home

windows-media-player-12.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.bulkcontentgift.com and multiple other hosts.
MD5:
6f5e9ffea858dcba28cc30d867a112cf

SHA-1:
756d3409a58b745e74208517b930768bf6cd0552

SHA-256:
c0794702788954a1cadac0654ffdb561dfdb419fba67bbde78d6cd01fc53e3e2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:42:29 AM UTC  (today)

File size:
98.5 KB (100,822 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\windows-media-player-12.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
3072:fkSlJkGVQqhGGAzMUbNsdYr/eOxtaUrWO4e:cSlJktqhGGAzMUbNsdYr/eOxtaUrWw

Entry point:
0D, 0A, 0D, 0A, 3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 68, 74, 6D, 6C, 3E, 0D, 0A, 3C, 68, 74, 6D, 6C, 20, 78, 6D, 6C, 6E, 73, 3D, 22, 68, 74, 74, 70, 3A, 2F, 2F, 77, 77, 77, 2E, 77, 33, 2E, 6F, 72, 67, 2F, 31, 39, 39, 39, 2F, 78, 68, 74, 6D, 6C, 22, 20, 63, 6C, 61, 73, 73, 3D, 22, 6E, 6F, 2D, 6A, 73, 22, 20, 6C, 61, 6E, 67, 3D, 22, 65, 6E, 2D, 55, 53, 22, 20, 78, 6D, 6C, 3A, 6C, 61, 6E, 67, 3D, 22, 65, 6E, 2D, 55, 53, 22, 3E, 0D, 0A, 3C, 68, 65, 61, 64, 3E, 3C, 6D, 65, 74, 61, 20, 63, 68, 61, 72, 73, 65...
 
[+]

The file windows-media-player-12.exe has been seen being distributed by the following 2 URLs.

http://www.bulkcontentgift.com/c?x=lyHN9HbNu6eUFE21Pr4y 9XcUWJQ4PtmcJ/cBLyQsdI=&c=FvR8mhKqXQcKmFItQO ijt95Az 5H4dfw14vvQmQUsE2KwuOi/xliV4zdKpm2ondC0d5847F6g7x4q51BwS5PPXsnkNO0/Q1xxDl6YJIEKy3Fmp2IDfIhuMmFCUoGKYwMj5BrZL17rxKgISqshoO3uYVZa28Izl2ch4L5Ykqc9paqge01 WR X3FOPxQb/gv&e=0&downloadAs=windows-media-player-12.exe&fallback_url=http://windows.microsoft.com/en-us/.../download-windows-media-player

http://www.sendcurrentfarm.com/c?x=jZOQmTQbIRxJG8R3lHzii1XBMYKKE6aUvxAyagoYnMQ=&c=t61leqe0MXjqqP7yZfoJmvwGyk64gJM53mH8F3mD1pUF4rHxsIJyQxiUYDl dHRKCtnOBT8k jTFScGlNIZxDe6jI zskCl0AARuYJDHphuhN7WifYiL04lXU/mpfoQwBpUE/XwYjCYomPhcoZda9Df6iY 86iKMftWOP6bslp50chcto uoJpm9BcluWiw7&e=0&downloadAs=windows-media-player-12.exe&fallback_url=http://windows.microsoft.com/en-us/.../download-windows-media-player

Scan windows-media-player-12.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.