Associated Malware Groups
The unsafe files using this name are associated with the malware groups:
- Cloaked Malware
- Fraudulent Security Program
- Malware Downloader
File Behavior
MEDIAXCODEC.EXE has been seen to perform the following behavior:
- Executes a Process
- Writes to another Process's Virtual Memory (Process Hijacking)
- Adds a Registry Key (RUN) to auto start Programs on system start up
- This process creates other processes on disk
- This Process Deletes Other Processes From Disk
- The Process is packed and/or encrypted using a software packing process
- Executes Processes stored in Temporary Folders
- Found on infected systems and resists interrogation by security products
- Registers a Dynamic Link Library File
MEDIAXCODEC.EXE has been the subject of the following behavior:
- Executed as a Process
- Created as a process on disk
- Has code inserted into its Virtual Memory space by other programs
- Added as a Registry auto start to load Program on Boot up
- Deleted as a process from disk
- Terminated as a Process
- Registered as a Dynamic Link Library File
- Executed from Temporary Folders
- Downloaded from covert web sites without the user knowing
- Copied to multiple locations on the system
- This program is often downloaded from the web
Country Of Origin
The filename MEDIAXCODEC.EXE was first seen on Sep 25 2008 in the following geographical regions of the Prevx community:
- SOUTH AFRICA on Sep 25 2008
- SPAIN on Oct 3 2008
- GERMANY on Oct 4 2008
- The UNITED KINGDOM on Oct 4 2008
- The UNITED STATES on Oct 12 2008
File Name Aliases
MEDIAXCODEC.EXE can also use the following file names:
- PLAYER.EXE
- MEDIAXCODEC1.EXE
- MEDIAXCODEC2.EXE
- MEDIAXCODEC[n].EXE
- AP11.EXE
- AP0.EXE
- AP1.EXE
Filesizes
The following file size has been seen:
- 53,248 bytes
- 6,787 bytes
- 14,848 bytes
- 49,152 bytes
- 15,360 bytes
File Type
The filename MEDIAXCODEC.EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.