2026102200987837.zip
- SHA256 cf8c35210f857aba722395975c07a05e7a58782262d535b9da7d410a0a67d263
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026102300987837.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026102300987837.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
CrashHunter_PC3.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
CrashHunter_PC3.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target 2026102200987837.zip
- Size 1.9MB
- Sample261023-rf4jrada63
- SHA256 cf8c35210f857aba722395975c07a05e7a58782262d535b9da7d410a0a67d263
- MD5 a9e0ec0d34aaa9b849b2fe1ad9292612
- SHA1 c41df98a7f08e40b079e35786bd39f6447a9e1b9
- SHA512 6129773f91ec0ae2d498f3d4bcba1ffef56b29a6d5dd170c30a02d9b11cdce43eabadd979cc6f1a54b24797373894e0388a577cd5040e549a7e079d3e8c96aac
- SSDEEP 49152:U+SPRCrUcJ3+PBGV8L/Zbo1mOJy+xD+M8EpqIp3h1/eY7:U+pLuPBGmbotI+F+1EAI39
- TLSH T1A3953371A0014A85552B9BDF81A958F016F4BB2EDF2E27A957117DFCE00B0EF12C58AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/CrashHunter_PC3.dll - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2026102300987837.exe
File Explorer
-
2026102200987837.zip.zip 1.9MB
-
2026102300987837.exe.exe 842KB
-
CrashHunter_PC3.dll.dll 3.2MB
2026102300987837.exe
- IMPHASH e337b8679aa3abf4b930c3c4a62eb79b
- SHA256 d6b8c8d91710c286ff640583e433e49ecfbe8d25aad389c9daa8dd4d63eb49a4
- MD5 99a5981ac05ac6527ee9ffc997374234
- SHA1 2b3645bbc53ede41df033d26a55b02f1c616cfc1
- SHA512 586d17afb10826d485a70ebb9fc3b5575f019e94ee5e4bd4d3032d97faaff16f93d17f4c85430a85ef4913587c75532d1df45f3065d63444bd2f16f6cf1e0a8d
- SSDEEP 12288:T4nlIWnN2rfmfOlso02Qz72EnAonrkUkPYsAvwtOw:BWnYr+OsoHQziEAMBhYtOw
- TLSH T1E7059C5DB2A404E9D47B9139C9C13A37E6B2B845076097CB13A0966A2F336D31FFE721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
251596
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\tx4\repo\messiah_multiprocess_patch\Engine\Binaries\Win64Publish\Tianxia_x64r.pdb
crashhunter_pc3
?getInstance@MyCrashHandler@@SAPEAV1@XZ
kernel32
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryExA
GetCurrentProcess
TerminateProcess
CreateProcessW
GetLastError
CloseHandle
FlushFileBuffers
ReadFile
SetHandleInformation
SetLastError
CreatePipe
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
WaitForSingleObjectEx
CreateEventW
CreateEventExW
Sleep
WaitForMultipleObjects
CreateSemaphoreW
GetExitCodeProcess
CreateThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
OpenProcess
VirtualAllocEx
VirtualQueryEx
VirtualFreeEx
GetModuleHandleW
WideCharToMultiByte
GetFullPathNameA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetStdHandle
GetEnvironmentVariableA
WriteFile
GetProcessTimes
GetCurrentProcessorNumber
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
LoadLibraryW
WriteConsoleA
GetConsoleScreenBufferInfo
LocalFree
FormatMessageA
GetLocaleInfoEx
GetCurrentDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileInformationByHandle
GetFullPathNameW
AreFileApisANSI
GetModuleFileNameW
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
InitializeSListHead
GetCurrentProcessId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedPushEntrySList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleHandleExW
ExitProcess
HeapFree
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
SetStdHandle
GetTimeZoneInformation
HeapReAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
HeapSize
WriteConsoleW
SetEndOfFile
SwitchToThread
RtlUnwind
user32
MessageBoxA
advapi32
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
Name
.text
Size
441KB
Virtual Size
440KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
120KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
23KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
190KB
Virtual Size
190KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=30795,
count=186, id=261, version=30795,
