home

rustv player.exe

Rus TV Player

Publisher:
Rus TV Player

Product:
Rus TV Player

Version:
2.6.1.1

MD5:
e7da4727653b6fa3c8f16517bbfd1439

SHA-1:
5d4bb014583a11ae07b16f0a40c0f31c99c6025d

SHA-256:
a06872c789a3af2c60f88b4a4310ad0e031d102b8d548cfa6b171a79c19b258a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/5/2024 10:40:40 PM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
Troj.W32.Gen
2.1.4+

File size:
8.4 MB (8,813,568 bytes)

Product version:
2.6

Copyright:
Rus TV Player

Original file name:
Rus TV Player

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\rustv player\rustv player.exe

File PE Metadata
Compilation timestamp:
7/31/2014 1:51:14 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:+P2/ylGAp16hscJ7C0zj9o6G9o6HwHPLQLFM+Phu3LNBox+8mylPkN9fwA:F/yGbhCCBHPLQLFM+Phu3L98mkkvYA

Entry address:
0x40B618

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 20, CB, 7F, 00, E8, FF, 2D, C0, FF, 8B, 1D, 48, B9, 81, 00, 8B, 03, E8, 8E, F1, DD, FF, 8B, 03, BA, 54, B7, 80, 00, E8, 32, EB, DD, FF, 8B, 0D, 58, BD, 81, 00, 8B, 03, 8B, 15, 08, 47, 7D, 00, E8, 87, F1, DD, FF, 8B, 0D, FC, B9, 81, 00, 8B, 03, 8B, 15, 24, EA, 7C, 00, E8, 74, F1, DD, FF, 8B, 0D, B8, B8, 81, 00, 8B, 03, 8B, 15, 18, 95, 7B, 00, E8, 61, F1, DD, FF, 8B, 0D, 68, BD, 81, 00, 8B, 03, 8B, 15, F8, A8, 7B, 00, E8, 4E, F1, DD, FF, 8B, 0D, 3C, B9, 81, 00, 8B, 03, 8B, 15...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
4 MB (4,234,240 bytes)

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to static.131.23.46.78.clients.your-server.de  (78.46.23.131:80)

TCP (HTTP):
Connects to host52-203.promobit.ru  (193.169.52.203:80)

TCP (HTTP):
Connects to 95-30-216-93.broadband.corbina.ru  (95.30.216.93:80)

Scan rustv player.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.