home

9a5is.exe

Internet Explorer

{9C1F8E52-00A6-4A3A-90CA-F8EC53FAC0E8}

Publisher:
Microsoft Corporation  (signed by {9C1F8E52-00A6-4A3A-90CA-F8EC53FAC0E8})

Product:
Internet Explorer

Version:
11.00.9600.16384 (winblue_rtm.130821-1623)

MD5:
5c82d9cd9db613977a32e7ac963cd87b

SHA-1:
cdf167e0c7bc3f62656bbd39cb21550d4438cd5e

SHA-256:
e7bfecaf817082cf3b831ed9da750bf1b65fcc293baaa2ac60d14b078b33fdb8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:21:36 PM UTC  (today)

File size:
398.5 KB (408,096 bytes)

Product version:
11.00.9600.16384 (winblue_rtm.130821-1623)

Copyright:
© Microsoft Corporation. Wszelkie prawa zastrzeżone.

Original file name:
Internet Explorer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\9a5is.exe

Digital Signature
Signed by:
{9C1F8E52-00A6-4A3A-90CA-F8EC53FAC0E8}

Authority:
{9C1F8E52-00A6-4A3A-90CA-F8EC53FAC0E8}

Valid from:
2/19/2014 4:00:11 AM

Valid to:
2/19/2015 10:00:11 AM

Subject:
CN={9C1F8E52-00A6-4A3A-90CA-F8EC53FAC0E8}

Issuer:
CN={9C1F8E52-00A6-4A3A-90CA-F8EC53FAC0E8}

Serial number:
274683BF421F748E4C53A26F410E5243

File PE Metadata
Compilation timestamp:
2/24/2014 9:41:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:tDoFGezOiAoW9HpBZPBWXuG3YB+ajdCNV2J0e9G6DMz7:t0NOnjP8eGoNp+2Jz9G6DMz7

Entry address:
0x507DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, 00, 00, 00, 03, 00, 03, 00, 00, 00, 28, 00, 00, 80, 0E, 00, 00, 00, A0, 00, 00, 80, 10, 00, 00, 00, B8, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, 00, 00, 00, 0D, 00, 32, 00, 00, 00, D0, 00, 00, 80, 33, 00, 00, 00, E8, 00, 00, 80, 34, 00, 00, 00, 00, 01, 00, 80, 35, 00, 00, 00, 18, 01, 00, 80, 36, 00, 00, 00, 30, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
314 KB (321,536 bytes)

Scan 9a5is.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.