home

mp_xp_enu.exe

Windows Media Component Setup Application

Microsoft Corporation

This is a self-extracting archive and installer. This is installed with Windows Media Player 11.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Media Component Setup Application

Version:
9.00.00.2980

MD5:
876f2c0ac871f45d2c93a7dc28e3aa98

SHA-1:
5ffe6655b404f3dc4b3aa6fc6cdc33d72f106808

SHA-256:
0aed8d93a2e4f56934b3c1797dff9144eaceab9e9207148d73d08ed1ba29ce7b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/27/2024 7:27:57 AM UTC  (today)

File size:
9.7 MB (10,135,688 bytes)

Product version:
9.00.00.2980

Copyright:
(C) Microsoft Corporation. All rights reserved.

Original file name:
WEXTRACT.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\pdvd13\wmp9\mp_xp_enu.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
5/24/2002 6:55:48 PM

Valid to:
11/24/2003 6:05:48 PM

Subject:
CN=Microsoft Corporation, OU=Copyright (c) 2002 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61071143000000000034

File PE Metadata
Compilation timestamp:
8/17/2001 7:42:57 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.0

CTPH (ssdeep):
196608:PRxeZ7enfxZ5rWx2lmuwFgp77CFZ5Xd2AksFqa/f:PmZmZ5IO3f77CFZ5XFF7

Entry address:
0x5A5E

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 5C, 11, 00, 01, 8B, F0, 8A, 06, 3C, 22, 75, 12, 46, 8A, 06, 84, C0, 74, 04, 3C, 22, 75, F5, 80, 3E, 22, 75, 13, EB, 10, 3C, 20, 7E, 0D, 46, 80, 3E, 20, 7F, FA, EB, 05, 3C, 20, 7F, 07, 46, 8A, 06, 84, C0, 75, F5, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 58, 11, 00, 01, F6, 45, E8, 01, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF, 15, 54, 11, 00, 01, 50, E8, 35, FF, FF, FF, 50, FF, 15, 04, 11, 00, 01, CC, 53, 8B, 5C, 24, 08, 3A, 5C, 24, 0C, 75, 1B...
 
[+]

Entropy:
7.9988

Developed / compiled with:
Microsoft Visual C++

Code size:
34 KB (34,816 bytes)

The file mp_xp_enu.exe has been discovered within the following program.

Windows Media Player 11  by Microsoft Corporation
Windows Media Player 11 was included with Vista with no updates, final release on XP. Windows Media Player is a media player and media library application developed by Microsoft that is used for playing audio, video and viewing images .
windows.microsoft.com/en-US/windows/download-windows-media-player
5% remove it
 
Powered by Should I Remove It?

The file mp_xp_enu.exe has been seen being distributed by the following 19 URLs.

&onid=2139&oid=3001-2139_4-10180881&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=mp3audio/digital-media-players&topicbrcrm=&pid=10180880&mfgid=50119&merid=50119&ctype=dm&cval=NONE&devicetype=desktop&pguid=8f0c8b1d2b4f0713410ceefd&viewguid=d5KKdqPdyWCNE4H5q0ulkcJgaDKrwQDTnthj&destUrl=http://files.downloadnow.com/s/software/10/18/08/.../MPSetupXP.exe

&onid=2139&oid=3001-2139_4-10180881&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=mp3audio/digital-media-players&topicbrcrm=&pid=10180880&mfgid=50119&merid=50119&ctype=dm&cval=NONE&devicetype=desktop&pguid=0c91d2d71b976e2e5b9a122a&viewguid=VSou@2NCj@U8kJcoQveM076@VYZ45esicgbs&destUrl=http://software-files-a.cnet.com/s/software/10/18/08/.../MPSetupXP.exe

&onid=2139&oid=3001-2139_4-10180881&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=mp3audio/digital-media-players&topicbrcrm=&pid=10180880&mfgid=50119&merid=50119&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=5403b19466c28ff4b13ea45d&viewguid=fYFxtdG92qinS92kZEtn3s6J6NQ6lwnluZPR&destUrl=http://files.downloadnow.com/s/software/10/18/08/.../MPSetupXP.exe

