Manalyze report for 5e5ba61531d74e45b11cadb79e7394a1

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2019-Jul-10 18:09:25
Detected languages	English - United States
TLS Callbacks	2 callback(s) detected.
Debug artifacts	Embedded COFF debugging symbols
CompanyName	SQLite Development Team
FileDescription	SQLite is a software library that implements a self-contained, serverless, zero-configuration, transactional SQL database engine.
FileVersion	`3.29.0`
InternalName	sqlite3
LegalCopyright	http://www.sqlite.org/copyright.html
ProductName	SQLite
ProductVersion	`3.29.0`
SourceId	2019-07-10 17:32:03 fc82b73eaac8b36950e527f12c4b5dc1e147e6f4ad2217ae43ad82882a88bfa6

Plugin Output

Suspicious	The PE is possibly packed.	`Unusual section name found: /4` `Unusual section name found: /19` `Unusual section name found: /31` `Unusual section name found: /45` `Unusual section name found: /57` `Unusual section name found: /70` `Unusual section name found: /81` `Unusual section name found: /92`
Info	The PE contains common functions which appear in legitimate applications.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryA LoadLibraryW` `Can create temporary files: CreateFileA CreateFileW GetTempPathA GetTempPathW`
Suspicious	The file contains overlay data.	`127099 bytes of data starting at offset 0xc3200.`
Safe	VirusTotal score: 0/70 (Scanned on 2019-07-31 20:22:19)	`All the AVs think this file is safe.`

Hashes

MD5	`5e5ba61531d74e45b11cadb79e7394a1`
SHA1	`677224e14aac9dd35f367d5eb1704b36e69356b8`
SHA256	`99e91ae250c955bd403ec1a2321d6b11fcb715bdcc7cb3f63ffb46b349afde5c`
SHA3	`8e8f27d05086e06b650d795f355ad8fd00b781e937b17d521c4be0748850d8d8`
SSDeep	`24576:oI0H1fcKoDde/KBkI/njv7UU5vrVGFWG/Pi:obaRdeyBkI/jjUU5vJ8S`
Imports Hash	`596770193a7f877d586dad91b1eeebc1`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`18`
TimeDateStamp	2019-Jul-10 18:09:25
PointerToSymbolTable	`0xc3200`
NumberOfSymbols	`4136`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_DLL` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LINE_NUMS_STRIPPED`

Image Optional Header

Magic	`PE32`
LinkerVersion	`2.0`
SizeOfCode	`0x97600`
SizeOfInitializedData	`0xb2600`
SizeOfUninitializedData	`0xa00`
AddressOfEntryPoint	`0x00001400 (Section: .text)`
BaseOfCode	`0x1000`
BaseOfData	`0x99000`
ImageBase	`0x61e00000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`1.0`
SubsystemVersion	`4.0`
Win32VersionValue	`0`
SizeOfImage	`0xce000`
SizeOfHeaders	`0x600`
Checksum	`0xf0844`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
SizeofStackReserve	`0x200000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`b276d5b4c161967c686af51a04ca2485`
SHA1	`499e9a377a8a5ec57d44a9ac1b2c0f2f3040233a`
SHA256	`759824778d33d2b18e325724fa727b9b8446db481f381c49533b5d6b1f6a0bcc`
SHA3	`5dc39ad9b406a886ba7e05f21f24e429cd002153aea56b03e4906a794b7b81f7`
VirtualSize	`0x97480`
VirtualAddress	`0x1000`
SizeOfRawData	`0x97600`
PointerToRawData	`0x600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_CODE` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.40906`

.data

MD5	`37f93268bae8f4ab0ed8a01e1e96068a`
SHA1	`c35388b927adb6a281dcd4d37c96c12d67b217ca`
SHA256	`eb9bbb68c3c597c962b1024f6a9bf8da33277f6e5151621e182d769fa352b567`
SHA3	`10d37f277f20c0a44856a076e5315585b33f8cb75722ee4956f69111a04062e9`
VirtualSize	`0x1c7c`
VirtualAddress	`0x99000`
SizeOfRawData	`0x1e00`
PointerToRawData	`0x97c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`3.63581`

.rdata

MD5	`bc6dc711f24c289ab87a6b6c78cb6ee7`
SHA1	`453711bca95da1b51a3e826b34848ce91eef32ea`
SHA256	`77e5f1b9a445323cbb922af17e9db549bd622dd147b8b1b259e8eb938813e020`
SHA3	`0de7b45fbd5dbd4ef1fc7cd576569ad71ea0c710ac187646bb1aa26375d73cc5`
VirtualSize	`0x123b4`
VirtualAddress	`0x9b000`
SizeOfRawData	`0x12400`
PointerToRawData	`0x99a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.41705`

.bss

MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`
VirtualSize	`0x828`
VirtualAddress	`0xae000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_UNINITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`

