home

player setup.exe

The application player setup.exe has been detected as a potentially unwanted program by 2 anti-malware scanners. This is a setup and installation application, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from kyle.mxp4013.com and multiple other hosts.
MD5:
71e3227b6204648ae3a973f5a25655b9

SHA-1:
b1f2be11672bddb11efd6419d80189f9a5f82a01

SHA-256:
8e12742ce3c4786c03389ce62d1585a214784dd787955abf4715c9ffb4d1ec98

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
11/14/2024 2:19:55 AM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
PUP/Win32.DomaIQ
2014.08.21

Reason Heuristics
Win32.Generic
16.2.8.21

File size:
1.1 KB (1,105 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\player setup.exe

File PE Metadata
Compilation timestamp:
8/11/2014 12:04:14 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12:eqGSGIQN9WlrlAjlKK6h10TEEvsYyTvnte:eqGSlQN+ZQZC6Td0lvnte

Entry address:
0x8BA0

Code size:
73.5 KB (75,264 bytes)

The file player setup.exe has been seen being distributed by the following 2 URLs.

http://kyle.mxp4013.com/sPjSSOfrPfjKdqZ69QKvZN2JSffolKZxKFd0VsDzJMs1knr6DRjnU_kObLB6OfvzFlnIu9p-eABKb_QH4xuvxepPDtjOb3ysnXcVbddjtY1brhizchB781bGqy7VaG_H?sbb=ApbB1UFSNQ3EogQqAD5Vk5gIeuF9pJapAqygRiQWEitUb6AzjZEJmqLE02ulTRm1itVK06HpCbuIiTP3wKKKIOAOKvHtQ8U3H4ZS7sJDa7YzYMrkYX6Hj8iQbJAeXuHUrtiQ4yCDoMMDwrqTf5LXdC09SMozp0VwPwmfB69Lze9Srtv54IMALnu8tlmatjCYyfv2TmQ7zTdaUzG8SMPVMpY9bYDP3AiJfwkew4onePun0s3XoBml4OqJhYtl8QWbI93Rl39SQT6F9wpOf2XtkHK0MX7unBtfY5RFyo0nSYyePtZAjIm0dzdkIG8zOV6zRVVjT3hHGZjHHgEASQq2HXIMjBUR0BbIcOaQv3QJEDWc3HWff7sXxtT2SetYKZFdOnvCZ7v97FyR28LDOAPRx6B7jmIXypHiAaOu8VXrDczhGtPXACM9s7fe6XBbWjEX8PIMcTyMwxNwOBCfL1BhKwlVBnWsZHg4s7GP5tbi362fq0oHMoxLXsjAfYRGzCSTaGH9M7BGqMzarIdpA3QjWHh9u5ODiuEEeTFfcyOClfSxdorjqvFcWlTBaq7ZZykfCyftGvZMYN3J0ukR8pjcqO3jpSciul5OFqtrsjrfAtoLoYgonst9hMNUmuQPCuOk5qL8ID0IiQwTG8gk6ER4oL8apnIKSnThF6DwWiQwuLZl05cg9X0j7iODrCeVXfotEFv9CTLD4M18r4F9utUfNO4Z7Pc5oEH77k4tWD2eIAcZKSh1RyEsDuS8TnX29VfW0Dy1TaHzvoYAjxg2hPbekH3STg8b7BtUkeACUbEYKKsY8b0y9dyfohVEU50qpqtl3zapnQKUUAu

http://ttb.dwnltotalsoft.com/download/request/.../i0XNe39K?ClickID=008093707009711102964&PubID=008093707

Remove player setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.