&onid=2139&oid=3001-2139_4-10180881&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=mp3audio/digital-media-players&topicbrcrm=&pid=10180880&mfgid=50119&merid=50119&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=69683f9d4e7786837aa8c99e&viewguid=f9Wvo@y-i3cpW3GkhxXWCFkNqYTsFCv65cjl&destUrl=http://files.downloadnow.com/s/software/10/18/08/.../MPSetupXP.exe

&onid=2139&oid=3001-2139_4-10180881&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=mp3audio/digital-media-players&topicbrcrm=&pid=10180880&mfgid=50119&merid=50119&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=cce1e21b6634bfbbdfbe3801&viewguid=gaf9aOJ6KfUC2-g-D-NOb4YYO8AmoNmFEKeV&destUrl=http://files.downloadnow.com/s/software/10/18/08/.../MPSetupXP.exe

http://a.tinhaythe.com/v2106xm/2014/.../windows-media-player-windows-xp-9.exe

&onid=2139&oid=3001-2139_4-10180881&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=mp3audio/digital-media-players&topicbrcrm=&pid=10180880&mfgid=50119&merid=50119&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=c0111ed37fa369e48660c684&viewguid=gEU4FeiKpsVwkTz9Dsy2vK9VAn2ta2c0dX2H&destUrl=http://files.downloadnow.com/s/software/10/18/08/.../MPSetupXP.exe

http://www.videohelp.com/.../wmp9xp.exe

http://static.letoltokozpont.hu/letoltokozpont.hu/programok/.../mpsetupxp.exe

temp:MPSetupXP.exe

http://s5868.chomikuj.pl/File.aspx?e=49dk9LOKzo0PIqdfYVeOxNZJCOuCyytesmWzRkzkSw85PeeJrvJWJYSfuoKlPIV5w4pa5bmP-VysuIbsjkuht9L36IdpCXBCPZZITk27KBw18glQ9ULW4e7ZpaRPhvJwI9Fr9_ovJ9N8izjwR7FeBw&pv=2

&onid=2139&oid=3001-2139_4-10180881&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=mp3audio/digital-media-players&topicbrcrm=&pid=10180880&mfgid=50119&merid=50119&ctype=dm&cval=NONE&devicetype=desktop&pguid=4403d929df5075e7a8309232&viewguid=bmEp1zGm2x2dnMofw7o15B5BzMvlPYumig1w&destUrl=http://files.downloadnow.com/s/software/10/18/08/.../MPSetupXP.exe

http://ahlulbeit.se/webbdesigen/.../mpsetupxp media player.exe

http://software-files-l.cnet.com/s/software/10/18/08/.../MPSetupXP.exe

&onid=2139&oid=3001-2139_4-10180881&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=mp3audio/digital-media-players&topicbrcrm=&pid=10180880&mfgid=50119&merid=50119&ctype=dm&cval=NONE&devicetype=desktop&pguid=466ded7b04801f0f453e98a9&viewguid=YapcnA26qgLCWZS5eAS3wqiDJwbUZek0IUU-&destUrl=http://software-files-a.cnet.com/s/software/10/18/08/.../MPSetupXP.exe

&onid=2139&oid=3001-2139_4-10180881&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=mp3audio/digital-media-players&topicbrcrm=&pid=10180880&mfgid=50119&merid=50119&ctype=dm&cval=NONE&devicetype=desktop&pguid=0eff545dd086aab41a07fe16&viewguid=aW4e38xcckn@kg62k1qWOZXXgOY@cuvvpWw1&destUrl=http://files.downloadnow.com/s/software/10/18/08/.../MPSetupXP.exe

http://a.tuviviet.net/v2106xm/2014/.../windows-media-player-windows-xp-9.exe

http://files.downloadnow.com/s/software/10/18/08/.../MPSetupXP.exe

http://software-files-a.cnet.com/s/software/10/18/08/.../MPSetupXP.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.