home

4663619_stp.exe

Windows Media Component Setup Application

Microsoft Corporation

This is a setup and installation application. The file has been seen being downloaded from www.bundlerepositorycontent.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Media Component Setup Application

Version:
11.0.5721.5145

MD5:
0bd22d9090943ccf6d0eeca4e71c9331

SHA-1:
74f5e3939847ff48a4cf38ab947dade708fb7f70

SHA-256:
b7c755041918bc4bdcdb6f7a2f140411e6b8771c71ab539723cf7445e35fc031

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 4:54:40 AM UTC  (today)

File size:
24.6 MB (25,842,736 bytes)

Product version:
11.0.5721.5145

Copyright:
(C) Microsoft Corporation. All rights reserved.

Original file name:
WEXTRACT.EXE

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\4663619_stp.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/4/2006 7:43:46 PM

Valid to:
10/4/2007 8:53:46 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61469ECB000400000065

File PE Metadata
Compilation timestamp:
6/6/2000 9:43:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
786432:M3Q0ks7epms3XVy1lJo1UMGRz/ahYdjJ3:+Q0GmsH81EUM0ziG3

Entry address:
0x2891

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, DC, 10, 00, 01, 8B, F0, 8A, 06, 3C, 22, 75, 14, 8A, 46, 01, 46, 84, C0, 74, 04, 3C, 22, 75, F4, 80, 3E, 22, 75, 0D, 46, EB, 0A, 3C, 20, 7E, 06, 46, 80, 3E, 20, 7F, FA, 8A, 06, 84, C0, 74, 07, 3C, 20, 7F, 03, 46, EB, F3, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, D8, 10, 00, 01, F6, 45, E8, 01, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF, 15, 60, 11, 00, 01, 50, E8, 0E, 00, 00, 00, 8B, F0, 56, FF, 15, D0, 10, 00, 01, 8B, C6, 5E, C9, C3, 56, 33, F6...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
34 KB (34,816 bytes)

The file 4663619_stp.exe has been seen being distributed by the following 50 URLs.

http://www.bundlerepositorycontent.com/lY9kf_Mfw8geXhsWbr7MnwL5TIWxAJ5xpdvnnYz9xmjN_u1ulylJx9ouXp_v6hSDSmTRsAkr91W5DB7VBKQgZHD0makP9_KOYGM XgVVjyFlpgjsPu8XxgJ4REmmDriv93l Yr9pdLFoKn_l43Ih7R9Sw_EH2MM AnanObftFc LJ8mBbLF5Ruz_qiJ1YC0N GDEK8dhGs70dNVkZOmKBXlAljH6mw==-Ow==

http://www.ranchtownapplications.com/lmljfqkDpUmXSscHGKrIKP98EW1p4fs48ZHwys9AZ UCvjXV8h8g QCzOzyaOp8gkCIMm2AAGvWailm6zOmnnByUbVQMlux2Or5I3pFxOpj82r4jm8 6ylXG5loHRBsceupEc1Oq0Ba_GhZ_AGDJVysOR1hJj3MM0HM9ZtE8AwtexZSZu7GzaoCZAzuLc6TKf8aYSpnW-Ow==

http://www.bundlerepositorycontent.com/cDud QQnRDgn4fynD5dP99oz04zOJvUeauB xAa_YZe2m sgFTyefPSlLNPcEHiv yHhqF9PHCfsnSvelJV OnDJ16ZaO7AySoO3jadDOaKxR1dubGfaFSp4RtFDjJVuNLHe18djdK7EYindx6GYJLuc5NXuPBVkKGWNck6BnnrdsPr UZ3ZMmTeJ00dpQ8J8sq6VEZz9ngDDgZiGUaPWQWKcQisZw==-Ow==

http://www.bundlerepositorycontent.com/ZXcSb N9p3K2c7Jo1psogA0KQH5AwDM5yS0cOADHIB532lUDBRnZ7pklOv459G9jTPd0S02Qm8YnK7nGOhditIZ 54iGnCTTGqk5dleBSqgiTT7g8D9rXqbivCUsJdVdXvmE_DbMBeWEzCpVAzGH6CahdzvDGHn4u6j9bRQaTuDsKmF_QM7NB9WMJlkIamL9VBJs cplojTwXiGUiH5YySyt1PGpZw==-Ow==

http://www.packagefunhost.com/rcOOF6yITSHXpoEo8O9SiERjyiKG5Dhns9yRLogvh6xdDFJNeVaeO1JyHZwoaV_5fi wlyPIKXi8_88ZyJp1hpuj_1cjxDfOeRGM7bNFr XAoZIdgTToHZY7M5NffPW1dFH5sc9aPb FzxUxTMqmclGA2LoOrLrD0TkoASpWRoX_OUoOd2I_feeN6oDEqaZvn7ur_MrA9vf 0iPJwFkpiXzUPOqWcg==-Ow==

