home

windows6.1-kb976932-x86.exe

Self Extracting Stub

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Self Extracting Stub

Version:
6.1.7601.17514 (win7sp1_rtm.101119-1850)

MD5:
4bf28fc00d86c936c89e2d91ef46758b

SHA-1:
c3516bc5c9e69fee6d9ac4f981f5b95977a8a2fa

SHA-256:
e5449839955a22fc4dd596291aff1433b998f9797e1c784232226aba1f8abd97

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/25/2024 3:40:33 PM UTC  (today)

File size:
537.8 MB (563,934,504 bytes)

Product version:
6.1.7601.17514

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
SfxStub.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\windows6.1-kb976932-x86.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 10:57:40 PM

Valid to:
3/7/2011 10:57:40 PM

Subject:
CN=Microsoft Windows, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6115230F00000000000A

File PE Metadata
Compilation timestamp:
11/20/2010 10:00:37 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12582912:9TF3BNm9AEzcboId79CmNOaRkXoPw1CMFgId8T:L8+oIR9CWdwwMF7a

Entry address:
0x217A0

Entry point:
E8, 71, 0B, 00, 00, E9, C3, FD, FF, FF, CC, CC, CC, CC, CC, CC, FF, 25, 1C, 12, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, 18, 12, 00, 01, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 56, 8B, F1, FF, 15, A4, 11, 00, 01, F6, 45, 08, 01, 74, 07, 56, E8, CF, FF, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, CC, CC, CC, CC, CC, 3B, 0D, 50, 34, 03, 01, 75, 03, C2, 00, 00, E9, AE, 0B, 00, 00, CC, CC, CC, CC, CC, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 50, 34, 03, 01, 33...
 
[+]

Code size:
200 KB (204,800 bytes)

The file windows6.1-kb976932-x86.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1437797903&Signature=DCx8MQEq73x1usT6Pizc7jJo1s~Ao7rQFxHhW6v064D3GqmugCUdlzrboTQpL87TOZ9ag6cS~wrMtVj4mEAUWeGPe4wT21-EBmiZP9cbSNGsgNg0sYFZZvboX8d0hWNkrdOyR2T8npmJt6tQfoLHaO7TMRR0L6MgJBIAJ1Pcypw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1425125696&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=IkKwOcXYKu~csuw8FBBucjLx1aRSNpFOi4tTlQ36r5e2KvP7rNf2da~P5-EAAz56qzfyPUXA-G9X2o6ucGVhrmI8P19Nd1W3doPDSPNPZFfkucj3UwycNDJ-~rmFgyDYnNsqA6xcmkkN8V8l1KoiUYMgjfc8v1JFu~e7WZlx21c_&filename=windows6.1-KB976932-X86.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_it&type=PROGRAM&Expires=1484723370&Signature=KckmIEDKDhj00-TYC~HJMYKAmw5T88U0zSxQRPV-14zKUAmAO9wYDRUpSKN2xhHSeUxXItCcOZUD0h8DvXL7MxFqXnt7xz~9epUosHHXaFaxkRSj5XOYsjbky~aFZ1Sy-Lbg5T8g2SSP8C39m7oPaUBI4hI5BftD0Z25NP1BKIc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

ftp://flpfs.tjsc.jus.br/software/Service Packs e Patchs/.../windows6.1-KB976932-x86.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_it&type=PROGRAM&Expires=1475867684&Signature=FgUzho7SpkOHzYgdInXIDnkm~UAabEl7zZqHjXDxE~pEWdyK80kKADrvXaTOP8Nhug5aeiLfWqrc~QEW7Cwtc7uZNGgS8VdigNb2FdSe6dEFAznwitrlcbnHpCHSXgIAE4lL8M4ZOWudB0AI8ZcCRjGsGqxhtM0arD-SRzaKvc0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

https://dw.uptodown.com/dwn/reQ7Lp8JujAF2VwQtfTO41eSJU_pqf2aj9714xgbC260IGCBj_G2_YxZatUHaoJVpTZG_w-Q0XoYYImTvNPkrgZfMZPpEyP9OoaOCkoOThlCHp8N1K1sKrcZATKvPT8E/Yg1gHoENRG1LbvT_sIvYWa4MUgLc2H_G-2_5RDkJfWDH8HB0fo2GIM9iubxlHcVoNxstmL0bfyJUdpg0QE2AP-HMGJMUFXMXaqYmXV3XAPZopnvNsXrrvs84AJE0uvAP/xKtshc5pUzyPkk7OwMxn7de66y_H2u9UhATih6sqpqnZzKS4QboYveziWsFauZ6u6Vjp6EDtob15uO_cZEg7JbUunoQgNVNrOjRv-vstXadehVgOoqMfL3ReQU9Mgw6o/.../

&onid=18513&oid=3001-18513_4-75451016&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=utilities/op-systems-updates&topicbrcrm=&pid=11905994&mfgid=50119&merid=50119&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=7ade83c220ee6f72f4214215&viewguid=gCxOs-k31hsFfVWRYMORrPrLtrLkWaqAaiB2&destUrl=http://files.downloadnow.com/s/software/11/90/59/.../windows6.1-KB976932-X86.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1445561862&Signature=gHLCjc4ja4OfoC-8~Geuz3KxLTVunfr6gUuNM3gy3WxTyTy99qDpX71QNe8XxbXWBoQu0iPA30OmkAO9xoS99qHJhc0-oGDtCuuVEDWNPmo8bw-MpJbbOzGJFIm~FTSVX6QB4XR6Xm3hRrPpPPGtCbep-1docnON8GArUvsHUsI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

http://lb.cdn.m6web.fr/d/c/a/5c5c1f61001812dd2e345aa380010cb3/57e2b58f/soft/.../windows-7-service-pack-1_windows_7_service_pack_1_32_bits_francais_373098.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1438555790&Signature=AqRBRs20cZGRf61fsfettz0Tq1Opq4Ofu~UDKByuadOOKkmPmvNToBKrFWbS16b2YbaVaHourTY8RH83TiAEt2xjillagFz07sOoUSzJxqoj~rpz0crTf-GdzN91GNAWO4f7d06UaKJvHjJO~Enw6KA1JZxu5BlXhb97z1anSsI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

http://ftp-stahuj.centrum.cz/dl/55eb7c8f34054fe7ab7bd5bbc99d5ea5/57bc9375/stahuj/download/software/secured/w/windows-7-service-pack/.../windows6.1-KB976932-X86.exe

http://ajutor.canale-tv.net/go?http://download.microsoft.com/download/0/A/F/.../windows6.1-KB976932-X86.exe

https://windows-7-service-pack-1.it.softonic.com/download-tracker?th=1/.../xu7EYsruAB7jdnRTcfpIPtHc2VQso1SplxNiQoPf1CRRK7pb7KVy0hihGHOH8BhZYlOtDXTDrxBsFCLUu4Y6gmAu3S1VXU7jaauXvUl4zqOZYnr6sDlHLobKuQ2rh9sOm8wdrcB8tpasehPWz56iMaMJVHzpUyp823niABJUKREwOHPt EdZ7E1bsbYBQweSl73vzORf2wU

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1438317869&Signature=RdTNyw5ixnOLhYNHT1w~yDsLEdvvCxOulfp4pEscVQDVDg~6mGoHQ6~AES0Yk9vvqbkqmTuqQ5pxrP2QdMAKV0HMv-vKmyp1OLp7nHCYUjtQh1OsaPnuNlLK-dMiKUtGGkipgy36nLfN5BJO8GLqFsGzuRmG-R4txm7xvwCzjnQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1476938822&Signature=PawBJN9jCjOkv-He4655pC24ZKAQHkUxTz17GK29xJQVZUdyT4OEUYA9opT8C1PeOSZkh7q~SPdr6vWijtxzN~FcWCWe~4GgplYY0OPGm6NdHsOqn6a5-zTh5fnh8BdQi1Hy8uJfDUoSEUjz5s~quR~weXS4iXOiV~mQYNAZnbw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1474032755&Signature=gxy2EE4Ehv3Q~yyy21Lpzul07e4YbHBdGLbxyIhMDr6u8wEzKKlu4-vdAiyWwFPNrtsCtkJIyPOrdmdQEmA-9caGrc65kxdeQ~C9Mr73F8mTMRek7knOhgHqi2YtVfq7a6bPSrt2G2BxBELQHeAHzULhdQWkhjyhXKNXvuudbrw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

http://www.heise.de/.../product/service-pack-1-fuer-windows-7-und-server-2008-r2-78964/.../extern?id=7eaa55da-dba1-4c31-a90a-148907452fc6

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1424520500&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=NCC1CdkBYiG9N4dzChMsTSxCigwZBOT-PeN0PLqzkTrEZX7bow~7OLSjbiVxWqJiCNfAamkvvAYTfurWhXP1CDQVcA6zPOHUYAt06IYyVNkgiLmps9kDvdg01qyWHMr68diLu-VBDrLJtWUqdvZ62Wjbe6Tkev5vmW79nFyCSGk_&filename=windows6.1-KB976932-X86.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1474674462&Signature=AHZHsjxQKkd8zphZE-gs8tp8F4AgttJ4H9UOpE8FUx-zfFcO1GNSo6Ty~WHe3kIGOCQVt2rvHpZzP7C~Xf5PahG14G-2linAxy4DtHxaWLHefMC7hV4GXr~wUeipePsbb2kL1i51axWwwcI~lRt7hjdtDn5LvLfQ7Oh3y-81rzA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_it&type=PROGRAM&Expires=1477346977&Signature=CSiUIFDpgoNFw1q5AWT3QRGhkd6lm5uW5VWk92wIuadtmRQJQjD0OXDq6s5P9~zeV8KWTGGgmoWTRrwnk7N~2Px7l2mFQDjdioD6TgZOO87EJ6wcBIiB1dUAMlGmYrUEupp2OWeDIWezYC6aDD7VcLVzbMxevz-4Y3N-OCcjuno_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1454951725&Signature=QPVfgsAsuHHljJgXWOT3PK1PJ8c9ss~sPMWrEmLDbkqWYshe8N175rbx-fYwShtpKTrTB6seT4FHY8dwJTvJKNle4rCDcK5g3SL3agUzLZu7b1O-KTifowFjieCzgF-nP-J8K242Zg1lHwYYis7C2gNrEqENIaB4IncRqLRx-w8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1476413406&Signature=gpf1gBR8Wj2dyVZTrpca5c-s0i2JyxC~T1u~yOHIXqhpe9IICJCeqs5frJye01DCsgaUM5Fwm1D5ckCP8nEeCKPm1~nO41S-pOpYvdSnXBinseDkXNm91MQt8GUa1Kq5BRrrdRCXBaWTLjSp7s9brrh5XB4xNlDaRDjDzzWRUpE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1477102794&Signature=RZAu3qCvqnRCGBpmG0mOyjPBI1odbYR2NZ0YlIB8LLTysBuE1V~-SdWWGLfGOaIfg~CHKE8dWvVIm9hSgBI38gSlzl357TWxEk3Ya8WED6Hq0nIjhHpayhf~bYMFw3AnRCfzCAJL~yB53RS1fkhWJFTsspFGxbRVTWz59dH~f24_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_en&type=PROGRAM&Expires=1444732621&Signature=bt1yQrtyx2ekaFEyvCgZCh0wbBraSvZOvTPoeGADGncwn-6HSF0rnnHi9ImgC2CFsTMklEl3KLkCzkKV0bfZvKWvErEzlg7mz~A4J31ZDDuWaz~nyLYpe0QeH6f8r~pcSnILDixKdnIx2wMlAuv1eQkPPrWeb5rCk3yGvK88gO8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

http://lb.cdn.m6web.fr/d/c/a/18236f4c29a6c459a8238e7f97521deb/567e4347/soft/.../windows-7-service-pack-1_windows_7_service_pack_1_32_bits_francais_373098.exe

https://doc-04-2k-docs.googleusercontent.com/docs/securesc/tom02u25p1e151278p4moch3at0op6c8/f6nouf4fa29cv2797oca7fg422t2llc1/1479888000000/05995934748878778624/.../0B49YtawDVtIFbVl0OHJjTVJha3M?e=download

http://windows-7-sp1.soft32.fr/get/file/id/.../

http://www.bytesendclear.com/Q0HgEP E88raZn5Hh7Qxeln6wLlsH _eygiC6_iHAPMW1HMCqLZUSfPUJ2DAxnrBHeT_EcFxK1Yk5zT2cV P5DUTTJCrxuLCXO1DxW84WasJwRp71aNcXfs3_n5ozmZjmgFhzINA0Zh7VzWFP 8B6n_Nd1YpUH iWPjrioZrbipKT0RU6AQkeVwvQbivJfGylzmwWHEwP2KwOzo0_H6fNLMC74n0HGDtprgddU4iIBdg_cTLZlCYKQ9IF IpLG EGRBjD30fp1VhKYPTQN_s 88FakZMIe9q8OUlvKgzK8oxBR_uscg1pSUr15FQ8alr1IsuqXNkjQwzzrI5GHbcTK9pXEp9diUDeh66aHwJvZNOLiy5J6tvEBtljBY48GF5d YB9LZJNeIUv2 vlHx89BsJHN SECD2DwgnwQhzDZjO8m JtA rO1288E2kKB_UeqbrqgLhZyARS8hkF5OTrJFrnTkIIWt0AL5oklOtrjxSGAIrMc4b0chIr4W5W4R2aAphLZuuQiRHhPgg0_Uzb rO1v0E6Hgl8L6j 51q1g1bCUwIPyx32pqb51bOA6FuK9HSU3ztDzZ6X5NeP_G Vgqm0sygAmejeQ31ZeC16HINC_bRrs=-G1IAAMS23Dilw9zYEI3NR0rI9ylS1AsTOXBoacBw0XeFbSBvTFGT7kjhCbmtiZ85KC5e3xoNy26izps8H7JwlLJlPFsPhvUg_RU=-E

http://gsf-cf.softonic.com/c35/16b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=110386&instance=softonic_it&type=PROGRAM&Expires=1476815360&Signature=Xr4qMelHXsDLpHYbB6-ZTOpbtL3~RGVNUsntqV3XKXjrFSrTi793kCfiNvtG3rtzozJLjkRe6ZUW9pjGoJ03GSk3D6Nt2BL1XPNW~F2RfjPh0HI2RjWpQz-2Uy-jlXzbJcNchUeRHzVgqZcS~ctYBwY2Y-KC7yUyiVmDAh0~cc0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=windows6.1-KB976932-X86.exe

https://doc-08-2s-docs.googleusercontent.com/docs/securesc/52smj5bu8a6vr2nc3nb7jj3cck5lbui5/e73fcqhjafpn9khhabr6hd6o13hir5mp/1470283200000/11451058160934617601/.../0B2AizlrRQmLhLXdBY2RvQmVqaVU?e=download

Latest 30 of 102 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.