new update.rar
- SHA256 4349729a2113fee5266374063af1c423e79a5e0988a2c0092c17dfea5040f904
Overview
overview
10Static
static
3new update...us.exe
windows10-2004-x64
10new update...us.exe
windows11-ltsc_2024-x64
10new update...on.dll
windows10-2004-x64
1new update...on.dll
windows11-ltsc_2024-x64
1new update...te.dll
windows10-2004-x64
1new update...te.dll
windows11-ltsc_2024-x64
1new update...ta.dll
windows10-2004-x64
1new update...ta.dll
windows11-ltsc_2024-x64
1new update...op.dll
windows10-2004-x64
1new update...op.dll
windows11-ltsc_2024-x64
1new update...op.dll
windows10-2004-x64
3new update...op.dll
windows11-ltsc_2024-x64
3Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
new update/Insidious.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
new update/Insidious.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
300 seconds
Behavioral task
behavioral3
Sample
new update/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral4
Sample
new update/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral5
Sample
new update/System.Data.SQLite.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral6
Sample
new update/System.Data.SQLite.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral7
Sample
new update/System.Security.Cryptography.ProtectedData.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral8
Sample
new update/System.Security.Cryptography.ProtectedData.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral9
Sample
new update/x64/SQLite.Interop.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral10
Sample
new update/x64/SQLite.Interop.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral11
Sample
new update/x86/SQLite.Interop.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
300 seconds
Behavioral task
behavioral12
Sample
new update/x86/SQLite.Interop.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
300 seconds
General
- Target new update.rar
- Size 6.1MB
- Sample260910-x6bvbaxvgv
- SHA256 4349729a2113fee5266374063af1c423e79a5e0988a2c0092c17dfea5040f904
- MD5 dfcde6daf151ac190250b2beecf92806
- SHA1 8ab0e9bde87fef1d24d1dc1067921bb5963b7da9
- SHA512 01e634de1b77fe4355f6ce7f72c072c32e2657fa2ff5e84bcabcc2ad54afcac7725eb56aa8f7b45725e619c168ebc7c185bc2c06e8362bca51c67be27785782c
- SSDEEP 196608:mGre3kNgyh3SDfv2nt92p/oXW0pLAQU4rV+ZU4rGy:DeHjOt09uWsLA4BIay
- TLSH T1B056333DEF92BBC0A630505A8731B6F5AE69F15B7074508D17BD1F20CA9668198EC2EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 4 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/new update/System.Data.SQLite.dll unpack001/new update/x64/SQLite.Interop.dll unpack001/new update/x86/SQLite.Interop.dll unpack001/new update/x86/SQLite.Interop.txt - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/new update/Insidious.exe
File Explorer
-
new update.rar.rar 6.1MB
-
new update/Insidious.exe.exe 278KB
-
new update/Insidious.exe.config.xml 161B
-
new update/Insidious.pdb865KB
-
new update/Newtonsoft.Json.dll.dll 704KB
-
new update/Newtonsoft.Json.xml.xml 716KB
-
new update/System.Data.SQLite.dll.dll 439KB
-
new update/System.Data.SQLite.xml.xml 1.2MB
-
new update/System.Security.Cryptography.ProtectedData.dll.dll 22KB
-
new update/System.Security.Cryptography.ProtectedData.xml13KB
-
new update/x64/SQLite.Interop.dll.dll 1.9MB
-
new update/x86/SQLite.Interop.dll.dll 1.5MB
-
new update/x86/SQLite.Interop.txt.dll 1.5MB
new update/Insidious.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 43d3ef07e0f83898dc59adfab88642b9b048b2a3d10b91b760331dea21b00458
- MD5 60115edbc14eb733dcd9376471f4eb3b
- SHA1 8c974018ee8583857f64b3f1ac60e69d56b8aa1c
- SHA512 5e000f7475860fcb442a00815673a532c852b8db1db90469075046797800da44e11feb3ef5175b59c5987e8b5369fb77fc68dd6e59a41aa601018f1dd26a91a6
- SSDEEP 6144:Zf+BLtABPDeHQfn54/T2kqqwyT0znD3fC79/x0aY+bhNus/l3ID0SGR:UHLr2kqqwyT0znrK1IDoR
- TLSH T1D0544B0027EC8B56F2FF5BB8D4B11265C3B1B466F97EDB4E6C44A4DD2922780D904BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
280698
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\admin\Documents\Made-one-main\Made-one\obj\Release\Insidious.pdb
