2026-06-27_1427a95c72aafd903541ea1da74896ce_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-27_1427a95c72aafd903541ea1da74896ce_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 16.2MB
Sample260629-lv2e2sat4x
SHA256 abe65436a4f3a53f10233ad4c6f5a739a10f712233ef2bdb4338a11d4c33ae2c
MD5 1427a95c72aafd903541ea1da74896ce
SHA1 8dedebbbda6f8ef36ea30f883530e20b9d45adfc
SHA512 13260722071bfb908db993d80e459bd07fd635c61764e71f387134cd4a3cc148c0f4bf1f6df279c3c042a87aaedae5c1b798a257312a77e352673b6c10167e79
SSDEEP 196608:6r4bJtsYPC7bISqy6gfj6xdfeSrKElopHkDlzTnA:v/C9q1gmxdfeSrMG5nA
TLSH
T1E1078D6B62A800D8E4BBD278C6475617E6B2780513B067DF4AA147962F73BE06F7F700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-06-27_1427a95c72aafd903541ea1da74896ce_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-06-27_1427a95c72aafd903541ea1da74896ce_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 16.2MB

2026-06-27_1427a95c72aafd903541ea1da74896ce_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH b4c7a672fa195e9a8634465e5b9e60d7
SHA256 abe65436a4f3a53f10233ad4c6f5a739a10f712233ef2bdb4338a11d4c33ae2c
MD5 1427a95c72aafd903541ea1da74896ce
SHA1 8dedebbbda6f8ef36ea30f883530e20b9d45adfc
SHA512 13260722071bfb908db993d80e459bd07fd635c61764e71f387134cd4a3cc148c0f4bf1f6df279c3c042a87aaedae5c1b798a257312a77e352673b6c10167e79
SSDEEP 196608:6r4bJtsYPC7bISqy6gfj6xdfeSrKElopHkDlzTnA:v/C9q1gmxdfeSrMG5nA
TLSH
T1E1078D6B62A800D8E4BBD278C6475617E6B2780513B067DF4AA147962F73BE06F7F700
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c9:55:83:aa:83:29:75:26:e6:f2:83:72:58:9e:9a:d8:00:50:45:9f:e8:00:1e:d9:d9:34:fe:b3:41:3e:07:43

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Maxon Computer GmbH,OU=SOFTWARE DEVELOPMENT,O=Maxon Computer GmbH,L=Bad Homburg vor der Höhe,ST=Hessen,C=DE

Chains

Sep 3, 2025

CN=Maxon Computer GmbH,OU=SOFTWARE DEVELOPMENT,O=Maxon Computer GmbH,L=Bad Homburg vor der Höhe,ST=Hessen,C=DE

Subject

CN=Maxon Computer GmbH,OU=SOFTWARE DEVELOPMENT,O=Maxon Computer GmbH,L=Bad Homburg vor der Höhe,ST=Hessen,C=DE

Serial Number

0e:0d:77:bc:66:83:3b:ad:77:52:48:13:d9:0d:7e:12

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 29, 2024 - Aug 16, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

11540204

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\rg\GitLab-Runner\builds\1-mxhub\mxhub\outputs\Release\Red Giant Service.pdb

iphlpapi

GetAdaptersAddresses

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

dbghelp

SymCleanup MiniDumpWriteDump SymGetModuleInfo64 SymInitialize SymGetSymFromAddr64 UnDecorateSymbolName

dxgi

CreateDXGIFactory1

ws2_32

connect accept __WSAFDIsSet gethostname getservbyname recv getsockname shutdown WSARecv WSAStartup recvfrom select getservbyport bind htons WSACleanup getsockopt ntohs htonl ntohl WSAStringToAddressW setsockopt WSASocketW WSASend listen ioctlsocket closesocket WSAGetLastError WSASetLastError send sendto socket WSAStringToAddressA getaddrinfo freeaddrinfo gethostbyname inet_addr inet_ntoa gethostbyaddr

ole32

CoTaskMemFree CoSetProxyBlanket CoInitializeEx CoUninitialize CoCreateInstance OleInitialize OleUninitialize CoGetApartmentType CoInitializeSecurity

