home

vb6.0-kb290887-x86.exe

Win32 Cabinet Self-Extractor

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Win32 Cabinet Self-Extractor

Version:
6.00.3790.0 (srv03_rtm.030324-2048)

MD5:
ef5b83c4cc60e246bf627d85f6d7397b

SHA-1:
73ef177008005675134d2f02c6f580515ab0d842

SHA-256:
467b5a10c369865f2021d379fc0933cb382146b702bbca4bcb703fc86f4322bb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/5/2024 1:46:17 AM UTC  (today)

File size:
1 MB (1,064,736 bytes)

Product version:
6.00.3790.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
WEXTRACT.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\microsoft vb6 runtime\vb6.0-kb290887-x86.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/25/2003 7:59:14 AM

Valid to:
1/25/2005 7:09:14 AM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610E7DA7000000000048

File PE Metadata
Compilation timestamp:
3/25/2003 8:08:18 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
24576:tCl5qpdGrHgNrtjcMAr5REbk2aqrX+t+d3dlXNWArHfXP:tClIk8hk4ut2lXNWAbff

Entry address:
0x5D3C

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 5C, 11, 00, 01, 8B, F0, 8A, 06, 3C, 22, 75, 12, 46, 8A, 06, 84, C0, 74, 04, 3C, 22, 75, F5, 80, 3E, 22, 75, 13, EB, 10, 3C, 20, 7E, 0D, 46, 80, 3E, 20, 7F, FA, EB, 05, 3C, 20, 7F, 07, 46, 8A, 06, 84, C0, 75, F5, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 58, 11, 00, 01, F6, 45, E8, 01, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF, 15, 54, 11, 00, 01, 50, E8, 35, FF, FF, FF, 50, FF, 15, 04, 11, 00, 01, CC, 55, 8B, EC, 83, EC, 10, A1, CC, A2, 00, 01...
 
[+]

Entropy:
7.9684

Developed / compiled with:
Microsoft Visual C++

Code size:
36 KB (36,864 bytes)

The file vb6.0-kb290887-x86.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1479575565&Signature=AUviU57CFlMMhmuKAQ8XDU3Vs27JwUQ5VEXKptmoF4nRgNa7eUqLzHTPNCKF1km2Y0v3xEjtJRC5lupeUehUhQyPgJC3APEWjGp0qHLwVoJz7RSZfGXaV5LRN3dX9Pt~dG4Sf-v~cez8atvoUMYT59OHHxntaH33YxYJhzKdNaU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://lb.cdn.m6web.fr/d/c/a/bb7b6d338871eab4bf01e6c4edf3d930/57c6a708/soft/.../visual-basic-6-0-vb6-runtime_visual_basic_6.0_vb6_runtime_sp6_francais_10434.exe

http://dw.uptodown.com/dwn/ae9Rp1cDT49YJbHVcPINHy2v5r1xghb-2gwqN5ORAXTOhTs2ZHzzXtRPJT8dZYt7_VsagAaC2ISiTUnHX-0pJHP5mU3ZeNiaWhzo_sJh50Fzbzit8KAdcCz2jJxzwUWs/A0-ULQPMvh6YA_eYQ808JUnIOoA6F-MGfg7ujuC2N1FhuKgRu-UQVfWstLLUZ_Uhi2u2Z-ocLtcTPzcoRmNODx7hpnlGugf8wpTC7zkesUBYnYfEhx5C7jhtFyKUgdb-/KctncevftsHV4i48qL5KncoH66QOhokJ_eefy4S8KN2wkhCBSHCLPSZmWNN_UC8WUNrn3lEabf7Ra7dWJY2iBzF7ZqPYiIkcbPtx6E9YpqLWCB8U-AMH1lku3-_Iq9X0/.../

