home

552115_stp.exe

Windows Media Component Setup Application

Microsoft Corporation

This is a setup and installation application. This is installed with Windows Media Player 11. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Media Component Setup Application

Version:
9.00.00.2980

MD5:
e919c4e0050b32aebe83a5d2eb613dd4

SHA-1:
580536d10657fa3868de2869a3902d31a0de791b

SHA-256:
678c102847c18a92abf13c3fae404c3473a0770c871a046b45efe623c9938fc0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
2/25/2025 8:05:47 PM UTC  (today)

File size:
13.3 MB (13,951,112 bytes)

Product version:
9.00.00.2980

Copyright:
(C) Microsoft Corporation. All rights reserved.

Original file name:
WEXTRACT.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\552115_stp.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
5/24/2002 9:55:48 PM

Valid to:
11/24/2003 11:05:48 PM

Subject:
CN=Microsoft Corporation, OU=Copyright (c) 2002 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61071143000000000034

File PE Metadata
Compilation timestamp:
8/17/2001 10:42:57 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.0

CTPH (ssdeep):
393216:VZLzYUJcLoJt+rDCEJueZ+FrnyHyJUXOk:Vd52oJt6ZJuDrnySuek

Entry address:
0x5A5E

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 5C, 11, 00, 01, 8B, F0, 8A, 06, 3C, 22, 75, 12, 46, 8A, 06, 84, C0, 74, 04, 3C, 22, 75, F5, 80, 3E, 22, 75, 13, EB, 10, 3C, 20, 7E, 0D, 46, 80, 3E, 20, 7F, FA, EB, 05, 3C, 20, 7F, 07, 46, 8A, 06, 84, C0, 75, F5, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 58, 11, 00, 01, F6, 45, E8, 01, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF, 15, 54, 11, 00, 01, 50, E8, 35, FF, FF, FF, 50, FF, 15, 04, 11, 00, 01, CC, 53, 8B, 5C, 24, 08, 3A, 5C, 24, 0C, 75, 1B...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
34 KB (34,816 bytes)

The file 552115_stp.exe has been discovered within the following program.

Windows Media Player 11  by Microsoft Corporation
Windows Media Player 11 was included with Vista with no updates, final release on XP. Windows Media Player is a media player and media library application developed by Microsoft that is used for playing audio, video and viewing images .
windows.microsoft.com/en-US/windows/download-windows-media-player
5% remove it
 
Powered by Should I Remove It?

The file 552115_stp.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1484091776&Signature=FzZ-fp8U9kOIFnoa55pfR0-5M2rH3mjBi4ktFKssiIKfa6eji1uFN5K0Uf9onbyljTRd8PlMUj2xVhxcF~7~uglYB9jed6LjevcScuHvP56-E8Rv-NS29MmG4pnAYhY6JT~QWVuIdUKNhVwyqQ4IFieT3sY8tv6~9eYGIaZxIjM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

https://windows-media-player-9.nl.softonic.com/download-tracker?th=1/.../nwA==

http://www.towerbitscenter.com/l8TKadgkfLPeq8eokKhXBhAT2Q5wzukiI0fI8Z0L_weKtGjmZuVrX7oN5MKkQBc6KYi8PNBy9_Q9EZFwonaWV7oOAG9HenPzIIX1pnDRX0b9zQljr o54oALMcW1vfkknTstsKfwQruDJowvQ8_87Cvd4PwB RqP2ejgWsguZrlO Y_cFSxzxq8_gP2G sk1sSp89BMsiqvIt3HnK4gqL_GwwNJ6hWac8XSNT6P4A03BlIX7Wgg=-G1wAAETd9LxqrBW1zzEY7LhM6e4dGwwccsBe6xK4hYHj8LlGxCpvTFCLYtLJrUAvFERAGZW6TWKZS6cNWbeFDHOa3NWbO47zyvd7Sv4J

