
IMAGE_SCN_ALIGN_1BYTES
IMAGE_SCN_ALIGN_256BYTES
IMAGE_SCN_ALIGN_4096BYTES
IMAGE_SCN_ALIGN_4BYTES
IMAGE_SCN_ALIGN_64BYTES
IMAGE_SCN_ALIGN_MASK
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 1.76452

Imports

KERNEL32.dll AreFileApisANSI
CloseHandle
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexW
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitializeCriticalSection
InterlockedCompareExchange
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TerminateProcess
TlsGetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile
msvcrt.dll __dllonexit
__setusermatherr
_amsg_exit
_beginthreadex
_endthreadex
_errno
_initterm
_iob
_lock
_onexit
localtime
calloc
fprintf
free
fwrite
malloc
memcmp
memmove
qsort
realloc
strcmp
strcspn
strlen
strncmp
strrchr
_unlock
abort
vfprintf

Delayed Imports

sqlite3_aggregate_context

Ordinal 1
Address 0x1d3cb

sqlite3_aggregate_count

Ordinal 2
Address 0x3413

sqlite3_auto_extension

Ordinal 3
Address 0x92415

sqlite3_backup_finish

Ordinal 4
Address 0x49ce9

sqlite3_backup_init

Ordinal 5
Address 0x4983d

sqlite3_backup_pagecount

Ordinal 6
Address 0x2f71

sqlite3_backup_remaining

Ordinal 7
Address 0x2f66

sqlite3_backup_step

Ordinal 8
Address 0x478bd

sqlite3_bind_blob

Ordinal 9
Address 0x256c1

sqlite3_bind_blob64

Ordinal 10
Address 0x256e8

sqlite3_bind_double

Ordinal 11
Address 0x257ea

sqlite3_bind_int

Ordinal 12
Address 0x258b2

sqlite3_bind_int64

Ordinal 13
Address 0x25863

sqlite3_bind_null

Ordinal 14
Address 0x258d8

sqlite3_bind_parameter_count

Ordinal 15
Address 0x3451

sqlite3_bind_parameter_index

Ordinal 16
Address 0x14411

sqlite3_bind_parameter_name

Ordinal 17
Address 0x3463

sqlite3_bind_pointer

Ordinal 18
Address 0x25909

sqlite3_bind_text

Ordinal 19
Address 0x2572f

sqlite3_bind_text16

Ordinal 20
Address 0x257c3

sqlite3_bind_text64

Ordinal 21
Address 0x25756

sqlite3_bind_value

Ordinal 22
Address 0x259f3

sqlite3_bind_zeroblob

Ordinal 23
Address 0x25986

sqlite3_bind_zeroblob64

Ordinal 24
Address 0x25ada

sqlite3_blob_bytes

Ordinal 25
Address 0x3530

sqlite3_blob_close

Ordinal 26
Address 0x4aef8

sqlite3_blob_open

Ordinal 27
Address 0x7f22c

sqlite3_blob_read

Ordinal 28
Address 0x4ca15

sqlite3_blob_reopen

Ordinal 29
Address 0x7f99b

sqlite3_blob_write

Ordinal 30
Address 0x4d7e6

sqlite3_busy_handler

Ordinal 31
Address 0x5511

sqlite3_busy_timeout

Ordinal 32
Address 0xc2bc

sqlite3_cancel_auto_extension

Ordinal 33
Address 0x41b6

sqlite3_changes

Ordinal 34
Address 0x542b

sqlite3_clear_bindings

Ordinal 35
Address 0x1073d

sqlite3_close

Ordinal 36
Address 0x49ee3

sqlite3_close_v2

Ordinal 37
Address 0x49ef1

sqlite3_collation_needed

Ordinal 38
Address 0x5833

sqlite3_collation_needed16

Ordinal 39
Address 0x5877

sqlite3_column_blob

Ordinal 40
Address 0x2608e

sqlite3_column_bytes

Ordinal 41
Address 0x25d56

sqlite3_column_bytes16

Ordinal 42
Address 0x25e2a

sqlite3_column_count

Ordinal 43
Address 0x3421

sqlite3_column_database_name

Ordinal 44
Address 0x28439

sqlite3_column_database_name16

Ordinal 45
Address 0x28451

sqlite3_column_decltype

Ordinal 46
Address 0x28406

sqlite3_column_decltype16

Ordinal 47
Address 0x2841e

sqlite3_column_double

Ordinal 48
Address 0x185e8

sqlite3_column_int

Ordinal 49
Address 0x103a3

sqlite3_column_int64