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1478196746&Signature=H3CTEz8D1X6ZIQcPySZomiyKkeRPlDlviPAL6BoDrCRqOmir5PxjrFDkZFUc4CwyYUe~Ao6vy7cw4jvBe6JFklTm6OMHJ-CAUR3FnUGUHQI1VNQ3uWCXyoDhwlWAu~doZi3Q4uZJxO1IE~EgkT7go9KnWBSDfjqbtK1IArpmZmk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://lb.cdn.m6web.fr/d/c/a/6d2a89d74e424bd30e09abb230b808c3/586434f7/soft/.../visual-basic-6-0-vb6-runtime_visual_basic_6.0_vb6_runtime_sp6_francais_10434.exe

http://www1.metacraft.com/.../download.php?file=vbrun60sp6.exe&ver=SP6

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1478005981&Signature=NdMcvNxImPkroNOQwoIvJHTXb286l9T1yF8YqOR1m56i8u0RhXwwK8mzWFAj4t8Hq0P8Ew4fMLk1UuHN-A~24P-RFo22UTGKeueMEA-Geh6oJYdf9PAGT3DfO52hl-gjAnHbMk6hWtWt4rPPX7C7mRbQhxp18-v~2HafNJTdszc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://lb.cdn.m6web.fr/d/c/a/83c674e8288cea75e3ee6a6f17c2834d/58239a84/soft/.../visual-basic-6-0-vb6-runtime_visual_basic_6.0_vb6_runtime_sp6_francais_10434.exe

http://lb.cdn.m6web.fr/d/c/a/4cfcb5eabc35ab901e496885e016f01f/5812fe2b/soft/.../visual-basic-6-0-vb6-runtime_visual_basic_6.0_vb6_runtime_sp6_francais_10434.exe

http://lb.cdn.m6web.fr/d/c/a/15b9d0fd4c43bc73b350ba81fff3ea04/5821daf4/soft/.../visual-basic-6-0-vb6-runtime_visual_basic_6.0_vb6_runtime_sp6_francais_10434.exe

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1463713669&Signature=cGjxa475eltwY6l1nDzvmhAyLaFyG79F4w1xFrmj269UYo~Ke1j1NBCGgXOqazaGkDkEhv3ROmwUc4nn2fboX4haq5b-Z2vgKDYe5PTmAqsE3G4DPr5VTRR-Qmue87kcXIKAutzzsuZTKA-UBiCIUSACyqtc2x~O11atDFF3MG4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1477799657&Signature=CnAnYpQKhgdDK~vQfV~9VnpG0LwMO0nyy9qtN2kNKp2ERb2Q2AU9bMsWRlGSeqTzNN~rNRbXC2OhwGjEKrUhmOxAQnqBBvuTKVzE8KqxFb0rWZD23wWfuBJabLLnYdkHKr1haXoF78WwvrX2~Hh0nKFHeXVxjVDRz8Pe0LcjmlI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://microsoft-visual-basic-runtime-sp6.software.informer.com/.../

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1439965073&Signature=S4~wQ3qV3DJ99cWOR3HtMghuP8haI~6duRyjUFK5u8Ft3fFpM2hpRYZfF7lFjRri2Xtrf1Q1jJOGF-OiISBCSXOOTfaaO0-ebM9JRs9GS6PE7QIpBrljpdXA7EfOgFCUts0OsqRT4E5mK2Jqn2eE5p1VlrLGZyC2v13n930GYM0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1478055852&Signature=EBvtLhSMcHHM8RVQ235YU1ayzodKrDAaxPFAZVJPBMHSOuSA34tPLXdphCtVkaN7G5ZXCrxhZeubBYxOOtFzc2azX7aEPYWZ35gieE8IEQKHckmrKfF4L8f5ZjZiJ1RvmpREjkSknIbbMEzs2Tl4tRgi4Sq92QR6uEzhNvaNJ9w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1476150935&Signature=FY2Moa0NgRmoN0Om3H7XrH6BLvPZ9KeZ7-K66SMAo6jHjnEChdy2ZPND-kKKWRKBtMJCCttZHu02-lp3zTJqfpUFVlE-xKajZ7X8VLmGjkQmpXcz8WRkIYF0dBmF1gmWvHWiWKcGfUHkEjxCdLfGdJ993AbUgm~WRgrRgmmO7ts_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&PHPSESSID=062fsdtctoen9vi9tegp766tn4