mscoree
_CorExeMain
Name
.text
Size
276KB
Virtual Size
275KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
948B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
new update/Insidious.exe.config
- SHA256 d61bde901e7189cc97d45a1d4c4aa39d4c4de2b68419773ec774338506d659ad
- MD5 c16b0746faa39818049fe38709a82c62
- SHA1 3fa322fe6ed724b1bc4fd52795428a36b7b8c131
- SHA512 cbcba899a067f8dc32cfcbd1779a6982d25955de91e1e02cee8eaf684a01b0dee3642c2a954903720ff6086de5a082147209868c03665c89f814c6219be2df7c
- TLSH T1C9C08C5940247C2BDC224F239260C925FBF83262A424000CE06BAB6A0A2015E8206356
- MD5 SHA1 SHA512 TLSH
new update/Insidious.pdb
- SHA256 4d187db28c644a2b523cafb20c88e88eebb7b09e0909ebb6cd0003c9ae456fbe
- MD5 4938d87aa51afa5e93a6db66d06f81b6
- SHA1 3507e12750b395d82092a826d54b14a9078ac524
- SHA512 dab0512e1ec73073e8f1d1ee3ec141ad0b0e6bf2996861b4a81c982da54fac6ca2298cba76963c0ad484854536065c4b0041e013be926959819b32154749b53f
- SSDEEP 6144:5Zzx2IEQ/lxfPgHGGNePeydTW1rphltJ1a7fwv9uUNIzksXz5aHZr7fwv9UksXzB:jBtlgD0tuv9DNIzkdQv9Uk
- TLSH T19A15A36BBB80DE73C0A5C5B826EB8F1E0338E1885F43A78F6755696D3DC336A1D42254
- MD5 SHA1 SHA512 SSDEEP TLSH
new update/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f0c07af0e84d4dd4da4bd7823ba4535bc0481b3bf623ed40b659b68147a6bb75
- MD5 24704261e701b49b51e40c1292ed149e
- SHA1 db8ce5e0b7d8c14920bc9c4eebe51bdf706e3fc6
- SHA512 8ef6a6196044862a9d8d53c6a88e68d9591edf244385bc4888cb9c16c942eeb4a1689c49245d6cf80d619e95f0745898513ed2b67a6fc4c65fbc06b872f72184
- SSDEEP 12288:65RsO50fsVuW3icGomHAQ/DUHIdGFRrDTOAPKfhUUNSUmTIcvABXyoJl8fCfB5qm:om2VuaOKdKSUNz0IpBXyov8fC3
- TLSH T178E45B2177FC8E16D9EF2375B430D9181BF1F956A2BAE78FA504D9A51C837918C203A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
08:39:56:e4:21:43:4f:90:03:ee:08:ba:76:09:c5:58:d4:a5:2a:73:28:78:a1:5f:f6:46:d6:59:61:a9:2a:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 16, 2025
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0c:0d:22:a2:ef:64:2e:b8:88:c4:4f:a0:18:f0:0a:1b
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 4, 2024 - Nov 3, 2027
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:4b:a1:b1:ad:e1:59:fc:e7:34:00:00:00:00:00:4b
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 26, 2024 - Nov 19, 2025
Minor OS version
0
Major OS version
4
Entry point
713798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
690KB
Virtual Size
689KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
new update/Newtonsoft.Json.xml
- SHA256 a9c6be122c118de22c72f9f9e5d9ef787492d24ad91d2c9c23b8d1f0e5f2ef3c
- MD5 93b7c648a3d6ae4a25fb115482afcf2c
- SHA1 3acedace379b7a9b889c7d4e25b537eb5453bff7
- SHA512 12d052df880c8b7b4a3b089ee289da37d10bb95dcdecaa2affa5c6acf0dfc81c1a8dedc911a37c5ae21d51f657a92bf4979582a7c295393a09c99d2eab8db993
- SSDEEP 6144:XqqU+kykVk5aG0rH3jGHdl0/IVEIHXpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO180:DUp
- TLSH T1CEF4DF2577C4CB220C7A012A4D1CF0C5FF205AB316192CA635CC5DDB9F7AEA252FB6A5
- MD5 SHA1 SHA512 SSDEEP TLSH
new update/System.Data.SQLite.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 77dac4e1aa63161d6aff363030a801945d6b8d5b823a6b460b2c2be9ec38d3b7
- MD5 0d56ea52b6da5eb637d5e207f241d35b
- SHA1 5ba0c52d9d60b34ee74d013f8389804029e60f0e
- SHA512 72037f3b8934bb43fb3a4c396dc7c82d3dba3f6a9979522f2f38bdabdfea29a73e4db3fa544b7d43de9314fb21a78f1e006c1fb18a58b75a7c0b83d7ea6d398c
- SSDEEP 12288:iO69tgrf5V0KlhD2oU/+zFjhe+q9eJSMLprv3lRPhFrFckvUl7zFquovh1sSKQWk:iO69tgrf5V0KlhD2oU/+zFjhe+q9eJSW
- TLSH T17CA46BA027EC1109E6FF56B8E87164419B70F553AA77C34E74C4A1EE2C22B805E637B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
e5:96:b9:2d:aa:c6:76:c3:a2:61:25:eb:36:1c:94:40:ff:82:04:50:13:f0:98:ab:92:d2:bb:63:ee:87:4c:cc:7e:76:a4:68:e1:02:07:f5:5d:7d:7b:d4:a4:6e:ab:e8:b7:27:ea:17:1f:f6:85:63:d6:a5:7d:d1:bb:0f:68:96
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Sep 29, 2024
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
03:79:7b:0a:b4:ce:97:0e:a0:0d:28:57:19:b1:08:37:e5:ce:88:6a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Sep 29, 2024
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