advapi32

QueryServiceStatus OpenServiceA OpenSCManagerA CloseServiceHandle ReportEventW RegisterEventSourceW DeregisterEventSource SetSecurityDescriptorDacl InitializeSecurityDescriptor InitializeAcl CreateWellKnownSid AddAccessAllowedAceEx CryptGenRandom RegSetValueExA RegQueryValueExA RegSetValueExW RegCreateKeyExW RegEnumKeyExA RegGetValueA RegOpenKeyExA RegCreateKeyExA ConvertStringSecurityDescriptorToSecurityDescriptorW RegOpenKeyExW RegQueryValueExW RegCloseKey StartServiceCtrlDispatcherW SetServiceStatus CryptAcquireContextW CryptReleaseContext CryptDestroyKey CryptCreateHash CryptHashData CryptDestroyHash CryptVerifySignatureW GetUserNameW CryptImportKey CryptSignHashW RegisterServiceCtrlHandlerW

user32

GetSystemMetrics EnumDisplayDevicesW RegisterWindowMessageA DefWindowProcA RegisterClassA CreateWindowExA DestroyWindow GetClassNameA PostMessageW RegisterWindowMessageW SendNotifyMessageW EnumWindows LoadCursorW ShowCursor GetProcessWindowStation MessageBoxW GetCursorPos GetUserObjectInformationW GetCursorInfo SetCursorPos GetDesktopWindow ReleaseDC GetDC CallNextHookEx ClipCursor UnhookWindowsHookEx SetWindowsHookExW GetAsyncKeyState

shell32

ShellExecuteW ord680 SHOpenFolderAndSelectItems ord155 ord190 SHFileOperationW SHGetFolderPathW SHGetSpecialFolderPathA SHGetDiskFreeSpaceExW SHGetDesktopFolder SHGetSpecialFolderLocation SHGetFolderPathA

imagehlp

ImageLoad ImageUnload

psapi

GetModuleFileNameExW EnumProcessModules GetProcessMemoryInfo

rpcrt4

RpcStringFreeA UuidCreateSequential UuidToStringW UuidCreate UuidToStringA RpcStringFreeW UuidFromStringA

