dvdplay.exe
- File Path:
C:\WINDOWS\SysWOW64\dvdplay.exe
- Description: dvdplay placeholder Application
Hashes
Type | Hash |
---|---|
MD5 | 6AF1C8D496F9384F461DF8246C9B55B8 |
SHA1 | EA41A6FE09667B40360953A4CEAA540B5EBC1EF8 |
SHA256 | E60444F7C058932D58401A1650675713A2411CD3AB856708244EF1CF951901E1 |
SHA384 | F4705F1143A50F3028164ADB94AF4F507E6A3832090FA1F9F9CCF93D65E21B303FC22E6B326E57240113158819785F4E |
SHA512 | 85C99332009AB6DDC54C5BA9234146AB5C581D7F569170FD239B17E4BC14C3C406E8EFBEF0056BAAB4B837E2E43163FC146B11D7D23783A0E6CD7D3BBF2FDFD0 |
SSDEEP | 192:UWCsozLHr6p1X4Zhr2+jOL1HiVdSb6koPjhFiAWpZWH:MzLroBs9js1H7ERWpZW |
IMP | BF97B65605CC1377925051105D25D252 |
PESHA1 | 6170D194C2684D8EE579477F0BA414CEEADE2ED2 |
PE256 | 945526C17EC41E24F78BE98C31CF28AA6B7BB244D3CA209896C852152376B3D1 |
Runtime Data
Child Processes:
wmplayer.exe
Loaded Modules:
Path |
---|
C:\WINDOWS\SYSTEM32\ntdll.dll |
C:\WINDOWS\System32\wow64.dll |
C:\WINDOWS\System32\wow64base.dll |
C:\WINDOWS\System32\wow64con.dll |
C:\WINDOWS\System32\wow64cpu.dll |
C:\WINDOWS\System32\wow64win.dll |
C:\WINDOWS\SysWOW64\dvdplay.exe |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: dvdplay
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.1 (WinBuild.160101.0800)
- Product Version: 10.0.22000.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/e60444f7c058932d58401a1650675713a2411cd3ab856708244ef1cf951901e1/detection
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.