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1435122945&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=AiKnVjqJjfsW1TeAEGZtNHyppkEt3RCjdq~zOPmcjUVgaFkDL9bzDLjnEo1fCuzrShZpSGAyqePIQWUNFeLWQxZkZ8tmUhVkfGe5kXh3wHlaM5d1AahzSSNWvfruB9VbriNerA7ADxbhCPnNZ9ocOuTMME29HfasXspGbUzUMgY_&filename=MPSetup.exe

http://app.jy1c8z6wio.com/clr/.../windows-media-player-12.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1477455143&Signature=Kt1p7Wm7U~eNVjubeYMo9QVECR6rVGd4EE7I2RwpoWDtL8rMtDG6v2iQCddFysMD-f80hnMBKHUUlZJQqIr7GhSqlkblGxgEsZm6Otd~nSyuQy48K7b4gvfUp84KMyOYeAW0e6cf49-nnASwyrJ2tEZmSezSVblXhJoqRZbQauM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1473214908&Signature=BA3LQkTaXSLxM04X4BSmgp7o57kff4MEHqgZLKJtOruH79zxY8my6Iz6L7~YZ72am3gFlltdYkfuQO14afs69efRpQcayv5A836Ezl0BYGu4-8Lf63VZbbMaPGJsmZJHqkcm9v5~TThU0nAxQZyNzwMVdDpD8ovaIgN31PJVdTg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1478605987&Signature=GF1x8QvtOUR20t7IXLLSIvLf3iteN938im7pHeFbhujrfwRapXx4hWqYGZ8qMKDqdtyGysRcvZs1vDty7DEo53I-88mOtlAQtt1j14dd6DdWtsaK4~vRuqAr7FWXeGMNar47Di8ZD8sl9AXMDdhykJc1kq2blP6sTAlGANZc~8U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_br&type=PROGRAM&Expires=1479899742&Signature=G9pmrlg3jcT6MfOIsQpf454JZzbsVUvpZGGWsSUDN-AAQvKIpJQ~ZWF6-FUeQABOX3xo8o4UKouVxCsM-Xz1Z5PzZPnF9XST3uxA2luVG3WrAWjX3GUlFuEDDh53bIuao2I9KSOo10aC9zxbRgpQ5UPq2Z2Bmcqso-O2iyug72k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1432258151&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=IyESMDIL5D73DMrQ-d6PL4aq9Nqwov9Axpm-CaQmIrO-t5lmA74EHJzo43Lrlnr-kwVe-698TEmQzvuLTjgSFv56eGKXvmxYlQJa8pdhSZskRW-funyNROcT~AF6oHowpLgAS-40ujvik39LsvGfLTb4t7fr5g5iFz-kcR3AkwM_&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1477813403&Signature=JnzVqHTlMKGQ9mXZlmbKTi~b~Hm3eTdMEMwQBoF2YqZfhQ~ZrX4Ay8lnUy0HEl49YKRi~G1diKb6rjVnHoIKpU1M87YXdzfYA5f8jQkkAodK1t~wFD0FNAcyxlDW5g5YTqh3weoMNAYBhSiDWpKAkr~grfvdfLXFZBVCgHoNPzo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_es&type=PROGRAM&Expires=1464963721&Signature=GukIP6fGW1PItshk4rJvyR8GZqwygsNZg~k3~-85d2naYVJyjg74FxAz-2mShqAAxE93dVfViZaMZMFEYItoWue5TcRGmbOdeLPeM3V-xPIF8xYhs3MHYNQantx0qsWvlPgx9ivWIrlhnBCbYwPYFKHuvXGy3U9TsjTv6l4xBF8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1424854055&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=F-3KLFe2yDEf2LePwVySsx0g2HAafQNhPUaKOJ8JNivQnl8Doq1sXUh7MFSYhGswvtp40fuUtA-YtebdWgw9S0qQrfASbGHsFf7mb3lixz~8r1RqkmfECs3ZHjIQzlxUb9wr9ggPpkwDRxGF3LNMhxjqOBPlp0TV13L7xV2oL44_&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1434926847&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=CQ1mBrFJ2D55-LhPI2uuGGbva1I34W6Y3oF2q46nS8EWKvernWAxq3fSDeudTE6kooiC9nCAckrS9c11lyHl~o-j0YWRRSv3F6k9~qQppebXw40giJy-kGf9MvFGtF7ww58jg5nddDwTtTkJ3PT4ERACrdH9aWy5GondoYbTFUg_&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11149&instance=softonic_de&type=PROGRAM&Expires=1442143223&Signature=aeIrkZrL5kpQCS4Jaa4zuhuXeVBXzTIPKnrkEk2OK8lM87VhqliZO5SUq9H20zq-xRaKAsqnBB0gBEvAPhCC-HvtM61rn0xwFGgwrr4wbqHgSNWXgrsmn6iHV2Xi9ALoUEjY3IBJWnNp3qItL0GbUOHQX7B0hf22iLFCIvD5jGg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_es&type=PROGRAM&Expires=1460549918&Signature=g-UifYhZ6U851SUpnadRcUMVml5IgoozJKoPrpoq3NvqoxP0~r8GnvfHd~z5pMAcQhWBOlewikjxG5ylTWCeCUWhCwWHwX3fsc-zhvRj~TDiWSGXCeIzsg~~84QgJAPm39dVz8A57o8rUnRgZmIw~TU62hPWsbJ5ia7DFQmQm80_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1475986757&Signature=M2AH0M4itwR0gDFzFsYMEA9G50GXGQMknQhXLfl6KGUZTqpMXHKHBkHvKhoAfFERJAcaS58qr0-LDXTz5Sdc43J0a3w3fyxKswRBhvZw9I09NrMSSXotCu9YhczhHJFVhgxn9ZT9GCZ~DAer8x4lt2ZJFZ4VIQ009tb9VhEx2GE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1449751951&Signature=Rp7oOEKGe~PePZkCp8QmY66bgPeE30xxsr~SXTA7iurDZ-ILdMclxs3q0npHpQjOI0drJOU9TocjyhpNgbR7b4XENS1TlM71Rc~Ojpti~Xe6Skm45xKweL2fuFoJ-Vil3U0MNAxPAB1t~7mgtzWsuh6MujLCWat2dQXLRQhUM34_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://www.ranchsendgift.com/YzfE0yTHnkDsTkBQrsvAMLDYW2zZw1UFb5qJcQUnPkFLbct_oKrQ5hAo fYLWQlRmWKhLrPN9FPBQC_OmIQeBlETcgRBRzle2KPACbclcnfCFllNPvBJHoHsg4K9Wo3ZfKE93aBEkWbJkyClGIyNDMogYx4VTqn65Ki5T0BqKK_kTNxkc1pwyJ3UN6GnJzfgLZxXwHEDecIfMDqckViVsAuPe0T5Rw==-G1wAAETd9LxqrBW1zzEY7LhM6e4dGwwccsBe6xK4hYHj8LlGxCpvTFCLYtLJrUAvFERAGZW6TWKZS6cNWbeFDHOa3NWbO47zyvd7Sv4J