api-ms-win-core-winrt-l1-1-0

RoUninitialize RoGetActivationFactory RoInitialize

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

kernel32

LCMapStringEx EncodePointer GetStringTypeW IsProcessorFeaturePresent CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns SleepConditionVariableSRW InitOnceComplete InitOnceBeginInitialize RtlPcToFileHeader GetExitCodeThread GetLocaleInfoEx TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive CompareStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter InitializeSListHead SetCurrentDirectoryW GetCurrentDirectoryW GetDiskFreeSpaceExW SetFilePointerEx GetWindowsDirectoryW CreateDirectoryExW RtlUnwindEx SystemTimeToTzSpecificLocalTime GetConsoleMode GetFileSizeEx LoadLibraryExA CreateEventA ReleaseMutex GetSystemDirectoryA VirtualFree RtlVirtualUnwind VirtualUnlock ReadConsoleW VirtualLock TryEnterCriticalSection AreFileApisANSI GetFullPathNameW LockFile SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx CreateMutexW UnmapViewOfFile FreeLibraryAndExitThread ExitProcess GetTimeZoneInformation GetCommandLineA SetEnvironmentVariableW HeapValidate GetTempPathA GetDiskFreeSpaceA FlushViewOfFile DeleteFileA HeapCompact UnlockFile LockFileEx GetFileSize CreateFileMappingW MapViewOfFile FlushFileBuffers GlobalMemoryStatus GetVersionExW ExitThread GetVersion GetFileType GlobalFree GetFileInformationByHandle CreateDirectoryA GetVolumeInformationA FindNextFileA GetVersionExA LoadLibraryA SwitchToThread DeleteTimerQueue DeleteTimerQueueTimer GetConsoleOutputCP FlsGetValue CreateTimerQueueTimer CreateTimerQueue GetActiveProcessorCount SetThreadGroupAffinity GetLogicalProcessorInformationEx SetProcessPriorityBoost GetDateFormatW GetTimeFormatW GetThreadTimes SetThreadPriority FlsFree FlsSetValue FlsAlloc CompareStringW DuplicateHandle GetUserPreferredUILanguages QueryFullProcessImageNameW GetProcessId PeekNamedPipe MoveFileExW RemoveDirectoryW GetFinalPathNameByHandleW DeleteFileW CreateDirectoryW SetDllDirectoryW SetDefaultDllDirectories RemoveDllDirectory AddDllDirectory GetModuleHandleExW Thread32Next LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetStdHandle IsValidCodePage GetOEMCP Thread32First SetThreadContext GetThreadContext ResumeThread SuspendThread OpenThread GetLogicalDriveStringsW LocalFileTimeToFileTime FindNextFileW FindFirstFileW FindFirstFileExW CreateMutexA GetCommandLineW WriteConsoleW GetFileAttributesExW LocalAlloc IsWow64Process GetProductInfo GetNativeSystemInfo GetComputerNameExW GetTempPathW ExpandEnvironmentStringsW HeapCreate GetConsoleWindow GetConsoleScreenBufferInfo SetConsoleOutputCP SetConsoleCP ReadConsoleA SetConsoleMode AttachConsole GetStartupInfoW TerminateProcess OutputDebugStringW GetStdHandle VirtualProtect VirtualAlloc FlushInstructionCache SystemTimeToFileTime CloseHandle GetLastError PostQueuedCompletionStatus EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent WaitForSingleObject WaitForMultipleObjects QueueUserAPC TerminateThread TlsAlloc TlsFree LocalFree FormatMessageA FormatMessageW WideCharToMultiByte InitializeCriticalSection InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS ReleaseSemaphore CreateSemaphoreW MultiByteToWideChar RemoveDirectoryA CreateFileA ReadFile WriteFile SetNamedPipeHandleState WaitNamedPipeA GetFileAttributesA GetEnvironmentVariableW CreatePipe QueryPerformanceCounter QueryPerformanceFrequency Sleep GetExitCodeProcess CreateProcessA GetACP HeapAlloc HeapFree GetProcessHeap FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryExW K32EnumProcesses CreateToolhelp32Snapshot Process32FirstW Process32NextW SetUnhandledExceptionFilter GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetTickCount GetModuleFileNameA AllocConsole SetConsoleTitleW OutputDebugStringA SetLastError CreateEventW CreateThread SetConsoleCtrlHandler InitializeCriticalSectionAndSpinCount SleepEx CreateIoCompletionPort SetWaitableTimer GetQueuedCompletionStatus VerSetConditionMask VerifyVersionInfoW TlsGetValue TlsSetValue IsDebuggerPresent GetSystemTimeAsFileTime InitializeCriticalSectionEx DecodePointer HeapDestroy HeapReAlloc HeapSize CopyFileExW GetSystemTime FileTimeToSystemTime FileTimeToLocalFileTime CreateFileW SetFileAttributesW GetFileAttributesW DeviceIoControl GetDriveTypeW GetFileTime GetDiskFreeSpaceW CancelIoEx GetThreadId GetCurrentThread CreateWaitableTimerW GetThreadLocale LCIDToLocaleName RaiseException GetVolumeInformationW GetComputerNameW GetModuleFileNameW OpenProcess CreateNamedPipeW ConnectNamedPipe DisconnectNamedPipe CreateProcessW GlobalMemoryStatusEx GetSystemInfo GetModuleHandleA ResetEvent GetOverlappedResult GetNamedPipeClientProcessId LoadLibraryW FindFirstFileA FindClose FileTimeToDosDateTime SetFileTime WaitForMultipleObjectsEx WaitForSingleObjectEx lstrlenW ReadDirectoryChangesW GetLongPathNameW CancelIo SetThreadErrorMode RtlCaptureStackBackTrace GetEnvironmentStringsW FreeEnvironmentStringsW lstrcmpA RtlUnwind

gdi32

GetPixel GetStockObject

oleaut32

SafeArrayGetUBound SafeArrayDestroy SysAllocStringLen SafeArrayUnaccessData SafeArrayAccessData VariantTimeToSystemTime VariantClear VariantInit SysAllocString SysFreeString SafeArrayGetLBound

mswsock

AcceptEx GetAcceptExSockaddrs

bcrypt

BCryptSetProperty BCryptOpenAlgorithmProvider BCryptGenerateSymmetricKey BCryptDestroyHash BCryptFinishHash BCryptCloseAlgorithmProvider BCryptHashData BCryptCreateHash BCryptDestroyKey BCryptGenRandom BCryptDecrypt BCryptEncrypt BCryptGetProperty

crypt32

CryptBinaryToStringA CryptStringToBinaryA CryptImportPublicKeyInfo CryptDecodeObjectEx

