Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6403_us	July 8, 2024, 10:35 a.m.	July 8, 2024, 10:36 a.m.

Size	922.8KB
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`1afdf73c0d1ba126c63927b423c55205`
SHA256	`271517dc4421fc19495b052cf22ae3f3d28a6d5c8edebddbc2b60671edc8ce7c`
CRC32	`89B310AA`
ssdeep	`12288:SQtOANnC7/Mh9G5eExTmZlnVCMhvLpllJ/bWngmdMZWd6OtNosq5R:S1IG5eERmZlVCGv3/2XM2Nov`
PDB Path	D:\BWA\FA5C15B4-3166-0\SQLite-303.2\srcroot\VisualStudio\x64\Release\SQLite3.pdb
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature ASPack_Zero - ASPack packed file IsDLL - (no description) IsPE64 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check

rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_aggregate_count
2140
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_aggregate_count
  2412
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_aggregate_context
1132
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_aggregate_context
  2524
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_auto_extension
2232
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_auto_extension
  2504
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_backup_finish
2324
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_backup_finish
  2644
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_backup_init
2452
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_backup_init
  2700
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_backup_pagecount
2632
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_backup_pagecount
  2884
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_backup_remaining
2824
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_backup_remaining
  1680
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_backup_step
3000
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_backup_step
  2184
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_blob
2108
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_blob
  2496
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_blob64
2344
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_blob64
  2676
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_double
2556
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_double
  2996
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_int
2508
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_int
  2136
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_int64
2072
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_int64
  2860
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_null
2748
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_null
  2436
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_parameter_count
2984
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_parameter_count
  2216
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_parameter_index
2864
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_parameter_index
  2464
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_parameter_name
2720
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_parameter_name
  3088
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_pointer
3080
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_pointer
  3356
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_text
3220
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_text
  3468
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_text16
3336
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_text16
  3612
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_text64
3488
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_text64
  3668
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_value
3604
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_value
  3832
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_zeroblob
3820
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_zeroblob
  4056
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_zeroblob64
3996
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_bind_zeroblob64
  3176
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_blob_bytes
3160
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_blob_bytes
  3428
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_blob_close
3352
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_blob_close
  3752
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_blob_open
3516
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_blob_open
  3928
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_blob_read
3852
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_blob_read
  3348
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_blob_reopen
1508
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_blob_reopen
  3532
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_blob_write
3096
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_blob_write
  3688
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_busy_handler
3712
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_busy_handler
  3504
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_busy_timeout
3204
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_busy_timeout
  3380
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_cancel_auto_extension
3200
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_cancel_auto_extension
  4124
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_changes
3324
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_changes
  4224
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_clear_bindings
4256
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_clear_bindings
  4492
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_close
4364
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_close
  4664
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_close_v2
4556
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_close_v2
  4784
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_collation_needed
4656
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_collation_needed
  4872
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_collation_needed16
4812
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_collation_needed16
  5112
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_blob
4988
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_blob
  4212
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_bytes
5088
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_bytes
  4548
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_bytes16
4220
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_bytes16
  4680
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_count
4508
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_count
  4848
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_database_name
4868
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_database_name
  4148
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_database_name16
5084
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_database_name16
  4396
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_decltype
4456
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_decltype
  5060
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_decltype16
4772
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_decltype16
  4304
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_double
4284
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_double
  4120
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_int
4816
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_int
  4828
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_int64
4688
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_int64
  4760
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_name
4892
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_name
  5040
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_name16
4076
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_name16
  5308
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_origin_name
5168
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_origin_name
  5464
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_origin_name16
5280
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_origin_name16
  5492
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_table_name
5456
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_table_name
  5748
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_table_name16
5664
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_table_name16
  5884
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_text
5796
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_text
  6052
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_text16
5932
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_text16
  5184
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_type
6028
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_type
  5372
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_value
4544
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_column_value
  5444
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_commit_hook
5516
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_commit_hook
  5836
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_compileoption_get
5772
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_compileoption_get
  5336
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_compileoption_used
6112
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_compileoption_used
  5652
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_complete
5488
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_complete
  6072
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_complete16
5972
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_complete16
  5548
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_config
5132
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_config
  5608
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_context_db_handle
5468
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_context_db_handle
  5480
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_create_collation
5100
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_create_collation
  6172
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\App.dll,sqlite3_create_collation16
5252

