home

MuzabazaPlayer.exe

Muzabaza player

Muzabaza.net

This is a setup program which is used to install the application. The file has been seen being downloaded from www.softsalad.ru and multiple other hosts.
Publisher:
Muzabaza.net

Product:
Muzabaza player

Version:
1.0.8.5

MD5:
3844a1d205ce241bb0ee598eb3463218

SHA-1:
154ef79ceee5c6d7ab9e11a89acd3600457c202e

SHA-256:
6f8b978159e744798b6264ea9d52e0672a39fbf182eeee9abc33f10b73202dde

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:30:05 AM UTC  (today)

File size:
4.8 MB (5,068,239 bytes)

Product version:
1.0.8.5

Copyright:
Copyright© 2013, Muzabaza.net

Original file name:
MuzabazaPlayer.exe

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
12/24/2012 11:43:11 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:W58vSNYzqCf12hyHOkRLQfVbKCbJVkHtNsftAHC0TWQWr7XcuHNOXF:WnYtUyH/LUbZMN4tO9PukF

Entry address:
0x25D1C

Entry point:
E8, 1E, 1F, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 80, 00, 00, 00, 72, 0E, 83, 3D, E8, 3E, 45, 00, 00, 74, 05, E9, 7E, 1F, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74, 06, F3, AB, 85, D2, 74, 0A, 88, 07, 83, C7, 01, 83, EA...
 
[+]

Code size:
218 KB (223,232 bytes)

The file MuzabazaPlayer.exe has been seen being distributed by the following 15 URLs.

http://www.softsalad.ru/go/?url=http://www-ru.jt7.net/.../c816a1c9c0916d31d041dde395e5704f

http://www.softsalad.ru/.../f5677f7a09aa06396a411134326cff8c

http://lnkr.us/get?sourceId=5&uid=49581x1264x&format=go&host=metrext.com&out=http://muzabaza.net/dmaster.php?id=1&ref=http://muzofon.com/.../ZXh0cmE9SVRPcVdET2FjTEk4RDZqd2lMX2Vpd0Q4QVJpY1hYX25TR093TU42bFNoSWtzUWltbVRBeGpnVlFySzBHRDFoMG44WW40bjdkUXFKcDNwX3lTQkNmSGJRb2djcV9BdyIsInNoIjoiaHR0cDpcL1wvZGxsMS5tcDNnZXQub3JnIn0=

temp:MuzabazaPlayer (3).exe

http://www.muzabaza.net/dmaster.php?id=1

http://muzofon.org/dmaster.php?id=22

http://lnkr.us/get?sourceId=27&uid=49377x590x&format=go&out=http://muzabaza.net/dmaster.php?id=1&ref=http://.../dl-storage.php?jeq=eyJoYXNoIjoiYzk0YzE2OGRiMWYyMTliN2RiYWFiYTQwM2RmMjcyZWYiLCJhaWQiOjI1Njk0LCJpZCI6MTMzMzU0OTEsImV4cGlyZSI6MTQ1NTg0MTExNn0=

http://lnkr.us/get?sourceId=27&uid=49377x590x&format=go&out=http://muzabaza.net/dmaster.php?id=1&ref=http://muzofon.com/.../ZXh0cmE9VTk5azNQSktyNDFrLWkzallMa2xCTW02NUNLUTF1WlQ2MllDWUlqYk52bVhXMnJibGVuWE4zeU1qNHc1MVRSeUxCUG1oaU1MTTJMZHZRQ2JXcTRhWVE2QW9Zc3RoRVBjYndyNkdMcV92bkgxWHBvLSIsInNoIjoiaHR0cDpcL1wvZGxsMy5tcDNnZXQub3JnIn0=

http://lnkr.us/get?sourceId=5&uid=49377x590x&format=go&host=metrext.com&out=http://muzabaza.net/dmaster.php?id=1&ref=http://.../dl-storage.php?jeq=eyJoYXNoIjoiYjBlOGY4M2ZmOTlmMjUwNDQxY2M1NTAwMWNkNjBiMTIiLCJhaWQiOjI2ODc3NDUsImlkIjo5NzM3OTg0LCJleHBpcmUiOjE0NTA1MTA2NDR9

http://muzofon.com/dmaster.php?id=22

http://www3-ru.softsalad.com/.../1227ba0b24da2b1c3c58d8f8fc8f76a1

http://lnkr.us/get?sourceId=27&uid=49377x590x&format=go&out=http://muzabaza.net/dmaster.php?id=1&ref=http://.../dwl2.php?jeq=eyJkdXIiOiIwMzoxMyIsImlwcHJvdF9xIjoiMTQ1Mzg4MTcxNDo4NDg2NzEwMDZjMjAiLCJrIjoiMjI0Nzk2MTU4IiwidSI6IjIyNDc5NjE1OCIsInZpZCI6IjI3NTYwMDkxOCIsImhhc2giOiI0OWJhYzIwZDgwYWRhMjM4NDNkZmY4YjY5NDUzN2YwZCIsImNzIjoiNjE0OXY0IiwibiI6Ijg0ODY3MTAwNmMyMCIsImlwcHJvdF9hIjoiOTQ4MGRkNGIyOTFhYmRjNTdiMTQyMGIwZWQ5OGNlZWEiLCJhcnRpc3QiOiJCb3Jnb3JlIGZlYXQuIE1pbGV5IEN5cnVzIiwiYSI6IkJvcmdvcmUtZmVhdC4tTWlsZXktQ3lydXMiLCJ0aXRsZSI6IkRlY2lzaW9ucyAoT3JpZ2luYWwpIiwibm4iOiJEZWNpc2lvbnMtKE9yaWdpbmFsKSIsInNlcnZlckRvbWFpbiI6ImNzNjE0OXY0LnZrLm1lIiwib3JpZ191cmwiOiJodHRwOlwvXC9jczYxNDl2NC52ay5tZVwvdTIyNDc5NjE1OFwvYXVkaW9zXC84NDg2NzEwMDZjMjAubXAzP2V4dHJhPVBsV1ZjS3JGdjlGandud1I0Qm5rY3FlXzUzRHA5R1d4ZElCNDE3X3diak1YNmxzV3RfVjY0c1VhNExMOUc5LXd3Y2lMdjdyZFhpRnFrM1hxYnVWRmZtUG9rY2FYcm9RZmVsdjF6WWVweHFBRk8zMEgiLCJzaCI6Imh0dHA6XC9cL2RsbDEubXAzZ2V0Lm9yZyJ9

http://www.muzabaza.net/.../download.php

http://muzabaza.net/.../MuzabazaPlayer.exe

http://muzabaza.net/dmaster.php?id=1

Scan MuzabazaPlayer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.