http://www.bundlerepositorycontent.com/6r9IehdYOjutfos5ZWEv18ngtUhpncimZsOquKOBgdSXxM6w9rK3_RtFqiHIVVhSGVPvdnz4BorYiM74oREvngQGnpoNoil65rj2fXKz2zVX90f93mfXSgwC8z8JBaGHAqXwIapFv2fPx9GgTLctNgJjVtXUSDXLGYtjkexIGldNakzTvY DjNCZiUYKDW1heuiiHMrr7GnQzHrvcO6WtMWMaUx6bw==-Ow==

http://www.bundlerepositorycontent.com/L_kKjyBZIzQAuXX5kkRJtKJhnuHhwJJrZ ptma8UQRQ8EJ3jkYkghVf5C9c5PUdEC5KX3PQyafJz85sJAYD7dwWqYLjsoPlLux2RY3N3TJbkHV3X5Tz6MnydD5T1ePw_mM_1y_MbNoxc156eytx6zyrWCFoZ5w_GHlBqgTVYhaY5cfiVlxbtQ1C7i8hwoMT4PxjG7 uUa3NAWCTs m3uMbnPbU onQ==-Ow==

http://www.bundlerepositorycontent.com/J6Ok1CpPAy7QrKZMHMO6Em15xKtpxJJiRwaZQwTKu4MYzcCSETQhMhDNvJg7kWbTLGDNg0yaDKvQhuhBkx5sZRjCDjofU04myWvQkkmlfcsVjpFoITuX7O3Enm6tQ7O7nGLCj2TLSzCFSAiOtXVoWhy87hkpz7Twwlv8WbggDb1lcbGc0iP6bfw4WPE0fcLaoYTyVRR9wdJ NfhyU9DL59xDvKyDvw==-Ow==

http://www.hostingnowgift.com/6bbKQzIqhWtGsA3baeTtbXfBIhFkZu99TFzUNtfJVUwF9ZiY4n5A8L5IsJrp9ZFFem3lT_0YSU7wfN1dn2HWsgEijTImrqY0HkK5qB0AlLWOKGbobhWscfqPNyI1LQSsq9qJWXcrUu9MWW3y m6TLOsxkMnf7sJrs0Y1bvndIJK2VFNpY0i8W nP2Qo1swyTdDB6fnpnF83rm6bOTxAiJ7exiFptug==-Ow==

http://www.ranchtownapplications.com/20pkEMWYJaOjTmEQpkFjbwb18DMJaMvnz98pr91iPVy3hXBneZy8CwcuE5NTR98E9SzR6OX6OXsQuuUkHMYQa0L_DEs7dZrnjMJL1zC629Hy1zbAla0wRk8auIJcr5o7z jvuAoPV6fvhimJ6xcQIIJXrODPOU Vcv_0qlsQPacpsO_lnodWmVSRT8nXx74LNKgBmKnb-Ow==

http://www.signstagtowers.com/1QRrAzqGi3mk4ML1utxoXInwXpSELV7gjG60wg hILybt6r pnMUGMnBi6vjDV6HCsuce51L bJHcy3tNT Acx2 VI4MwAwvvQP9elP5Fme Z8p4qDKi2MTD9thAASixRN34n6S1idYGM0yFjOck4 XLjwagTPnDWlk4b8lGFuUkizbGOvvJJAhOh2dZy MzCXcOHJmVXzxwOu2703vTNMBwJV3T8w==-Ow==

http://www.applicationsbundlescity.com/C4CUtD_QXynO3VTXwAPP4p4f1yTN2TUqKsQYBBpS253ZzenyIEwvI5xtvx_njkq65Ti454_lh_6gqetlpWahPu lEmFisSO_e9AHY0a6k2VPUtGqt5 3hpCgBASTmsUqV9KLisVtg4sJWBwveW wNLZg32Q1swoddADRNs19nT7uQfEmBvRTE_Gj_0LewhdP K1f4rPjAV mwpPvnGEJG8qOx5QA w==-Ow==

http://www.bundlerepositorycontent.com/Z0MGYzmsv_qaWxnhYZB7RQw1c_nQwlz2TbOz zTrkpiCDWxftLW_yFImnYFacaYpZzmrw3xx7YAgqmOBuLqWK4p4m3MBkEFIxuI_gweb23mZWo6Px5GewatxiNpkv8FyXd0J Y2UuwhmNmo3kHgdz4AjPqGqaaDhHlBdmqsKCpYB4UvjWXm844vnRe8FRqyVQP8sOwLete1GGV0eGZX507xTn86Bcw==-Ow==

