home

SFXCAB.EXE

Self-Extracting Cabinet

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Self-Extracting Cabinet

Version:
4.8.2345.0

MD5:
b1cb878a564ac12ad02c69c39eab8006

SHA-1:
06edfe8cfa38f7667787e3d013919d34c9780582

SHA-256:
9c259d603ff133571636f5709262534e28ad6a038d7a4365a2f7ab5bb87c6858

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/24/2024 12:56:42 PM UTC  (today)

File size:
100.8 MB (105,664,248 bytes)

Product version:
4.8.2345.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
SFXCAB.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\sfxcab.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/19/2010 6:53:10 PM

Valid to:
10/19/2011 6:53:10 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6108775F00000000004A

File PE Metadata
Compilation timestamp:
2/24/2005 2:44:38 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
3145728:yUuZfw4IFanRBnna2n5AaqexzG+0k8uP1:yUeY4IFanR1na2n5Aazi+0k8uP1

Entry address:
0x5972

Entry point:
E9, 26, FA, FF, FF, 8B, 44, 24, 04, EB, 17, 80, F9, 3B, 75, 0C, 84, C9, 74, 14, 40, 8A, 08, 80, F9, 0A, 75, F4, 80, 38, 20, 7F, 09, 40, 8A, 08, 84, C9, 75, E3, 33, C0, C2, 04, 00, 8B, 4C, 24, 04, EB, 05, 84, C0, 74, 11, 41, 8A, 01, 3C, 0A, 75, F5, 41, 51, E8, C0, FF, FF, FF, C2, 04, 00, 33, C0, EB, F9, 53, 8B, 5C, 24, 0C, 56, 8B, 74, 24, 0C, 57, C6, 03, 00, EB, 0C, 56, E8, CB, FF, FF, FF, 8B, F0, 85, F6, 74, 2D, 80, 3E, 5B, 75, EF, 8D, 46, 01, EB, 0A, 84, C9, 74, 1F, 80, F9, 20, 7E, 0A, 40, 8A, 08, 80, F9...
 
[+]

Code size:
30.5 KB (31,232 bytes)

The file SFXCAB.EXE has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1457225591&Signature=ZQCVLk3~6DaxTb3Nytjs59tNoFQNInXmn7RkdovD~T~c5CvFtzkTGlBapkgyK1qEX~jPrOykrjliCnjJBshbAcztJbCaXE9fzNljbUIEvMjnkQmUM7vTN7gVK-6MJiH-R0iw4jp1gU8145a2OP-rFZFjayKSKMekH8ZHSA9zFG4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1486561961&Signature=XhHoG0QSR-KYSV2IPNVxWBj4D3qwZvpTnUjuj-KUT4TvmG4n1dnPVUQ5RhvsJGH8P-XJzAVY9yjVhqpGF1eRd8B4seViIR4lQSN1N3Myzm72sY6KDRqJWoMX6v-MpfH-kpxS9zxrT8VxIpQz7hby773Q2D6aTBl6ZNjrKRJhSOQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://www.araddownload.com/go.php?url=http://download.microsoft.com/download/F/D/2/.../ZuneSetupPkg.exe

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_en&type=PROGRAM&Expires=1484631512&Signature=Fl~wREA8MpA7PQEDB9Xy6jh1wHfucATHrN636-Bq0Z5FsN8V9BhyDMnG-k3MFslZPnfiUS1CpETEgmxQXHF6gpwZOa6cBIwmOE409xTK6ocLzGOuc8a4Ww6PkTpGZzToUoznAeqLzHuCtNL7bKkJnEQD-b74TmclK7EgJLdUSIM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://dw.uptodown.com/dwn/RzJTmcBUdlzHFFOeMeyJ7K9k3ozjKrbYveVDJ1Wkbu2_a7ai15-V89oZaFX6K7Jo-O55eLGfH_sW2Ivji_upyBzUWdliNac_Q5kCxrHBmsL6J412nmdk4TRSzOmaX9nk/TJnDEMu4gotlwvSI9dU3ivy337owbbv-gfIIQsbb62ik68YSkdEOBWdYFOx90OoIpR1IRGk9j2SWRr3B4cljI2FHwL081CUgnl7LJBoSqn2T8nxWFRIs3LQvy8rNB3gN/oSc72J8oA1oDcO-n9HWFHyGFP3kUI76sSQpGe9nHumNjKsvy2PLmMhO5oP-1-81PzIQccYk7hfPVjQ6VlpysJVxFzbhwVC4KnXAaMfUF-c61n6ZZY6Pe8wYZV3QA5Yhh/.../

