Der VLC media player (VLC media player) VideoLAN Malware Analyse

Hash-Typ	Wert	Aktion
MD5	25556ea1df965ccad41e65db9e255866
SHA1	674b8f7b2f60f4a43ccba17c4608d3f6a15e4b79
SHA256	f77971b5d75d97a322a2c2a4a3fd3269c4a32388c8ad7ae80b7dcc7cefe321d6
SHA512	f1a21315cd260e370241529e0d50031c2c195d0b4120b3055fa252ad7533899aa6f03c367158a514ae2213eafab53ebea4754877e40bf41c77a8357587ebb45f
ImpHash	dce96bc6319a78e5eaf9315128c98209

Grundlegende Informationen

▼

Bildbasis	`0x140000000`
Einstiegspunkt	`0x1400013d0`
Kompilierungszeit	2060-11-11 05:00:16
Prüfsumme	0x002af735 (Tatsächlich: 0x002ba314)
OS-Version	4.0
PEiD-Signaturen	`PE32+ executable (DLL) (console) x86-64, for MS Windows`
Digitale Signatur	The expected hash does not match the digest in SpcInfo
Importe	6 Bibliotheken ADVAPI32, KERNEL32, msvcrt, SHELL32, USER32, WS2_32
Exporte	764 Funktionen
Ressourcen	2 Ressourcen
Abschnitte	14 Abschnitte

Digitale Signaturen

▼

DigiCert Assured ID Root CA	DigiCert Inc (US)
DigiCert Assured ID Root CA	DigiCert Inc (US)
DigiCert SHA2 Assured ID Code Signing CA	VideoLAN (FR)
DigiCert Assured ID Root CA	DigiCert Inc (US)
DigiCert Trusted Root G4	DigiCert, Inc. (US)
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA	DigiCert (US)

Versionsinformationen

▼

CompanyName	VideoLAN
ProductName	VLC media player
ProductVersion	3,0,18,0
FileVersion	3.0.18
FileDescription	VLC media player
LegalCopyright	Copyright © 1996-2022 VideoLAN and VLC Authors
LegalTrademarks	VLC media player, VideoLAN and x264 are registered trademarks from VideoLAN
Translation	0x0409 0x04e4

PE-Abschnitte

▼

Name	Virtuelle Adresse	Virtuelle Größe	Rohgröße	Entropie	Eigenschaften	MD5
`.text`	`0x00001000`	1,490,920 bytes	1,490,944 bytes	6.41 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_64BYTES`	`4CD5B8155C0A2AFF2BA18E1B6793B8E9`
`.data`	`0x0016d000`	18,136 bytes	18,432 bytes	4.57 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_64BYTES`	`072D6D61D210A2EF6090E1030DE65D9B`
`.rdata`	`0x00172000`	1,144,752 bytes	1,144,832 bytes	7.09 (Komprimiert)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_32BYTES`	`38013FF0D4F07451080D13181A12BCA6`
`.buildid`	`0x0028a000`	53 bytes	512 bytes	0.57 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`C309C6A0E4B2462057A691FA0AC2F367`
`.pdata`	`0x0028b000`	43,860 bytes	44,032 bytes	6.10 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`14A223F8997D1C75D37F4CF1A97836E1`
`.xdata`	`0x00296000`	43,368 bytes	43,520 bytes	4.40 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`5A96C084B1806C8534979F9A9BF7F5FD`
`.bss`	`0x002a1000`	18,784 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_32BYTES`	`D41D8CD98F00B204E9800998ECF8427E`
`.edata`	`0x002a6000`	21,880 bytes	22,016 bytes	5.82 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`35B7D87582999ABBE05C1C29B03514BE`
`.idata`	`0x002ac000`	10,908 bytes	11,264 bytes	4.55 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_4BYTES`	`CB09DC81544925B66ED274DC27B6F1BD`
`.CRT`	`0x002af000`	88 bytes	512 bytes	0.24 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_8BYTES`	`2D12877EB7256D34C7F7F6B6486E2FEF`
`.tls`	`0x002b0000`	104 bytes	512 bytes	0.31 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_32BYTES`	`AFE61E906C7B5966C893BBA61A88451A`
`.rsrc`	`0x002b1000`	1,608 bytes	2,048 bytes	3.68 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_4BYTES`	`1F1A347049D1B8C25D97E028B916AC9E`
`.reloc`	`0x002b2000`	5,948 bytes	6,144 bytes	5.40 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`4E060D9C966EA4B3DD11D12A64B35FED`
`/4`	`0x002b4000`	24 bytes	512 bytes	0.42 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`A18B71916B5A01FD2922BDBC36741DD4`

Entropie-Analyse-Warnung

1 Abschnitt(e) mit erhöhter Entropie (≥6.5) - mögliche Komprimierung

Ressourcenanalyse

▼

Gesamtressourcen: 2 (1,441 Bytes)

Ressourcentyp	Anzahl	Gesamtgröße	Prozentsatz
RT_VERSION	1	844 Bytes	58.6%
RT_MANIFEST	1	597 Bytes	41.4%

Zertifikatsketten-Analyse

▼

Zertifikat #1

Betreff	DigiCert Assured ID Root CA DigiCert Inc US
Aussteller	DigiCert Assured ID Root CA
Seriennummer	`17154717934120587862167794914071425081`

Zertifikat #2

Betreff	DigiCert SHA2 Assured ID Code Signing CA DigiCert Inc US
Aussteller	DigiCert Assured ID Root CA
Seriennummer	`5364131601516814570659357524942475272`

Zertifikat #3

Betreff	VideoLAN VideoLAN FR
Aussteller	DigiCert SHA2 Assured ID Code Signing CA
Seriennummer	`5356740797042686197271446732452264212`

Zertifikat #4

Betreff	DigiCert Trusted Root G4 DigiCert Inc US
Aussteller	DigiCert Assured ID Root CA
Seriennummer	`19414496059604725969669510860671817818`

Zertifikat #5

Betreff	DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA DigiCert, Inc. US
Aussteller	DigiCert Trusted Root G4
Seriennummer	`9586110043380832440035821245782711899`

Zertifikat #6

Betreff	DigiCert Timestamp 2022 - 2 DigiCert US
Aussteller	DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
Seriennummer	`16352681515936560713148055516499426650`

Zertifikat-Verifizierungsstatus

The expected hash does not match the digest in SpcInfo

Empfehlung: Überprüfen Sie die Dateiquelle und stellen Sie sicher, dass sie von einem vertrauenswürdigen Herausgeber stammt.

Dateiname	VLC media player
Dateityp	PE32+ executable (DLL) (console) x86-64, for MS Windows
Scanner-Version	1.0.138.174
Datenbankversion	2023-09-12 20:01:59 UTC

Der VLC media player (VLC media player) Scan-Bericht

Technische Analyse

Saubere Datei

Weitere Datei scannen

Dateiidentifikation

PE-Analyse