home

forcePlayer.dll

TODO: <产品名>

WASU Media & Network Co.,Ltd

Publisher:
TODO: <公司名>  (signed by WASU Media & Network Co.,Ltd)

Product:
TODO: <产品名>

Description:
TODO: <文件说明>

Version:
1.0.0.1

MD5:
1092025c1918416ff157ce7dd4af75cd

SHA-1:
15229afa4ef9650cc62cde631bc367529231a0e1

SHA-256:
47eca11eaca156ffa8949d3962f77f6155db52f2c132be4f6c446488f15274f5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:33:17 PM UTC  (today)

File size:
2.2 MB (2,351,584 bytes)

Product version:
1.0.0.1

Copyright:
TODO: (C) <公司名>。保留所有权利。

Original file name:
forcePlayer.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\exe\forceplayer.dll

Digital Signature
Signed by:
WASU Media & Network Co.,Ltd

Authority:
Symantec Corporation

Valid from:
3/9/2016 8:00:00 AM

Valid to:
2/21/2018 7:59:59 AM

Subject:
CN="WASU Media & Network Co.,Ltd", OU=Internet Business Dept, O="WASU Media & Network Co.,Ltd", L=hangzhou, S=Zhejiang, C=CN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
18C2AC186C38C386C779931A2CDC1DA5

File PE Metadata
Compilation timestamp:
7/21/2016 11:45:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:JAypBWzlIViG+l95Az4pblXwqf6eHhOxQ1Oda453BP9Iy4t:jeBpsK5wcMPdaMP4t

Entry address:
0xB1513

Entry point:
E9, 68, 33, 0F, 00, E9, 33, B6, 0E, 00, E9, 3E, 8E, 07, 00, E9, C1, 43, 15, 00, E9, F4, 4D, 08, 00, E9, 7F, 74, 15, 00, E9, 4A, 45, 0C, 00, E9, F5, F1, 02, 00, E9, 5E, 3C, 15, 00, E9, 0B, D6, 02, 00, E9, 26, F3, 0F, 00, E9, 61, 9C, 08, 00, E9, AC, 36, 03, 00, E9, B7, F0, 05, 00, E9, B4, 14, 16, 00, E9, 9D, E5, 12, 00, E9, 88, 0B, 0E, 00, E9, B3, 41, 15, 00, E9, 0E, 98, 11, 00, E9, D9, E2, 04, 00, E9, 24, CF, 0A, 00, E9, EF, 0E, 07, 00, E9, 8A, 65, 04, 00, E9, EB, 3F, 15, 00, E9, F0, 31, 04, 00, E9, BB, A1...
 
[+]

Entropy:
5.8161

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
1.4 MB (1,519,616 bytes)

Scan forcePlayer.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.