Ordinal 50
Address 0x103cf

sqlite3_column_name

Ordinal 51
Address 0x283d3

sqlite3_column_name16

Ordinal 52
Address 0x283eb

sqlite3_column_origin_name

Ordinal 53
Address 0x2849f

sqlite3_column_origin_name16

Ordinal 54
Address 0x284b7

sqlite3_column_table_name

Ordinal 55
Address 0x2846c

sqlite3_column_table_name16

Ordinal 56
Address 0x28484

sqlite3_column_text

Ordinal 57
Address 0x262af

sqlite3_column_text16

Ordinal 58
Address 0x284d2

sqlite3_column_type

Ordinal 59
Address 0x10483

sqlite3_column_value

Ordinal 60
Address 0x10451

sqlite3_commit_hook

Ordinal 61
Address 0x56e3

sqlite3_compileoption_get

Ordinal 62
Address 0x594d

sqlite3_compileoption_used

Ordinal 63
Address 0x9014

sqlite3_complete

Ordinal 64
Address 0x5113

sqlite3_complete16

Ordinal 65
Address 0x925bb

sqlite3_config

Ordinal 66
Address 0x18f0d

sqlite3_context_db_handle

Ordinal 67
Address 0x33b0

sqlite3_create_collation

Ordinal 68
Address 0x29970

sqlite3_create_collation16

Ordinal 69
Address 0x299a7

sqlite3_create_collation_v2

Ordinal 70
Address 0x29919

sqlite3_create_function

Ordinal 71
Address 0x29664

sqlite3_create_function16

Ordinal 72
Address 0x29736

sqlite3_create_function_v2

Ordinal 73
Address 0x296ab

sqlite3_create_module

Ordinal 74
Address 0x22e19

sqlite3_create_module_v2

Ordinal 75
Address 0x22e38

sqlite3_create_window_function

Ordinal 76
Address 0x296f1

sqlite3_data_count

Ordinal 77
Address 0x3436

sqlite3_data_directory

Ordinal 78
Address 0xae020

sqlite3_db_cacheflush

Ordinal 79
Address 0x472f7

sqlite3_db_config

Ordinal 80
Address 0x146a5

sqlite3_db_filename

Ordinal 81
Address 0x10dd5

sqlite3_db_handle

Ordinal 82
Address 0x3480

sqlite3_db_mutex

Ordinal 83
Address 0x53a4

sqlite3_db_readonly

Ordinal 84
Address 0x592a

sqlite3_db_release_memory

Ordinal 85
Address 0x1400b

sqlite3_db_status

Ordinal 86
Address 0x158c1

sqlite3_declare_vtab

Ordinal 87
Address 0x75fdb

sqlite3_enable_load_extension

Ordinal 88
Address 0x18ec7

sqlite3_enable_shared_cache

Ordinal 89
Address 0x29ec

sqlite3_errcode

Ordinal 90
Address 0x25478

sqlite3_errmsg

Ordinal 91
Address 0x27f76

sqlite3_errmsg16

Ordinal 92
Address 0x29a22

sqlite3_errstr

Ordinal 93
Address 0xc2b3

sqlite3_exec

Ordinal 94
Address 0x63f0e

sqlite3_expanded_sql

Ordinal 95
Address 0x323ad

sqlite3_expired

Ordinal 96
Address 0x331a

sqlite3_extended_errcode

Ordinal 97
Address 0x254b3

sqlite3_extended_result_codes

Ordinal 98
Address 0x58cc

sqlite3_file_control

Ordinal 99
Address 0x14278

sqlite3_finalize

Ordinal 100
Address 0x4ae07

sqlite3_free

Ordinal 101
Address 0xa119

sqlite3_free_table

Ordinal 102
Address 0xa2dd

sqlite3_fts3_may_be_corrupt

Ordinal 103
Address 0x9a5c0

sqlite3_fts5_may_be_corrupt

Ordinal 104
Address 0x9a498

sqlite3_get_autocommit

Ordinal 105
Address 0x58bb

sqlite3_get_auxdata

Ordinal 106
Address 0x33d8

sqlite3_get_table

Ordinal 107
Address 0x77b67

sqlite3_global_recover

Ordinal 108
Address 0x93411

sqlite3_initialize

Ordinal 109
Address 0x19104

sqlite3_interrupt

Ordinal 110
Address 0x55d4

sqlite3_keyword_check

Ordinal 111
Address 0x109ac

sqlite3_keyword_count

Ordinal 112
Address 0x4c54

sqlite3_keyword_name

Ordinal 113
Address 0x4c1f

sqlite3_last_insert_rowid

Ordinal 114
Address 0x53e8

sqlite3_libversion