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Checks if process is being debugged by a debugger (50 out of 66 events)

Time & API	Arguments	Status	Return	Repeated
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0
IsDebuggerPresent July 8, 2024, 10:35 a.m.			0	0

This executable has a PDB path (1 event)

pdb_path

D:\BWA\FA5C15B4-3166-0\SQLite-303.2\srcroot\VisualStudio\x64\Release\SQLite3.pdb

One or more processes crashed (32 events)

Time & API	Arguments	Status
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_aggregate_count+0x4 sqlite3_column_count-0xc app+0x2fdd4 @ 0x7fef3d9fdd4 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 8b 40 0c c3 cc cc cc cc cc cc cc cc 48 85 c9 74 exception.instruction: mov eax, dword ptr [rax + 0xc] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_aggregate_count+0x4 sqlite3_column_count-0xc app+0x2fdd4 exception.address: 0x7fef3d9fdd4 registers.r14: 0 registers.r15: 0 registers.rcx: 196648 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 2162256 registers.r11: 2161344 registers.r8: 2539940 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 0 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_aggregate_context+0xa sqlite3_get_auxdata-0x16 app+0x2fc8a @ 0x7fef3d9fc8a rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 66 44 85 40 08 0f 84 0b ff ff ff 48 8b 40 10 c3 exception.instruction: test r8w, word ptr [rax + 8] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_aggregate_context+0xa sqlite3_get_auxdata-0x16 app+0x2fc8a exception.address: 0x7fef3d9fc8a registers.r14: 0 registers.r15: 0 registers.rcx: 65890 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1441504 registers.r11: 1440592 registers.r8: 8192 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 28452325566165 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_backup_finish+0x24 sqlite3_backup_remaining-0x10c app+0x26b34 @ 0x7fef3d96b34 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 4e 18 48 85 c9 74 06 ff 15 fd 1e 0b 00 48 exception.instruction: mov rcx, qword ptr [rsi + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_backup_finish+0x24 sqlite3_backup_remaining-0x10c app+0x26b34 exception.address: 0x7fef3d96b34 registers.r14: 0 registers.r15: 0 registers.rcx: 131428 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1833344 registers.r11: 1832432 registers.r8: 2736544 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 131428 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 4282777600 registers.r15: 0 registers.rcx: 17179869184 registers.rsi: 2277756 registers.r10: 0 registers.rbx: 65898 registers.rsp: 1111736 registers.r11: 1111424 registers.r8: 2277756 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 10 registers.rbp: 10 registers.rdi: 65898 registers.rax: 65898 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_backup_step+0x1a sqlite3_backup_finish-0x7a6 app+0x2636a @ 0x7fef3d9636a rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 c7 26 0b 00 48 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_backup_step+0x1a sqlite3_backup_finish-0x7a6 app+0x2636a exception.address: 0x7fef3d9636a registers.r14: 0 registers.r15: 0 registers.rcx: 196974 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1638128 registers.r11: 1637216 registers.r8: 2670972 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 39406496739885056 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_column_origin_name16+0x7e sqlite3_bind_blob-0x262 app+0x306ce @ 0x7fef3da06ce sqlite3_column_origin_name16+0x1fa sqlite3_bind_blob-0xe6 app+0x3084a @ 0x7fef3da084a sqlite3_bind_blob+0x18 sqlite3_bind_blob64-0x8 app+0x30948 @ 0x7fef3da0948 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 63 83 0a 00 81 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_column_origin_name16+0x7e sqlite3_bind_blob-0x262 app+0x306ce exception.address: 0x7fef3da06ce registers.r14: 0 registers.r15: 0 registers.rcx: 65906 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 2750992 registers.r11: 2750080 registers.r8: 3981688 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 118913873283405 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_column_origin_name16+0x7e sqlite3_bind_blob-0x262 app+0x306ce @ 0x7fef3da06ce sqlite3_column_origin_name16+0x1fa sqlite3_bind_blob-0xe6 app+0x3084a @ 0x7fef3da084a sqlite3_bind_blob64+0x3f sqlite3_bind_double-0x11 app+0x3098f @ 0x7fef3da098f rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 63 83 0a 00 81 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_column_origin_name16+0x7e sqlite3_bind_blob-0x262 app+0x306ce exception.address: 0x7fef3da06ce registers.r14: 0 registers.r15: 0 registers.rcx: 65910 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 2357520 registers.r11: 