home

SFXCAB.EXE

Self-Extracting Cabinet

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Self-Extracting Cabinet

Version:
6.2.0029.0 (SRV03_QFE.031113-0918)

MD5:
bb25707c919dd835a9d9706b5725af58

SHA-1:
c81472f7eeea2eca421e116cd4c03e2300ebfde4

SHA-256:
62e524a552db9f6fd22d469010ea4d7e28ee06fa615a1c34362129f808916654

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/2/2024 3:21:12 PM UTC  (today)

File size:
316.4 MB (331,805,736 bytes)

Product version:
6.2.0029.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
SFXCAB.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\sfxcab.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
8/22/2007 5:23:13 PM

Valid to:
2/22/2009 4:33:13 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
Compilation timestamp:
6/28/2005 9:55:01 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
6291456:BR+qvzhQOoI3i9RR6aZngvfmVnPxDwKa0yHebUlZxa521e:T+09QOoIyzRP2uVnZEKUeAlZ1

Entry address:
0x5A45

Entry point:
E9, 13, FA, FF, FF, 8B, 44, 24, 04, EB, 17, 80, F9, 3B, 75, 0C, 84, C9, 74, 14, 40, 8A, 08, 80, F9, 0A, 75, F4, 80, 38, 20, 7F, 09, 40, 8A, 08, 84, C9, 75, E3, 33, C0, C2, 04, 00, 8B, 4C, 24, 04, EB, 05, 84, C0, 74, 11, 41, 8A, 01, 3C, 0A, 75, F5, 41, 51, E8, C0, FF, FF, FF, C2, 04, 00, 33, C0, EB, F9, 53, 8B, 5C, 24, 0C, 56, 8B, 74, 24, 0C, 57, C6, 03, 00, EB, 0C, 56, E8, CB, FF, FF, FF, 8B, F0, 85, F6, 74, 2D, 80, 3E, 5B, 75, EF, 8D, 46, 01, EB, 0A, 84, C9, 74, 1F, 80, F9, 20, 7E, 0A, 40, 8A, 08, 80, F9...
 
[+]

Entropy:
7.9998  (probably packed)

Code size:
30.5 KB (31,232 bytes)

The file SFXCAB.EXE has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1425027452&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=FDBUw1sMSyr7Z7KdKEotHovq3kidwS6aHGId8WoQBJQIetPTOWRJrp0~4iWTNGEuAztqeB9AlLn8u6I2EKzeZtJPRZx1sUd3juD7loJepIXMJ7aCwjJq88fUVmUJNqVHPReA3OY1KVgVYlgsmgf37Ln~V9qWx4gtEYjKFdQDWRU_&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1474328844&Signature=AUBMVNR1LVWcBIEV7uOqXp1slDKYXMnnOHoG0al5OV2jbf4ZBIe3OM2uEnGMRwciIv34tptLoMrab69cvdziHawhVqHSkuAQjKr58ssC2GEvvH1i46JIsQ7HDAvWoEobj~FLP9njo-iCUPRjkx7VORRKmKxlF7e3iIZ-mJffDfc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://www.tamindir.com/indir/MjAxNy0wMi0xMSAxNjowMDoxMw==/windows-xp-service-pack-3/windows/.../

https://softpedia-secure-download.com/dl/372670f80df05d00f435257782512a85/588e567a/100090001/software/other_tools/.../WindowsXP-KB936929-SP3-x86-ENU.exe

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1463881589&Signature=H9U5PdRF3wykjwD3y7ou3aQoDnDRIVYawEYZTDhu6lqwaDvUdEC~A9AVjaZ7JmUQZDqlAvvYindbdFigRhHmM3u5n20LdLvojo6m8gjzVGGGKiqHErSddjen1d8-5V4BvbcRCdiUUzn4f8qMrKGkbQxPR-Vo0wFHKhDe4DobkiI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1485176938&Signature=USuwVvX9xIdSAlEofVqhDsmVp-wNvEwMHzw9vXOBfdBrPyhbwq4IJRyJEt88RPm9qYr9r~X0CRmkqzW3-QCcYrYqA1f0g5b5R3chHHYA4PuF8vDXimzYbXbIhVZZ4MuB8IEnMFExgXxuht04x2-MqO3BBpnTRmugGIVPL66lhO4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://download.softpedia.com/dl/fee81a45511ee53d8bbdc3f3815f4292/581f4144/100090001/software/other_tools/.../WindowsXP-KB936929-SP3-x86-ENU.exe