Ordinal 115
Address 0x5386

sqlite3_libversion_number

Ordinal 116
Address 0x5390

sqlite3_limit

Ordinal 117
Address 0x57fc

sqlite3_load_extension

Ordinal 118
Address 0x3af88

sqlite3_log

Ordinal 119
Address 0x22b78

sqlite3_malloc

Ordinal 120
Address 0x19649

sqlite3_malloc64

Ordinal 121
Address 0x19e92

sqlite3_memory_alarm

Ordinal 122
Address 0x188e5

sqlite3_memory_highwater

Ordinal 123
Address 0x22d67

sqlite3_memory_used

Ordinal 124
Address 0x22d37

sqlite3_mprintf

Ordinal 125
Address 0x395af

sqlite3_msize

Ordinal 126
Address 0x1799

sqlite3_mutex_alloc

Ordinal 127
Address 0x1961a

sqlite3_mutex_enter

Ordinal 128
Address 0x1743

sqlite3_mutex_free

Ordinal 129
Address 0x1730

sqlite3_mutex_leave

Ordinal 130
Address 0x176b

sqlite3_mutex_try

Ordinal 131
Address 0x1756

sqlite3_next_stmt

Ordinal 132
Address 0x34e3

sqlite3_open

Ordinal 133
Address 0x93344

sqlite3_open16

Ordinal 134
Address 0x93377

sqlite3_open_v2

Ordinal 135
Address 0x9335f

sqlite3_os_end

Ordinal 136
Address 0x18eb6

sqlite3_os_init

Ordinal 137
Address 0x19553

sqlite3_overload_function

Ordinal 138
Address 0x3b6f2

sqlite3_prepare

Ordinal 139
Address 0x72edd

sqlite3_prepare16

Ordinal 140
Address 0x73ac8

sqlite3_prepare16_v2

Ordinal 141
Address 0x73aef

sqlite3_prepare16_v3

Ordinal 142
Address 0x73b16

sqlite3_prepare_v2

Ordinal 143
Address 0x730b0

sqlite3_prepare_v3

Ordinal 144
Address 0x733c0

sqlite3_profile

Ordinal 145
Address 0x568f

sqlite3_progress_handler

Ordinal 146
Address 0x5566

sqlite3_randomness

Ordinal 147
Address 0x3df02

sqlite3_realloc

Ordinal 148
Address 0x1bcfb

sqlite3_realloc64

Ordinal 149
Address 0x1d14e

sqlite3_release_memory

Ordinal 150
Address 0x1788

sqlite3_reset

Ordinal 151
Address 0x4d884

sqlite3_reset_auto_extension

Ordinal 152
Address 0x924a7

sqlite3_result_blob

Ordinal 153
Address 0x1e7f0

sqlite3_result_blob64

Ordinal 154
Address 0x1ed4c

sqlite3_result_double

Ordinal 155
Address 0x144b1

sqlite3_result_error

Ordinal 156
Address 0x1deac

sqlite3_result_error16

Ordinal 157
Address 0x1e380

sqlite3_result_error_code

Ordinal 158
Address 0x1e3a9

sqlite3_result_error_nomem

Ordinal 159
Address 0x10568

sqlite3_result_error_toobig

Ordinal 160
Address 0x1e70c

sqlite3_result_int

Ordinal 161
Address 0x104f4

sqlite3_result_int64

Ordinal 162
Address 0x1052f

sqlite3_result_null

Ordinal 163
Address 0x1055a

sqlite3_result_pointer

Ordinal 164
Address 0x109f0

sqlite3_result_subtype

Ordinal 165
Address 0x338c

sqlite3_result_text

Ordinal 166
Address 0x1e8b1

sqlite3_result_text16

Ordinal 167
Address 0x1ed46

sqlite3_result_text16be

Ordinal 168
Address 0x1ed08

sqlite3_result_text16le

Ordinal 169
Address 0x1ed27

sqlite3_result_text64

Ordinal 170
Address 0x1ed88

sqlite3_result_value

Ordinal 171
Address 0x1f962

sqlite3_result_zeroblob

Ordinal 172
Address 0x10edd

sqlite3_result_zeroblob64

Ordinal 173
Address 0x107ad

sqlite3_rollback_hook

Ordinal 174
Address 0x5767

sqlite3_rtree_geometry_callback

Ordinal 175
Address 0x93418

sqlite3_rtree_query_callback

Ordinal 176
Address 0x93496

sqlite3_set_authorizer

Ordinal 177
Address 0x3bfc

sqlite3_set_auxdata

Ordinal 178
Address 0x11f14

sqlite3_set_last_insert_rowid

Ordinal 179
Address 0x53f6

sqlite3_shutdown

Ordinal 180