.edata

MD5	`3b45ad6c03afb7f0f999de37b897338b`
SHA1	`dc00d864ac35215d88444cfa0dc47b9162a3f116`
SHA256	`8f15494530913abdb6bb6df47c4c8c05c7621f46e41b6ad29deafc56a1a65098`
SHA3	`d21e364ec404516a221cc532ffa65a51a2b028eea6d8e3f1032fa329798bfa71`
VirtualSize	`0x20df`
VirtualAddress	`0xaf000`
SizeOfRawData	`0x2200`
PointerToRawData	`0xabe00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.33453`

.idata

MD5	`f5b99fc7bc46b094b565a81607cfdf74`
SHA1	`e85755256cf45619b62647ec4f95a8ba36a72da5`
SHA256	`1f7a4d7141e7caf11ac56c2d7f941ac9ae4521577f190b827d7987c8f22db517`
SHA3	`79409c25334387429d5f39aaee586846282d673bf75a04623b19d0709c6ef775`
VirtualSize	`0xc48`
VirtualAddress	`0xb2000`
SizeOfRawData	`0xe00`
PointerToRawData	`0xae000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.8872`

.CRT

MD5	`889f08652337aecdc62093d0b56eef3e`
SHA1	`76148600ceced771eff3f7cf9cae23c39781ddcb`
SHA256	`2a85ed42f19338b2cb9326943ee946fea92dc7b22d4cb16a8a4c098228ca12cc`
SHA3	`6ff4804c65419eec044a8769c97078cf61da732fdbfce635eb0ab136e8408973`
VirtualSize	`0x2c`
VirtualAddress	`0xb3000`
SizeOfRawData	`0x200`
PointerToRawData	`0xaee00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.20692`

.tls

MD5	`33cf63a4b50126b6c0a05bd2d5ea50b0`
SHA1	`63d316b37c56d51b6fc83e83fb4c74b36b5dad61`
SHA256	`78bce3ade22d4c78282d5e44d2b7c2a0dee626cd89ed15f8ecb513865409340a`
SHA3	`f82064aabba7b2616c11a53f10ecc91ae7b3d801614479ac8a89c1ede28ed0eb`
VirtualSize	`0x20`
VirtualAddress	`0xb4000`
SizeOfRawData	`0x200`
PointerToRawData	`0xaf000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.276495`

.rsrc

MD5	`f8632036c10cd4ce6e5cfcfab1492390`
SHA1	`c7a0a08f43e764d75f80b04f450ed17b9da04fb2`
SHA256	`5f7dedc333b2d4eda8361febaa7a20c4c20edd4a02903d211e2f9e7649015ee7`
SHA3	`13cec2bc50d97d6631713560f8414dac3c7babc7474a13bafb938c67960e1f09`
VirtualSize	`0x4a8`
VirtualAddress	`0xb5000`
SizeOfRawData	`0x600`
PointerToRawData	`0xaf200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`2.83181`

.reloc

MD5	`e5ab349bbccbfdbf41695087dc63570c`
SHA1	`7aa67ce11289a7dfc37c8a06c456bf7fcc67f4de`
SHA256	`39ebf6e7f4ff7265f25f6838bac415b6d2775b2b8ee90727d66bad8a87fa12da`
SHA3	`1bc329e8937b0f4463f76156b9841696252258a15555c64209752df41ea6f88d`
VirtualSize	`0x33e4`
VirtualAddress	`0xb6000`
SizeOfRawData	`0x3400`
PointerToRawData	`0xaf800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`6.5338`

/4

MD5	`55af68b6b604a393fe1c5d0165767090`
SHA1	`f4bc098e0ffddea78c3b72230a34f2863ee254ad`
SHA256	`f26bd63aa408d4f47349f4d48adcedb851dd49619854c824c0513e800d962c86`
SHA3	`0c43d1450f23c43534a2bd17a2621df8fa1cd4b4fbba007356a0ecae73025357`
VirtualSize	`0x2d8`
VirtualAddress	`0xba000`
SizeOfRawData	`0x400`
PointerToRawData	`0xb2c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`1.86851`

/19

MD5	`61e60b770d55bf6a15888c35fdd1d9e0`
SHA1	`c0a7d448a8519b8d3d3946b0753f2cf352fe20cf`
SHA256	`7cc18a03f99410b3bb9aed363c317a750e8d70f72f0e22e13d99f6e2946e1e7c`
SHA3	`f8687c6a9a94bc1901022078ca8477f69d95ea95d42d9ae9d95c8c8170d9c2ee`
VirtualSize	`0x98d8`
VirtualAddress	`0xbb000`
SizeOfRawData	`0x9a00`
PointerToRawData	`0xb3000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`6.07015`

/31

MD5	`753db644544111f9c503cc0526862547`
SHA1	`da68d81b4467cbc18e889087150cb09d661b979b`
SHA256	`385c2d736b7847f1a976b2911326abcffd28530a695ed2f422fb74d91cd9b3ce`
SHA3	`f0f2964c20539adabf52282d62cc145f7b53068ef4af8ac2b265635891827248`
VirtualSize	`0x1af5`
VirtualAddress	`0xc5000`
SizeOfRawData	`0x1c00`
PointerToRawData	`0xbca00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`4.55552`