http://www.grabtowersupdate.com/nseOKj7OQ9wE_3LIyfK9_rzTRY3JdSIHzrFgNZv_hqgKkm5KpXfHSt17dV_K3kqGWfpkxAB0ceZiSxLsgEcNAPy7btrwbPKMcFRcXn6H33E2yRwB_8uT5p0JxHPinL1kclles2zkxX_CL1fDYMg iPTUiC6T5L9t6MYebwEvz0LlIktV4lLXgt_UVOrr0PieZdyOSFys6UTFtposH0sDwuffM2aHFA==-Ow==

http://www.bundlerepositorycontent.com/ 6jtVDH8OJR5ADXFBwclRShGn3An2Wli5dojNhKEHzpPqo9WO wHcuS1i71mtrVwm8y6VDk5ABWXBkEWYOu WPnfoI2OAPnmCiYG67fGIgf9CQA9QgcsdX fMsHrZaK2B2suAPU1tWMCt0oIYUFFOKxBV8LQzroy1hkq5E6eYefTjoVS3xb0s5M93dXBJuVdzBHksn9aAjic8E6_8ki1whca7mmlUw==-Ow==

http://www.cyclecleanpresent.com/LKDQEJoBoVUChcb3DsypaGN dR2gRvAomjNqCN8KeJIEBIQwKLTTukLXu3d4ZwH0g4TUv2zY2LR7 BaWVq9NyLC9HS4cqDTgh QmuXUIhzBSioNHSV5X4FbGMczEXY _MVx7UW3ZBn4AvLFK5LhrC2ImJSB66VBXAotGiaEpXYpHiJStqtdHmXuI_7k huZLe4D2lqyw-Ow==

http://www.bundlerepositorycontent.com/_Kgv8kC4F28O2oD5YawBIBS6DiesJmX_lIcSznI3An8uJaHn_4VWBkwyvMYIpetPgr5U5gCpt4KkvtM8QyYz Sj2GX4kxvodVygwIrlQIAK_p5myK3a0Hq6nFr0 5ro2DcqTEa74ZbCla2qUP4v7YsZq6gnoctw7tT6Egu3aNaaRIbwSzO8Y8BQRmbj9B9DiWNzje_me_5iLqlPuBZoVWZC8e6J4nw==-Ow==

http://www.applicationsbundlescity.com/kMIJ4f0uyZu4HxOPTucZD6R4yETFWDmH0k D9ophUNngiBB8e9JXE3ARH9Vrk7ttLL1mn5inZ0t6ET1IoXGNtbUnpsBVHD40MkNm3JNGZBE LS6a84D9XXapktNZqudElO1TGpHbg_bJ pGLgHb8diswSF7taOyxPqIh_Ki8rYlrSFsbnQUIkNTWF_ dv5clrxifR1V2dIyl9tQ20azGyv7f0uibg==-Ow==

http://www.hostingtownflash.com/LNU1xUGhqJ9f14GLiMWyj sSbX9lqpW6WCkPPvgk9MnF1vnzWedJMVmL4DVL1tJft8w8zt9R_VnSFfTLbsf6w7R8IbZFxUQk1YOP0BC_NxAFUlnsGLfwuAZzSCyfvkLt1F8JL6zKdJ 0dVlKJrG KVlymMk11mS8INIXdHIjB1zezS11QLWEiwH9SppS0q_kril1o2GV-Ow==

http://www.bundlerepositorycontent.com/h1ag5cytEzHtBWus2avklivgPmnT3TBb2imH9o_rnHwHAFk2VnHZpzIJDhDhUK4E_hc36fHCWz4eBRrMMrURrAgESeXHf6mbbLS p aESphqegs2B157f_DTnRdiFwijy6MRmJTAs4TneoIr_qMfIoqTu32XJD44DSanAZFnQM4umcrPEU7Caq9vAnrohs71kHtNJV_czBAHKDytRvUXRtwOIR_EMg==-Ow==

http://www.grabtowersupdate.com/4QepZOiPkOHjqPQzkm6PprP7hnUtXOZK7l66VkdqNs4bLmEMhmDtC9baR_nzYoKYCGU1aIz65gyBHuOMJQF 3RCmQ_M4MRROe3N3Njyh40e7F1cWSjEsVCZC4H66lBQE7jq6xcLTQR48KKnHvu488iJN1__aR_dnMLzcL7c2AmX25L6AHBC6BjZusqIH8WPSEhVFt67STTlrlZiUMMXk6aIZoowojw==-Ow==