count=19, id=260, version=30795,
count=10, id=259, version=34321,
count=18, id=260, version=34321,
count=87, id=261, version=34321,
count=1, id=260, version=34435,
count=6, id=257, version=30795,
count=3, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=190, id=1, productName=Unmarked objects,
count=20, id=261, version=34435,
count=1, id=255, version=34435,
count=1, id=151,
count=1, id=258, version=34435,
CrashHunter_PC3.dll
- IMPHASH 41393f3d0ba040cb7b54434a049fc3d2
- SHA256 3bd98d25a3aa321491c43bb33799c0fff9cdb9dbcb5ef76138c722a39fda9db2
- MD5 0e94a4e040151e7782d53f2cda9bd171
- SHA1 76244ed02469af10eab530165f2ffe854b4e08ec
- SHA512 2f41e817b2b81007648b9f6089dc177f84be18abafea28783c5f023fffe34500bb175a6f27ce0b658072fddaee4ddae69bce31b339eac3a111f1f9232e78613d
- SSDEEP 49152:FG289s6Jkgvu2hhs/9+Y9bkJupkFeKrJkqGkUPpT9HFPFYTVu521rQjoCd:g28nnlYatkUUP3H/612d
- TLSH T1EDF58C16B7A800E4D9B7C23CCA978607E7B2B4159370DBDF06A4467A2F23BE1563E750
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
62:ef:92:2c:e9:63:bd:ab:d9:a9:c6:5a:6c:39:fe:49:a3:4d:50:f1:2a:d3:97:a4:db:95:17:99:3b:44:a6:cd
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91330000788831167A,CN=NetEase (Hangzhou) Network Co.\, Ltd,O=NetEase (Hangzhou) Network Co.\, Ltd,L=杭州市,ST=浙江省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Apr 11, 2025
SERIALNUMBER=91330000788831167A,CN=NetEase (Hangzhou) Network Co.\, Ltd,O=NetEase (Hangzhou) Network Co.\, Ltd,L=杭州市,ST=浙江省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=91330000788831167A,CN=NetEase (Hangzhou) Network Co.\, Ltd,O=NetEase (Hangzhou) Network Co.\, Ltd,L=杭州市,ST=浙江省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=91330000788831167A,CN=NetEase (Hangzhou) Network Co.\, Ltd,O=NetEase (Hangzhou) Network Co.\, Ltd,L=杭州市,ST=浙江省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
0a:7d:c0:32:ca:30:8f:7f:f2:d5:94:1a:85:b6:29:8a
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 26, 2024 - Aug 28, 2027
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
2264472
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
G:\CrashHunterSDK\wcrashhandler\tmpbuild\Release_x64_v140\CrashHunter_PC3.pdb
dbghelp
SymFunctionTableAccess64
SymGetModuleBase64
StackWalk64
SymInitialize
MiniDumpWriteDump
SymGetModuleInfoW64
SymEnumerateModulesW64
SymRefreshModuleList
SymRegisterCallbackW64
SymInitializeW
SymCleanup
kernel32
CreateEventW
SetThreadPriority
WaitForSingleObject
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToDosDateTime
FindClose
GetSystemTime
GetTimeZoneInformation
GetModuleFileNameW
CreateToolhelp32Snapshot
Process32NextW
CreateFileW
GetFileSize
ReadFile
DeleteFileW
GetFileSizeEx
FormatMessageW
LocalFree
FindNextFileW
RemoveDirectoryW
MoveFileW
GetFileTime
IsDebuggerPresent
Sleep
GetCurrentDirectoryW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
lstrcpyA
WriteConsoleW
GetStdHandle
WriteConsoleA
CreateThread
CopyFileW
InitializeCriticalSection
RtlCaptureStackBackTrace
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
CreateProcessW
OpenThread
GetLocalTime
WideCharToMultiByte
MultiByteToWideChar
CreateTimerQueue
CreateTimerQueueTimer
DeleteTimerQueueEx
DeleteTimerQueueTimer
WerRegisterRuntimeExceptionModule
InitializeCriticalSectionEx
DeleteCriticalSection
SleepEx
QueryPerformanceFrequency
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
QueryPerformanceCounter
GetTickCount
MoveFileExA
SetEvent
CompareFileTime
GetSystemTimeAsFileTime
GetEnvironmentVariableA
GetFileType
PeekNamedPipe
VerSetConditionMask
VerifyVersionInfoA
SystemTimeToFileTime
GetEnvironmentVariableW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
WriteFile
GetModuleHandleExW
GlobalMemoryStatus
SetFilePointer
GetFullPathNameW
SetEndOfFile
ResetEvent
WaitForMultipleObjects
RaiseException
LoadLibraryExW
SuspendThread
GetCurrentThread
SetThreadContext