Address 0x924fa

sqlite3_sleep

Ordinal 181
Address 0x194b9

sqlite3_snprintf

Ordinal 182
Address 0x229ca

sqlite3_soft_heap_limit

Ordinal 183
Address 0x38aa7

sqlite3_soft_heap_limit64

Ordinal 184
Address 0x38a03

sqlite3_sourceid

Ordinal 185
Address 0x7ead

sqlite3_sql

Ordinal 186
Address 0x351c

sqlite3_status

Ordinal 187
Address 0x22cdf

sqlite3_status64

Ordinal 188
Address 0x22c4f

sqlite3_step

Ordinal 189
Address 0x632a6

sqlite3_stmt_busy

Ordinal 190
Address 0x34c4

sqlite3_stmt_isexplain

Ordinal 191
Address 0x34aa

sqlite3_stmt_readonly

Ordinal 192
Address 0x3490

sqlite3_stmt_status

Ordinal 193
Address 0x13a25

sqlite3_str_append

Ordinal 194
Address 0x213dd

sqlite3_str_appendall

Ordinal 195
Address 0x21412

sqlite3_str_appendchar

Ordinal 196
Address 0x21339

sqlite3_str_appendf

Ordinal 197
Address 0x25b49

sqlite3_str_errcode

Ordinal 198
Address 0x17b8

sqlite3_str_finish

Ordinal 199
Address 0x168c8

sqlite3_str_length

Ordinal 200
Address 0x17cd

sqlite3_str_new

Ordinal 201
Address 0x19eb8

sqlite3_str_reset

Ordinal 202
Address 0xfc76

sqlite3_str_value

Ordinal 203
Address 0x17de

sqlite3_str_vappendf

Ordinal 204
Address 0x215ac

sqlite3_strglob

Ordinal 205
Address 0x9d5c

sqlite3_stricmp

Ordinal 206
Address 0x1942

sqlite3_strlike

Ordinal 207
Address 0x9d77

sqlite3_strnicmp

Ordinal 208
Address 0x1968

sqlite3_system_errno

Ordinal 209
Address 0x57eb

sqlite3_table_column_metadata

Ordinal 210
Address 0x77880

sqlite3_temp_directory

Ordinal 211
Address 0xae024

sqlite3_test_control

Ordinal 212
Address 0x91eab

sqlite3_thread_cleanup

Ordinal 213
Address 0x58c7

sqlite3_threadsafe

Ordinal 214
Address 0x539a

sqlite3_total_changes

Ordinal 215
Address 0x5436

sqlite3_trace

Ordinal 216
Address 0x55e6

sqlite3_trace_v2

Ordinal 217
Address 0x5637

sqlite3_transfer_bindings

Ordinal 218
Address 0x1088d

sqlite3_update_hook

Ordinal 219
Address 0x5725

sqlite3_uri_boolean

Ordinal 220
Address 0x8fe1

sqlite3_uri_int64

Ordinal 221
Address 0xeb59

sqlite3_uri_parameter

Ordinal 222
Address 0x8f8f

sqlite3_user_data

Ordinal 223
Address 0x33a2

sqlite3_value_blob

Ordinal 224
Address 0x25ec9

sqlite3_value_bytes

Ordinal 225
Address 0x25d48

sqlite3_value_bytes16

Ordinal 226
Address 0x25e19

sqlite3_value_double

Ordinal 227
Address 0x185df

sqlite3_value_dup

Ordinal 228
Address 0x1f5e6

sqlite3_value_free

Ordinal 229
Address 0x1097b

sqlite3_value_frombind

Ordinal 230
Address 0x337a

sqlite3_value_int

Ordinal 231
Address 0xb2fb

sqlite3_value_int64

Ordinal 232
Address 0xb308

sqlite3_value_nochange

Ordinal 233
Address 0x3361

sqlite3_value_numeric_type

Ordinal 234
Address 0x187e8

sqlite3_value_pointer

Ordinal 235
Address 0xe9a3

sqlite3_value_subtype

Ordinal 236
Address 0x3337

sqlite3_value_text

Ordinal 237
Address 0x25e90

sqlite3_value_text16

Ordinal 238
Address 0x284fe

sqlite3_value_text16be

Ordinal 239
Address 0x2832b

sqlite3_value_text16le

Ordinal 240
Address 0x2833c

sqlite3_value_type

Ordinal 241
Address 0x334c

sqlite3_version

Ordinal 242
Address 0xacae0

sqlite3_vfs_find

Ordinal 243
Address 0x19456

sqlite3_vfs_register

Ordinal 244
Address 0x194f0

sqlite3_vfs_unregister

Ordinal 245
Address 0x195da

sqlite3_vmprintf

Ordinal 246
Address 0x38acb

sqlite3_vsnprintf

Ordinal 247