https://dw2.uptodown.com/dwn/Ys1PQuvkolND_Zr3DLHeL7IwD-NCq-wGbCt7R9TB8ARxppF_w2HpFcWlJDR1HdpBDisAZ8kNs8ILTE6Ez1KfC43oI8pXi8D7wLciY9TuhRr8AgzJP02ygwV9yLYgfKId/CuzXJ5oYIpSVxzb9DWGfCt2fkrI_5jOgx4OKa7SyROikk6PfnSaOnAOLwH1sSV56koqablIz1HSK4sIAalaNnugN7nmdn2jxjaGbkS4U8JbxTT-YFQhgrie9cpfjt2_T/fzouy6m7sAhW7SVW2gA0ouj64Uc4VQewr6V2obEmbtWAF_5Epv4fPF7ow4XRtbTridDwEVmE0lp2IbYxKiKIHUF0OR98pNfYxhxIzzAvL9jT7Q46p94eTTrYHQEfN3zw/.../visual-basic-6-runtime-files-sp6.exe

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1478127147&Signature=iZbgTRbBx-hFOXlilqtv7a9YPaGZRgp669gLvPuPeboObpJ6MAXZtcPHuZmLazFypWKWo9YY6Ga9go-PinxtJ~3sihCpxPEZ6hvQFzxqoDRpJe9MXVHU73sP8qgrSb-oEHO7NMaadKb~0jGrdHXu2DtQs3wNCjGauSMedMNvrY8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://lb.cdn.m6web.fr/d/c/a/6ed3009e1499d7746f38d14a21521547/574c25f0/soft/.../visual-basic-6-0-vb6-runtime_visual_basic_6.0_vb6_runtime_sp6_francais_10434.exe

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1477961324&Signature=Y2fkxTHRHwWqHBR9IHmKPkyrj1bJJVmioU3mQiqbFku4S45UoOokWgXgLWRyhUSd65lJgPtjmge-Cslj8P78FmJijI5lt3zpZpq-37LbUdubUPscMHrgXT6Fz-HehjjLZQFyP-lmOBZQMxGdXNz2XSrdphlltYkS5uLu-QQnekM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1476249248&Signature=SMQZt~PSWmi6HoTgmC~Cm9XHE-a~YLfPTtLE2fBObydi0UH4y6xH1ZogCdwI1AisBgvFLJ-5TAVVCw6VOhnbtTLFBzZ3kmFWl0PxaX5ZShrosuTlClbQukYPopgz2LJJdhRQiMqicOBN1rvp2Yf3MnhyRLOneMf1Bd7S7J1zPqo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://dw12.uptodown.com/dwn/XBTBta9USm9rk4w0qGt_U5moB_nzNETVjuOd_fVFAN7obDO0ShUfeekZW7ZWeotPht-Nk7hAdzEgRR_pBIn9wLjZ2PFQNLxGdRV-wyQAY_EdFYwF_981CT-rIdRGBstI/Oaty9eOTorwAXOGPOMAVCjO6NepyNo_o4zEc3aY8fr2_bPjVrru2ARh3kerZ2aaK8TSjBkLRg_QJcICYf1rH5DiG6qg250oWAtxH4iijRDJfX57b2GPOJbFZ0ziZIqd6/TJv8SFYOZMkW5N8h1g2Cn324wjSUP6m-kYs6N8-lscBIPjB_jRVngNQKWXQFApfAOvoow855WTcMdROrPjbzC3ZcmJozbQj7w5uOkIhLv0eNPgdvdE4vaNGeqs4PfOrx/.../visual-basic-6-runtime-files-sp6.exe