/45

MD5	`286f1b05986cd5e7978e4251f7e51c48`
SHA1	`505475f2d3885d2c6d207e9fe1f0250cddfa1366`
SHA256	`b50fedaef19e9816a0d31e9e5392ffbd586a9d06ecd60f7d8c8ba9c5938b8a3c`
SHA3	`e45a4e798c19f507cd7778134ac98866dd98d6f9ed0d66d78a5b1f25a8532d54`
VirtualSize	`0x1a80`
VirtualAddress	`0xc7000`
SizeOfRawData	`0x1c00`
PointerToRawData	`0xbe600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.59521`

/57

MD5	`59baaff98a46fbf05fcf177417b08c30`
SHA1	`806350a45d2e9d507b05fb20b94467554127acca`
SHA256	`887f2f37f1a0e8a6cbd3fa784a1304f8e4f7ee3180545d809eb37faa9dc51c00`
SHA3	`3f4673418d62fdb637b8a75dee7e2d602e90f655eef68cfb8f1645b2e89e6757`
VirtualSize	`0x8bc`
VirtualAddress	`0xc9000`
SizeOfRawData	`0xa00`
PointerToRawData	`0xc0200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`4.56475`

/70

MD5	`5d378e69cc09af8f71cb4aab401a1677`
SHA1	`989af42e451066a3af5634a8f53c055fb151b41a`
SHA256	`4b5c338de7ede840e1b9e159d416b6b3aa280754c7fc893ea0a5af2d20b68ced`
SHA3	`099bb03e497d721437c8c4a2a6143cfe9f0c902d53dfbc8eac496ab93941c454`
VirtualSize	`0x269`
VirtualAddress	`0xca000`
SizeOfRawData	`0x400`
PointerToRawData	`0xc0c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`3.5575`

/81

MD5	`40255577f476db168db99d73923ba8e8`
SHA1	`12bbda62e3c683bf19b00c002cf4aa7dee37e287`
SHA256	`e1ab7004449c804da787bddc17dbf7d56dd8aa3967418fd92a7fd7f152461731`
SHA3	`052d47a07bbde0c4f50a8c404968eefec1bdf96241bbb60eb5fd6c742e884b7c`
VirtualSize	`0x1cd3`
VirtualAddress	`0xcb000`
SizeOfRawData	`0x1e00`
PointerToRawData	`0xc1000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`3.28919`

/92

MD5	`b357f131638074799bae955708dbf875`
SHA1	`abe6f39dd1499802e5f3ef3faa4bacfed9d92edd`
SHA256	`8346436664f144eb9e56870d441eb714b0e571ef133684830ecbbd2961d076ed`
SHA3	`b905c60beb02b2947b41f6e276d893fa21518c608f72e8f7c45e85cf6dde5428`
VirtualSize	`0x290`
VirtualAddress	`0xcd000`
SizeOfRawData	`0x400`
PointerToRawData	`0xc2e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`1.76452`

Imports

KERNEL32.dll	`AreFileApisANSI` `CloseHandle` `CreateFileA` `CreateFileMappingA` `CreateFileMappingW` `CreateFileW` `CreateMutexW` `DeleteCriticalSection` `DeleteFileA` `DeleteFileW` `EnterCriticalSection` `FlushFileBuffers` `FlushViewOfFile` `FormatMessageA` `FormatMessageW` `FreeLibrary` `GetCurrentProcess` `GetCurrentProcessId` `GetCurrentThreadId` `GetDiskFreeSpaceA` `GetDiskFreeSpaceW` `GetFileAttributesA` `GetFileAttributesExW` `GetFileAttributesW` `GetFileSize` `GetFullPathNameA` `GetFullPathNameW` `GetLastError` `GetModuleHandleA` `GetProcAddress` `GetProcessHeap` `GetSystemInfo` `GetSystemTime` `GetSystemTimeAsFileTime` `GetTempPathA` `GetTempPathW` `GetTickCount` `GetVersionExA` `GetVersionExW` `HeapAlloc` `HeapCompact` `HeapCreate` `HeapDestroy` `HeapFree` `HeapReAlloc` `HeapSize` `HeapValidate` `InitializeCriticalSection` `InterlockedCompareExchange` `LeaveCriticalSection` `LoadLibraryA` `LoadLibraryW` `LocalFree` `LockFile` `LockFileEx` `MapViewOfFile` `MultiByteToWideChar` `OutputDebugStringA` `OutputDebugStringW` `QueryPerformanceCounter` `ReadFile` `SetEndOfFile` `SetFilePointer` `SetUnhandledExceptionFilter` `Sleep` `SystemTimeToFileTime` `TerminateProcess` `TlsGetValue` `TryEnterCriticalSection` `UnhandledExceptionFilter` `UnlockFile` `UnlockFileEx` `UnmapViewOfFile` `VirtualProtect` `VirtualQuery` `WaitForSingleObject` `WaitForSingleObjectEx` `WideCharToMultiByte` `WriteFile`
msvcrt.dll	`__dllonexit` `__setusermatherr` `_amsg_exit` `_beginthreadex` `_endthreadex` `_errno` `_initterm` `_iob` `_lock` `_onexit` `localtime` `calloc` `fprintf` `free` `fwrite` `malloc` `memcmp` `memmove` `qsort` `realloc` `strcmp` `strcspn` `strlen` `strncmp` `strrchr` `_unlock` `abort` `vfprintf`

