» silverlight.exe
Overview
Analysis
File Details
Downloads (28)

silverlight.exe

Self-Extracting Cabinet

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from filehippo.com and multiple other hosts.

File name:

silverlight.exe

Publisher:

Microsoft Corporation (signed and verified)

Product:

Microsoft® Windows® Operating System

Description:

Self-Extracting Cabinet

Version:

4.0.60831.0

MD5:

b943980ffd0f442428e1410a18f59fdc

SHA-1:

746439261b3de6c527da44013ef15b8db6a78713

SHA-256:

c51f5819e22b3c81dea3e06a79d7e87048b96329f58f4f122a8f467ce1fee8eb

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/23/2024 7:07:55 PM UTC (today)

File size:

6 MB (6,283,632 bytes)

Product version:

5.5.0031.0

Original file name:

SFXCAB.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\silverlight.exe

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

2/21/2011 9:53:11 PM

Valid to:

5/21/2012 10:53:11 PM

Subject:

CN=Microsoft Corporation, OU=AOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

6101AFCA000000000014

File PE Metadata

Compilation timestamp:

6/25/2004 2:14:00 AM

OS version:

5.2

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

98304:/RU0KQRINI4I9qD7liIc6ak2/XlSO5xAtkC9YAdJYDgw5s/gtNQfrE8fkyO5Lvsx:/OvQWIzGC6t2vlT5xukMYAys/gngkzAx

Entry address:

0x5892

Entry point:

E9, 68, FA, FF, FF, 8B, 44, 24, 04, EB, 17, 80, F9, 3B, 75, 0C, 84, C9, 74, 14, 40, 8A, 08, 80, F9, 0A, 75, F4, 80, 38, 20, 7F, 09, 40, 8A, 08, 84, C9, 75, E3, 33, C0, C2, 04, 00, 8B, 4C, 24, 04, EB, 05, 84, C0, 74, 11, 41, 8A, 01, 3C, 0A, 75, F5, 41, 51, E8, C0, FF, FF, FF, C2, 04, 00, 33, C0, EB, F9, 53, 8B, 5C, 24, 0C, 56, 8B, 74, 24, 0C, 57, C6, 03, 00, EB, 0C, 56, E8, CB, FF, FF, FF, 8B, F0, 85, F6, 74, 2D, 80, 3E, 5B, 75, EF, 8D, 46, 01, EB, 0A, 84, C9, 74, 1F, 80, F9, 20, 7E, 0A, 40, 8A, 08, 80, F9... 
[+]

Packer / compiler:

tElock 0.99 - 1.0 private

Code size:

30 KB (30,720 bytes)

The file silverlight.exe has been seen being distributed by the following 28 URLs.

http://filehippo.com/pl/download/file/.../

http://thehinduclassifieds.in/.../Silverlight.exe

http://192.168.2.118/.../Silverlight.exe

http://filehippo.com/pl/download/file/.../

http://ak.exe.imgfarm.com/images/nocache/mindspark/.../WebfettiSetup2.3.90.20.ZKman000.exe

http://192.168.5.49/.../Silverlight.exe

http://192.168.5.16/.../Silverlight.exe

http://217.86.205.93:8084/.../Silverlight.exe

http://172.24.7.186/.../Silverlight.exe

http://localhost:54331/.../Silverlight.exe

http://201.48.251.11/msupdate/D/C/2/DC2D5838-9138-4D25-AA92-52F61F7C51E6/.../Silverlight.exe

http://filehippo.com/es/download/file/.../

https://www.dropbox.com/sh/zrdk36h22dlo02b/.../Silverlight.exe

http://172.30.8.126/.../Silverlight.exe

http://silverlight.dlservice.microsoft.com/download/5/5/7/55748E53-D673-4225-8072-4C7A377BB513/.../Silverlight.exe

http://192.168.2.111/home/.../Silverlight.exe

http://filehippo.com/pl/download/file/.../

http://kamera.psm.pulawy.pl/.../Silverlight.exe

http://download.informer.com/.../silverlight.exe

http://microsoft-silverlight.software.informer.com/.../

http://silverlight.dlservice.microsoft.com/download/5/A/C/5AC56802-B26B-4876-8872-7303C8F27072/20125.00/.../Silverlight.exe

http://go.microsoft.com/.../?LinkID=229320

http://www.microsoft.com/getsilverlight/.../getsilverlight.ashx

http://go.microsoft.com/.../?LinkID=149156

http://silverlight.dlservice.microsoft.com/download/D/C/2/DC2D5838-9138-4D25-AA92-52F61F7C51E6/.../Silverlight.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.