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1483014174&Signature=ZKchRMaDgzI4MYBEUSkPqNoVGLXlhvNRAhfqe7zgVl~k4hyqgCJjeb-75ONOciXCOes9NYfGPariIjhe9Ez6gVTOyS2RmXMdDLb~lE8ARsuO8Lg-Gy-JhVldE7wN~i25ixQP3fl~Zr-FYT6-2WqUofMIIuj-rOUHW0~MFelxwQg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://files2.majorgeeks.com/36107e6b72b64a32dfce109719e892ad/.../windowsxp-kb936929-sp3-x86-enu_c81472f7eeea2eca421e116cd4c03e2300ebfde4.exe

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1473621900&Signature=QiEST1nImC762BU9vI9kAXCkS6woBPw3vcNzAgQbVeuDkixc8NTaY2gE76Ppy1Ajhlw40hynFpvWy5-nhB~Fag1JTLwZVo8tkD9CzP-fHu26X17WZm8hidvbra~zovIuKmbG~VSNF4EcjrOPGjmDO5MoSq9OeV4tz5qB0Wc4-Z8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1483063475&Signature=RsyYSXyi0RRQPK2C3T-xghBrQRQnQTeW3bCscI7lBcJBKviQxDnQwH73Tsz1KJvpy5Q8nKNxnqhBVMR9m2eRsSplgR5ml1lWsi-86BqyM1wASit64mVgURjMUvGqRdYoEmKAobVmaPzLZf~fwO9aTiwYUmYXe~6ZTD9mhSBzWmc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1464041956&Signature=OYq9nwXFLYxNKXdmaeo4Cjcg8SRqDIMHV7cX~OFtWhdUrDZbVZ1VFoukhIfhLzHikZa7vnpDZitl4ZRgWLEfpCwLRPHmuoQXBxMRCr3Jr2mUZoz~NwlNpKYVzms4jACnewCERCbiajVdF5eeOj3rEUDPTfcQSh~VMkQVIqdYarw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1468315597&Signature=gsugOYdIeWMkM3ql1owZtFPK2GWY1lSS3FBdUwi00R2K9x8JwGX3FwqVz2-dl~4v7SuFOPOyT0ytD9GeDxyvMNw-42MPk0mZ-obs9LHTOvaaLMsiK-NIiDkyJ-T4PpWywGanrsbcmtoVbUKJkzCLchF9Z4QQx0sOKd5C0h-nOJA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://www.tamindir.com/indir/MjAxNy0wMS0yMyAxNjoxNzoyMg==/windows-xp-service-pack-3/.../turkce

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1477514369&Signature=CiTUH6PIX4c9kJl-A3CoOjABUfcvOTYvmsRYtGZj3VHU2X8gKJSinB3XOseSKGR-g6k5gc6Y0lltK8Zb0e5p~FExOAT3327mPcayXDr95Va3wLsdikihLLf~p6cg-aGrDwdQDskNmnYRo5Ho-09ob0NQoALtsWHi2czxFgOYR5M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://www.tamindir.com/indir/MjAxNi0xMS0wNyAyMDozNzowMw==/windows-xp-service-pack-3/windows/.../

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1461649700&Signature=iEXtGsCtvD2qG2zu1O7Bv-yY1rxe446Jc6W9ndJQrZaz72ZXKkn34h2bYlYQ-eBi4Q1TFAbeFA82q4SUHcClo9ahbLaRmCIEh7u8CeHwWU0WrzhJ1W9ca8A6SSmRsSpajr-g5OWiiAWc6RkbiquZ6Hgy7SQhE06UbpKH-4wWSYA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1478737675&Signature=h4cfp8OIgVzj5XcoQvC3ImEEECGqN~vKF42jePeSSHVjdW~rrseoQ2f7qyWtXaZKl7JUUn3JQbKbrUXKVMiTtFMyYD5p5-l3cQe-eiwXLcwXvkVgR0bxtGb2nND2hrT2ecDS98YRtg4EjN3LRMnt0svmRVHix8Y1C--WGPQ1Jfk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://www.tamindir.com/indir/MjAxNi0xMC0yOSAxNDozNTo0OA==/windows-xp-service-pack-3/windows/.../

