| Dateiname | potplayer.exe |
| Dateityp |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Scanner-Version | 1.0.150.174 |
| Datenbankversion | 2023-11-29 05:01:01 UTC |
Malware-Familie: RussAd
| Hash-Typ | Wert | Aktion |
|---|---|---|
| MD5 |
885efbbd206e70189026e08ff59d6ce6
|
|
| SHA1 |
12677409b7084e988e9d275f77b36f9814c37553
|
|
| SHA256 |
672220ee5f10c08f386f4667e5c85e38be2814f44868ee9a5dcffb86101b334b
|
|
| SHA512 |
876dafc34d8985c3947ca5f1d70094540f42f83832237d83a804d77fda6d350bde5a62d600d41563db73a1f28cf736e5eae880355b3d89c245c8caf3c100c21a
|
|
| ImpHash |
20dd26497880c05caed9305b3c8b9109
|
| Symbol |
Hash: acc7b0d2685eb6c9ad24ee788dc220c2
Unscharf: b108bd000ddab4b449fb1148b0c48bb3 dHash: 33cc9af2f29acc33 |
| Bildbasis | 0x00400000 |
| Einstiegspunkt | 0x0041181c |
| Kompilierungszeit | 2018-06-14 13:27:46 |
| Prüfsumme | 0x0268d082 (Tatsächlich: 0x0268d082) |
| OS-Version | 5.0 |
| PEiD-Signaturen |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Digitale Signatur | OK |
| Importe |
5 Bibliotheken
oleaut32, advapi32, user32, kernel32, comctl32 |
| Exporte | 0 Funktionen |
| Ressourcen | 25 Ressourcen |
| Abschnitte | 8 Abschnitte |
| Sectigo RSA Time Stamping CA | Sectigo Limited (GB) |
| USERTrust RSA Certification Authority | Sectigo Limited (GB) |
| AAA Certificate Services | Comodo CA Limited (GB) |
| AAA Certificate Services | The USERTRUST Network (US) |
| USERTrust RSA Certification Authority | Sectigo Limited (GB) |
| Sectigo RSA Code Signing CA | LID LABS, OOO (RU) |
| Comments | This installation was built with Inno Setup. |
| CompanyName | |
| FileDescription | PotPlayer Setup (r2311290500) |
| FileVersion | |
| LegalCopyright | |
| ProductName | PotPlayer |
| ProductVersion | |
| Translation | 0x0000 0x04b0 |
| Name | Virtuelle Adresse | Virtuelle Größe | Rohgröße | Entropie | Eigenschaften | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
62,044 bytes | 62,464 bytes | 6.38 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
0DA5D73FFBC41792FA65A09058A91476 |
.itext |
0x00011000 |
4,004 bytes | 4,096 bytes | 5.78 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
2EB275566563C3F1D0099A0DA7345B74 |
.data |
0x00012000 |
3,212 bytes | 3,584 bytes | 2.30 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
73B859E23F5FD17E00C08DB2E0E73DFE |
.bss |
0x00013000 |
22,204 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x00019000 |
3,588 bytes | 4,096 bytes | 4.60 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
E9B9C0328FD9628AD4D6AB8283DCB20E |
.tls |
0x0001a000 |
8 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rdata |
0x0001b000 |
24 bytes | 512 bytes | 0.20 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
3DFFC444CCC131C9DCEE18DB49EE6403 |
.rsrc |
0x0001c000 |
200,704 bytes | 198,144 bytes | 4.52 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
001CA8F5D642D550D5602A8553581137 |
| Ressourcentyp | Anzahl | Gesamtgröße | Prozentsatz |
|---|---|---|---|
| RT_ICON | 12 | 157,233 Bytes | |
| RT_STRING | 6 | 2,668 Bytes | |
| RT_RCDATA | 4 | 33,908 Bytes | |
| RT_GROUP_ICON | 1 | 118 Bytes | |
| RT_VERSION | 1 | 1,268 Bytes | |
| RT_MANIFEST | 1 | 1,580 Bytes |
| Betreff |
Sectigo RSA Time Stamping Signer #4 Sectigo Limited GB |
| Aussteller | Sectigo RSA Time Stamping CA |
| Seriennummer | 76161378635050837295056099126206603988 |
| Betreff |
Sectigo RSA Time Stamping CA Sectigo Limited GB |
| Aussteller | USERTrust RSA Certification Authority |
| Seriennummer | 63883093293784159655322269805543173561 |
| Betreff |
AAA Certificate Services Comodo CA Limited GB |
| Aussteller | AAA Certificate Services |
| Seriennummer | 1 |
| Betreff |
USERTrust RSA Certification Authority The USERTRUST Network US |
| Aussteller | AAA Certificate Services |
| Seriennummer | 76359301477803385872276235234032301461 |
| Betreff |
Sectigo RSA Code Signing CA Sectigo Limited GB |
| Aussteller | USERTrust RSA Certification Authority |
| Seriennummer | 39390228139828865494873669055555031914 |
| Betreff |
LID LABS, OOO LID LABS, OOO RU |
| Aussteller | Sectigo RSA Code Signing CA |
| Seriennummer | 238784519719654851391842345780850118558 |
OK
Gridinsoft hat die Fähigkeit, Adware.Win32.RussAd.dd!c zu identifizieren und ohne weitere Benutzereingriffe zu entfernen.
Anti-Malware herunterladenBefolgen Sie diese Schritte, um die Bedrohung vollständig von Ihrem System zu entfernen
Befreien Sie Ihren PC von jeder Art von Malware
GridinSoft Anti-Malware hilft Ihnen, Ihren Computer vor Spyware, Trojanern, Hintertüren, Rootkits. Es reinigt Ihr System von lästigen Werbemodulen und anderen bösartigen Dingen, die von Hackern entwickelt wurden.