GetThreadContext
ResumeThread
GetCurrentThreadId
VirtualFree
VirtualAlloc
FlushInstructionCache
VirtualProtect
VirtualQuery
GetCurrentProcess
K32GetModuleBaseNameW
K32EnumProcessModules
GlobalMemoryStatusEx
GetLastError
GetVersionExW
GetSystemInfo
GetProcAddress
HeapSize
GetModuleHandleW
SetStdHandle
FlushFileBuffers
EnumSystemLocalesW
CloseHandle
K32GetProcessMemoryInfo
OpenProcess
GetCurrentProcessId
FileTimeToSystemTime
GetProcessHeap
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
FreeLibrary
WaitForSingleObjectEx
GetDateFormatW
GetACP
GetConsoleCP
HeapReAlloc
HeapFree
HeapAlloc
ExitProcess
GetModuleFileNameA
SetFilePointerEx
GetDriveTypeW
CreateDirectoryW
SetConsoleCtrlHandler
GetFileAttributesExW
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
ExitThread
RtlUnwindEx
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
FreeLibraryAndExitThread
GetThreadTimes
OutputDebugStringW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
DecodePointer
EncodePointer
RtlPcToFileHeader
GetStringTypeW
DuplicateHandle
TryEnterCriticalSection
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
user32
GetProcessWindowStation
EnumDisplayDevicesA
MessageBoxW
GetUserObjectInformationW
gdi32
D3DKMTQueryAdapterInfo
D3DKMTOpenAdapterFromDeviceName
D3DKMTCloseAdapter
D3DKMTQueryStatistics
advapi32
CryptGenRandom
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetKeyValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
RegOpenKeyExA
shell32
SHGetPathFromIDListW
SHGetSpecialFolderLocation
cfgmgr32
CM_Get_Device_Interface_PropertyW
CM_Locate_DevNodeW
CM_Get_Device_Interface_List_SizeW
CM_Get_Device_Interface_ListW
CM_Get_DevNode_PropertyW
rpcrt4
RpcStringFreeA
UuidToStringA
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
wldap32
ord143
ord217
ord46
ord211
ord60
ord45
ord50
ord41
ord22
ord26
ord27
ord32
ord33
ord35
ord30
ord200
ord301
ord79
ws2_32
WSAEnumNetworkEvents
WSACreateEvent
WSAEventSelect
send
WSAResetEvent
WSAWaitForMultipleEvents
closesocket
WSAGetLastError
recv
bind
connect
getpeername
getsockname
getsockopt
htons
ntohs
setsockopt
socket
WSASetLastError
WSAIoctl
WSAStartup
WSACleanup
__WSAFDIsSet
select
accept
htonl
listen
getaddrinfo
freeaddrinfo
recvfrom
sendto
ioctlsocket
gethostname
shutdown
getnameinfo
WSACloseEvent
crypt32
CertGetCertificateContextProperty
CertFindCertificateInStore
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateContext
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertOpenSystemStoreA
CertDuplicateCertificateContext
CertOpenStore
?GetInstance@AppDumpWorker@@SAPEAV1@XZ
?getInstance@MyCrashHandler@@SAPEAV1@XZ
addFiles
captureStackBackTrace
endCrashHunter
frameCallback
getAutoUploadMode
getBranch
getCrashHandlerInstance
getDebugMode
getDumpDir
getDumpType
getFullDumpDir
getParam
getSdkVersion
getStartUpNumberURL
getUploadURL
initWithFile
isLastTimeCrash
ntExtendFunc
postFile
postFileEx
postOtherError
postScriptError
safelyBindCondition
safelyUnbindCondition
setAutoUploadMode
setBranch
setCrashCallback
setCrashCallbackEx
setDebugMode
setDumpDir
setDumpType
setFullDumpDir
setHost
setParam
setPostCallback
setUrl
startCrashHunter
Name
.text
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
829KB
Virtual Size
828KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
79KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
124KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.lzsqoj3
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=190, id=243, version=40116,
count=30, id=242, version=40116,
count=6, id=199, version=41118,
count=8, id=259, version=24123,
count=112, id=261, version=24123,
count=41, id=260, version=24123,
count=672, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=27, id=203, version=65501,
count=328, id=1, productName=Unmarked objects,
count=26, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,