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1474852544&Signature=CkmD1KWdXpAcFcoOUzS92DP4IzcImvShQFSCe4oHd5lGBWdfaGJ3Ax~WCqVATVM74Sr1-VdF0FA1tcrmu7y0EwCgdivmO9Uit93PwJGhb~KtUveDCYngHdPip6HQ41GctIC1xdWYv67GKe1VxLFShnDCvlR2QgUTQRu1shCq5rk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1458439289&Signature=L7XWr4VZ6eQXVB2B0QNEbFGTrg90xAhWC6iCwXSJ3EzzGjRgW--ICCn7q7jOqB3cdJGeQbbncu4cIIv-PFuD6Tcss1wT-pHHEh2rE2sM4ImJsx-Ba4s8mpIkdlhsr6EpS0HTKs2HNIzkWmwAZw-0ZUN-me4nCbl8Ix6faEYHDKI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1477785594&Signature=Ja0gpyFAnoUUd2vCw3BbT5FK22tmHlwWpvPI6NMa8aGPpzcto1f-cbtTNXxBYZ0FO0rr2EPGylNC9~qqnOioVjdErqYdoAmg3Tf3CmCZ35ZV0N5A6K0gGcs5Y3Spt5T-Ki3xRN0Shr-~dngmQLbEKmAntbkCYv~YLfaGcaubdyo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&PHPSESSID=aiog96poe3nuabssakmqnqor41

http://www.majorgeeks.com/index.php?ct=files&action=download&PHPSESSID=sbeonq5t7i2e3v005u1355mse2

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1473257703&Signature=JUooVv31c-r1akfP5jHM1ONk6VMWZQPydp7hlZrGL27F5ct9pZW~yfLGSJMN4tGZSjeTKlNnGcd0UTAACGyYU3OeCEdP0rlKeUAy7zDD~joB2Z93ZXk9Ff6vqbA2Op~NwmwBjsvZzxhaHRE5dIxuTjRF1edIXZH4QwOFEGFXWfQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

temp:WindowsXP-KB936929-SP3-x86-ENU.exe

http://www.download.windowsupdate.com/msdownload/update/software/dflt/2008/.../windowsxp-kb936929-sp3-x86-enu_c81472f7eeea2eca421e116cd4c03e2300ebfde4.exe

http://gsf-cf.softonic.com/c81/472/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_en&type=PROGRAM&Expires=1436833341&Signature=UTHgPJfbd1mf04CyPtKoPWDH-P8VNI-XwYr2dnq865F-IuNi0gCfNq4cmppAyksMiIjdx454~pm-FDMkkEfDuzWcUPNfkGmPy-6swcJeIl64klf75hSwduQmyTyXx6RPnmHQ6I2cdQ~FBH2D0Y0ITjsqfwOxntaS~EYLrw53Buk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windowsxp-kb936929-sp3-x86-enu.exe

http://www.laboratorycenterconecpt.com/Qn _WfP2clyOZXFFregQ3xOJts4Y7k_rWfIFzIA4zBiJkWP 2_dp492WiEvf2buZrlcizdt7p9QyaS_4aIcGg5yy4sickf76CvI6p2OSk 7znc7yvAfU cmpcNq69etk2Ws401wuUVYMW09_wlTFCmyG9f chgvTIKUQZ65HIeUoTErKWI75gPaBPydfZpAn6M6kwKIdmQtva7CJ6ChUwtsOilf0g1uelmrCtlK91VstiRb2kZhEu Vy7Wb3Ydhd8nvrK9bOMMLagF__OzbQd4rjuOJH8z9ldNGVlvlS7FmMx14PmZjjPud K9bI_sXYyBywpIXPyfxh5V1_NAxTLiUPNN4F1E0rrjer ZqmGgiyLboQLTlou8fNDUGQ2mpeudoHTXVj9U83HzIjaHgfhvps5qn68aS L3XwjGgWl1dvAIwhYkTKKrSJAdAXYlylzOB8EquwBu90MwbFhH4Gew9b8ub9SY0x8R_PhZWv5QfYmeD57nqj7yfK0A jiOokwMGIO3PRkf2WjJu5mCaEXlgXNvrOSg1fyIZfj0k0rI62qcLY1xjALiogLQLQnAnHbt3 0RyPRQtCsm9q_9YNcU0S_IQWK7WYOcGZ6N9Jfvax0deQF_zfwRoeO5M7vLaw c1F6Ekd-G1gAAORoXkz3Qh2SnOckwAacEGSJB4CD3J33gVzue09iDXTr5CzI3MtOzegEbOvNUcYwK7AaM8Mls9i2p00hcCxXllkoUg6_UeDHFRr_EQ==-e

http://www.tamindir.com/indir/MjAxNi0xMi0wOSAyMDozMTozOA==/windows-xp-service-pack-3/windows/.../

Latest 30 of 230 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.