home

update.exe

Win32 Cabinet Self-Extractor

Microsoft Corporation

This is a setup program which is used to install the application. This is installed with multiple programs including Halo 2 for Windows Vista and Halo 2 para Windows Vista. The file has been seen being downloaded from download830.mediafire.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Win32 Cabinet Self-Extractor

Version:
6.0.6000.16386 (vista_rtm.061101-2205)

MD5:
0ee65087834fa95707cda9f07e38bdca

SHA-1:
05ddfa7b3c1361dd8d96fdb54323df52b34c9c2f

SHA-256:
3cd1bb1af5dd713e4d5b608f58cc222af5309db44f41b81d091f2a2df547f33d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 10:11:14 AM UTC  (today)

File size:
3.3 MB (3,492,896 bytes)

Product version:
6.0.6000.16386

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
WEXTRACT.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
8/23/2007 2:23:13 AM

Valid to:
2/23/2009 1:33:13 AM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
Compilation timestamp:
11/2/2006 9:49:23 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:9RfwEwUY8+jbnOuUoLu3OjAWPeAN2aCGDxcyF205PXXF42nzVeSOZOdt21efkAaZ:9z4OuUguYWalm0l1/e5IC1ZuJb3ZDyf

Entry address:
0x6B24

Entry point:
E8, DD, 05, 00, 00, E9, 40, FD, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, C4, C2, 00, 01, 75, 02, F3, C3, E9, 4E, 06, 00, 00, CC, CC, CC, CC, CC, CC, FF, 25, 74, 12, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, 70, 12, 00, 01, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 53, 56, 57, 8B, 54, 24, 10, 8B, 44, 24, 14, 8B, 4C, 24, 18, 55, 52, 50, 51, 51, 68, F8, 6B, 00, 01, 64, FF, 35, 00, 00, 00, 00, A1, C4, C2, 00, 01, 33, C4, 89, 44, 24, 08, 64, 89, 25, 00, 00, 00, 00, 8B, 44, 24, 30, 8B, 58, 08, 8B, 4C, 24...
 
[+]

Code size:
42.5 KB (43,520 bytes)

The file update.exe has been discovered within the following programs.

Halo 2 for Windows Vista  by Microsoft Game Studios
Publisher's description - “Windows Vista gamers will be able to experience the epic story of Halo 2 as Master Chief delves further into the mystery of the Covenant in the aftermath of Halo’s destruction. What he discovers will soon threaten the fate not only of Earth, but of the Universe itself.”
www.microsoft.com/games
11% remove it
Halo 2 para Windows Vista  by Microsoft Corporation
Publisher's description - “En este artículo se describe los requisitos mínimos del sistema para Microsoft Halo 2 para Windows Vista. Este artículo también describe un mensaje de error aparece si el hardware no supera una comprobación del sistema.”
support.microsoft.com/kb/936820/es
2% remove it
 
Powered by Should I Remove It?

The file update.exe has been seen being distributed by the following 14 URLs.

http://download830.mediafire.com/7twa4qi10l6g/.../Update.exe

http://www.halo2vista.com/.../abbcode_page.php?mode=click&id=35&sid=32322cd9242ba258dbf9f4ff87264f65

http://download1898.mediafire.com/7vp97aiklhlg/.../Update.exe

http://goo.gl/0ievH

http://www.halo2vista.com/.../abbcode_page.php?mode=click&id=35&sid=a0dff2e1d540747526c8d0a3831fa3c3

https://onedrive.live.com/.../QpY=8&ithint=.exe

http://download1898.mediafire.com/7xx5j88acxug/.../Update.exe

http://download1392.mediafire.com/fg9kr1yb7t9g/.../Update.exe

http://download1392.mediafire.com/omsj6b1tbyeg/.../Update.exe

https://onedrive.live.com/download.aspx?cid=9ACAD88EE0592E52&authKey=!AKliKn3_RUvqLko&resid=9ACAD88EE0592E52!2232&ithint=.exe

http://download.fileplanet.com/ftp1/.../Halo2_Update_v1.01.exe

http://download1384.mediafire.com/krwzkc0gebmg/.../Update.exe

http://download.microsoft.com/download/b/0/e/.../Update.exe

http://download744.mediafire.com/6th47s448dhg/.../Update.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.