43xwlt0o, 43xwlt0o, player_setup.exe).exe

MIDIA TECHNOLOGIES LLC

The application 43xwlt0o, 43xwlt0o, player_setup.exe).exe by MIDIA TECHNOLOGIES has been detected as adware by 26 anti-malware scanners. The program is a setup application that uses the Midia Downloader installer.
Publisher:
MIDIA TECHNOLOGIES LLC  (signed and verified)

MD5:
ff46f8b529c12860e653b6adcffc20e1

SHA-1:
cb23e262add4a34e866a0dceec669f7e0a181c3b

SHA-256:
fe0de0e100c3755a5a09f466e5106caffa7651d77239f23035b752c7402fbd84

Scanner detections:
26 / 68

Status:
Adware

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
10/10/2025 11:42:25 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Strictor.61091
872

Agnitum Outpost
PUA.Midia
7.1.1

Avira AntiVirus
TR/Strictor.popwobf
7.11.172.150

avast!
Win32:Rootkit-gen [Rtk]
140908-2

AVG
Adware Generic5.BKFM
2014.0.4015

Baidu Antivirus
Adware.Win32.Midia
4.0.3.14916

Bitdefender
Gen:Variant.Adware.Strictor.61091
1.0.20.1295

Clam AntiVirus
Win.Adware.Midia-24
0.98/21411

Emsisoft Anti-Malware
Gen:Variant.Adware.Strictor.61091
14.09.14

ESET NOD32
Win32/AdWare.Midia (variant)
8.10424

F-Prot
W32/A-3e4ddf83
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.Strictor.61091
11.2014-16-09_3

G Data
Gen:Variant.Adware.Strictor.61091
14.9.24

IKARUS anti.virus
PUA.Midia
t3scan.1.7.8.0

K7 AntiVirus
Adware
13.185.13853

Kaspersky
not-a-virus:AdWare.Win32.Midia
14.0.0.2920

Malwarebytes
PUP.Optional.Midia
v2014.09.16.08

MicroWorld eScan
Gen:Variant.Adware.Strictor.61091
15.0.0.777

NANO AntiVirus
Trojan.Win32.Strictor.detyrs
0.28.2.61942

Panda Antivirus
Trj/Genetic.gen
14.09.16.08

Reason Heuristics
PUP.Installer.MIDIATECHNOLOGIES.b
14.9.14.12

Sophos
Mal/Behav-130
4.98

Vba32 AntiVirus
AdWare.Midia
3.12.26.3

VIPRE Antivirus
Threat.4150696
34232

Zillya! Antivirus
Adware.Midia.Win32.59
2.0.0.1972

File size:
688.9 KB (705,480 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Midia Downloader

Common path:
C:\users\{user}\downloads\43xwlt0o, 43xwlt0o, player_setup.exe).exe

Digital Signature
Authority:
Starfield Technologies, Inc.

Valid from:
9/5/2014 6:56:04 PM

Valid to:
4/11/2015 3:45:06 PM

Subject:
CN=MIDIA TECHNOLOGIES LLC, O=MIDIA TECHNOLOGIES LLC, L=Lewes, S=Delaware, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
041F17A82E4782

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:2b/+oBcluPHXNH8iL2dbufIzwEy0pKEoWhsdEPjvJnHTey8qqC00:e/Dq6HXNH8Q+uyN4+huUFHTFlDZ

Entry address:
0x881EC

Entry point:
55, 8B, EC, 83, C4, F0, B8, 9C, 7F, 48, 00, E8, B0, DD, F7, FF, A1, E8, E3, 48, 00, 8B, 00, E8, 48, 25, FD, FF, A1, E8, E3, 48, 00, 8B, 00, BA, 4C, 82, 48, 00, E8, 47, 21, FD, FF, 8B, 0D, FC, E4, 48, 00, A1, E8, E3, 48, 00, 8B, 00, 8B, 15, 5C, 78, 48, 00, E8, 37, 25, FD, FF, A1, E8, E3, 48, 00, 8B, 00, E8, AB, 25, FD, FF, E8, F2, BB, F7, FF, 00, 00, FF, FF, FF, FF, 02, 00, 00, 00, 20, 20, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
541 KB (553,984 bytes)

Remove 43xwlt0o, 43xwlt0o, player_setup.exe).exe - Powered by Reason Core Security