2356608 registers.r8: 3654012 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 18780 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_strnicmp+0x1069 sqlite3_win32_write_debug-0xb57 app+0x8ba9 @ 0x7fef3d78ba9 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 44 8b 79 04 bb 02 00 00 00 4d 63 f0 66 66 66 0f exception.instruction: mov r15d, dword ptr [rcx + 4] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_strnicmp+0x1069 sqlite3_win32_write_debug-0xb57 app+0x8ba9 exception.address: 0x7fef3d78ba9 registers.r14: 0 registers.r15: 0 registers.rcx: 6081550434164540128 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 850976 registers.r11: 850064 registers.r8: 3 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 3 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: 0x12f8f0 sqlite3_bind_pointer+0x9d sqlite3_bind_text-0x23 app+0x30b8d @ 0x7fef3da0b8d rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 00 00 d7 f3 fe 07 00 00 01 00 00 00 02 ca 01 10 exception.instruction: add byte ptr [rax], al exception.exception_code: 0xc0000005 exception.symbol: exception.address: 0x12f8f0 registers.r14: 0 registers.r15: 0 registers.rcx: 2670974 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1243824 registers.r11: 1243160 registers.r8: 8791594841820 registers.r9: 82567 registers.rdx: 8791594841768 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 1243376 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: 0x15fc70 sqlite3_column_origin_name16+0x2be sqlite3_bind_blob-0x22 app+0x3090e @ 0x7fef3da090e sqlite3_bind_text+0x18 sqlite3_bind_text64-0x8 app+0x30bc8 @ 0x7fef3da0bc8 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 00 00 d7 f3 fe 07 00 00 01 00 00 00 30 ca 01 10 exception.instruction: add byte ptr [rax], al exception.exception_code: 0xc0000005 exception.symbol: exception.address: 0x15fc70 registers.r14: 0 registers.r15: 0 registers.rcx: 2867576 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1441328 registers.r11: 1440584 registers.r8: 8791594841820 registers.r9: 82567 registers.rdx: 1440880 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 1440879 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: 0x1bf6a0 sqlite3_column_origin_name16+0x2be sqlite3_bind_blob-0x22 app+0x3090e @ 0x7fef3da090e sqlite3_bind_text16+0x18 sqlite3_bind_value-0x8 app+0x30c38 @ 0x7fef3da0c38 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 00 00 d7 f3 fe 07 00 00 01 00 00 00 ec ca 01 10 exception.instruction: add byte ptr [rax], al exception.exception_code: 0xc0000005 exception.symbol: exception.address: 0x1bf6a0 registers.r14: 0 registers.r15: 0 registers.rcx: 2998652 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1833056 registers.r11: 1832312 registers.r8: 8791594841820 registers.r9: 82567 registers.rdx: 1832608 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 1832607 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: 0x24f740 sqlite3_column_origin_name16+0x2be sqlite3_bind_blob-0x22 app+0x3090e @ 0x7fef3da090e rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 00 00 d7 f3 fe 07 00 00 01 00 00 00 1b cb 01 10 exception.instruction: add byte ptr [rax], al exception.exception_code: 0xc0000005 exception.symbol: exception.address: 0x24f740 registers.r14: 0 registers.r15: 0 registers.rcx: 4374908 registers.rsi: 0 registers.r10: 4282777600 registers.rbx: 0 registers.rsp: 2423040 registers.r11: 2422360 registers.r8: 8791594841820 registers.r9: 82567 registers.rdx: 2422592 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 2422591 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_bind_zeroblob64+0x1a sqlite3_bind_parameter_count-0x76 app+0x30e5a @ 0x7fef3da0e5a rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 41 18 48 85 c0 74 0c 48 8b c8 ff 15 d4 7b exception.instruction: mov rax, qword ptr [rcx + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_bind_zeroblob64+0x1a sqlite3_bind_parameter_count-0x76 app+0x30e5a exception.address: 0x7fef3da0e5a registers.r14: 0 registers.r15: 0 registers.rcx: 23925703733084160 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1505808 registers.r11: 1504896 registers.r8: 3129764 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 131862 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_blob_close+0x20 sqlite3_blob_read-0x200 app+0x38300 @ 0x7fef3da8300 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 4f 18 48 85 c9 74 06 ff 15 31 07 0a 00 48 exception.instruction: mov rcx, qword ptr [rdi + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_blob_close+0x20 sqlite3_blob_read-0x200 app+0x38300 exception.address: 0x7fef3da8300 registers.r14: 0 registers.r15: 0 registers.rcx: 66360 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1703424 registers.r11: 