shlwapi

UrlUnescapeA UrlEscapeW UrlEscapeA PathFindFileNameW

winhttp

WinHttpGetIEProxyConfigForCurrentUser WinHttpOpen WinHttpCrackUrl WinHttpGetProxyForUrl WinHttpGetDefaultProxyConfiguration WinHttpCloseHandle WinHttpReadData WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpConnect

netapi32

NetWkstaGetInfo NetApiBufferFree

wintrust

WinVerifyTrust

g_CpuYieldDelegate g_maxon sqlite3_activate_see sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_auto_extension sqlite3_autovacuum_pages sqlite3_backup_finish sqlite3_backup_init sqlite3_backup_pagecount sqlite3_backup_remaining sqlite3_backup_step sqlite3_bind_blob sqlite3_bind_blob64 sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_pointer sqlite3_bind_text sqlite3_bind_text16 sqlite3_bind_text64 sqlite3_bind_value sqlite3_bind_zeroblob sqlite3_bind_zeroblob64 sqlite3_blob_bytes sqlite3_blob_close sqlite3_blob_open sqlite3_blob_read sqlite3_blob_reopen sqlite3_blob_write sqlite3_busy_handler sqlite3_busy_timeout sqlite3_cancel_auto_extension sqlite3_changes sqlite3_changes64 sqlite3_clear_bindings sqlite3_close sqlite3_close_v2 sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_database_name sqlite3_column_database_name16 sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_name16 sqlite3_column_origin_name sqlite3_column_origin_name16 sqlite3_column_table_name sqlite3_column_table_name16 sqlite3_column_text sqlite3_column_text16 sqlite3_column_type sqlite3_column_value sqlite3_commit_hook sqlite3_compileoption_get sqlite3_compileoption_used sqlite3_complete sqlite3_complete16 sqlite3_config sqlite3_context_db_handle sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_collation_v2 sqlite3_create_filename sqlite3_create_function sqlite3_create_function16 sqlite3_create_function_v2 sqlite3_create_module sqlite3_create_module_v2 sqlite3_create_window_function sqlite3_data_count sqlite3_data_directory sqlite3_database_file_object sqlite3_db_cacheflush sqlite3_db_config sqlite3_db_filename sqlite3_db_handle sqlite3_db_mutex sqlite3_db_name sqlite3_db_readonly sqlite3_db_release_memory sqlite3_db_status sqlite3_declare_vtab sqlite3_deserialize sqlite3_drop_modules sqlite3_enable_load_extension sqlite3_enable_shared_cache sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_error_offset sqlite3_errstr sqlite3_exec sqlite3_expanded_sql sqlite3_expired sqlite3_extended_errcode sqlite3_extended_result_codes sqlite3_file_control sqlite3_filename_database sqlite3_filename_journal sqlite3_filename_wal sqlite3_finalize sqlite3_free sqlite3_free_filename sqlite3_free_table sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_table sqlite3_global_recover sqlite3_hard_heap_limit64 sqlite3_initialize sqlite3_interrupt sqlite3_key sqlite3_key_v2 sqlite3_keyword_check sqlite3_keyword_count sqlite3_keyword_name sqlite3_last_insert_rowid sqlite3_libversion sqlite3_libversion_number sqlite3_limit sqlite3_load_extension sqlite3_log sqlite3_malloc sqlite3_malloc64 sqlite3_memory_alarm sqlite3_memory_highwater sqlite3_memory_used sqlite3_mprintf sqlite3_msize sqlite3_mutex_alloc sqlite3_mutex_enter sqlite3_mutex_free sqlite3_mutex_leave sqlite3_mutex_try sqlite3_next_stmt sqlite3_open sqlite3_open16 sqlite3_open_v2 sqlite3_os_end sqlite3_os_init sqlite3_overload_function sqlite3_prepare sqlite3_prepare16 sqlite3_prepare16_v2 sqlite3_prepare16_v3 sqlite3_prepare_v2 sqlite3_prepare_v3 sqlite3_profile sqlite3_progress_handler sqlite3_randomness sqlite3_realloc sqlite3_realloc64 sqlite3_rekey sqlite3_rekey_v2 sqlite3_release_memory sqlite3_reset sqlite3_reset_auto_extension sqlite3_result_blob sqlite3_result_blob64 sqlite3_result_double sqlite3_result_error sqlite3_result_error16 sqlite3_result_error_code sqlite3_result_error_nomem sqlite3_result_error_toobig sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_pointer sqlite3_result_subtype sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_text64 sqlite3_result_value sqlite3_result_zeroblob sqlite3_result_zeroblob64 sqlite3_rollback_hook sqlite3_rtree_geometry_callback sqlite3_rtree_query_callback sqlite3_serialize sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_set_last_insert_rowid sqlite3_shutdown sqlite3_sleep sqlite3_snprintf sqlite3_soft_heap_limit sqlite3_soft_heap_limit64 sqlite3_sourceid sqlite3_sql sqlite3_status sqlite3_status64 sqlite3_step sqlite3_stmt_busy sqlite3_stmt_isexplain sqlite3_stmt_readonly sqlite3_stmt_status sqlite3_str_append sqlite3_str_appendall sqlite3_str_appendchar sqlite3_str_appendf sqlite3_str_errcode sqlite3_str_finish sqlite3_str_length sqlite3_str_new sqlite3_str_reset sqlite3_str_value sqlite3_str_vappendf sqlite3_strglob sqlite3_stricmp sqlite3_strlike sqlite3_strnicmp sqlite3_system_errno sqlite3_table_column_metadata sqlite3_temp_directory sqlite3_test_control sqlite3_thread_cleanup sqlite3_threadsafe sqlite3_total_changes sqlite3_total_changes64 sqlite3_trace sqlite3_trace_v2 sqlite3_transfer_bindings sqlite3_txn_state sqlite3_update_hook sqlite3_uri_boolean sqlite3_uri_int64 sqlite3_uri_key sqlite3_uri_parameter sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_dup sqlite3_value_free sqlite3_value_frombind sqlite3_value_int sqlite3_value_int64 sqlite3_value_nochange sqlite3_value_numeric_type sqlite3_value_pointer sqlite3_value_subtype sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_type sqlite3_version sqlite3_vfs_find sqlite3_vfs_register sqlite3_vfs_unregister sqlite3_vmprintf sqlite3_vsnprintf sqlite3_vtab_collation sqlite3_vtab_config sqlite3_vtab_distinct sqlite3_vtab_in sqlite3_vtab_in_first sqlite3_vtab_in_next sqlite3_vtab_nochange sqlite3_vtab_on_conflict sqlite3_vtab_rhs_value sqlite3_wal_autocheckpoint sqlite3_wal_checkpoint sqlite3_wal_checkpoint_v2 sqlite3_wal_hook sqlite3_win32_is_nt sqlite3_win32_mbcs_to_utf8 sqlite3_win32_mbcs_to_utf8_v2 sqlite3_win32_set_directory sqlite3_win32_set_directory16 sqlite3_win32_set_directory8 sqlite3_win32_sleep sqlite3_win32_unicode_to_utf8 sqlite3_win32_utf8_to_mbcs sqlite3_win32_utf8_to_mbcs_v2 sqlite3_win32_utf8_to_unicode sqlite3_win32_write_debug sqlite3pager_error sqlite3pager_is_sj_pgno sqlite3pager_reset

