home

windowsxp-kb936929-sp3-x86-deu.exe

Betriebssystem Microsoft Windows

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from xpsp.dlservice.microsoft.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Betriebssystem Microsoft® Windows®

Description:
Selbstextrahierende CAB-Datei

Version:
6.2.0029.0 (SRV03_QFE.031113-0918)

MD5:
265246926aa44bd767b0c11f80c084f1

SHA-1:
f2dcd2211384a78df215c696a7fd1a7949dc794b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/15/2024 7:23:15 AM UTC  (today)

File size:
313.1 MB (328,324,136 bytes)

Product version:
6.2.0029.0

Copyright:
© Microsoft Corporation. Alle Rechte vorbehalten.

Original file name:
SFXCAB.EXE

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
8/23/2007 2:23:13 AM

Valid to:
2/23/2009 1:33:13 AM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
Compilation timestamp:
6/28/2005 6:55:01 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
6291456:CxPafpq4IosHEYO/sEdr4HtMpvkbZ78Wo0GXX161DFwf46UkEnQ:CxPaBDIoGzOEyr4HmieWen161ZULuQ

Entry address:
0x5A45

Entry point:
E9, 13, FA, FF, FF, 8B, 44, 24, 04, EB, 17, 80, F9, 3B, 75, 0C, 84, C9, 74, 14, 40, 8A, 08, 80, F9, 0A, 75, F4, 80, 38, 20, 7F, 09, 40, 8A, 08, 84, C9, 75, E3, 33, C0, C2, 04, 00, 8B, 4C, 24, 04, EB, 05, 84, C0, 74, 11, 41, 8A, 01, 3C, 0A, 75, F5, 41, 51, E8, C0, FF, FF, FF, C2, 04, 00, 33, C0, EB, F9, 53, 8B, 5C, 24, 0C, 56, 8B, 74, 24, 0C, 57, C6, 03, 00, EB, 0C, 56, E8, CB, FF, FF, FF, 8B, F0, 85, F6, 74, 2D, 80, 3E, 5B, 75, EF, 8D, 46, 01, EB, 0A, 84, C9, 74, 1F, 80, F9, 20, 7E, 0A, 40, 8A, 08, 80, F9...
 
[+]

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
30.5 KB (31,232 bytes)

The file windowsxp-kb936929-sp3-x86-deu.exe has been seen being distributed by the following 16 URLs.

http://xpsp.dlservice.microsoft.com/download/1/e/7/.../WindowsXP-KB936929-SP3-x86-DEU.exe

http://www.netzwelt.de/.../9405_2-microsoft-windows-xp-service-pack-3.html?sig=1ec170c58e362089675c98104bc0330b

https://secure.giga-downloads.de/dl/.../

http://gsf-cf.softonic.com/f2d/cd2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_de&type=PROGRAM&Expires=1476409657&Signature=O4nzQeb9TsVrqkzf0FXRhLyLshC8T4i8NYYtDFULB4-vrzJ-SOobgPtI~ltgSD-j4e6MAmtcflNhcaopfHx3nHT6ajGu4N8ZROenoyxCfELg-JQo1t5UlCRqgVtz0CnrFxs1GrEJLRRcgsJwSZaheTqtiS-pmt3nVQvuLTRp5v4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WindowsXP-KB936929-SP3-x86-DEU.exe

http://dl.cdn.chip.de/downloads/.../WindowsXP-KB936929-SP3-x86-DEU.exe

http://gsf-cf.softonic.com/f2d/cd2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_de&type=PROGRAM&Expires=1480425551&Signature=NOWuUYmeecqb1t~09UMOvSBqvbTRbNd95CGLviU9KSOJvA6r71jJCk4pPGjbC8qnYeN8KpROQWXtPn~JfOKJfe3zE75R3Uv4aWnaUyPmsPGf9MD0Ob0yxn4bS0mVQzund32nTP8Y7~OQZxdd3PqeK5YGL1axnl-A8IdWPHXkhUM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WindowsXP-KB936929-SP3-x86-DEU.exe

http://dlgbit.winfuture.de/3f1b6746e933f346aae52c32ec535272/58167175/software/.../WindowsXP-KB936929-SP3-x86-DEU.exe

http://gsf-cf.softonic.com/f2d/cd2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_de&type=PROGRAM&Expires=1475000199&Signature=OFg~G7REzeLWtnPwRJmblKrzFdg1aKmmV6XWvbpqD6f5y8gPJKCchtNt~uDrQyuiP630aM3JEhOGDmXWEF8ZHVJAiKSspfecq7SO9rnFOq4afNCinH6R5cW-ejdLySj33EgYVxpMh9MGuVEl-~DtS35CQnrPcZVPNTBARAbks18_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WindowsXP-KB936929-SP3-x86-DEU.exe

http://gsf-cf.softonic.com/f2d/cd2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_de&type=PROGRAM&Expires=1469166847&Signature=D5QxFLPjouieC8egGVa3MdZZzdwMFvPtrcQrqQ-tnA1gsMzGzE0QkeJi4yv4hZKrxY79tBozjU5gsPghV4FIXaO5qBbC14t8ovAJ5en964pAqZz2YSRq5zPVDchztnhAI5D5mUv4sV9EqIkfw~RcFGlu5wAfds68AfgJ6IckegI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WindowsXP-KB936929-SP3-x86-DEU.exe

http://gsf-cf.softonic.com/f2d/cd2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_de&type=PROGRAM&Expires=1458928224&Signature=iwpr-e5YErneCtGJzrcJjUhd~lVcizQcq600Lsgddczcxe6R6I8rv71W7naELmVyvSLQoqUPS71v6Vu2FENYLb54LFgSns5lYi-ooLzzKu5hbaj4ycHI0E0l9bQyZIS2R1RfH-EY9-UWxIRpW1fK3a9jgwtP956603rlh7EhcYI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WindowsXP-KB936929-SP3-x86-DEU.exe

http://www-pc.uni-regensburg.de/systemsw/winxp/.../WindowsXP-KB936929-SP3-x86-DEU.exe

http://www.download.windowsupdate.com/msdownload/update/software/svpk/2008/.../windowsxp-kb936929-sp3-x86-deu_f2dcd2211384a78df215c696a7fd1a7949dc794b.exe

http://ec.ccm2.net/de.ccm.net/download/.../WindowsXP-KB936929-SP3-x86-DEU-Service Pack 3.exe

https://download.microsoft.com/download/1/e/7/.../WindowsXP-KB936929-SP3-x86-DEU.exe

http://gsf-cf.softonic.com/f2d/cd2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67854&instance=softonic_de&type=PROGRAM&Expires=1453874663&Signature=IX6U~dB3Zodw3H2jz30pb~DiOzZuTW0H4qBFNdtpx~x9YO78Lp2VnNPkp5OZBZJR7dUVVa46o5ldXyVp6-PBOZfS1-kqxltuqFiztIxQq1gpW940p6YN4s9DThQxki9HrXVt1oEukx9YRG6wAvmoeuM~H~k7toMoS9c5i8MwBE0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WindowsXP-KB936929-SP3-x86-DEU.exe

http://download.microsoft.com/download/1/e/7/.../WindowsXP-KB936929-SP3-x86-DEU.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.