sqlexpr32.exe
Microsoft SQL 2005 Server Express Edition
Microsoft Corporation
This is a setup program which is used to install the application. The file has been seen being downloaded from www.srural.com.br and multiple other hosts.
Product:
Microsoft SQL 2005 Server Express Edition
MD5:
cc50972311e47c2166b3feec0675211f
SHA-1:
80c387c643571356b9ff3546353b3f2edf0bdf4b
SHA-256:
fa667be0ca60d42bcd613860b4e3bb3cd7a3f2aac8e7045b5d6c9cbd5cde194e
Scanner detections:
0 / 68
Status:
Clean (as of last analysis)
Whitelisted (by digital signature)
Analysis date:
11/5/2024 5:39:59 AM UTC (today)
File size:
36.5 MB (38,220,656 bytes)
Product version:
9.00.3042.00
Copyright:
© Microsoft Corporation. All rights reserved.
Original file name:
SFXCAB.EXE
File type:
Executable application (Win64 EXE)
Language:
English (United States)
Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\wcu\sse\sqlexpr32.exe
Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Serial number:
61469ECB000400000065
CTPH (ssdeep):
786432:toIuT9rdQwt7ObQcdA0QPyPZiOHvoHQGjODmILluyWkGfsRYsl3GiIxXRC4+4:tidRSrdA0QPy4OHvowrDNLk7xWf/cXRS
Entropy:
7.9996 (probably packed)
The file sqlexpr32.exe has been seen being distributed by the following 13 URLs.
http://www.srural.com.br/prerequisitos/.../sqlexpr32.exe
https://docs.google.com/uc?export=download&confirm=Xl9O&id=0B2uJazaRVsV1OUxsWWlhVDV2cWc
https://docs.google.com/uc?export=download&confirm=kMik&id=0B2uJazaRVsV1OUxsWWlhVDV2cWc
https://drive.google.com/uc?export=download&confirm=6zt6&id=0B6v-wuan1QIzdXZlZXdUckZKQ1E
http://nadasoft.org/.../SQLEXPR32.EXE
ftp://110.173.181.60/PTG/XL100/Release ASWv2014.02C_ESWv2014.0.18/Setup/.../sqlexpr32.exe