433662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\obj\2015\System.Data.SQLite.2015\Release\System.Data.SQLite.pdb
mscoree
_CorDllMain
Name
.text
Size
416KB
Virtual Size
415KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
new update/System.Data.SQLite.xml
- SHA256 1b6c751c39881f02db601b7cc7b2e54e122f4870955e06ddb521314c20d23016
- MD5 5f2a206d40d77aed77035c2c1921a60c
- SHA1 19e2b85dcbc34641d96f76d7de5bbacd1a85bee2
- SHA512 2ad7c5b6b38a0018b271b47190049842998a13b026db41777ba915c4a4e2f4def9a922f435bd853ece470c2c303cd28b26c180d34aeaa2f964dc9840cf0538b5
- SSDEEP 6144:sBKJedf2KkuJ4WwWr2ggmqVBG8FD6L8J1U1IQmcNTCqm9wmAl:+L
- TLSH T11E45FEA837CA9E110873010B693CF0C4EE395967E556886238CD7E57DF76CA263BF990
- MD5 SHA1 SHA512 SSDEEP TLSH
new update/System.Security.Cryptography.ProtectedData.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e4a756ed35c4498dcd2ed1d9166cd5cbddc48b902f15efbe6251d1d00f742b11
- MD5 4f2e50af9316aa6619c843b6c8377798
- SHA1 f1ce83924aeaf0639f61ba3dfe452205e4c82164
- SHA512 02da908b9f993e68676e5b1344fb29626a51bdb582e20a2d80a64c1075291646f549f336710b173a075e6b15b3f786a568db005e16381732728af5f4e0b557aa
- SSDEEP 384:e/MeVM6j9nYD2PoXLGU+rHWAgp6jDWX9/hljHRN7WSP3U0R9zeArmS:e0ea2kLpEW9DjY49zBaS
- TLSH T16EA24A65973C937BDD6B0D7196B4D5623E38D3852A13CA2E6284F50A1C277CCEA30739
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
48:51:87:1b:be:7f:62:8f:02:22:cd:7d:01:85:57:7f:d4:63:00:dc:5c:34:24:c7:5f:fd:40:73:e0:51:50:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 3, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:09:08:07:e0:f9:5c:8c:e6:55:00:01:00:00:02:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
17162
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.Security.Cryptography.ProtectedData/Release/net462/System.Security.Cryptography.ProtectedData.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
new update/System.Security.Cryptography.ProtectedData.xml
- SHA256 e6ddd6bbb75a48aa01424897efa3181effc6ddd2951e8eb45fcfeaff70b075f0
- MD5 5481f791af3e1de2ca362d98772fa7b1
- SHA1 1a5df931e6b2a70e45ce0b4609bb84cdc546db36
- SHA512 a361b5c7e4c5e12268b4b33308b53549ef00967bf12348e0d54d2989e52ed9f76f483a7fb7e91b2d83651a6a88295b6d49fd9cbea7c6ccfdbe2029038e458519
- SSDEEP 384:Yr0QL8Ue5iU5c/8s5BW84q5H+i8r2tiH62viH5K+z8U:Yzw5K5F5W45H
- TLSH T1D2523230B7C1861551E3135A1838F048EB31F72E60559D06FECD8A66B7AA538F3BB897
- MD5 SHA1 SHA512 SSDEEP TLSH
new update/x64/SQLite.Interop.dll
- IMPHASH 873d9909aefadae8c618f6256399d92b
- SHA256 1111916dc329a13bd627b2cd90c9b2263de9923fd0bb6059c69c52332f360c37
- MD5 4930777866b1fdaed2ab80b0fb8793b6
- SHA1 e2686b9ac7c3867c644902805142f1f42bae7645
- SHA512 d294e9d638fb6d579fdfd69a9f098b2d8087fc6c1c240496cc99804980284352299b52b9a2d6b1d1289ffdc5f5ecf364e67eb32e7b4a9a8ddf20c723f9fa28d5
- SSDEEP 49152:tQ/IZ0sF2Ou+pqnX3lJ1nCHmWbk8d7hLJ:tQ/rHnkJ
- TLSH T1B4958D4BB2B400DCD6A7C17CC6475B0BE7B174051754ABDB07A486AA2F23FE516BE328
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
17:2a:11:33:f8:dc:c0:8d:73:a1:34:7b:6f:cc:8d:65:79:e1:d2:a3:2a:86:ce:83:7e:ee:51:71:fb:9e:3f:77:73:2b:28:3d:a9:f9:85:a3:1f:39:2f:1b:f0:d9:f0:3a:b6:70:62:b0:c5:60:9d:9b:4c:71:e1:ac:01:d3:c6:dd
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Sep 28, 2024
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
d2:d8:79:fc:4e:a9:37:27:ee:cc:cd:9b:a0:f0:aa:d4:48:d9:95:71
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Sep 28, 2024
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
37020
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\bin\2015\x64\ReleaseNativeOnlyStatic\SQLite.Interop.pdb
mscoree
CorBindToRuntimeEx
wintrust
WinVerifyTrust
kernel32
GetFullPathNameW
lstrlenW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
GetModuleFileNameW
SetEnvironmentVariableW
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
GetEnvironmentVariableW
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
lstrlenA
GetEnvironmentVariableA
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
lstrcmpA
UnmapViewOfFile
HeapValidate
lstrcatA
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
