» wmp11-windowsxp-x86-tr-tr - kopya.exe
Overview
Analysis
File Details
Downloads (185)

wmp11-windowsxp-x86-tr-tr - kopya.exe

Windows Media Component Setup Application

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from www.tamindir.com and multiple other hosts.

File name:

wmp11-windowsxp-x86-tr-tr - kopya.exe

Publisher:

Microsoft Corporation (signed and verified)

Product:

Windows Media Component Setup Application

Version:

11.0.5721.5262

MD5:

072e03a185cfc49b7d1283b5d1febbf6

SHA-1:

b544b2983a424fe1a5214f6011e29033d6ba2871

SHA-256:

1b3bc0a051d51f7758f18087aebc631cf7a0ceacc3b537645d479b3e44d215e9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

11/25/2024 10:24:11 AM UTC (today)

File size:

24.6 MB (25,748,104 bytes)

Product version:

11.0.5721.5262

Original file name:

WEXTRACT.EXE

File type:

Executable application (Win32 EXE)

Language:

Turkish (Turkey)

Common path:

C:\users\{user}\downloads\wmp11-windowsxp-x86-tr-tr - kopya.exe

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

1/20/2009 3:58:26 AM

Valid to:

3/20/2010 4:08:26 AM

Subject:

CN=Microsoft Corporation, OU=AOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

6101640F00000000000B

File PE Metadata

Compilation timestamp:

6/6/2000 11:43:56 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.12

CTPH (ssdeep):

393216:z0zT6ErcldYikJt+/ExlEkCzs7XG3OV47ZkLk1wOx03jUpn4NgWQzszt:+u/EjEfgXGeVmZkwNyzpNgWEsp

Entry address:

0x2891

Entry point:

55, 8B, EC, 83, EC, 44, 56, FF, 15, DC, 10, 00, 01, 8B, F0, 8A, 06, 3C, 22, 75, 14, 8A, 46, 01, 46, 84, C0, 74, 04, 3C, 22, 75, F4, 80, 3E, 22, 75, 0D, 46, EB, 0A, 3C, 20, 7E, 06, 46, 80, 3E, 20, 7F, FA, 8A, 06, 84, C0, 74, 07, 3C, 20, 7F, 03, 46, EB, F3, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, D8, 10, 00, 01, F6, 45, E8, 01, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF, 15, 60, 11, 00, 01, 50, E8, 0E, 00, 00, 00, 8B, F0, 56, FF, 15, D0, 10, 00, 01, 8B, C6, 5E, C9, C3, 56, 33, F6... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

34 KB (34,816 bytes)

The file wmp11-windowsxp-x86-tr-tr - kopya.exe has been seen being distributed by the following 50 URLs.

http://www.tamindir.com/indir/MjAxNy0wMS0wOCAwNToyNzozNA==/windows-media-player/.../11

http://www.tamindir.com/indir/MjAxNy0wMi0wOCAwMDoxODo0OA==/windows-media-player/windows/.../

http://www.tamindir.com/indir/MjAxNi0wNy0xMCAxMjoyNjo1OA==/windows-media-player/windows/.../

http://www.tamindir.com/indir/MjAxNi0wMi0wNSAxODo0ODozNw==/windows-media-player/windows/.../

http://www.tamindir.com/indir/MjAxNy0wMi0xNSAwMjowMDo1Mw==/windows-media-player/windows/.../