home

ba403.exe

Internet Explorer

{9C1F8E52-00A6-4A3A-90CA-F8EC53FAC0E8}

Publisher:
Microsoft Corporation  (signed by {9C1F8E52-00A6-4A3A-90CA-F8EC53FAC0E8})

Product:
Internet Explorer

Version:
11.00.9600.16384 (winblue_rtm.130821-1623)

MD5:
0db445683bbdffa258e30b26b0c76f1e

SHA-1:
cdfef8dce37f6f13bc77eca2cd4709c7a34e9c0d

SHA-256:
2d3bf4694e7673680eb640a54d7572d85cedd4b0be6fc7c2f272c1b0ceb06b10

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 12:57:54 AM UTC  (today)

File size:
355.5 KB (364,064 bytes)

Product version:
11.00.9600.16384 (winblue_rtm.130821-1623)

Copyright:
© Microsoft Corporation. Wszelkie prawa zastrzeżone.

Original file name:
Internet Explorer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\ba403.exe

Digital Signature
Signed by:
{9C1F8E52-00A6-4A3A-90CA-F8EC53FAC0E8}

Authority:
{9C1F8E52-00A6-4A3A-90CA-F8EC53FAC0E8}

Valid from:
2/19/2014 4:00:11 AM

Valid to:
2/19/2015 10:00:11 AM

Subject:
CN={9C1F8E52-00A6-4A3A-90CA-F8EC53FAC0E8}

Issuer:
CN={9C1F8E52-00A6-4A3A-90CA-F8EC53FAC0E8}

Serial number:
274683BF421F748E4C53A26F410E5243

File PE Metadata
Compilation timestamp:
2/20/2014 9:54:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:q7WyH1KHGQi1iAmipVPu47HWlWVRDZe9G6DMzZ:q7W7GQi1iAVp9uevVNk9G6DMzZ

Entry address:
0x45B1E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
271 KB (277,504 bytes)

Scan ba403.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.