EnterCriticalSection
LoadLibraryA
lstrcatW
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
RaiseException
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
WriteConsoleW
lstrcmpiW
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapFree
HeapCreate
TryEnterCriticalSection
ReadFile
AreFileApisANSI
SetEnvironmentVariableA
SetStdHandle
DisableThreadLibraryCalls
MapViewOfFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
CompareStringW
LCMapStringW
GetACP
GetTimeZoneInformation
GetConsoleCP
GetStringTypeW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
user32
wsprintfA
wsprintfW
advapi32
CryptAcquireContextW
CryptEncrypt
CryptDecrypt
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
CryptReleaseContext
CryptDestroyKey
SI01412f750db650ea
SI014eca66bae0efcf
SI03f1a6ba0377eb3c
SI06bed3270468d254
SI06e8a47a5d91ab7a
SI06f984fad40a36e4
SI0773159780bced42
SI08382c8853b7dc71
SI084e4b7e555a73d5
SI0920c2cb328dcabe
SI09a5cdb44c766bf5
SI0b53a68143cc1b0f
SI0c99c4f61c42d9cb
SI0d8b78a11ae3c939
SI0fc933ae7753ba2a
SI0fe9852cad13a1dd
SI0fea42093af2ef7e
SI1032fe758291c9d2
SI105ceea23cf3e972
SI1065a8fd0e9b6248
SI10bc187fb9f30400
SI10d93cc2be324ef6
SI1137f75ea606edd8
SI143d2ec51869c9ef
SI1533d04dbddc89f3
SI15b0ccb840fe756a
SI17025c605e70a4a8
SI1a60c8d9aa240c02
SI1e1b2cd59cde5330
SI20361920d76d1c13
SI21c1a5153dee82e5
SI21eb743aa97dd0a0
SI2290d4ae6120f350
SI23647b3b33c7b67c
SI23e355695089fe37
SI25b2c5950dc91a64
SI288d2abca01a7755
SI297152ec74589b2b
SI2b2b2dea9ca1acd8
SI2bef45fe52ca72f1
SI2c8c6bc7249e997b
SI2ede0f7568749838
SI2f73a7c5ee9a4bdd
SI3137cbacf0be79c7
SI3251345d99ccae5f
SI34e86fbc7284ac94
SI35e7e93118b77594
SI372316f83587cf39
SI38a6331dd810267b
SI3a032e64e8b6efc7
SI3bd6f3f9a8dfd5d8
SI3c633713d45fe153
SI3eae3b91c35710f2
SI43665eba4b112e61
SI46b4330c0025ee35
SI46feee5970000e9a
SI4708fc53d48f6341
SI4b3462f62530edcd
SI4b9c60f79bb4a586
SI4c7f2fc8244e8e97
SI4cf313784f059362
SI4dd366eb61ea9f19
SI4ea5bb6088373827
SI51c9fdbcfe92d512
SI54d10871821b7413
SI565e3a2f4880c993
SI5705d18b0f1a3f16
SI58c3a3c66c2dcf2e
SI5b712222451f3649
SI5c335fd80f71405f
SI5d396f2b3045aa28
SI5ea28794c6d3baba
SI5fda06c9571a2739
SI60a64636c44dc75a
SI60a8499dec5aed14
SI62c552c673d475ad
SI639e09cf647bf739
SI63b8d075e85fcd75
SI64d099fc45565bfa
SI66b6b72478589163
SI69397763836898ec
SI6a0c6e709e15324c
SI6a2ad2229e707897
SI6a521ecddeccce0c
SI6bcaa289d733b1bd
SI6d0a04aa40b1d0be
SI6d674df0a026b436
SI6e807adb83cce4fe
SI701c20092d6df8f6
SI72523c81bf843ecb
SI7373972482ee41d4
SI74a64bc0421f55a1
SI755d1c3c1c833890
SI75ecb3e85adc6d3c
SI760cc6e2cdd0a43f
SI783606e3653f423b
SI78949697388a5e96
SI7a32cdcec151473f
SI7b300ecd0b0a9714
SI7b9d330f146f09ff
SI7eebc71da5962123
SI815c7f80a3b5eef8
SI81c5f39b42673806
SI822a08b707fe68a4
SI833a819c5aa36754
SI83472c0e48389d38
SI835f126d08482062
SI86247b47ff2290c1
SI8631656e3aea13dc
SI86b5369bcd0a5f16
SI87cee07b7057dc04
SI88a3bf730522eeb7
SI8a2dc94877dfc2d1
SI8f56135a54eebe6c
SI8fa4445a262be3f3
SI8fdee029b5a476c8
SI907414cd4dd4ccca
SI9076e178c2192f17
SI9509afa4eb3cb331
SI974bf1aef20016c3
SI99ab6591e47e8490
SI9b14b0fecb540943
SI9b7a6028d7d86345
SI9bea79209e38cadd
SI9beae695f65c8831
SI9c19dd97f212203b
SI9c93f804068bab24
SI9ec42a09bc865f9d
SI9f5b0dd1908eae02
SI9fa7624fb4a3ef18
SIa1359c7ddb788e81
SIa16fd5b8861b40f7
SIa3cfb4dc038d6b7b
SIa3d1a56d33c20e24
SIa435290dc4fed878
SIa7c7aff5999381c9
SIa8d64936cf3d3396
SIa95fe43298017f9c
SIa9f630d42a76f7cd
SIaa735a3d29d588fc
SIab55c0054cb53cce
SIadbe0d11829a42f8
SIaec1e040fbe08406
SIaed2151329e04128
SIaf3601f18c86084d
SIaf4954b738baecfc
SIaffa6236faa54566
SIb508c6bf9beb3e9a
SIb59aec3e80324999
SIb74383fac3d1af7f
SIb81cef84dc3b0916
SIb874ea750b169d2e
SIbab6e4e180a52e70
SIbb99021fa0152f3f
SIbc043d214978b5bc
SIbc16c60b056f643d
SIbcf0a4d41086373a
SIc08b73ebfbb13340
SIc277bdfbcf3dff4b
SIc2cfa96c9b044069
SIc2e589911405f758
SIc32418368cbcf873
SIc3837aac51e8bbaf
SIc3b220bdbc2e5576
SIc4039b7c3e210259
SIc53555cd1701ed0d
SIc6194b25761121c0
SIc91b167fae8dfb07
SIcb9cc9ac78fbd1af
SIcbadd189048f97ba
SIcda1a6f489751edc
SIce71c3f8f99ece00
SId078679204df341a
SId41f539240319963
SId46029ecf036c63b