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_es&type=PROGRAM&Expires=1476352894&Signature=TW6S3T9087oxHN9W2ttr~NWLnJ8MV1BgFSFAwlCIErZGde8yHlOhTFPyWvjrFV5~4r~92PLpd6NunKORbQDWJXo313X8VaSXLAUtlwMxVEwFyL4wlCqR1umpUaaF~8oSj-P4zHUFXxQOh8Fts-j1XJxuIO4TCzUb0tX4~LlSBm4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_es&type=PROGRAM&Expires=1478771975&Signature=SL1Atnj7IP69dQ92c4YcOaM3orFJYc-rVYDmSL1XsBZUN9D9Gu3UbCFSXWs6yBOzgzzbXEonNtOCHEshWrFVDIAqSiPthxRJFdgomF0V-Dz3PLKMvUOVyeRF38LkU9OWg6n~JmFknCoX41DZmIt2Pqlcw2DlQHJyVw7prr3Drbo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_es&type=PROGRAM&Expires=1477291916&Signature=F6fpyIATk-oItBPXa-oyZnpxjPt6kJMZkjnE-clNyZIwERqfD8RR4vtdjckauAOUa0i9a4G3JWNXxVXcS46HJlTWtch2QLY9SP5dNwN765bHy2ydIuB7BmYdOT3iR8wqw~He0N3ArfcgxjMfYksImHlZdifxWJ5tZe7dWcZszws_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1473134159&Signature=LKUuqFopuP1zDoucK7H38gAru3bfetUeV5rtcXVSVO7j6FY9JSiY4JmPfcT00LqOtxtbO9e5IQHjuKUhnABqGaajb8TX3ym7Vcgti19J12zf~XwsPFCKnNtdUx5Y1RwbJwidW8MS2ObFqCdDmwM6cXPQKJpUosxaAClcIq2TpmQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://www.ranchsendgift.com/WyZqw1 qGRXUbFcLQtUpnD6X0meon6HYNttwCtXL2UcMcu17YZzIIMXKiLTiLsDudj4FXIeuFsetkOKm5KB3lBLWsBvc9jRMsBiRgobZnYb7zBLKJbysX15nbi1o2mN9Sr9QQ8L bRbGdbaG8EweXc4HZWCwZDUmkR6Kll8uWCz4HkfKUBuqFKr9FUdtbU3psApsEbEG1ymNu2FsQT2mAMy3YpqCDA==-G1wAAETd9LxqrBW1zzEY7LhM6e4dGwwccsBe6xK4hYHj8LlGxCpvTFCLYtLJrUAvFERAGZW6TWKZS6cNWbeFDHOa3NWbO47zyvd7Sv4J