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1426734705&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=iB33gV-tbkSEDXYYl1n~FRzkuNck3G-j9n5MxTsTXPC1S9pwtXrZVHagrO9P4fDfttO73su8BvmJEjL4lnY~4EFfVMCxeq4EWPD6HPQR-FWXUqCDX5-ZaKMPTzEZvt-ZbHxTfFgRqHi8Z682UGmXJ6n2rYiC3OWj2Slu5boIlTY_&filename=VB6.0-KB290887-X86.exe

http://dw.uptodown.com/dwn/SXKwHCIPeXh4iYvpiZBatiAijegRY5sD5JJRTXXv_17jBCOnDToQKaHLk7Dx5QMV-4iakn5Tsk-WNe4I561Zvq9VMfTD9FkLcCqYh_d92nR3x2vDWJVty8rUrkl0hc-q/ff2KxQWrXuHugK7RZ42HmpNKhjdGhMeTvhDiVrnWYoYR3jdC-jD-demyUngtn0-cVuYfSOEjM-y9VcPBUXVGUfmq5znzlP-KgSQup2PFyionV3U9SFG4aCZBFYeDdik5/owJ3sWEXBTmo12jwDP2I9tcwAExuzq1FrtI5d0QBjvRd0HbA0gY-WBUIZ-Wa-fMGxx9KyRII8-dF8FC4TjDx_j_jm1FUGNHCRWYAbjB2sZfeFkq6Q5wC7OaCrMRStOSr/.../

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_fr&type=PROGRAM&Expires=1470963011&Signature=RIDvXHZexY2VDnQFj6WJXpTjUwxwXQ2Bpl5drn3~4h~9sfsSzv26rXN2JjryHgIUMHkaBhJj~zhhFXp3vwXOZyED2e1YvM45za8EvusVSy766xlRpYj1KV~ZNSc-HWGfrejyU1YteGp7cXJSDAeJPvuj1pq1C3AMIrfdC3rOvtc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1456550958&Signature=HggD37H9GjtJ6xoik76XE-nZWRoSfRIIE~-pFLxMrxYo4G1H2xTs~sUqN4q1q6liZ1xba7nFNUiHJxMzlX33DQtWgS40PeT3V9ykckXO6h3ONRRp8GNgpsZedol33TaDjBjwmOEB2HPpwdYE3kj2CsT5coGvMykGq8xW0Lp-TaY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1455412460&Signature=WVY7d13gqqk3dwfyUnHHOHzx0GnLloIh8xJW6vCEsai1kjhlDI6WkbO9h-BZOQ~zDwb6xKC8lqFu8kj2SVyk1YVe1t0dEYmGyBe85eP8Qu5MujPlztcQwNZ7Ek5oeRTq~DhBmmUFIY~0xF9-zCFYVvq6kvqgDm8uIX0jYksN0Ys_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VB6.0-KB290887-X86.exe

http://gsf-cf.softonic.com/73e/f17/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6823&instance=softonic_en&type=PROGRAM&Expires=1431024875&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=b8fl2w-Uu3bPue50sXbP6XWj5Jkapkp82XuDCaBTY-2XvNMUAwjdBvozZRGv0X5CJSJlez3WBvUyVGYtorM8lrtFTkyC4xcEbuz8Bcwb7qIfXsyOMDzq3y-A-RkHbodyDXCVR~DTgAezZr7ij7cGjGzyqZkzxlzS8ouNLqT07pE_&filename=VB6.0-KB290887-X86.exe

http://visual-basic-runtime-files.it.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOCFpA1sd20DsnFAzBf6CkY2KRGRW584NiD4cPsDTfa lxNiQoPf1CRRK7pb7KVy0hihGHOH8BhZYlOtDXTDrxBOTZKLvoAHPPqRpis/aw9Vsq0TVCotHzx91gIhaqksYP4I40yxFSCOautOuv9lvDwHI/.../GVi5CNxZCnYABq8oBBULju0NgAHgL ggRcONvmsZ49Ev0zakyB

Latest 30 of 60 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.