sqlexpr32.exe

Microsoft SQL 2005 Server Express Edition

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from www.srural.com.br and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft SQL 2005 Server Express Edition

Version:
9.00.3042.00

MD5:
cc50972311e47c2166b3feec0675211f

SHA-1:
80c387c643571356b9ff3546353b3f2edf0bdf4b

SHA-256:
fa667be0ca60d42bcd613860b4e3bb3cd7a3f2aac8e7045b5d6c9cbd5cde194e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/5/2024 5:39:59 AM UTC  (today)

File size:
36.5 MB (38,220,656 bytes)

Product version:
9.00.3042.00

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
SFXCAB.EXE

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\wcu\sse\sqlexpr32.exe

Digital Signature
Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61469ECB000400000065

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
786432:toIuT9rdQwt7ObQcdA0QPyPZiOHvoHQGjODmILluyWkGfsRYsl3GiIxXRC4+4:tidRSrdA0QPy4OHvowrDNLk7xWf/cXRS

Entropy:
7.9996  (probably packed)

The file sqlexpr32.exe has been seen being distributed by the following 13 URLs.

http://www.srural.com.br/prerequisitos/.../sqlexpr32.exe

https://docs.google.com/uc?export=download&confirm=Xl9O&id=0B2uJazaRVsV1OUxsWWlhVDV2cWc

https://docs.google.com/uc?export=download&confirm=kMik&id=0B2uJazaRVsV1OUxsWWlhVDV2cWc

https://drive.google.com/uc?export=download&confirm=6zt6&id=0B6v-wuan1QIzdXZlZXdUckZKQ1E

http://nadasoft.org/.../SQLEXPR32.EXE

ftp://110.173.181.60/PTG/XL100/Release ASWv2014.02C_ESWv2014.0.18/Setup/.../sqlexpr32.exe