http://www.bundlerepositorycontent.com/P6Sfw3HhXA6 2kZDmV5u05vTH1MjFxZPx_ubHu7_12ZXNVkCYO5yRgaOoTNPDBSymVfpPnmnBl7tz4cVJzChm1itQJ5a3gOVsIySdKEU_IXtXinwW5OPK HNeYupYOnifQ7lLGexD0rPc5M6c J9S9kYpHSW9LYegyUR1NNJO4W9CeucC WotvAm4HJXA4ncG wmQIxzpsvLMLR1 bA89TZONVDeBQ==-Ow==

https://secure.giga-downloads.de/dl/.../

http://www.bundlerepositorycontent.com/EeGBQtElh4J2AAWF_6JVDeTxSYBQQca2ECdsYWSVrOIwPdCsNOF YuzEmsyAbJxNELq2K WUyZKnZV0a cSysB0xCVTDiMTSIN6Ovpety5 AJ9vNCdA2H2miyXC1fd2QD0jMQVJPGBjgf20grme630MQZA7_eDCJuPf2xXFtcwpWnPR0JHubDz_W7DIRass43ki4WNqRSOwTuOY5Mgzb5yJRNKiDdQ==-Ow==

http://www.bundlerepositorycontent.com/isVU4JIyDnjbokpRyXbAlPQn5sHe0oIsGVg1UHYoaq_FYpyowZJS9azQrEQRJ5f9ZosF f7fijgnlKoasoWMTIjVMYAtdvbuFomqWKI6mLqloCvQCUb84RNGxfAPPZzPB8v9rbvrDfBXC6K0fEDSQAuiR8rlzLFRX__TXJL8EJA 205VN7zc55Vqy3oiWYsLUqcTaJ_pvTnAXr2EM6MdNUN5dFXCog==-Ow==

http://www.packagefunhost.com/VBwv9OK_9ahvicKNh81V2YJjmcXyll5Pf5_2fHMmV ybV9gqeWg3p_Q1CKrWwOzLFOxtPZmUTxSvkpZFqk teQOKqEu4StONM6VIfTPIpY3ueRpaSixTzsoqFcrdsCkhlSXCOnmMF3dTjNh3ftASWLjbtXDpt6 WNlaP8WPSlN84NSKp7QUbz1plVFddas1QjGDumKQApurjQLuTid2xU4FprFgfbA==-Ow==

http://www.ranchtownapplications.com/1ddJWQyIwgbFpjPNMP0PsXNBUB0oLGC8uRz6elMzj85F_Wz0dGFDlhfQkxGeFZEFOzesvry5H6l2XEicaPXfe342m6UCq9kzlUFW_Gq KhZNHbPcWyF_9HWxaWfR8zHr1yBr8sla8riqndk04ec9ZAekNaGVM9Es iCYKzNjxjwVdyc7GVAKNNuhMBzYjRpGKEdWHjut-Ow==

http://www.ranchtownapplications.com/yb Vuapen6GjE_Aftfn31FehWEsCeU3ESiiR2Myfl sfWFAcYfG JruhfbHcyJ9sf0hPVALh7u BJBvJt6J2e2XxcNer4Y7S1InLT HokS 6gcfkWLGZlQGum5T8xJau_E0upBWm3vHBVrEDOL2QS 9vklYMyokNvaN2v3h8lsHM54r0JYEulwB_JtfHC0FJ8bE94TVs-Ow==

http://www.grablaboratorycontent.com/umKRrXVcjpwmTQGygXdwks9BizvYojDn pcSjzmdPczwJbdtpCs69exHULx0VpexezytBYfPnxSH999vgdJUoECABTJY84xEqOmf3UW5djRrSqp9iBm979XNtYWHesNcDBCI2l8kMBr_P4RhzT7MuUCXfDgSuW3SSTqoiIBHH9t8ZleW1HH7jvSbjuc8BzoMgyLZcbtH-Ow==

http://www.applicationsbundlescity.com/T0V4TrL97WnYUFA0eggJlL2GQTW47BTkVPc2z q QwmFiyqRN3fL8cgh9H26Q47sChxwDpErfqJ5z2 xXbZ6LSKFczTaPM2UdARbnfCcBW76YOA6WzybWEXK1LE10 iklTmi_aDQvQ A3A2toGhRpubG1_qIwRVJ_KtLa72WhPa7BEgOcweHxWEq1nS49PoYPWT882NVq8j3vq31O6fw2QZ_ sm76Q==-Ow==

Latest 30 of 208 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.