home

585046_stp.exe

Windows Media Component Setup Application

Microsoft Corporation

This is a setup and installation application. The file has been seen being downloaded from cdn.baixakicityfiles.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Media Component Setup Application

Version:
11.0.5721.5262

MD5:
f05f168a8e5549ceb56d8a22626998be

SHA-1:
12460a4060f3f5d3042e2faafab6d4b76109f115

SHA-256:
14ae822a5f7c5c492b5da35b150f797af769162e6e47f40fe1bfda522502abfd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 1:30:31 AM UTC  (today)

File size:
24.6 MB (25,744,520 bytes)

Product version:
11.0.5721.5262

Copyright:
(C) Microsoft Corporation. All rights reserved.

Original file name:
WEXTRACT.EXE

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\585046_stp.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/19/2009 11:58:26 PM

Valid to:
3/19/2010 11:08:26 PM

Subject:
CN=Microsoft Corporation, OU=AOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101640F00000000000B

File PE Metadata
Compilation timestamp:
6/6/2000 5:43:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
393216:T4M1NsacS95EHz+FQIj1MANwlvTG0K154UNpT6PLrdqq8hGm0NBamwS2a:TuCFQ81mhTGd4UzT8qq8d0jwS5

Entry address:
0x2891

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, DC, 10, 00, 01, 8B, F0, 8A, 06, 3C, 22, 75, 14, 8A, 46, 01, 46, 84, C0, 74, 04, 3C, 22, 75, F4, 80, 3E, 22, 75, 0D, 46, EB, 0A, 3C, 20, 7E, 06, 46, 80, 3E, 20, 7F, FA, 8A, 06, 84, C0, 74, 07, 3C, 20, 7F, 03, 46, EB, F3, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, D8, 10, 00, 01, F6, 45, E8, 01, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF, 15, 60, 11, 00, 01, 50, E8, 0E, 00, 00, 00, 8B, F0, 56, FF, 15, D0, 10, 00, 01, 8B, C6, 5E, C9, C3, 56, 33, F6...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
34 KB (34,816 bytes)

The file 585046_stp.exe has been seen being distributed by the following 20 URLs.

http://cdn.baixakicityfiles.com/c?x=RgNCQV6 CTpiuVicgKADe3oPY9qXDItdLuiJEbTM9vg=&c=P3bUaVReo9fy5xY4U6BINW MaciadHW/hnUah8y316NYUqBKL/WG2dZp3LB7P42 Dnd7hL9pxDai5ZOoMDiNp0qvd2u7tfx7vWdGrTZWixS07/S8lzVaW6ac8Y3VRkZLclHDacMQW4PR zoRv6 i5g==&downloadAs=windows-media-player-11-32-bits.exe&fallback_url=http://www.microsoft.com/pt-br/.../details.aspx?id=8163

http://cdn.amazingsoftwarecentral.com/c?x=PMf8yIdNZNoMqdsjAmpDstsFxlPRw8JoiSfAemzQjr8=&c=vmPyIyw8XUX0epuNuZeJnr8ir0IHSXpqzXGN7hYC/EZb3i/gG69qCcWklhseFdHFjYp5zqPhRUQGSlk9BTAUCw==&fallback_url=http://www.microsoft.com/pt-br/.../details.aspx?id=8163

http://d.baixakifiles2.com/?ic_user_id=254&data=AOZzNyx7N26RXFhYHpLnSd2Yr9jH4aw9R0lMt2Eo0KYX/SqrrrAdHoVIkERXu1Mu99lrWEJXgXzmLKPdtofMG6nTUd3bPtet IOgCQZ65qKaZEMUdMPW2fb6CW44N4 9JTvuEVlCy9wa/q9shm89qipiZL70oIGknsIG5BizZqqF/pOSCd6g18idaS3abW2XRI3ruQj3WwRWW3vy40gPERqbhbUvvoSkN/DBOwYf0nNHi4S0JV/DklIpLNpxf/iff3pQlQx6Tq8jlYcfSp66zz1asybPjnZOpWUXRzJlnDvpeYf1o3d1x Z4N6k3hlGpkkmE/dJ5Y47wXln70l5n/H1uXj3lTQe07tyu0E3sYQbPuiK6kdy4EatPhozGco6IxuP7yeMnnMAMyGvlbaGCVsmTOjdmErw/4OLgBUzdb66ZDVcTXJ5SnlGfAow7PDwnurlLvKruHPaJsL4MRe5JBZva8KZ0docbaVzB4745B4WZ2FVdZSa49kFO6D/p1hNHt8kxNgxYxeSCC7c3m6/6IhuvsHgUWzWGPNQNcm9Zg9c O4ta8esEcUmW4bU51lZmYphm8kDy/QJUsSA5QpoEP1Sa7887Qai4XbUSXDfakwxeTBE5PdSjS87/cEw3ir1cWO41r2l2TaWRZUsz Wv2iGeX5O6rTKbBEJxzO9mBZePnEk8WqXP1Ptr2/nb9vIffuDbpGmUiptLBlOIkyJGMNBYsmGpP/L/.../ATYFp3m2yqX8tpziyIb9b w2k=&key=osSUNfMMglh6VOutYaCG8Jx78KkeIRSfOflZUAKeOrcU5DPK6uk0PkUaTp9a8zRXSk1OdWIYYBPngRCextnf6yfQ Cs1O1vNU5uMsEq1oSU

