home

windows-media-player-11-build-11-final-english-.exe

MD5:
972277ee71c617c478b564794d32e8ca

SHA-1:
c54f4e9f14d961735430edbd0f4b43af4d2f3e84

SHA-256:
fe235159200db156209a25ae8103556110f2d50c29bba2fbd867a56da54d3db8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:39:17 AM UTC  (today)

File size:
56.7 KB (58,023 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\windows-media-player-11-build-11-final-english-.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:nTrFvzWElcfNl6iWR8KdnZVn3uGPP+eebPNLCe:TNXS1NNKXB3JPP+eebPNr

Entry point:
3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 68, 74, 6D, 6C, 3E, 0A, 3C, 68, 74, 6D, 6C, 20, 6C, 61, 6E, 67, 3D, 22, 65, 73, 22, 3E, 0A, 20, 20, 20, 20, 3C, 21, 2D, 2D, 20, 74, 63, 20, 31, 34, 36, 37, 33, 33, 33, 33, 34, 38, 20, 2D, 2D, 3E, 0A, 20, 20, 20, 20, 3C, 68, 65, 61, 64, 3E, 0A, 20, 20, 20, 20, 0A, 20, 20, 20, 20, 3C, 6D, 65, 74, 61, 20, 63, 68, 61, 72, 73, 65, 74, 3D, 22, 75, 74, 66, 2D, 38, 22, 20, 2F, 3E, 0A, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 3C, 74, 69, 74, 6C, 65, 3E, 57, 69, 6E, 64...
 
[+]

Entropy:
4.0286

The file windows-media-player-11-build-11-final-english-.exe has been seen being distributed by the following URL.

http://www.universequicksigns.com/c?x=f5NLzMzhmYYY8vCGSh7pljWtcnt6B6Cg/Qh EV43v9c=&c=DAMwxsbxSxyv943qMxY/wHhYD6fMhRdmQLkxSj/xKIkMTtXlZGHIK03aGHzTPOF/JQ0f9vdEUrx4wCdHq2rJpWK7odSYXBJ/GKK3BsQv3spS4qFjEPwazbV8YUVDLtSPLHMdkZzipZunWOJmcH1SJ6SVm ndY4CFR5TVL3sqCLFmVDb6nWF1hiU9U3Msb1gp&e=0&downloadAs=windows-media-player-11-build-11-final-english-.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463715758/es/2/.../26040-24017-windows-media-player.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.