Delayed Imports

sqlite3_aggregate_context

Ordinal	`1`
Address	`0x1d3cb`

sqlite3_aggregate_count

Ordinal	`2`
Address	`0x3413`

sqlite3_auto_extension

Ordinal	`3`
Address	`0x92415`

sqlite3_backup_finish

Ordinal	`4`
Address	`0x49ce9`

sqlite3_backup_init

Ordinal	`5`
Address	`0x4983d`

sqlite3_backup_pagecount

Ordinal	`6`
Address	`0x2f71`

sqlite3_backup_remaining

Ordinal	`7`
Address	`0x2f66`

sqlite3_backup_step

Ordinal	`8`
Address	`0x478bd`

sqlite3_bind_blob

Ordinal	`9`
Address	`0x256c1`

sqlite3_bind_blob64

Ordinal	`10`
Address	`0x256e8`

sqlite3_bind_double

Ordinal	`11`
Address	`0x257ea`

sqlite3_bind_int

Ordinal	`12`
Address	`0x258b2`

sqlite3_bind_int64

Ordinal	`13`
Address	`0x25863`

sqlite3_bind_null

Ordinal	`14`
Address	`0x258d8`

sqlite3_bind_parameter_count

Ordinal	`15`
Address	`0x3451`

sqlite3_bind_parameter_index

Ordinal	`16`
Address	`0x14411`

sqlite3_bind_parameter_name

Ordinal	`17`
Address	`0x3463`

sqlite3_bind_pointer

Ordinal	`18`
Address	`0x25909`

sqlite3_bind_text

Ordinal	`19`
Address	`0x2572f`

sqlite3_bind_text16

Ordinal	`20`
Address	`0x257c3`

sqlite3_bind_text64

Ordinal	`21`
Address	`0x25756`

sqlite3_bind_value

Ordinal	`22`
Address	`0x259f3`

sqlite3_bind_zeroblob

Ordinal	`23`
Address	`0x25986`

sqlite3_bind_zeroblob64

Ordinal	`24`
Address	`0x25ada`

sqlite3_blob_bytes

Ordinal	`25`
Address	`0x3530`

sqlite3_blob_close

Ordinal	`26`
Address	`0x4aef8`

sqlite3_blob_open

Ordinal	`27`
Address	`0x7f22c`

sqlite3_blob_read

Ordinal	`28`
Address	`0x4ca15`

sqlite3_blob_reopen

Ordinal	`29`
Address	`0x7f99b`

sqlite3_blob_write

Ordinal	`30`
Address	`0x4d7e6`

sqlite3_busy_handler

Ordinal	`31`
Address	`0x5511`

sqlite3_busy_timeout

Ordinal	`32`
Address	`0xc2bc`

sqlite3_cancel_auto_extension

Ordinal	`33`
Address	`0x41b6`

sqlite3_changes

Ordinal	`34`
Address	`0x542b`

sqlite3_clear_bindings

Ordinal	`35`
Address	`0x1073d`

sqlite3_close

Ordinal	`36`
Address	`0x49ee3`

sqlite3_close_v2

Ordinal	`37`
Address	`0x49ef1`

sqlite3_collation_needed

Ordinal	`38`
Address	`0x5833`

sqlite3_collation_needed16

Ordinal	`39`
Address	`0x5877`

sqlite3_column_blob

Ordinal	`40`
Address	`0x2608e`

sqlite3_column_bytes

Ordinal	`41`
Address	`0x25d56`

sqlite3_column_bytes16

Ordinal	`42`
Address	`0x25e2a`

sqlite3_column_count

Ordinal	`43`
Address	`0x3421`

sqlite3_column_database_name

Ordinal	`44`
Address	`0x28439`

sqlite3_column_database_name16

Ordinal	`45`
Address	`0x28451`

sqlite3_column_decltype

Ordinal	`46`
Address	`0x28406`

sqlite3_column_decltype16

Ordinal	`47`
Address	`0x2841e`

sqlite3_column_double

Ordinal	`48`
Address	`0x185e8`

sqlite3_column_int

Ordinal	`49`
Address	`0x103a3`

sqlite3_column_int64

Ordinal	`50`
Address	`0x103cf`

sqlite3_column_name

Ordinal	`51`
Address	`0x283d3`

sqlite3_column_name16

Ordinal	`52`
Address	`0x283eb`

sqlite3_column_origin_name

Ordinal	`53`
Address	`0x2849f`

sqlite3_column_origin_name16

Ordinal	`54`
Address	`0x284b7`

sqlite3_column_table_name

Ordinal	`55`
Address	`0x2846c`

sqlite3_column_table_name16

Ordinal	`56`
Address	`0x28484`

sqlite3_column_text

Ordinal	`57`
Address	`0x262af`

sqlite3_column_text16

Ordinal	`58`
Address	`0x284d2`

sqlite3_column_type

Ordinal	`59`
Address	`0x10483`

sqlite3_column_value

Ordinal	`60`
Address	`0x10451`

sqlite3_commit_hook

Ordinal	`61`
Address	`0x56e3`

