home

media.player.codec.pack.v4.3.4.setup.exe

Spigot, Inc.

This component is part of the Spigot browser add-on, a web browser addition that is designed to modify the core search provider in order to redirect search queries through partner portals. The application media.player.codec.pack.v4.3.4.setup.exe by Spigot has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Spigot Setup installer. The file has been seen being downloaded from download.cnet.com.
Publisher:
Spigot, Inc.  (signed and verified)

MD5:
732c29b004338df69538bcc3771ecbf6

SHA-1:
724ef825e86014fa24e598d958c554b87e2d68c4

SHA-256:
1162a794a155e9daead8459d0d8fd359173fcf8d425ffbacbb7f88b93a40e9a8

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/19/2024 11:18:33 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Spigot (M)
17.3.12.0

File size:
226 KB (231,408 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Spigot Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\media.player.codec.pack.v4.3.4.setup.exe

Digital Signature
Signed by:
Spigot, Inc.

Authority:
Starfield Technologies, Inc.

Valid from:
11/26/2014 10:00:00 AM

Valid to:
11/14/2015 7:47:06 PM

Subject:
CN="Spigot, Inc.", O="Spigot, Inc.", L=Incline Village, S=Nevada, C=US

Issuer:
CN=Starfield Secure Certificate Authority - G2, OU=http://certs.starfieldtech.com/repository/, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2B0F213AE0A62F

File PE Metadata
Compilation timestamp:
12/5/2009 6:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.0474

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file media.player.codec.pack.v4.3.4.setup.exe has been seen being distributed by the following URL.

http://download.cnet.com/.../?appid=10749065

Remove media.player.codec.pack.v4.3.4.setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.