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1476663330&Signature=e58pYX4GqDZSmPFkpxSU0CJvqHsswt0DMtEHSxAQCKZxlJpuMJl-CUv0zIhONiNzM652KTJJixQvWMTNzZ6PuxqrkmeNmdI-xik3N5dX7DwcSBGeu2biJzacTYmCztFwlfIvhmhB2115TZPWkVkDDcyy6jEUrqkY-zt6abafooI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://www.downtoad.com/.../windowsmediaplayer.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_es&type=PROGRAM&Expires=1477189882&Signature=YmTbuXvHpXTwBk7oS5qOdC7T90FxYXqewz9mgx05dSa9xGZA0I-Ax1BDYW3iWPDYnAWyzuqpI-tN1kbFJQjuboP~EPwjBkK65rHbOc1xytW6A1UT0M54rck8MZTAW5DmtK3muxF8V-097zLpW8DOF4MT4XEItaRRwJwNeCC6itQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_en&type=PROGRAM&Expires=1472869632&Signature=MTIHR5jFEWnAx6Lz1FcRxGwPF2BJfMCyxvgryU5SWZw2FKa3NebTeGGhjZV9H1bdIUdJhKGJ~xoES6hiNnBc9vcEx3brZbRyVZxIlOKHgrKO5JW~QER3psASISz1IbkilJsHh8y5ziPB~wsIxbzxnmgDqOO3pKCcNtyJaTrkYcA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

http://www.ranchsendgift.com/_OmYQMoHMJqLc4m80298e6uJ4wGJCDrphsrQ7ttOsPRb38thWORO9yOlqTfhif_wwAiYM7lD_wKRjAOAAipsZgxh9hWPkkQmUhIDD9rqH6ycDerlz4ee_kp2QqhnHwUmSrw3groDg4uJLIreuMoYEsThlV4l1UZ1rGBfoKZeWuvGzhMubpA1WcBcJcpak9Y1fQg3eRNQ Zy1SBgVMHWpBA1J3uw73Q==-G1wAAETd9LxqrBW1zzEY7LhM6e4dGwwccsBe6xK4hYHj8LlGxCpvTFCLYtLJrUAvFERAGZW6TWKZS6cNWbeFDHOa3NWbO47zyvd7Sv4J

http://gsf-cf.softonic.com/580/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=22739&instance=softonic_es&type=PROGRAM&Expires=1473667877&Signature=QnTq3TTViPU072EhqyZKwkiCn2nC26EAo0y6eWcJZAvIhEGr-K9Z2Xbt9bkPH9Y4h6T1SRbCnwadwqWyeDO6qrVm8q40C~OSsmc8PqChGqt7MsKjcZE5YicdgXZmMbBNXmx6wfV5FqX6DzCYKtsYIKMfMm0-d04vBaIHyearhhk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MPSetup.exe

Latest 30 of 100 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.