1702512 registers.r8: 3850618 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 66360 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 1950072 registers.r15: 66396 registers.rcx: 56 registers.rsi: 0 registers.r10: 0 registers.rbx: 56 registers.rsp: 1046168 registers.r11: 1046544 registers.r8: 66396 registers.r9: 10 registers.rdx: 56 registers.r12: 0 registers.rbp: 10 registers.rdi: 1950104 registers.rax: 55 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_blob_close+0x117 sqlite3_blob_read-0x109 app+0x383f7 @ 0x7fef3da83f7 sqlite3_blob_read+0x15 sqlite3_blob_write-0xb app+0x38515 @ 0x7fef3da8515 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 4f 18 48 85 c9 74 06 ff 15 3a 06 0a 00 48 exception.instruction: mov rcx, qword ptr [rdi + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_blob_close+0x117 sqlite3_blob_read-0x109 app+0x383f7 exception.address: 0x7fef3da83f7 registers.r14: 0 registers.r15: 0 registers.rcx: 66398 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1834672 registers.r11: 1833760 registers.r8: 2802040 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 8791594162544 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_blob_reopen+0x54 sqlite3_set_authorizer-0x15a1c app+0x385b4 @ 0x7fef3da85b4 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 4e 18 48 85 c9 74 06 ff 15 7d 04 0a 00 48 exception.instruction: mov rcx, qword ptr [rsi + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_blob_reopen+0x54 sqlite3_set_authorizer-0x15a1c app+0x385b4 exception.address: 0x7fef3da85b4 registers.r14: 0 registers.r15: 0 registers.rcx: 66404 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1440352 registers.r11: 1439440 registers.r8: 1950076 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 66404 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 3326330 registers.r15: 4282777600 registers.rcx: -8266339156443529077 registers.rsi: 131934 registers.r10: 0 registers.rbx: 10 registers.rsp: 1832648 registers.r11: 1832432 registers.r8: 3326330 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 10 registers.rbp: 3326208 registers.rdi: 524288 registers.rax: 8791594196048 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 313538183245 registers.rsi: 4282777600 registers.r10: 0 registers.rbx: 131984 registers.rsp: 915960 registers.r11: 915648 registers.r8: 3326334 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 10 registers.rbp: 3326208 registers.rdi: 3326334 registers.rax: 131984 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 2 registers.rsi: 66518 registers.r10: 0 registers.rbx: 0 registers.rsp: 2750328 registers.r11: 2750016 registers.r8: 3916224 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 10 registers.rbp: 3916080 registers.rdi: 3916248 registers.rax: 66518 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_clear_bindings+0x16 sqlite3_value_blob-0xba app+0x2e836 @ 0x7fef3d9e836 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 68 18 48 85 ed 74 09 48 8b cd ff 15 f8 a1 exception.instruction: mov rbp, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_clear_bindings+0x16 sqlite3_value_blob-0xba app+0x2e836 exception.address: 0x7fef3d9e836 registers.r14: 0 registers.r15: 0 registers.rcx: 132058 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1703024 registers.r11: 1702112 registers.r8: 2671010 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 32370073295388773 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 28429419331977248 registers.rsi: 4282777600 registers.r10: 0 registers.rbx: 132092 registers.rsp: 981800 registers.r11: 981488 registers.r8: 2998694 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 10 registers.rbp: 2998560 registers.rdi: 2998694 registers.rax: 132092 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 @ 0x7fef3d9fe28 sqlite3_column_blob+0x12 sqlite3_column_bytes-0x5e app+0x2fea2 @ 0x7fef3d9fea2 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 09 8c 0a 00 48 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 exception.address: 0x7fef3d9fe28 registers.r14: 0 registers.r15: 0 registers.rcx: 66596 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1637040 registers.r11: 1636128 registers.r8: 2539900 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 0 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 @ 0x7fef3d9fe28 sqlite3_column_bytes+0x12 sqlite3_column_bytes16-0x8e app+0x2ff12 @ 0x7fef3d9ff12 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 09 8c 0a 00 48 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 exception.address: 0x7fef3d9fe28 registers.r14: 0 registers.r15: 0 registers.rcx: 66592 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 851520 registers.r11: 850608 registers.r8: 2277758 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 0 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 @ 0x7fef3d9fe28 sqlite3_column_bytes16+0x12 sqlite3_column_double-0x8e app+0x2ffb2 @ 0x7fef3d9ffb2 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 09 8c 0a 00 48 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 exception.address: 0x7fef3d9fe28 registers.r14: 0 registers.r15: 0 registers.rcx: 132136 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1769120 registers.r11: 1768208 registers.r8: 2146722 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 2814947343138853 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 @ 0x7fef3d9fe28 sqlite3_column_double+0x13 sqlite3_column_int-0x8d app+0x30053 @ 0x7fef3da0053 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 09 8c 0a 00 48 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 exception.address: 0x7fef3d9fe28 registers.r14: 0 registers.r15: 0 registers.rcx: 524760 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1702672 registers.r11: 1701760 registers.r8: 3457440 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: -3133711218356183 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 @ 0x7fef3d9fe28 sqlite3_column_int+0x12 sqlite3_column_int64-0x8e app+0x300f2 @ 0x7fef3da00f2 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 09 8c 0a 00 48 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 exception.address: 0x7fef3d9fe28 registers.r14: 0 registers.r15: 0 registers.rcx: 66700 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 719168 registers.r11: 718256 registers.r8: 1556858 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 0 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 @ 0x7fef3d9fe28 sqlite3_column_int64+0x12 sqlite3_column_text-0x8e app+0x30192 @ 0x7fef3da0192 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 09 8c 0a 00 48 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 exception.address: 0x7fef3d9fe28 registers.r14: 0 registers.r15: 0 registers.rcx: 66704 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1439744 registers.r11: 1438832 registers.r8: 2998654 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 0 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 @ 0x7fef3d9fe28 sqlite3_column_text+0x12 sqlite3_column_value-0x9e app+0x30232 @ 0x7fef3da0232 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 09 8c 0a 00 48 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 exception.address: 0x7fef3d9fe28 registers.r14: 0 registers.r15: 0 registers.rcx: 328948 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 2293200 registers.r11: 2292288 registers.r8: 3457404 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 0 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 @ 0x7fef3d9fe28 sqlite3_column_text16+0x12 sqlite3_column_type-0x9e app+0x30372 @ 0x7fef3da0372 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 09 8c 0a 00 48 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 exception.address: 0x7fef3d9fe28 registers.r14: 0 registers.r15: 0 registers.rcx: 66808 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1440528 registers.r11: 1439616 registers.r8: 1884576 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 0 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 @ 0x7fef3d9fe28 sqlite3_column_type+0x12 sqlite3_column_name-0x19e app+0x30422 @ 0x7fef3da0422 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 09 8c 0a 00 48 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 exception.address: 0x7fef3d9fe28 registers.r14: 0 registers.r15: 0 registers.rcx: 66812 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 1506480 registers.r11: 1505568 registers.r8: 3064188 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 281474976710656 registers.r13: 0	1
__exception__ July 8, 2024, 10:35 a.m.	stacktrace: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 @ 0x7fef3d9fe28 sqlite3_column_value+0x12 sqlite3_column_text16-0x7e app+0x302e2 @ 0x7fef3da02e2 rundll32+0x2f42 @ 0xff462f42 rundll32+0x3b7a @ 0xff463b7a BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521 exception.instruction_r: 48 8b 48 18 48 85 c9 74 06 ff 15 09 8c 0a 00 48 exception.instruction: mov rcx, qword ptr [rax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: sqlite3_data_count+0x38 sqlite3_column_blob-0x68 app+0x2fe28 exception.address: 0x7fef3d9fe28 registers.r14: 0 registers.r15: 0 registers.rcx: 131550 registers.rsi: 0 registers.r10: 0 registers.rbx: 0 registers.rsp: 916656 registers.r11: 915744 registers.r8: 1622398 registers.r9: 10 registers.rdx: 4282777600 registers.r12: 0 registers.rbp: 0 registers.rdi: 0 registers.rax: 18014398509481984 registers.r13: 0	1

App.dll

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All