home

crashrpt.dll

NetEase Youdao Information Technology (Beijing) Co., Ltd.

Publisher:
NetEase Youdao Information Technology (Beijing) Co., Ltd.  (signed and verified)

MD5:
0947e3c4e36a25428c1a622ecfc739b9

SHA-1:
c4bbf41e6e56156032dccd991659c1dbefcc126e

SHA-256:
fc8e763db15a878099868343d13b1436ab823a2c4cd88c6c694496d457af8a52

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 3:27:41 PM UTC  (today)

File size:
497.8 KB (509,792 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\youdao\shoppingassistant\ie\4.5\crashrpt.dll

Digital Signature
Signed by:
NetEase Youdao Information Technology (Beijing) Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
9/16/2015 8:00:00 AM

Valid to:
9/16/2018 7:59:59 AM

Subject:
CN="NetEase Youdao Information Technology (Beijing) Co., Ltd.", OU=Product Dept., O="NetEase Youdao Information Technology (Beijing) Co., Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
37ECFB2B292101C423E04CBCEAE04B1E

File PE Metadata
Compilation timestamp:
12/15/2015 6:38:47 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:I/qN+2MPMfR4P1wU60CiQN/LWC0kJQdGUf8k7wKGulHyzHkv:ivMgwUpCUCRUfVcKzlHyzHU

Entry address:
0x30B68

Entry point:
E9, 83, D8, 00, 00, E9, FE, D1, 00, 00, E9, 35, DE, 05, 00, E9, 24, 01, 01, 00, E9, DF, AA, 02, 00, E9, 1A, D5, 05, 00, E9, C7, B7, 00, 00, E9, E0, E0, 03, 00, E9, EB, 4D, 00, 00, E9, 16, A8, 05, 00, E9, 51, 4A, 01, 00, E9, 5C, 79, 00, 00, E9, 67, AE, 02, 00, E9, 32, 81, 03, 00, E9, 0D, EB, 04, 00, E9, E2, 06, 01, 00, E9, 73, 7B, 03, 00, E9, 4E, FA, 00, 00, E9, 19, 22, 01, 00, E9, 14, DA, 05, 00, E9, 0F, A8, 05, 00, E9, 8A, 90, 03, 00, E9, D7, B7, 00, 00, E9, E0, 50, 00, 00, E9, AB, 34, 03, 00, E9, E6, D2...
 
[+]

Entropy:
5.7079

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
386.5 KB (395,776 bytes)

Scan crashrpt.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.