home

MediaPlayerDotNet.exe

MPDN - Media Player .NET

zachsaw.com

Publisher:
Zach Saw  (signed by zachsaw.com)

Product:
MPDN - Media Player .NET

Version:
2.39.1.3239

MD5:
61944f4f368639393446de3dc345f878

SHA-1:
d6e0908b3c6031bf90634c503216c80d23b108c2

SHA-256:
005732d80c59e0b45a13185b6d03d7199db17754e6ea1cbd6c8b07424e629fd2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 10:34:01 AM UTC  (today)

File size:
1.1 MB (1,102,456 bytes)

Product version:
2.39.1.3239

Copyright:
Copyright © 2014-2015 Zach Saw. All rights reserved.

Original file name:
MediaPlayerDotNet.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\mediaplayerdotnet.exe

Digital Signature
Signed by:
zachsaw.com

Authority:
zachsaw.com

Valid from:
9/2/2014 7:42:53 PM

Valid to:
12/31/2039 3:59:59 PM

Subject:
CN=zachsaw.com

Issuer:
CN=zachsaw.com

Serial number:
40390F10C10F38AD4432CDC2942F6374

File PE Metadata
Compilation timestamp:
8/4/2015 4:57:43 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:BybueFDJM19kPfgJcjA4FVsLh4FBwDraFtohNmTb5CGvumuHP3ZS3jUDW8d5Q8RU:BdWgJcjAyqsq25

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.3965

Code size:
991.5 KB (1,015,296 bytes)

The file MediaPlayerDotNet.exe has been seen being distributed by the following URL.

http://api.256file.com/.../74352_mediaplayerdotnet.exe

Scan MediaPlayerDotNet.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.