sqlite3_compileoption_get

Ordinal	`62`
Address	`0x594d`

sqlite3_compileoption_used

Ordinal	`63`
Address	`0x9014`

sqlite3_complete

Ordinal	`64`
Address	`0x5113`

sqlite3_complete16

Ordinal	`65`
Address	`0x925bb`

sqlite3_config

Ordinal	`66`
Address	`0x18f0d`

sqlite3_context_db_handle

Ordinal	`67`
Address	`0x33b0`

sqlite3_create_collation

Ordinal	`68`
Address	`0x29970`

sqlite3_create_collation16

Ordinal	`69`
Address	`0x299a7`

sqlite3_create_collation_v2

Ordinal	`70`
Address	`0x29919`

sqlite3_create_function

Ordinal	`71`
Address	`0x29664`

sqlite3_create_function16

Ordinal	`72`
Address	`0x29736`

sqlite3_create_function_v2

Ordinal	`73`
Address	`0x296ab`

sqlite3_create_module

Ordinal	`74`
Address	`0x22e19`

sqlite3_create_module_v2

Ordinal	`75`
Address	`0x22e38`

sqlite3_create_window_function

Ordinal	`76`
Address	`0x296f1`

sqlite3_data_count

Ordinal	`77`
Address	`0x3436`

sqlite3_data_directory

Ordinal	`78`
Address	`0xae020`

sqlite3_db_cacheflush

Ordinal	`79`
Address	`0x472f7`

sqlite3_db_config

Ordinal	`80`
Address	`0x146a5`

sqlite3_db_filename

Ordinal	`81`
Address	`0x10dd5`

sqlite3_db_handle

Ordinal	`82`
Address	`0x3480`

sqlite3_db_mutex

Ordinal	`83`
Address	`0x53a4`

sqlite3_db_readonly

Ordinal	`84`
Address	`0x592a`

sqlite3_db_release_memory

Ordinal	`85`
Address	`0x1400b`

sqlite3_db_status

Ordinal	`86`
Address	`0x158c1`

sqlite3_declare_vtab

Ordinal	`87`
Address	`0x75fdb`

sqlite3_enable_load_extension

Ordinal	`88`
Address	`0x18ec7`

sqlite3_enable_shared_cache

Ordinal	`89`
Address	`0x29ec`

sqlite3_errcode

Ordinal	`90`
Address	`0x25478`

sqlite3_errmsg

Ordinal	`91`
Address	`0x27f76`

sqlite3_errmsg16

Ordinal	`92`
Address	`0x29a22`

sqlite3_errstr

Ordinal	`93`
Address	`0xc2b3`

sqlite3_exec

Ordinal	`94`
Address	`0x63f0e`

sqlite3_expanded_sql

Ordinal	`95`
Address	`0x323ad`

sqlite3_expired

Ordinal	`96`
Address	`0x331a`

sqlite3_extended_errcode

Ordinal	`97`
Address	`0x254b3`

sqlite3_extended_result_codes

Ordinal	`98`
Address	`0x58cc`

sqlite3_file_control

Ordinal	`99`
Address	`0x14278`

sqlite3_finalize

Ordinal	`100`
Address	`0x4ae07`

sqlite3_free

Ordinal	`101`
Address	`0xa119`

sqlite3_free_table

Ordinal	`102`
Address	`0xa2dd`

sqlite3_fts3_may_be_corrupt

Ordinal	`103`
Address	`0x9a5c0`

sqlite3_fts5_may_be_corrupt

Ordinal	`104`
Address	`0x9a498`

sqlite3_get_autocommit

Ordinal	`105`
Address	`0x58bb`

sqlite3_get_auxdata

Ordinal	`106`
Address	`0x33d8`

sqlite3_get_table

Ordinal	`107`
Address	`0x77b67`

sqlite3_global_recover

Ordinal	`108`
Address	`0x93411`

sqlite3_initialize

Ordinal	`109`
Address	`0x19104`

sqlite3_interrupt

Ordinal	`110`
Address	`0x55d4`

sqlite3_keyword_check

Ordinal	`111`
Address	`0x109ac`

sqlite3_keyword_count

Ordinal	`112`
Address	`0x4c54`

sqlite3_keyword_name

Ordinal	`113`
Address	`0x4c1f`

sqlite3_last_insert_rowid

Ordinal	`114`
Address	`0x53e8`

sqlite3_libversion

Ordinal	`115`
Address	`0x5386`

sqlite3_libversion_number

Ordinal	`116`
Address	`0x5390`

sqlite3_limit

Ordinal	`117`
Address	`0x57fc`

sqlite3_load_extension

Ordinal	`118`
Address	`0x3af88`

sqlite3_log

Ordinal	`119`
Address	`0x22b78`

sqlite3_malloc

Ordinal	`120`
Address	`0x19649`

sqlite3_malloc64

Ordinal	`121`
Address	`0x19e92`

sqlite3_memory_alarm

Ordinal	`122`
Address	`0x188e5`

sqlite3_memory_highwater

