home

mediaplayer__13140_i1545340885_il1049.exe.zip

The file mediaplayer__13140_i1545340885_il1049.exe.zip has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install. The file has been seen being downloaded from www.autolimit80-disp-download.biz.
MD5:
a5abe281750c2f7823582244d0222141

SHA-1:
4917b850133984a6c8b8b55350f1888862a39a2a

SHA-256:
a8744ebc98bf77a5e8d83cdcd0f8021f2456cd16bacd37f0660a41d0a047f5cb

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/15/2024 5:34:53 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Amonetize.Meta (M)
16.6.25.12

File size:
619.4 KB (634,281 bytes)

Common path:
C:\users\{user}\downloads\mediaplayer__13140_i1545340885_il1049.exe.zip

The file mediaplayer__13140_i1545340885_il1049.exe.zip has been seen being distributed by the following URL.

http://www.autolimit80-disp-download.biz/tdownload.php?version=1.1.5.55&campid=13140&capp=MediaPlayer&prefix=MediaPlayer&ti1=3070065419.455910.004b278ef3.8074.4e314b3c6da755e2609061d6034b68d7&s1=b642af55edc9ffb102827faa9a0457cbfc6f2c0d&t1=1435596039

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.