home

sqlexpr.exe

Microsoft SQL 2005 Server Express Edition

Microsoft Corporation

This is a setup program which is used to install the application. This is installed with multiple programs including Microsoft SQL Server 2005 Upgrade Advisor (English) and Microsoft SQL Server Management Studio Express. The file has been seen being downloaded from exeditoronline.dictaphone.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft SQL 2005 Server Express Edition

Version:
9.00.5000.00

MD5:
1fb1afc37dc6e74e6565bed0e1c0636d

SHA-1:
a054220f0b5e8552b4b6a70a727b2fe66a99cb49

SHA-256:
087bf7b1d433eed6afcfb2f983dfed3381416edf1e0dc6c7779b98c537f6d5b9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/26/2024 2:02:00 AM UTC  (today)

File size:
54.8 MB (57,447,776 bytes)

Product version:
9.00.5000.00

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
SFXCAB.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\sqlexpresssp4\sqlexpr.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/8/2009 12:40:29 AM

Valid to:
3/8/2011 12:40:29 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
8/28/2006 11:23:46 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
1572864:n3K0LQ3fLvt6/LE1R7mJy0sEmNobaLbFM8htg:3KOQzkLE1R7mJXshobaLBM8h+

Entry address:
0x63FF

Entry point:
6A, 28, 68, E0, 25, 00, 01, E8, AD, 01, 00, 00, 66, 81, 3D, 00, 00, 00, 01, 4D, 5A, 75, 28, A1, 3C, 00, 00, 01, 81, B8, 00, 00, 00, 01, 50, 45, 00, 00, 75, 17, 0F, B7, 88, 18, 00, 00, 01, 81, F9, 0B, 01, 00, 00, 74, 21, 81, F9, 0B, 02, 00, 00, 74, 06, 83, 65, E4, 00, EB, 2A, 83, B8, 84, 00, 00, 01, 0E, 76, F1, 33, C9, 39, 88, F8, 00, 00, 01, EB, 11, 83, B8, 74, 00, 00, 01, 0E, 76, DE, 33, C9, 39, 88, E8, 00, 00, 01, 0F, 95, C1, 89, 4D, E4, 83, 65, FC, 00, 6A, 01, FF, 15, CC, 21, 00, 01, 59, 83, 0D, EC, D3...
 
[+]

Entropy:
7.9995

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
33.5 KB (34,304 bytes)

The file sqlexpr.exe has been discovered within the following programs.

Microsoft SQL Server 2005 Upgrade Advisor (English)  by Microsoft Corporation
6% remove it
Microsoft SQL Server Management Studio Express  by Microsoft Corporation
Microsoft SQL Server Management Studio Express (SSMSE) is a free, easy-to-use graphical management tool for managing SQL Server Express Edition and SQL Server Express Edition with Advanced Services.
www.microsoft.com/sqlserver
7% remove it
 
Powered by Should I Remove It?

The file sqlexpr.exe has been seen being distributed by the following 10 URLs.

https://exeditoronline.dictaphone.com/install/.../SQLEXPR.EXE

http://files.downloadnow.com/s/software/11/91/23/.../SQLEXPR.EXE

temp:bilbul.EXE

https://www.fshare.vn/.../9NA7WNBA94K7

https://exeditoronline.dictaphone.com/install/SQL/.../SQLEXPR.EXE

https://www.tenlua.vn/temporary/.../0037ef29e5026a0f1b

https://download.microsoft.com/download/8/4/D/.../SQLEXPR.EXE

http://coolselector.danfoss.com/CSII/.../SQLEXPR.exe

http://software-files-a.cnet.com/s/software/11/91/23/.../SQLEXPR.EXE

http://download.microsoft.com/download/8/4/D/.../SQLEXPR.EXE

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.