filenameie7-kb928090-windowsxp-x86-enu_36568fbcd7ae99312bccca1095f2b1de...exe
size271792 (0x425b0)
md56b69cc9d0d2bd08dfbba97eaa88313da
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd0

Rich Header

lib idversiontimes used
93217915
10108
95219020
9421791
9021791

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x42c180e5
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0xd0f
Magic0x10b
LinkerVersion7.10
SizeOfCode0x7a00
SizeOfInitializedData0x11c00
SizeOfUninitializedData0
AddressOfEntryPoint0x5a45
BaseOfCode0x2000
BaseOfData0xa000
ImageBase0x1000000
SectionAlignment0x2000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion5.2
SubsystemVersion4.0
Reserved10
SizeOfImage0x1e000
SizeOfHeaders0x400
CheckSum0x78afaf
Subsystem2
DllCharacteristics0x8400
SizeOfStackReserve0x40000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS SFX CAB Archive file

Sections

namevavsizeraw sizeflags
.text0x20000x79820x7a00R-X CODE
.data0xa0000x110d40x200RW- IDATA
.rsrc0x1c0000x9880x771200R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x8f100xa0
RESOURCE0x1c0000x988
EXCEPTION00
SECURITY0x7792000x2598
BASERELOC00
DEBUG0x21d00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x20000x1cc
Delay_IAT00
CLR_Header00
typenamesizecp
DIALOG#1002820
DIALOG#1072240
STRING#17300
VERSION#19040
idlangstring
11033File is corrupt
21033Extraction Complete
31033Extraction Failed
41033Extracting File:
51033Choose Directory For Extracted Files
61033To Directory:
71033Setup was unable to shutdown system. Please shutdown your system manually.
81033Unable to find a volume for file extraction. Please verify that you have proper permissions.
91033Unable to find a volume with enough disk space for file extraction.
module_namehintordfunction_name
KERNEL32.dll77CreateFileA
KERNEL32.dll331GetDriveTypeA
KERNEL32.dll524HeapFree
KERNEL32.dll234FormatMessageA
KERNEL32.dll583LeaveCriticalSection
KERNEL32.dll124DeleteFileA
KERNEL32.dll143EnterCriticalSection
KERNEL32.dll849TerminateProcess
KERNEL32.dll899WaitForMultipleObjects
KERNEL32.dll74CreateEventW
KERNEL32.dll779SetEvent
KERNEL32.dll841Sleep
KERNEL32.dll776SetEnvironmentVariableA
KERNEL32.dll336GetEnvironmentVariableA
KERNEL32.dll905WideCharToMultiByte
KERNEL32.dll518HeapAlloc
KERNEL32.dll797SetLastError
KERNEL32.dll919WriteFile
KERNEL32.dll612MoveFileA
KERNEL32.dll175ExitProcess
KERNEL32.dll122DeleteCriticalSection
KERNEL32.dll229FlushFileBuffers
KERNEL32.dll901WaitForSingleObject
KERNEL32.dll627OpenEventA
KERNEL32.dll314GetCurrentProcess
KERNEL32.dll342GetFileAttributesA
KERNEL32.dll264GetCommandLineA
KERNEL32.dll373GetModuleFileNameA
KERNEL32.dll131DeviceIoControl
KERNEL32.dll211FindNextFileA
KERNEL32.dll201FindFirstFileA
KERNEL32.dll61CopyFileA
KERNEL32.dll782SetFileAttributesA
KERNEL32.dll846SystemTimeToFileTime
KERNEL32.dll446GetSystemTime
KERNEL32.dll325GetDiskFreeSpaceA
KERNEL32.dll661QueryDosDeviceA
KERNEL32.dll312GetCurrentDirectoryA
KERNEL32.dll773SetEndOfFile
KERNEL32.dll788SetFileTime
KERNEL32.dll592LocalFileTimeToFileTime
KERNEL32.dll136DosDateTimeToFileTime
KERNEL32.dll338GetExitCodeProcess
KERNEL32.dll96CreateProcessA
KERNEL32.dll178ExpandEnvironmentStringsA
KERNEL32.dll347GetFileSize
KERNEL32.dll105CreateThread
KERNEL32.dll73CreateEventA
KERNEL32.dll411GetProcessHeap
KERNEL32.dll538InitializeCriticalSectionAndSpinCount
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll665QueryPerformanceCounter
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll315GetCurrentProcessId
KERNEL32.dll448GetSystemTimeAsFileTime
KERNEL32.dll829SetUnhandledExceptionFilter
KERNEL32.dll441GetSystemDirectoryA
KERNEL32.dll46CloseHandle
KERNEL32.dll584LoadLibraryA
KERNEL32.dll408GetProcAddress
KERNEL32.dll239FreeLibrary
KERNEL32.dll778SetErrorMode
KERNEL32.dll469GetTickCount
KERNEL32.dll69CreateDirectoryA
KERNEL32.dll361GetLastError
KERNEL32.dll698RemoveDirectoryA
KERNEL32.dll613MoveFileExA
KERNEL32.dll784SetFilePointer
KERNEL32.dll683ReadFile
KERNEL32.dll197FindClose
KERNEL32.dll479GetVersionExA
msvcrt.dll771sprintf
msvcrt.dll776strchr
msvcrt.dll517_strnicmp
msvcrt.dll513_stricmp
msvcrt.dll788strrchr
msvcrt.dll515_strlwr
msvcrt.dll786strncpy
msvcrt.dll790strstr
msvcrt.dll552_vsnprintf
msvcrt.dll491_snprintf
ADVAPI32.dll426OpenProcessToken
ADVAPI32.dll246GetLengthSid
ADVAPI32.dll308InitiateSystemShutdownA
ADVAPI32.dll29AllocateAndInitializeSid
ADVAPI32.dll160CryptReleaseContext
ADVAPI32.dll150CryptGenRandom
ADVAPI32.dll133CryptAcquireContextA
ADVAPI32.dll559SetSecurityDescriptorDacl
ADVAPI32.dll16AddAccessAllowedAce
ADVAPI32.dll305InitializeAcl
ADVAPI32.dll306InitializeSecurityDescriptor
ADVAPI32.dll281GetTokenInformation
USER32.dll657ShowWindow
USER32.dll565SendDlgItemMessageA
USER32.dll570SendMessageA
USER32.dll158DialogBoxParamA
USER32.dll478MessageBoxA
USER32.dll458LoadStringA
USER32.dll198EndDialog
USER32.dll613SetParent
ntdll.dll374NtShutdownSystem
ntdll.dll121NtAdjustPrivilegesToken
ntdll.dll136NtClose
ntdll.dll243NtOpenProcessToken
COMCTL32.dll17
SHELL32.dll121SHBrowseForFolderA
SHELL32.dll188SHGetPathFromIDListA