Name

.text

Size

11.7MB

Virtual Size

11.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

890KB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

567KB

Virtual Size

566KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

70KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

101KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=240, id=261, version=30795,

count=8, id=261, version=32216,

count=10, id=253, version=33030,

count=18, id=260, version=33030,

count=119, id=261, version=33030,

count=18, id=259, version=33030,

count=31, id=259, version=30795,

count=53, id=260, version=30795,

count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=10, id=257, version=26715,

count=3, id=262, version=26715,

count=1, id=259, version=31937,

count=108, id=260, version=31937,

count=449, id=260, version=34435,

count=23, productName=Unmarked objects (old),

count=1, id=260, version=30148,

count=36, id=257, version=30795,

count=9, id=206, productName=VS2012 build 50727, version=50727,

count=2, id=205, productName=VS2012 build 50727, version=50727,

count=1, id=261, productName=VS2015 [14.0] build 23026, version=23026,

count=3, id=203, version=65501,

count=637, id=1, productName=Unmarked objects,

count=124, id=260, productName=VS2015 [14.0] build 23026, version=23026,

count=2, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=194, id=264, version=33145,

count=364, id=261, version=33145,

count=1, id=256, version=33145,

count=1, id=255, version=33145,

count=1, id=151,

count=1, id=258, version=33145,