http://www.audioware.com.br/baixar_soft.php?id=122&arq=http://download.microsoft.com/download/e/b/2/.../wmp11-windowsxp-x86-pt-br.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../windows-media-player-11-35-32-4102612.exe

http://pt.kioskea.net/download/.../download-54-

http://cdn.baixakicityfiles.com/c?x=q3bSvk7LOAnk tQJ3HPEUD3UtSrd7oPJzseAxpnmnwU=&c=4eIKEOhxiRYaD1rUtw5FjTHa QfwRzHa8Hu5UwEG1fjdyEzfG3upE0P/AkK5Lkye3aPe3DlHkZ0MOsCRFJqWHLcxBCtW9lr7VusiS2exHDP61k7DEkAXUpD8FRuw8CebOQMK8OtfkCwXYkmoZGBwJw==&downloadAs=windows-media-player-11-32-bits.exe&fallback_url=http://www.microsoft.com/pt-br/.../details.aspx?id=8163

http://ultradownloads.com.br/.../2,1175237.html

http://cdn.baixakicityfiles.com/c?x=YksriOYF99GTzhKfdilLnKFi8/u9mDaj4AvQFyzII0g=&c=3pqGcVu0henUVj /PU25Jt4NW4wy2Z AZQNuQibA8JfV7Sgc9FVVxskIkWcVy/g357Isy/uXZV/yxfYMObfAYICfjrAUZBgJTy6KykiO8x3CYo6eR3Lo78vWK2OpQBlB9YEz9EMzC5YAtLUsL21eUQ==&downloadAs=windows-media-player-11-32-bits.exe&fallback_url=http://www.microsoft.com/pt-br/.../details.aspx?id=8163

http://cdn.baixakicityfiles.com/c?x=h4W0g Q6MmwXi3hE1pIR/FxzKXQx0V8XZp24P/FKOBg=&c=oEsyyAK5lA38tWMA3ZtOsRQAUxAkphOavyQGT Fe8NcYxTyzsolPKB3Oy905xD Q4XRBxxhboiUWbL IT0xClEHQmCvyiUwM8l9tpbbzGlgEKmP2k0qXvRsmE7Okf ymIsdyGYD5aBOkb/RPx8EiVA==&downloadAs=windows-media-player-11-32-bits.exe&fallback_url=http://www.microsoft.com/pt-br/.../details.aspx?id=8163

http://cdn.baixakicityfiles.com/c?x=zjRhIXTtKZQ8xKoAaeB2oA/lV0lwmE0wMA1UXxMp1Oc=&c=7R8oxYMc1gyLGUHYzDPyMo5JQl9W3xnryflHXOs8JuDEG9tu95Cy/DcT7ncmJ EevseqxtAGwVchnQdoCo103wpbZ96IcLmJq4dJkg32Y/XDhocdWfxs1wh8vo/gjFxGRPfIMLGoaG0ydkwrB1VoKQ==&downloadAs=windows-media-player-11-32-bits.exe&fallback_url=http://www.microsoft.com/pt-br/.../details.aspx?id=8163

http://cdn.baixakicityfiles.com/c?x=YMliQZQ5Dn9M4wanSboBkWvEud1l5539biT2savqyTQ=&c=guwg1QlpAAoHm2dzlHgNFAKRJF14BpeXVGFtwtwKreXcVDtYLu/qbFzsHp o4pjbkAe6Yser52L8a91kcCMrekWQDay2JxUGgjQu9j7aHqck8fluEAwBsbIGgBA5mGSNoAXT4d1mjv5Zw17bVDzSCQ==&downloadAs=windows-media-player-11-32-bits.exe&fallback_url=http://www.microsoft.com/pt-br/.../details.aspx?id=8163

http://gsf-cf.softonic.com/124/60a/.../wmp11-windowsxp-x86-PT-BR.exe

http://cdn.goodappsstage.com/c?x=FlJ238ATamtDC5xJG9d DQg2KQ8qO9fslbK9wWbrUn8=&c=wtkgkFksd1wjJSf9ZmuzUDPdmaLTsqsBKbYjhoRmvB2cFjEgRP6c CKjFxN3H5Dgy4AATSt2R9CKtm0HBJ9z3Q==&fallback_url=http://www.microsoft.com/pt-br/.../details.aspx?id=8163

http://cdn.deliverfoldershouse.com/c?x=zbFdqnUtwuV4p6h0qgFu6KacaXJ5E7o65QFvSxwDz2k=&c=Ml5iUoMylJvt9BZovuY M3HNccdpEbMtGtKfzlKdCEMJC5rnDQ95UNpmsHmXMQw0eKvX YYnScH5pY9e64IIMg==&fallback_url=http://www.microsoft.com/pt-br/.../details.aspx?id=8163

http://pt.kioskea.net/download/.../baixaki-54-windows-media-player

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../windows-media-player-11-35-0-4102692.exe

https://download.microsoft.com/download/e/b/2/.../wmp11-windowsxp-x86-PT-BR.exe

http://201.48.251.14/msupdate/e/b/2/.../wmp11-windowsxp-x86-PT-BR.exe

http://download.microsoft.com/download/e/b/2/.../wmp11-windowsxp-x86-PT-BR.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.