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1479257521&Signature=fiFkvuMNC1brRqBRcePeo75kKPhcvWptUlJQ2F9IPcs4-CrIXNQlsPFZNG1KjHHvoSGp3C2J0mA0kmF3d6AEAwPxelqVTQG1EblWIvI5BwglVXbj6ALZFV-~SuUGjbw45Vh1VnVbQBA~KZFfmyypiPDfPSRKpus1~eGRmuOVsm4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://dw.uptodown.com/dwn/E0ytVAe8qhZRIs43o9ocBwbAVffZfZ4NPqXlRwRDd4iwTaPnBCvLDL4P0DMsIhlhh1ewoBrvBZRCYm_wB6f8mN7ASSRcoXcuqxC-qtLpCwuXs92vfMhyAShCsL9qQkyU/34L75m5UUHCFpLU_gfde0rJOw8dd46YYuc4Zqo9OEU79WRQPIddT6SKJb4gZXYv88HtBh9Xma_pXlsCAX4nHAKEfp7edYO9lcJ0a5ij8wfObO8NoknzSO4TfAf9YEqte/XFh4npxun-M7eZxivYVq3fFmTOtMr8nLAnf9Bq7-d3z6DJgH4Fv-hv6Ed7OMd_ZQxMTQ-xnR_DyCZnoajbweEYqtP4PbU_p8_gmLlzfsUz7S-hYTBiZv7w-I51dcBcue/.../

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1463051778&Signature=doJSNNJ8KVx2uRLYVgki1kg1~t~uNyUYqhZlSERKRMeb8TT99FKITN3nVB7gPB~BuRGtceWk2hftngVPP0vA1q3jnRcY6c4WQ-4xS6H08Er1zbSee5CYk0KVI-pdApo0BZd3DK~xKUFZ2qHqLcLMKP3PHKN-EcV7bobX9xvD3NU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1475849091&Signature=iE8bf~xWFT50boAkP5xghuMQVj1aD6lgfuzNpz8UPrSKXdHoQ10iMR1mVgCriXDlYbS5RGpUtAPhRryyTuaijyaqFau0vcexuyKJJ0IBx5jLETea1ulY3HdrRSPG6F~LGXvgBSswRw~g~C9PxGo7cRIQSDh-SvvGvCnL0BLT2Jg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1465199220&Signature=QPLV8pbPv76rVRDlrsiaQR1EQbd9Us74ODdOE2OfJbDSbSucoeKMLsSG-ld1TcNmBpS6BpeRmqrtWG8WcL-ZsooNo-GQ5qtgbKxMtt-fwUzzqCEpFdC55Mb27ND3vo0ckLZB0R2q3XPuUOXqiIS1BV2Kd7WOJ1DLD0SNkcJ-bVI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1475969335&Signature=dBs9f6XupmHFvpzQwEiG2tmxLFLlg7~2V8makz0xt43H7PWlUlExZxNxADkeSLVu4UIYt5WcqiDTmzExkr7eTA0mkNYnhwlv74pSIsJFDZksyKZ7Ve5iSU7wn~0E8rBBLrnLSAskmLsbVhat~96xH4Ke4fSiIn~A2M2N8pWMVn4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://filehippo.com/download/file/.../

http://dw.uptodown.com/dwn/pLZVSN9HliuVXX0uQSgEnl1zV4apQExKjl8g-CrrWNN93YG3_BxY_1ygQQj7WG0-PbmROK6PICaPiWZMiQWE02E0dX5ck-I1-7KwnVxmr6ak5GCcuydRlEFZJo5FyrR5/SV74sFm1ytNx5N660o41dvpZdIDG9fzlvBSFKjwl0fIb9mva3n5Ajg4LqmPk3epWatPxTl-_q0tHVE6rCta98ukjfEQhUgEzcdz1rlb5KcOxDCDW05fh5UA2oVR8t6sW/.../

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1477709980&Signature=iieHdoUdrw363EJ5gum9Cu~qBV52ZkcI4cf43s0vai89l~z7-DdvLmYWRYv9VkimlGvam9HyShY~C0sr8CV5vgL99Sx06q779-y8-3GaeqPF0W55QS~sRayUoswjISd9x~YI3Kpa5sRp4M0yUK5B7dL7sVqi2TJYJmdFm2Eps8E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1486637630&Signature=MZvjm0436UxGrLF2UtbqCSp3t13IHwAN8heKLJJYWUMvGO4pypz1TJrGtStzS1qsqR1729fl~YMV6Efrz5zOstKlHvhivz-TNHzYgUs8hRc2yEgWhvIgC6Pgg9Sk68u0gy4c98gMllwEe66i3DGNMJjrRpCYDdH4J8V~P7VoFaw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://www.towerbitscenter.com/f23uBb GDC8h66EoJLWTi_N8qw2cgjXx70mkFaU2zyM3iRKVgB7DpPdcJr ClCUKHvNdHEWMufJz72_jk YoE9zgbzSNQOVJN f0OiiuOxwVRWOggWJyVF4qd9RcWJZ6z2ncSigoc03YNlcEHpV_IxnWSURZB0lr1pxGE20qY0cP1JKXhQ60i28eeUoFvjsZDOtmKRzlEiYzLL2lJfJhsro XPqWSM9PeHSuMoxVWyAINDOfwoA70_JJr3UAHfx121GKpigR9wGw6TZ2wVl0q7KpT8UBDbpa4bpQbV_VhvM7ojU4rtPKFmBgGCSqMRX3vlFVPSk_T38ZELI3dlOmFreEFLMzCVVEHvXDrysb12x7K54MvuciMfjjgMhNOR3HIqXKQAqgSmYM9UhErKOlSabYsm8NY9_I5hI09iSOiwpwSgaoVXEhmQSwyVageO132DjTCftuh28aABkBnR7W3ygZS3pRBE2rBdJXZtIicuGSa5SUR5xga5PNcFG63g_iUInhjAKerjhSUeFv681qzsQEwkHMuj6gST74Qi5SbKFKE8BhnQs=-G2EAAMS23Dj5J9LH_6j5zkFbuzQE0dBD4JAD9lqXBKjAcciOPyKmvDFFLYpJJ68iWhBwCMJFONZBzYVpsc1IOUmbDeEaWnvHOZ888pvvfl8l_wQ=-e

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1444022860&Signature=QguupJyeqAffoCinIypflAdgwl6vA4CGAr2pKt0Fl98kSEcI3KHkFDlzbUnVh8AUOMg6ooUvW-deju6hrIhVlj5vdU-4djGmpBtAV4DYgsh6PamZuiBluVKVC3IDKWd635~KQFQZw3uwKiiLNAjZLw-9YgECFrOBkFz8xanjits_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_en&type=PROGRAM&Expires=1485801005&Signature=U0QZCB5Lsw6YxZnyxi-A-4t~cC9z7msHEqENPIKW2ZMmsI0zSPYSLetL-KebIbnW6TuAZU6~b8A4-V1E6byGU5kXpXdECjzu-wzNSDj4CiJij4goGviORy5k9vQHIsw8eB7XZcHCt~0PJLi9dDho3L-stlIF6p7bZhjhOH54Ywo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_br&type=PROGRAM&Expires=1470709254&Signature=KCJm7oA7r32wLb-F~QZM5Tnhmw-Dy0P46hclb7DRbm10l24RVXXBdgL9TyKWLqL2A8QFiVjCKHntEIHI0LYrCGnl~4dWJwSvToLAeNOz2A37JCuaXN4dSSdipPptZ5RwUhoW70dHxrjQOoHOwK~8o02YSH3~nv0wrI1OPEVLeV8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1473737609&Signature=XUbQuBAcb1zGuaclSuG-qFnBPIztfBPn4YGhlea3m1xhqf8z9PYK6f43vwy1Cc4ZECzVjzd1bQlksEBuvjtWhqshmWJbp~8eWvxVQZfKtPOJfH-q6FjRuSkJRSkBgdtArv-eibN7a4dds1kI9zvMMz8smBXLgPTnieMa7wsR3BU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://www.towerbitscenter.com/xknTbJUemN6ORFfSct8WzwQmShXtpgDhiwZxmq 7Ia3SnQ_ggJVk4HrhLOHoFQMzmRcArbpWbBuZ6dYRBJwPy1rWNXCjAts6wDKZJyHLxBOgRfbacWchYOqh9 GV6EwFFwMovOhY_ 6sMp74WIpETnTXoRkwtoGVG7CGfAeYpoVIMTBLRLxvqP9U4mHzGLbMUUyfEDPMQ_Ol uppEQ36krioN1UPvg==-G2EAAMS23Dj5J9LH_6j5zkFbuzQE0dBD4JAD9lqXBKjAcciOPyKmvDFFLYpJJ68iWhBwCMJFONZBzYVpsc1IOUmbDeEaWnvHOZ888pvvfl8l_wQ=

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1443065192&Signature=E2-qaZ0T637SOzQ-IBGpHcE5cIgX1rrcTjN20MPZQYHRMpI-gN2dNMvlL05LPOIg19By6UKJLpjPRKS3ahhw0HXM00hBqLDnWkRGmnszzJFPv5z3hJRX1q1gKnqBTdgBTiV99GFPWxAWoP3nmKrd8ljZ9-bR-poaRvdnTO2ePjs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1481721478&Signature=e~bUYjRg~rwZccIGyMQgan2E~eVUL1QDq7SQg~iwUY57o0rOevgqGxvrO9PKQ5pkIlrU9sxyAbneTCmPktZv4fJdbdxr4XCCZvG89heolz7v8RmZCf3tCLoy0ZDcKJ8fH8DWaA5W4DYhdobDs4pQIh0NWUNxdHCAc8m25pVJ5KI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

https://docs.google.com/uc?export=download&confirm=3C8U&id=0Bxo_3Ry0H55-NklOZ2gzYW54NWc

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_es&type=PROGRAM&Expires=1486463390&Signature=d5VhWVDd4rNAL5VfGOW6xXeQLnGupP9pxPHdbyi~IifijxZA-4hxJl5p2iVasRr6JWUXH61tfQL9DfUXGwVeOss3Pxa3t2Na~VTZNKwV9q~Kn7kEfUysocN74lLlIvJDQopklPdBwTLbioRey9VP2jz4LJr5rmDg9pBIR8iSnkY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://www.ranchsendgift.com/H7WpzYekMR1zAYp_BE7STlsTLV0w0vbADwtctcLlBvKJFmvwNhXTl4ksIu09QzGIM7SebPjDF_JlMu7JhY2YLTn6n_C4pV4Lz6cMlS9oI c_CivHa_KV2GSkNuZfADtNND53xhwXHz_Qw_WqtjPX3P AlJ96ih4 y1b4nFSywJC9 iHlcjF6ugXNJ na9 6ki5zb8COaBn6Roh1PeuUypPqK56qV1w==-G2EAAMS23Dj5J9LH_6j5zkFbuzQE0dBD4JAD9lqXBKjAcciOPyKmvDFFLYpJJ68iWhBwCMJFONZBzYVpsc1IOUmbDeEaWnvHOZ888pvvfl8l_wQ=

https://docs.google.com/uc?export=download&confirm=wiyv&id=0Bxo_3Ry0H55-NklOZ2gzYW54NWc

http://gsf-cf.softonic.com/06e/dfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57150&instance=softonic_br&type=PROGRAM&Expires=1482198539&Signature=BSCCojiGQZG4PtEDZIKspIOjnMIWe6NGAoLBVRMuCvlvkSgUj0spTOWlXt7d8gGVu1LSPP69mvgN4Nif0kwjMi1kF2CZVuUkAjvH7DVuCBb4VloYqJBxQa6aOy5xsllsP~IFfsWrLlAdxuebymXYwLrZN0EklYjKXa9OUBzSc~I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ZuneSetupPkg.exe

http://dw.uptodown.com/dwn/V3Wtg4fYZhawO5EakuXzGv-I5LcdBfbCBdfnuTzaWYe5Kgq8FxhvpMqVZWGAavfI7kJrn5C75T0-Y8IuSR2xoaYt77KhVNfQAIN3HLHMMiN8443_AsZeMnAssEawrjFJ/2yVsWEvV3Uy0KmX4Hp63qTUnkChNBInlIK030E6ZYtNHnpGjV0gUMdG8uaPo2H7W1yVivXLtBlxDZPoSDdGCM91DniTVk3hmA9sdhh90b7bjKUIl9hJaaO0e7GQVAIf8/.../

Latest 30 of 601 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.