Ordinal	`123`
Address	`0x22d67`

sqlite3_memory_used

Ordinal	`124`
Address	`0x22d37`

sqlite3_mprintf

Ordinal	`125`
Address	`0x395af`

sqlite3_msize

Ordinal	`126`
Address	`0x1799`

sqlite3_mutex_alloc

Ordinal	`127`
Address	`0x1961a`

sqlite3_mutex_enter

Ordinal	`128`
Address	`0x1743`

sqlite3_mutex_free

Ordinal	`129`
Address	`0x1730`

sqlite3_mutex_leave

Ordinal	`130`
Address	`0x176b`

sqlite3_mutex_try

Ordinal	`131`
Address	`0x1756`

sqlite3_next_stmt

Ordinal	`132`
Address	`0x34e3`

sqlite3_open

Ordinal	`133`
Address	`0x93344`

sqlite3_open16

Ordinal	`134`
Address	`0x93377`

sqlite3_open_v2

Ordinal	`135`
Address	`0x9335f`

sqlite3_os_end

Ordinal	`136`
Address	`0x18eb6`

sqlite3_os_init

Ordinal	`137`
Address	`0x19553`

sqlite3_overload_function

Ordinal	`138`
Address	`0x3b6f2`

sqlite3_prepare

Ordinal	`139`
Address	`0x72edd`

sqlite3_prepare16

Ordinal	`140`
Address	`0x73ac8`

sqlite3_prepare16_v2

Ordinal	`141`
Address	`0x73aef`

sqlite3_prepare16_v3

Ordinal	`142`
Address	`0x73b16`

sqlite3_prepare_v2

Ordinal	`143`
Address	`0x730b0`

sqlite3_prepare_v3

Ordinal	`144`
Address	`0x733c0`

sqlite3_profile

Ordinal	`145`
Address	`0x568f`

sqlite3_progress_handler

Ordinal	`146`
Address	`0x5566`

sqlite3_randomness

Ordinal	`147`
Address	`0x3df02`

sqlite3_realloc

Ordinal	`148`
Address	`0x1bcfb`

sqlite3_realloc64

Ordinal	`149`
Address	`0x1d14e`

sqlite3_release_memory

Ordinal	`150`
Address	`0x1788`

sqlite3_reset

Ordinal	`151`
Address	`0x4d884`

sqlite3_reset_auto_extension

Ordinal	`152`
Address	`0x924a7`

sqlite3_result_blob

Ordinal	`153`
Address	`0x1e7f0`

sqlite3_result_blob64

Ordinal	`154`
Address	`0x1ed4c`

sqlite3_result_double

Ordinal	`155`
Address	`0x144b1`

sqlite3_result_error

Ordinal	`156`
Address	`0x1deac`

sqlite3_result_error16

Ordinal	`157`
Address	`0x1e380`

sqlite3_result_error_code

Ordinal	`158`
Address	`0x1e3a9`

sqlite3_result_error_nomem

Ordinal	`159`
Address	`0x10568`

sqlite3_result_error_toobig

Ordinal	`160`
Address	`0x1e70c`

sqlite3_result_int

Ordinal	`161`
Address	`0x104f4`

sqlite3_result_int64

Ordinal	`162`
Address	`0x1052f`

sqlite3_result_null

Ordinal	`163`
Address	`0x1055a`

sqlite3_result_pointer

Ordinal	`164`
Address	`0x109f0`

sqlite3_result_subtype

Ordinal	`165`
Address	`0x338c`

sqlite3_result_text

Ordinal	`166`
Address	`0x1e8b1`

sqlite3_result_text16

Ordinal	`167`
Address	`0x1ed46`

sqlite3_result_text16be

Ordinal	`168`
Address	`0x1ed08`

sqlite3_result_text16le

Ordinal	`169`
Address	`0x1ed27`

sqlite3_result_text64

Ordinal	`170`
Address	`0x1ed88`

sqlite3_result_value

Ordinal	`171`
Address	`0x1f962`

sqlite3_result_zeroblob

Ordinal	`172`
Address	`0x10edd`

sqlite3_result_zeroblob64

Ordinal	`173`
Address	`0x107ad`

sqlite3_rollback_hook

Ordinal	`174`
Address	`0x5767`

sqlite3_rtree_geometry_callback

Ordinal	`175`
Address	`0x93418`

sqlite3_rtree_query_callback

Ordinal	`176`
Address	`0x93496`

sqlite3_set_authorizer

Ordinal	`177`
Address	`0x3bfc`

sqlite3_set_auxdata

Ordinal	`178`
Address	`0x11f14`

sqlite3_set_last_insert_rowid

Ordinal	`179`
Address	`0x53f6`

sqlite3_shutdown

Ordinal	`180`
Address	`0x924fa`

sqlite3_sleep

Ordinal	`181`
Address	`0x194b9`

sqlite3_snprintf

Ordinal	`182`
Address	`0x229ca`

sqlite3_soft_heap_limit

Ordinal	`183`
Address	`0x38aa7`

sqlite3_soft_heap_limit64

Ordinal	`184`