SId4ba3ad67ad9db4e
SId65ac95447641462
SId71afd21d39232f8
SId8b20e53eb8cb070
SIda0d9076505bb3dc
SIddef7bd33583175c
SIdf1d803f3bd21209
SIe031ee2b91609a9c
SIe131f9d31b1382e3
SIe23e3bca0c3096fb
SIe28e961eed744765
SIe386f0ab147769f3
SIe6a093425765e588
SIe7f52a8f2a2d8221
SIe8e430baaa1c4f12
SIeae31eec529d37a9
SIeb8dfc915728294f
SIec03556e990d20b0
SIec106ab1cd675af2
SIec703e0011ef212b
SIee96c99a7ab5b96a
SIef44ff86e552c514
SIf11151b3442788f9
SIf19a905eec4b4b07
SIf22f12c8b4a1025a
SIf4d4989f6d9d28df
SIf573131bc065fe3e
SIf575ada1f51bf6c0
SIf7bf6ffc897e797a
SIf8ad0e9245ddf3cc
SIfadb4b14b2f47129
SIfc98bf629d788180
SIff580cc923329e69
SIffea2854e3834cb4
sqlite3_compress_init
sqlite3_cryptoapi_init
sqlite3_fts5_init
sqlite3_fts_init
sqlite3_percentile_init
sqlite3_regexp_init
sqlite3_sha_init
sqlite3_shathree_init
sqlite3_totype_init
sqlite3_vtshim_init
sqlite3_zipfile_init
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
299KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=241, version=40116,
count=144, id=243, version=40116,
count=38, id=242, version=40116,
count=7, id=259, version=24123,
count=20, id=261, version=24123,
count=17, id=260, version=24123,
count=10, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=203, version=65501,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=156, id=1, productName=Unmarked objects,
count=1, id=264, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
new update/x86/SQLite.Interop.dll
- IMPHASH 71b80ab277cfa717e4edd9a3d8a90e20
- SHA256 553693b15bda4bbf7788bee09b8bd325ffe4db151686f432194c58e15b9b4f1e
- MD5 9ca5b1d02e334ffed34d80ae2b02490f
- SHA1 84015d25373e1ca3a17e85fffef2bf1738bd172c
- SHA512 b66bba909c8ebbd3aac071ad0599c952c27503d5414ebaf3cae7d7a40eca6cdc83b1dd438e4e9e72985ff96e4f3c1d54e9dbf1109ac0b74d2777a73c441507fb
- SSDEEP 24576:m99D5xnu3JyrgBD+0AcwN12xVRz2JG4k7P4IYvbb8PBSB6LHLcZ4TB4v81R1k:mf5xnu3+g3wWPYkPk4HLDv1R1k
- TLSH T1BF759E12FA8380E1EDD910B152FE2FB71D78A219472858E7E3D02CA55A311D3B67E39D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
79:1e:a6:58:70:a5:6a:d0:76:41:58:20:c2:c8:ff:b4:08:17:c4:54:af:97:bc:89:91:fd:56:c7:c4:42:27:f5:27:d3:b9:3f:78:cc:e2:9d:c4:b6:18:89:74:7c:5b:e8:9f:f0:07:de:d4:5e:cf:b6:42:50:b8:af:0f:f6:fc:d5
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Sep 28, 2024
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
1d:d2:6a:71:72:ad:7f:42:f4:a8:6f:45:32:58:5c:63:cd:c5:fc:c7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Sep 28, 2024
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
33428
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\bin\2015\Win32\ReleaseNativeOnlyStatic\SQLite.Interop.pdb
mscoree
CorBindToRuntimeEx
wintrust
WinVerifyTrust
kernel32
GetFullPathNameW
lstrlenW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
GetModuleFileNameW
SetEnvironmentVariableW
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
GetEnvironmentVariableW
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
lstrlenA
GetEnvironmentVariableA
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
lstrcmpA
UnmapViewOfFile
HeapValidate
lstrcatA
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
EnterCriticalSection
LoadLibraryA
lstrcatW
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
RaiseException
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
WriteConsoleW
lstrcmpiW
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
SetEnvironmentVariableA
FreeEnvironmentStringsW
HeapFree
HeapCreate
TryEnterCriticalSection
ReadFile
AreFileApisANSI
SetStdHandle
DecodePointer
DisableThreadLibraryCalls
MapViewOfFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
CompareStringW
LCMapStringW
GetACP
GetTimeZoneInformation
GetConsoleCP
GetStringTypeW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
user32
wsprintfA
wsprintfW
advapi32
CryptAcquireContextW
CryptEncrypt
CryptDecrypt
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
CryptReleaseContext
CryptDestroyKey
SI01412f750db650ea
SI03f1a6ba0377eb3c
SI06f984fad40a36e4
SI0773159780bced42
SI08382c8853b7dc71
SI0920c2cb328dcabe
SI09a5cdb44c766bf5
SI0b53a68143cc1b0f
