home

extract.exe

Microsoft Windows 2000 Operating System

Microsoft Corporation

This is a setup program which is used to install the application. This is installed with Microsoft Money 2004. The file has been seen being downloaded from pkg.mshell.boonty.com.
Publisher:
Microsoft Corporation

Product:
Microsoft(R) Windows (R) 2000 Operating System

Description:
Microsoft® Cabinet Extraction Tool

Version:
5.00.2147.1

MD5:
a0e5d81365410fbc14a33928cc699f87

SHA-1:
09950d0b3d122dbc6ec46b052f7dd8d9e63f19f6

SHA-256:
654c99866cdaeea9936436ebc593b601f62a9477d341639ff3ef8801239f77bb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 7:24:33 AM UTC  (today)

File size:
90.3 KB (92,432 bytes)

Product version:
5.00.2147.1

Copyright:
Copyright (C) Microsoft Corp. 1981-1999

Original file name:
extract.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\syswow64\extract.exe

File PE Metadata
Compilation timestamp:
10/9/1999 10:54:21 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
5.12

CTPH (ssdeep):
1536:l9tJMeYYTEz4DkSuVvnh0pT8Jk4s7L66nWDg3/7+7mTZZKR6OwKPYRON:pJMe5ZuVvnh0pT8Jkn7OFCC7mT7KR6j0

Entry address:
0x5190

Entry point:
55, 8B, EC, 6A, FF, 68, 40, 1F, 00, 01, 68, F8, 82, 00, 01, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, F0, 53, 56, 57, 89, 65, E8, FF, 15, 38, 10, 00, 01, 33, D2, 8A, D4, 89, 15, 18, 73, 01, 01, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 14, 73, 01, 01, C1, E1, 08, 03, CA, 89, 0D, 10, 73, 01, 01, C1, E8, 10, A3, 0C, 73, 01, 01, E8, D4, 2F, 00, 00, 85, C0, 75, 0A, 6A, 1C, E8, E9, 00, 00, 00, 83, C4, 04, C7, 45, FC, 00, 00, 00, 00, E8, BA, 2D, 00, 00, E8, A5, 2D, 00, 00, FF, 15, 34, 10, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
74.5 KB (76,288 bytes)

The file extract.exe has been discovered within the following program.

Microsoft Money 2004  by Microsoft Corporation
Publisher's description - “Save Time Organizing and Managing Your Finances - Download checking, credit card and other transactions from your bank automatically for up-to-date information.”
support.microsoft.com
10% remove it
 
Powered by Should I Remove It?

The file extract.exe has been seen being distributed by the following URL.

http://pkg.mshell.boonty.com/.../extract.exe

Scan extract.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.