home

gfwlivesetupmin.exe

Microsoft Games for Windows - LIVE

Microsoft Corporation

This is a setup and installation application. The file has been seen being downloaded from download2028.mediafire.com and multiple other hosts.
Publisher:
Microsoft® Corporation  (signed by Microsoft Corporation)

Product:
Microsoft® Games for Windows® - LIVE

Description:
Games for Windows® - LIVE Setup

Version:
3.3.0024.0

MD5:
7bf76f16a57896abf10d364f2be80ed7

SHA-1:
a41868dc09dd40875999458f0a3873a5677efa0f

SHA-256:
094db4421c4e825dc8fd87275940ebddc724ac744d997674a64e679ea4d335b3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 4:54:40 PM UTC  (today)

File size:
27.9 MB (29,268,256 bytes)

Product version:
3.3.0024.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
SFXCAB.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\crash time 4 - the syndicate - demo\support\gamesforwindowslive\gfwlivesetupmin.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/14/2009 2:00:18 AM

Valid to:
10/14/2010 2:10:18 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6105F71E000000000032

File PE Metadata
Compilation timestamp:
2/24/2005 10:44:38 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
786432:51v99y999SnWFWuqC2g+AfhVJPeTeJ+bHU7z384qpjn:5Xn2Wuq5g+a/Pcizeh

Entry address:
0x5972

Entry point:
E9, 26, FA, FF, FF, 8B, 44, 24, 04, EB, 17, 80, F9, 3B, 75, 0C, 84, C9, 74, 14, 40, 8A, 08, 80, F9, 0A, 75, F4, 80, 38, 20, 7F, 09, 40, 8A, 08, 84, C9, 75, E3, 33, C0, C2, 04, 00, 8B, 4C, 24, 04, EB, 05, 84, C0, 74, 11, 41, 8A, 01, 3C, 0A, 75, F5, 41, 51, E8, C0, FF, FF, FF, C2, 04, 00, 33, C0, EB, F9, 53, 8B, 5C, 24, 0C, 56, 8B, 74, 24, 0C, 57, C6, 03, 00, EB, 0C, 56, E8, CB, FF, FF, FF, 8B, F0, 85, F6, 74, 2D, 80, 3E, 5B, 75, EF, 8D, 46, 01, EB, 0A, 84, C9, 74, 1F, 80, F9, 20, 7E, 0A, 40, 8A, 08, 80, F9...
 
[+]

Entropy:
7.9997

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
30.5 KB (31,232 bytes)

The file gfwlivesetupmin.exe has been seen being distributed by the following 33 URLs.

http://download2028.mediafire.com/9i361k7qtllg/.../Windows Live ID.exe

http://download1684.mediafire.com/d29jdirx1big/.../windows lie id (instalar).exe

http://download2151.mediafire.com/a4obi8n9936g/.../Windows Live ID.exe

http://download1597.mediafire.com/6baorirunx6g/.../Windows Live ID.exe

http://download1053.mediafire.com/i29aibi8zpwg/.../Windows Live ID.exe

http://download672.mediafire.com/gk8il9kx9efg/.../Windows Live ID.exe

http://s10112.chomikuj.pl/File.aspx?e=4F32Sq13MPsZmYgfXAqd_XYPYLFjAK5ZsS8mEi4CSbkckbdr3wEgDFyyOo3xStmHn8-v7Z4o_TBCtdbVz0Zcg3b7S-9VG0aBxdywYREkhwJrejRqkCElRlx88TRJWdBSW6N6vcYr_Hywfa-j7FV7FA&pv=2

http://download1065.mediafire.com/y2agvg9gqazg/.../Windows Live ID.exe

http://s6027.chomikuj.pl/File.aspx?e=4F32Sq13MPsZmYgfXAqd_diXa8MJOQI6eFsc-V38v1noj_qr9MPdsoDUG2KDRx8f1XL_yAHSO23t9YJTu2doyeRNhegWY94wSnUhIENMjxD61-bnnL6iyu-fN1IBEziDlm_nTpjTBnsBZL3jgttTQQ&pv=2

http://download1305.mediafire.com/bdcvqezddylg/.../Windows Live ID.exe

http://download40.mediafire.com/izcm9e9358eg/.../Windows Live ID.exe

http://s6027.chomikuj.pl/File.aspx?e=4F32Sq13MPsZmYgfXAqd_diXa8MJOQI6eFsc-V38v1nfhbC4qeNL1OdoZfAGOv3GO51PQ3HqFWUhMZ_rOyaTFAElKg7gyUvtBfcHXjhBQEjW3BvWaKnJ8kMd1xwq_iyOcH-i2czngTkEZv8v0mRFqg&pv=2

http://i.download.idg.pl/fannef/8877b7d14c14f63d394adc1280ffe430/563e3abd//zx/cyberjoy/10/.../gfwlivesetupmin.exe

http://download1305.mediafire.com/9d93kdyawz8g/.../Windows Live ID.exe

http://microsoft-games-for-windows-live.software.informer.com/.../

http://download2151.mediafire.com/54zq55do5rsg/.../Windows Live ID.exe

http://download2151.mediafire.com/u6n2r6jq67lg/.../Windows Live ID.exe

http://download2151.mediafire.com/8k8vtqpzp7bg/.../Windows Live ID.exe

http://download2151.mediafire.com/e8a14uj3cywg/.../Windows Live ID.exe

http://download1086.mediafire.com/q1aeqtxg04og/.../Windows Live ID.exe

http://download1762.mediafire.com/95ab38hqq8ng/.../WINDOWS LIVE.exe

http://download2151.mediafire.com/88my81dao1hg/.../Windows Live ID.exe

http://i.download.idg.pl/fannef/de07103ed85d2b52fbb5f016a9b17104/56fe50da//zx/cyberjoy/10/.../gfwlivesetupmin.exe

http://i.download.idg.pl/fannef/fe53c08116bdf8b11a8c6c4965af673e/538593d7//zx/cyberjoy/10/.../gfwlivesetupmin.exe

http://i.download.idg.pl/fannef/6e842a63e70dac5cffa127126c7b1cbe/56eea949//zx/cyberjoy/10/.../gfwlivesetupmin.exe

http://filehippo.com/download/file/.../

http://s10112.chomikuj.pl/File.aspx?e=4F32Sq13MPsZmYgfXAqd_diXa8MJOQI6eFsc-V38v1moIbyoso1QdGdnsAf6wHZ8m2afWKifT5jBSTRNOWEDL00quqrUK_UeIK-Yn6Dj3A56jKT14ZVoYWU0C7ouSnD09ToIGmyxmZyJeefC417chg&pv=2

http://fs41.filehippo.com/6737/.../gfwlivesetupmin.exe

http://filehippo.com/download/file/.../

http://download.microsoft.com/download/0/B/9/.../gfwlivesetupmin.exe

Latest 30 of 33 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.