SI0c99c4f61c42d9cb
SI0d8b78a11ae3c939
SI1032fe758291c9d2
SI105ceea23cf3e972
SI1065a8fd0e9b6248
SI10bc187fb9f30400
SI10d93cc2be324ef6
SI1137f75ea606edd8
SI143d2ec51869c9ef
SI1533d04dbddc89f3
SI15b0ccb840fe756a
SI17025c605e70a4a8
SI1a60c8d9aa240c02
SI20361920d76d1c13
SI21c1a5153dee82e5
SI21eb743aa97dd0a0
SI2290d4ae6120f350
SI23647b3b33c7b67c
SI23e355695089fe37
SI288d2abca01a7755
SI297152ec74589b2b
SI2bef45fe52ca72f1
SI2c8c6bc7249e997b
SI2ede0f7568749838
SI3251345d99ccae5f
SI34e86fbc7284ac94
SI35e7e93118b77594
SI372316f83587cf39
SI38a6331dd810267b
SI3bd6f3f9a8dfd5d8
SI3c633713d45fe153
SI43665eba4b112e61
SI46b4330c0025ee35
SI46feee5970000e9a
SI4708fc53d48f6341
SI4b3462f62530edcd
SI4b9c60f79bb4a586
SI4cf313784f059362
SI4dd366eb61ea9f19
SI4ea5bb6088373827
SI51c9fdbcfe92d512
SI54d10871821b7413
SI565e3a2f4880c993
SI5705d18b0f1a3f16
SI58c3a3c66c2dcf2e
SI5c335fd80f71405f
SI5d396f2b3045aa28
SI5ea28794c6d3baba
SI5fda06c9571a2739
SI60a64636c44dc75a
SI60a8499dec5aed14
SI639e09cf647bf739
SI63b8d075e85fcd75
SI64d099fc45565bfa
SI69397763836898ec
SI6a0c6e709e15324c
SI6a2ad2229e707897
SI6a521ecddeccce0c
SI6d0a04aa40b1d0be
SI6d674df0a026b436
SI6e807adb83cce4fe
SI701c20092d6df8f6
SI7373972482ee41d4
SI74a64bc0421f55a1
SI755d1c3c1c833890
SI75ecb3e85adc6d3c
SI78949697388a5e96
SI7a32cdcec151473f
SI7b9d330f146f09ff
SI7eebc71da5962123
SI815c7f80a3b5eef8
SI81c5f39b42673806
SI822a08b707fe68a4
SI83472c0e48389d38
SI835f126d08482062
SI86247b47ff2290c1
SI86b5369bcd0a5f16
SI88a3bf730522eeb7
SI8f56135a54eebe6c
SI8fdee029b5a476c8
SI9076e178c2192f17
SI974bf1aef20016c3
SI99ab6591e47e8490
SI9b14b0fecb540943
SI9bea79209e38cadd
SI9beae695f65c8831
SI9c19dd97f212203b
SI9f5b0dd1908eae02
SI9fa7624fb4a3ef18
SIa1359c7ddb788e81
SIa16fd5b8861b40f7
SIa3cfb4dc038d6b7b
SIa435290dc4fed878
SIa7c7aff5999381c9
SIa8d64936cf3d3396
SIa95fe43298017f9c
SIaa735a3d29d588fc
SIab55c0054cb53cce
SIadbe0d11829a42f8
SIaec1e040fbe08406
SIaed2151329e04128
SIaf4954b738baecfc
SIb508c6bf9beb3e9a
SIb59aec3e80324999
SIb81cef84dc3b0916
SIb874ea750b169d2e
SIbab6e4e180a52e70
SIbb99021fa0152f3f
SIbc043d214978b5bc
SIbc16c60b056f643d
SIbcf0a4d41086373a
SIc08b73ebfbb13340
SIc277bdfbcf3dff4b
SIc2cfa96c9b044069
SIc32418368cbcf873
SIc3837aac51e8bbaf
SIc3b220bdbc2e5576
SIc4039b7c3e210259
SIc53555cd1701ed0d
SIc6194b25761121c0
SIc91b167fae8dfb07
SIcbadd189048f97ba
SIcda1a6f489751edc
SIce71c3f8f99ece00
SId078679204df341a
SId41f539240319963
SId46029ecf036c63b
SId4ba3ad67ad9db4e
SId71afd21d39232f8
SIda0d9076505bb3dc
SIddef7bd33583175c
SIdf1d803f3bd21209
SIe23e3bca0c3096fb
SIe28e961eed744765
SIe386f0ab147769f3
SIe6a093425765e588
SIe7f52a8f2a2d8221
SIeae31eec529d37a9
SIec03556e990d20b0
SIee96c99a7ab5b96a
SIef44ff86e552c514
SIf11151b3442788f9
SIf19a905eec4b4b07
SIf4d4989f6d9d28df
SIf573131bc065fe3e
SIf7bf6ffc897e797a
SIf8ad0e9245ddf3cc
SIfadb4b14b2f47129
SIfc98bf629d788180
SIff580cc923329e69
_SI014eca66bae0efcf@112
_SI06bed3270468d254@12
_SI06e8a47a5d91ab7a@4
_SI084e4b7e555a73d5@8
_SI0fc933ae7753ba2a@12
_SI0fe9852cad13a1dd@4
_SI0fea42093af2ef7e@12
_SI1e1b2cd59cde5330@8
_SI25b2c5950dc91a64@4
_SI2b2b2dea9ca1acd8@8
_SI2f73a7c5ee9a4bdd@0
_SI3137cbacf0be79c7@24
_SI3a032e64e8b6efc7@36
_SI3eae3b91c35710f2@20
_SI4c7f2fc8244e8e97@8
_SI5b712222451f3649@4
_SI62c552c673d475ad@8
_SI66b6b72478589163@8
_SI6bcaa289d733b1bd@32
_SI72523c81bf843ecb@4
_SI760cc6e2cdd0a43f@12
_SI783606e3653f423b@4
_SI7b300ecd0b0a9714@20
_SI833a819c5aa36754@12
_SI8631656e3aea13dc@12
_SI87cee07b7057dc04@12
_SI8a2dc94877dfc2d1@12
_SI8fa4445a262be3f3@16
_SI907414cd4dd4ccca@12
_SI9509afa4eb3cb331@20
_SI9b7a6028d7d86345@12
_SI9c93f804068bab24@4
_SI9ec42a09bc865f9d@12
_SIa3d1a56d33c20e24@12
_SIa9f630d42a76f7cd@4
_SIaf3601f18c86084d@12
_SIaffa6236faa54566@12
_SIb74383fac3d1af7f@12
_SIc2e589911405f758@8
_SIcb9cc9ac78fbd1af@4
_SId65ac95447641462@12
_SId8b20e53eb8cb070@8
_SIe031ee2b91609a9c@12
_SIe131f9d31b1382e3@44
_SIe8e430baaa1c4f12@12
_SIeb8dfc915728294f@8
_SIec106ab1cd675af2@40
_SIec703e0011ef212b@4
_SIf22f12c8b4a1025a@8
_SIf575ada1f51bf6c0@0
_SIffea2854e3834cb4@12
sqlite3_compress_init
sqlite3_cryptoapi_init
sqlite3_fts5_init
sqlite3_fts_init
sqlite3_percentile_init
sqlite3_regexp_init
sqlite3_sha_init
sqlite3_shathree_init
sqlite3_totype_init
sqlite3_vtshim_init
sqlite3_zipfile_init
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
185KB
Virtual Size
184KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=50, id=241, version=40116,
count=144, id=243, version=40116,
count=39, id=242, version=40116,
count=24, id=259, version=24123,
count=21, id=261, version=24123,
count=15, id=260, version=24123,
count=10, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=203, version=65501,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=155, id=1, productName=Unmarked objects,
count=1, id=264, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
new update/x86/SQLite.Interop.txt
- IMPHASH 71b80ab277cfa717e4edd9a3d8a90e20
- SHA256 553693b15bda4bbf7788bee09b8bd325ffe4db151686f432194c58e15b9b4f1e
- MD5 9ca5b1d02e334ffed34d80ae2b02490f
- SHA1 84015d25373e1ca3a17e85fffef2bf1738bd172c
- SHA512 b66bba909c8ebbd3aac071ad0599c952c27503d5414ebaf3cae7d7a40eca6cdc83b1dd438e4e9e72985ff96e4f3c1d54e9dbf1109ac0b74d2777a73c441507fb
- SSDEEP 24576:m99D5xnu3JyrgBD+0AcwN12xVRz2JG4k7P4IYvbb8PBSB6LHLcZ4TB4v81R1k:mf5xnu3+g3wWPYkPk4HLDv1R1k
- TLSH T1BF759E12FA8380E1EDD910B152FE2FB71D78A219472858E7E3D02CA55A311D3B67E39D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
79:1e:a6:58:70:a5:6a:d0:76:41:58:20:c2:c8:ff:b4:08:17:c4:54:af:97:bc:89:91:fd:56:c7:c4:42:27:f5:27:d3:b9:3f:78:cc:e2:9d:c4:b6:18:89:74:7c:5b:e8:9f:f0:07:de:d4:5e:cf:b6:42:50:b8:af:0f:f6:fc:d5
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Sep 28, 2024
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
1d:d2:6a:71:72:ad:7f:42:f4:a8:6f:45:32:58:5c:63:cd:c5:fc:c7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Sep 28, 2024
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
33428
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\bin\2015\Win32\ReleaseNativeOnlyStatic\SQLite.Interop.pdb
mscoree
CorBindToRuntimeEx
wintrust
WinVerifyTrust
kernel32
GetFullPathNameW
lstrlenW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
GetModuleFileNameW
SetEnvironmentVariableW
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
GetEnvironmentVariableW
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
lstrlenA
GetEnvironmentVariableA
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
lstrcmpA
UnmapViewOfFile
HeapValidate
lstrcatA
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
EnterCriticalSection
LoadLibraryA
lstrcatW
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
RaiseException
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
WriteConsoleW
lstrcmpiW
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
SetEnvironmentVariableA
FreeEnvironmentStringsW
HeapFree
HeapCreate
TryEnterCriticalSection
ReadFile
AreFileApisANSI
SetStdHandle
DecodePointer
DisableThreadLibraryCalls
MapViewOfFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
CompareStringW
LCMapStringW
GetACP
GetTimeZoneInformation
GetConsoleCP
GetStringTypeW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
user32
wsprintfA
wsprintfW
advapi32
CryptAcquireContextW
CryptEncrypt
CryptDecrypt
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
CryptReleaseContext
CryptDestroyKey
SI01412f750db650ea
SI03f1a6ba0377eb3c
SI06f984fad40a36e4
SI0773159780bced42
SI08382c8853b7dc71
SI0920c2cb328dcabe
SI09a5cdb44c766bf5
SI0b53a68143cc1b0f
SI0c99c4f61c42d9cb
SI0d8b78a11ae3c939
SI1032fe758291c9d2
SI105ceea23cf3e972
SI1065a8fd0e9b6248
SI10bc187fb9f30400
SI10d93cc2be324ef6
SI1137f75ea606edd8
SI143d2ec51869c9ef
SI1533d04dbddc89f3
SI15b0ccb840fe756a
SI17025c605e70a4a8
SI1a60c8d9aa240c02
SI20361920d76d1c13
SI21c1a5153dee82e5
SI21eb743aa97dd0a0
SI2290d4ae6120f350
SI23647b3b33c7b67c
SI23e355695089fe37
SI288d2abca01a7755
SI297152ec74589b2b
SI2bef45fe52ca72f1
SI2c8c6bc7249e997b
SI2ede0f7568749838
SI3251345d99ccae5f
SI34e86fbc7284ac94
SI35e7e93118b77594
SI372316f83587cf39
SI38a6331dd810267b
SI3bd6f3f9a8dfd5d8
SI3c633713d45fe153
SI43665eba4b112e61
SI46b4330c0025ee35
SI46feee5970000e9a
SI4708fc53d48f6341
SI4b3462f62530edcd
SI4b9c60f79bb4a586
SI4cf313784f059362