Address	`0x38a03`

sqlite3_sourceid

Ordinal	`185`
Address	`0x7ead`

sqlite3_sql

Ordinal	`186`
Address	`0x351c`

sqlite3_status

Ordinal	`187`
Address	`0x22cdf`

sqlite3_status64

Ordinal	`188`
Address	`0x22c4f`

sqlite3_step

Ordinal	`189`
Address	`0x632a6`

sqlite3_stmt_busy

Ordinal	`190`
Address	`0x34c4`

sqlite3_stmt_isexplain

Ordinal	`191`
Address	`0x34aa`

sqlite3_stmt_readonly

Ordinal	`192`
Address	`0x3490`

sqlite3_stmt_status

Ordinal	`193`
Address	`0x13a25`

sqlite3_str_append

Ordinal	`194`
Address	`0x213dd`

sqlite3_str_appendall

Ordinal	`195`
Address	`0x21412`

sqlite3_str_appendchar

Ordinal	`196`
Address	`0x21339`

sqlite3_str_appendf

Ordinal	`197`
Address	`0x25b49`

sqlite3_str_errcode

Ordinal	`198`
Address	`0x17b8`

sqlite3_str_finish

Ordinal	`199`
Address	`0x168c8`

sqlite3_str_length

Ordinal	`200`
Address	`0x17cd`

sqlite3_str_new

Ordinal	`201`
Address	`0x19eb8`

sqlite3_str_reset

Ordinal	`202`
Address	`0xfc76`

sqlite3_str_value

Ordinal	`203`
Address	`0x17de`

sqlite3_str_vappendf

Ordinal	`204`
Address	`0x215ac`

sqlite3_strglob

Ordinal	`205`
Address	`0x9d5c`

sqlite3_stricmp

Ordinal	`206`
Address	`0x1942`

sqlite3_strlike

Ordinal	`207`
Address	`0x9d77`

sqlite3_strnicmp

Ordinal	`208`
Address	`0x1968`

sqlite3_system_errno

Ordinal	`209`
Address	`0x57eb`

sqlite3_table_column_metadata

Ordinal	`210`
Address	`0x77880`

sqlite3_temp_directory

Ordinal	`211`
Address	`0xae024`

sqlite3_test_control

Ordinal	`212`
Address	`0x91eab`

sqlite3_thread_cleanup

Ordinal	`213`
Address	`0x58c7`

sqlite3_threadsafe

Ordinal	`214`
Address	`0x539a`

sqlite3_total_changes

Ordinal	`215`
Address	`0x5436`

sqlite3_trace

Ordinal	`216`
Address	`0x55e6`

sqlite3_trace_v2

Ordinal	`217`
Address	`0x5637`

sqlite3_transfer_bindings

Ordinal	`218`
Address	`0x1088d`

sqlite3_update_hook

Ordinal	`219`
Address	`0x5725`

sqlite3_uri_boolean

Ordinal	`220`
Address	`0x8fe1`

sqlite3_uri_int64

Ordinal	`221`
Address	`0xeb59`

sqlite3_uri_parameter

Ordinal	`222`
Address	`0x8f8f`

sqlite3_user_data

Ordinal	`223`
Address	`0x33a2`

sqlite3_value_blob

Ordinal	`224`
Address	`0x25ec9`

sqlite3_value_bytes

Ordinal	`225`
Address	`0x25d48`

sqlite3_value_bytes16

Ordinal	`226`
Address	`0x25e19`

sqlite3_value_double

Ordinal	`227`
Address	`0x185df`

sqlite3_value_dup

Ordinal	`228`
Address	`0x1f5e6`

sqlite3_value_free

Ordinal	`229`
Address	`0x1097b`

sqlite3_value_frombind

Ordinal	`230`
Address	`0x337a`

sqlite3_value_int

Ordinal	`231`
Address	`0xb2fb`

sqlite3_value_int64

Ordinal	`232`
Address	`0xb308`

sqlite3_value_nochange

Ordinal	`233`
Address	`0x3361`

sqlite3_value_numeric_type

Ordinal	`234`
Address	`0x187e8`

sqlite3_value_pointer

Ordinal	`235`
Address	`0xe9a3`

sqlite3_value_subtype

Ordinal	`236`
Address	`0x3337`

sqlite3_value_text

Ordinal	`237`
Address	`0x25e90`

sqlite3_value_text16

Ordinal	`238`
Address	`0x284fe`

sqlite3_value_text16be

Ordinal	`239`
Address	`0x2832b`

sqlite3_value_text16le

Ordinal	`240`
Address	`0x2833c`

sqlite3_value_type

Ordinal	`241`
Address	`0x334c`

sqlite3_version

Ordinal	`242`
Address	`0xacae0`

sqlite3_vfs_find

Ordinal	`243`
Address	`0x19456`

sqlite3_vfs_register

Ordinal	`244`
Address	`0x194f0`

sqlite3_vfs_unregister

Ordinal	`245`
Address	`0x195da`

sqlite3_vmprintf

Ordinal	`246`
Address	`0x38acb`

sqlite3_vsnprintf

Ordinal	`247`