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionSelf-Extracting Cabinet
FileVersion6.2.0029.0 (SRV03_QFE.031113-0918)
InternalNameSFXCAB.EXE
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameSFXCAB.EXE
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.2.0029.0

VS_FIXEDFILEINFO

FileVersion6.2.29.0
ProductVersion6.2.29.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d0266208BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 271792 bytes (266 KiB)


--
Type = PE
ERRORS:
Unexpected end of archive
WARNING = Checksum error
Physical Size = 7845784
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms RemovableRun NetRun
Created = 2005-06-28 16:55:01
Headers Size = 1024
Checksum = 7909295
Name = SFXCAB.EXE
Image Size = 122880
Section Alignment = 8192
File Alignment = 512
Code Size = 31232
Initialized Data Size = 72704
Uninitialized Data Size = 0
Linker Version = 7.10
OS Version = 5.2
Image Version = 5.2
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = NoSEH TerminalServerAware
Stack Reserve = 262144
Stack Commit = 8192
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 16777216
Comment = FileVersion: 6.2.29.0
FileVersion: 6.2.0029.0 (SRV03_QFE.031113-0918)
ProductVersion: 6.2.29.0
ProductVersion: 6.2.0029.0
CompanyName: Microsoft Corporation
FileDescription: Self-Extracting Cabinet
InternalName: SFXCAB.EXE
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: SFXCAB.EXE
ProductName: Microsoft® Windows® Operating System
----
Path = .rsrc_1
Size = 7800832
Packed Size = 7800832
Virtual Size = 7800832
Offset = 35328
--
Path = .rsrc_1
Type = Cab
Physical Size = 7800369
Tail Size = 463
Method = LZX:21
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 44464

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2007-01-08 19:02:10 ....A      1823744               inetcpl.cpl
2007-01-08 19:00:48 ....A       124928               advpack.dll
2007-01-08 19:01:14 ....A        17408               corpol.dll
2007-01-12 09:27:42 ....A       132608               extmgr.dll
2007-01-08 19:02:02 ....A       153088               ieakeng.dll
2007-01-08 19:02:02 ....A       230400               ieaksie.dll
2007-01-08 19:02:02 ....A       161792               ieakui.dll
2007-01-08 19:02:02 ....A       383488               ieapfltr.dll
2007-01-08 19:02:02 ....A       384000               iedkcs32.dll
2007-01-12 09:27:42 ....A      6054400               ieframe.dll
2007-01-08 19:02:04 ....A        44544               iernonce.dll
2007-01-08 19:02:04 ....A       266752               iertutil.dll
2007-01-12 09:27:42 ....A        27136               jsproxy.dll
2007-01-12 09:27:42 ....A       458752               msfeeds.dll
2007-01-12 09:27:42 ....A        51712               msfeedsbs.dll
2007-01-12 09:27:42 ....A      3580416               mshtml.dll
2007-01-12 09:27:42 ....A       477696               mshtmled.dll
2007-01-08 19:03:02 ....A       193024               msrating.dll
2007-01-12 09:27:42 ....A       670720               mstime.dll
2007-01-08 19:04:08 ....A       102400               occache.dll
2006-11-16 14:10:30 ....A        14048               spmsg.dll
2007-01-08 19:04:54 ....A       105984               url.dll
2007-01-12 09:27:42 ....A      1149952               urlmon.dll
2007-01-12 09:27:42 ....A       232960               webcheck.dll
2007-01-12 09:27:42 ....A       822784               wininet.dll
2007-01-08 18:08:14 ....A        56832               ie4uinit.exe
2007-01-08 18:08:10 ....A        13824               ieudinit.exe
2007-01-08 18:08:42 ....A       623616               iexplore.exe
2006-11-16 14:10:30 ....A       213216               spuninst.exe
2007-01-08 19:07:52 ....A       991232               ieframe.dll.mui
2007-01-17 14:40:04 ....A        18377               update/kb928090-ie7.cat
2006-11-16 14:10:32 ....A       371424               update/updspapi.dll
2006-11-16 14:10:32 ....A       716000               update/update.exe
2007-01-17 13:06:22 ....A        11815               update/update.inf
2006-11-16 14:09:50 ....A          804               update/eula.txt
2007-01-17 13:06:28 ....A         2262               update/update.ver
------------------- ----- ------------ ------------  ------------------------
2007-01-17 14:40:04           20684138       271792  36 files

Warnings: 1

Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK