How to remove sqlite3.dll

sqlite3.dll

The module sqlite3.dll has been detected as Trojan.Packed

sqlite3.dll

sqlite3.dll is a Windows file recorded in the ThreatInfo database. The current detection status is Trojan.Packed, based on the latest analysis from 2024-01-12 23:46:58 (2 years ago).

If sqlite3.dll appears on your computer unexpectedly, treat it as suspicious. Check its location, digital signature, and recent system changes before allowing it to run. A full anti-malware scan is recommended when this file is detected as Trojan.Packed.

MD5: 53d007ad53adf7f628434969bf517592
Size: 555 KB
First Published: 2017-09-04 13:13:51 (8 years ago)
Latest Published: 2024-01-12 23:46:58 (2 years ago)
Status: Trojan.Packed (on last analysis)
Analysis Date: 2024-01-12 23:46:58 (2 years ago)
Signed By: WinZip Computing
Status: Valid

The signature on sqlite3.dll is reported as valid. A valid signature helps confirm publisher identity, but it does not automatically make the file safe if the installer was bundled, abused, or downloaded from an untrusted source.

%programfiles%\winzip system utilities suite
%programfiles%

ThreatInfo has observed sqlite3.dll in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

50.0%

The strongest geographic signal for this file is United States with 50.0% of observed hits. Geographic distribution can help identify targeted campaigns, regional software bundles, or where a file is most commonly reported.

Windows 7 66.7%
Windows 10 33.3%

The most common operating system signal for sqlite3.dll is Windows 7 with 66.7% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

sqlite3.dll is identified as pe for 32 systems. The subsystem is Windows CUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x60900000
Entry Address: 0x00001058

PE Sections:

Name Size of data MD5
.text 381440 21ea300080fb1820dc4a25f581af4468
.data 3072 42b9ad9c00aaa9bd185d193559a2bcba
.rdata 39424 7aef90b0ce7fb5e5b93c71320b7ecef1
.bss 0 00000000000000000000000000000000
.edata 6656 f7f4a357c0d62d458d27041d28a341a8
.idata 2560 3c89f8262d2d35440cfa9d99c521fdd7
.CRT 512 40b045fc6438f12dc1c17c874fbf9f5c
.tls 512 fb4af6cc9ab78b534332feef80757a60
.reloc 8704 2d113727617b5e59e3c78a56acbba9a5
/4 512 eeefb2fdb921ea68aa90cf6b84bd9e45
/19 1024 004c0776d9fa8d19ec8a9fb73ff8e0a7
/35 2048 a48cf693d600085a37e3e743ad3f494c
/51 17408 afee163e2c4fdea2f4bbeaf9e7491dda
/63 3584 df6dcae20d2c3ea05908d6a5ac43fe1d
/77 3072 2b004eed965b60d5eec064cf04508103
/89 1536 1e00c3858134fff18a3ce44ec0319f11
/102 512 14f8eb767d485e23c1afdee4dcb14cef
/113 6656 b4bb5eaa97003e6ec8cfe01b957ea9f2
/124 512 60ad4279e64e3057e9da309bc9e4a413

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

More information:

Download GridinSoft Anti-Malware - Removal tool for sqlite3.dll