Address 0x2296e

sqlite3_vtab_collation

Ordinal 248
Address 0x2c393

sqlite3_vtab_config

Ordinal 249
Address 0x22e56

sqlite3_vtab_nochange

Ordinal 250
Address 0x33bd

sqlite3_vtab_on_conflict

Ordinal 251
Address 0x4480

sqlite3_wal_autocheckpoint

Ordinal 252
Address 0xc312

sqlite3_wal_checkpoint

Ordinal 253
Address 0x4a465

sqlite3_wal_checkpoint_v2

Ordinal 254
Address 0x4a421

sqlite3_wal_hook

Ordinal 255
Address 0x57a9

sqlite3_win32_is_nt

Ordinal 256
Address 0x18a69

sqlite3_win32_mbcs_to_utf8

Ordinal 257
Address 0x922b6

sqlite3_win32_mbcs_to_utf8_v2

Ordinal 258
Address 0x922df

sqlite3_win32_set_directory

Ordinal 259
Address 0x9240f

sqlite3_win32_set_directory16

Ordinal 260
Address 0x923c3

sqlite3_win32_set_directory8

Ordinal 261
Address 0x92354

sqlite3_win32_sleep

Ordinal 262
Address 0x1894e

sqlite3_win32_unicode_to_utf8

Ordinal 263
Address 0x92295

sqlite3_win32_utf8_to_mbcs

Ordinal 264
Address 0x92305

sqlite3_win32_utf8_to_mbcs_v2

Ordinal 265
Address 0x9232e

sqlite3_win32_utf8_to_unicode

Ordinal 266
Address 0x92274

sqlite3_win32_write_debug

Ordinal 267
Address 0x188ec

1

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x450
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.53052
MD5 840dbb55348113b6b852f426f5f6c361
SHA1 32e3757df3cbe3ff60874f7668023755afbc78ee
SHA256 9fd2f96d425dedd9537ae0bb9aa92077d0759ecbd7f21fc4c1f95c0c0a3a4cf3
SHA3 dea53335cc48968ac95af4dea4d5f80caed571d18989ae1b6576cc33ebcc68df

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 3.29.0.0
ProductVersion 3.29.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DLL
Language English - United States
CompanyName SQLite Development Team
FileDescription SQLite is a software library that implements a self-contained, serverless, zero-configuration, transactional SQL database engine.
FileVersion (#2) 3.29.0
InternalName sqlite3
LegalCopyright http://www.sqlite.org/copyright.html
ProductName SQLite
ProductVersion (#2) 3.29.0
SourceId 2019-07-10 17:32:03 fc82b73eaac8b36950e527f12c4b5dc1e147e6f4ad2217ae43ad82882a88bfa6
Resource LangID English - United States

TLS Callbacks

StartAddressOfRawData 0x61eb4000
EndAddressOfRawData 0x61eb401c
AddressOfIndex 0x61eae7cc
AddressOfCallbacks 0x61eb3018
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks 0x61E93830
0x61E937E0

Load Configuration

RICH Header

Errors

[*] Warning: Tried to read outside the COFF string table to get the name of section /4! [*] Warning: Tried to read outside the COFF string table to get the name of section /19! [*] Warning: Tried to read outside the COFF string table to get the name of section /31! [*] Warning: Tried to read outside the COFF string table to get the name of section /45! [*] Warning: Tried to read outside the COFF string table to get the name of section /57! [*] Warning: Tried to read outside the COFF string table to get the name of section /70! [*] Warning: Tried to read outside the COFF string table to get the name of section /81! [*] Warning: Tried to read outside the COFF string table to get the name of section /92! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF symbol's section number is bigger than the number of sections! [*] Warning: COFF String Table's reported size is bigger than the remaining bytes! [*] Warning: Section .bss has a size of 0!