Address	`0x2296e`

sqlite3_vtab_collation

Ordinal	`248`
Address	`0x2c393`

sqlite3_vtab_config

Ordinal	`249`
Address	`0x22e56`

sqlite3_vtab_nochange

Ordinal	`250`
Address	`0x33bd`

sqlite3_vtab_on_conflict

Ordinal	`251`
Address	`0x4480`

sqlite3_wal_autocheckpoint

Ordinal	`252`
Address	`0xc312`

sqlite3_wal_checkpoint

Ordinal	`253`
Address	`0x4a465`

sqlite3_wal_checkpoint_v2

Ordinal	`254`
Address	`0x4a421`

sqlite3_wal_hook

Ordinal	`255`
Address	`0x57a9`

sqlite3_win32_is_nt

Ordinal	`256`
Address	`0x18a69`

sqlite3_win32_mbcs_to_utf8

Ordinal	`257`
Address	`0x922b6`

sqlite3_win32_mbcs_to_utf8_v2

Ordinal	`258`
Address	`0x922df`

sqlite3_win32_set_directory

Ordinal	`259`
Address	`0x9240f`

sqlite3_win32_set_directory16

Ordinal	`260`
Address	`0x923c3`

sqlite3_win32_set_directory8

Ordinal	`261`
Address	`0x92354`

sqlite3_win32_sleep

Ordinal	`262`
Address	`0x1894e`

sqlite3_win32_unicode_to_utf8

Ordinal	`263`
Address	`0x92295`

sqlite3_win32_utf8_to_mbcs

Ordinal	`264`
Address	`0x92305`

sqlite3_win32_utf8_to_mbcs_v2

Ordinal	`265`
Address	`0x9232e`

sqlite3_win32_utf8_to_unicode

Ordinal	`266`
Address	`0x92274`

sqlite3_win32_write_debug

Ordinal	`267`
Address	`0x188ec`

1

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x450`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.53052`
MD5	`840dbb55348113b6b852f426f5f6c361`
SHA1	`32e3757df3cbe3ff60874f7668023755afbc78ee`
SHA256	`9fd2f96d425dedd9537ae0bb9aa92077d0759ecbd7f21fc4c1f95c0c0a3a4cf3`
SHA3	`dea53335cc48968ac95af4dea4d5f80caed571d18989ae1b6576cc33ebcc68df`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	3.29.0.0
ProductVersion	3.29.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_DLL`
Language	English - United States
CompanyName	SQLite Development Team
FileDescription	SQLite is a software library that implements a self-contained, serverless, zero-configuration, transactional SQL database engine.
FileVersion (#2)	3.29.0
InternalName	sqlite3
LegalCopyright	http://www.sqlite.org/copyright.html
ProductName	SQLite
ProductVersion (#2)	3.29.0
SourceId	2019-07-10 17:32:03 fc82b73eaac8b36950e527f12c4b5dc1e147e6f4ad2217ae43ad82882a88bfa6

Resource LangID	English - United States

TLS Callbacks

StartAddressOfRawData	`0x61eb4000`
EndAddressOfRawData	`0x61eb401c`
AddressOfIndex	`0x61eae7cc`
AddressOfCallbacks	`0x61eb3018`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_TYPE_REG`
Callbacks	`0x61E93830` `0x61E937E0`

Load Configuration

RICH Header

Errors

[*] Warning: Tried to read outside the COFF string table to get the name of section /4!
[*] Warning: Tried to read outside the COFF string table to get the name of section /19!
[*] Warning: Tried to read outside the COFF string table to get the name of section /31!
[*] Warning: Tried to read outside the COFF string table to get the name of section /45!
[*] Warning: Tried to read outside the COFF string table to get the name of section /57!
[*] Warning: Tried to read outside the COFF string table to get the name of section /70!
[*] Warning: Tried to read outside the COFF string table to get the name of section /81!
[*] Warning: Tried to read outside the COFF string table to get the name of section /92!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF String Table's reported size is bigger than the remaining bytes!
[*] Warning: Section .bss has a size of 0!