SI4dd366eb61ea9f19
SI4ea5bb6088373827
SI51c9fdbcfe92d512
SI54d10871821b7413
SI565e3a2f4880c993
SI5705d18b0f1a3f16
SI58c3a3c66c2dcf2e
SI5c335fd80f71405f
SI5d396f2b3045aa28
SI5ea28794c6d3baba
SI5fda06c9571a2739
SI60a64636c44dc75a
SI60a8499dec5aed14
SI639e09cf647bf739
SI63b8d075e85fcd75
SI64d099fc45565bfa
SI69397763836898ec
SI6a0c6e709e15324c
SI6a2ad2229e707897
SI6a521ecddeccce0c
SI6d0a04aa40b1d0be
SI6d674df0a026b436
SI6e807adb83cce4fe
SI701c20092d6df8f6
SI7373972482ee41d4
SI74a64bc0421f55a1
SI755d1c3c1c833890
SI75ecb3e85adc6d3c
SI78949697388a5e96
SI7a32cdcec151473f
SI7b9d330f146f09ff
SI7eebc71da5962123
SI815c7f80a3b5eef8
SI81c5f39b42673806
SI822a08b707fe68a4
SI83472c0e48389d38
SI835f126d08482062
SI86247b47ff2290c1
SI86b5369bcd0a5f16
SI88a3bf730522eeb7
SI8f56135a54eebe6c
SI8fdee029b5a476c8
SI9076e178c2192f17
SI974bf1aef20016c3
SI99ab6591e47e8490
SI9b14b0fecb540943
SI9bea79209e38cadd
SI9beae695f65c8831
SI9c19dd97f212203b
SI9f5b0dd1908eae02
SI9fa7624fb4a3ef18
SIa1359c7ddb788e81
SIa16fd5b8861b40f7
SIa3cfb4dc038d6b7b
SIa435290dc4fed878
SIa7c7aff5999381c9
SIa8d64936cf3d3396
SIa95fe43298017f9c
SIaa735a3d29d588fc
SIab55c0054cb53cce
SIadbe0d11829a42f8
SIaec1e040fbe08406
SIaed2151329e04128
SIaf4954b738baecfc
SIb508c6bf9beb3e9a
SIb59aec3e80324999
SIb81cef84dc3b0916
SIb874ea750b169d2e
SIbab6e4e180a52e70
SIbb99021fa0152f3f
SIbc043d214978b5bc
SIbc16c60b056f643d
SIbcf0a4d41086373a
SIc08b73ebfbb13340
SIc277bdfbcf3dff4b
SIc2cfa96c9b044069
SIc32418368cbcf873
SIc3837aac51e8bbaf
SIc3b220bdbc2e5576
SIc4039b7c3e210259
SIc53555cd1701ed0d
SIc6194b25761121c0
SIc91b167fae8dfb07
SIcbadd189048f97ba
SIcda1a6f489751edc
SIce71c3f8f99ece00
SId078679204df341a
SId41f539240319963
SId46029ecf036c63b
SId4ba3ad67ad9db4e
SId71afd21d39232f8
SIda0d9076505bb3dc
SIddef7bd33583175c
SIdf1d803f3bd21209
SIe23e3bca0c3096fb
SIe28e961eed744765
SIe386f0ab147769f3
SIe6a093425765e588
SIe7f52a8f2a2d8221
SIeae31eec529d37a9
SIec03556e990d20b0
SIee96c99a7ab5b96a
SIef44ff86e552c514
SIf11151b3442788f9
SIf19a905eec4b4b07
SIf4d4989f6d9d28df
SIf573131bc065fe3e
SIf7bf6ffc897e797a
SIf8ad0e9245ddf3cc
SIfadb4b14b2f47129
SIfc98bf629d788180
SIff580cc923329e69
_SI014eca66bae0efcf@112
_SI06bed3270468d254@12
_SI06e8a47a5d91ab7a@4
_SI084e4b7e555a73d5@8
_SI0fc933ae7753ba2a@12
_SI0fe9852cad13a1dd@4
_SI0fea42093af2ef7e@12
_SI1e1b2cd59cde5330@8
_SI25b2c5950dc91a64@4
_SI2b2b2dea9ca1acd8@8
_SI2f73a7c5ee9a4bdd@0
_SI3137cbacf0be79c7@24
_SI3a032e64e8b6efc7@36
_SI3eae3b91c35710f2@20
_SI4c7f2fc8244e8e97@8
_SI5b712222451f3649@4
_SI62c552c673d475ad@8
_SI66b6b72478589163@8
_SI6bcaa289d733b1bd@32
_SI72523c81bf843ecb@4
_SI760cc6e2cdd0a43f@12
_SI783606e3653f423b@4
_SI7b300ecd0b0a9714@20
_SI833a819c5aa36754@12
_SI8631656e3aea13dc@12
_SI87cee07b7057dc04@12
_SI8a2dc94877dfc2d1@12
_SI8fa4445a262be3f3@16
_SI907414cd4dd4ccca@12
_SI9509afa4eb3cb331@20
_SI9b7a6028d7d86345@12
_SI9c93f804068bab24@4
_SI9ec42a09bc865f9d@12
_SIa3d1a56d33c20e24@12
_SIa9f630d42a76f7cd@4
_SIaf3601f18c86084d@12
_SIaffa6236faa54566@12
_SIb74383fac3d1af7f@12
_SIc2e589911405f758@8
_SIcb9cc9ac78fbd1af@4
_SId65ac95447641462@12
_SId8b20e53eb8cb070@8
_SIe031ee2b91609a9c@12
_SIe131f9d31b1382e3@44
_SIe8e430baaa1c4f12@12
_SIeb8dfc915728294f@8
_SIec106ab1cd675af2@40
_SIec703e0011ef212b@4
_SIf22f12c8b4a1025a@8
_SIf575ada1f51bf6c0@0
_SIffea2854e3834cb4@12
sqlite3_compress_init
sqlite3_cryptoapi_init
sqlite3_fts5_init
sqlite3_fts_init
sqlite3_percentile_init
sqlite3_regexp_init
sqlite3_sha_init
sqlite3_shathree_init
sqlite3_totype_init
sqlite3_vtshim_init
sqlite3_zipfile_init
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
185KB
Virtual Size
184KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=50, id=241, version=40116,
count=144, id=243, version=40116,
count=39, id=242, version=40116,
count=24, id=259, version=24123,
count=21, id=261, version=24123,
count=15, id=260, version=24123,
count=10, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=203, version=65501,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=155, id=1, productName=Unmarked objects,
count=1, id=264, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,