home

boie8_enus_bo0077_xp.exe

Internet Explorer 8

Microsoft Corporation

This is a setup program which is used to install the application. This is installed with Windows Internet Explorer 8. The file has been seen being downloaded from view.atdmt.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Internet Explorer 8

Description:
Win32 Cabinet Self-Extractor

Version:
5.50.4134.600

MD5:
a9d0f4d268db1ef65aa5b12da998ad4a

SHA-1:
3f717250b3139c002f50ec03e0cad7c7282e1641

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 12:10:42 AM UTC  (today)

File size:
23.8 MB (24,913,752 bytes)

Product version:
5.50.4134.600

Copyright:
Copyright (C) Microsoft Corp. 1981-2000

Original file name:
WEXTRACT.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\boie8_enus_bo0077_xp.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/10/2011 3:32:25 PM

Valid to:
1/10/2013 2:32:25 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6119CC93000100000066

File PE Metadata
Compilation timestamp:
6/6/2000 3:43:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
393216:hxyqN8HnneSi3lZApT1XWr6CbVqtvvIN6yUGebJMifM7DOo+FiYb8Hf1LQrbj3I2:hx1SHneSsA5WxjZUN2ifMDObiYG1LMdj

Entry address:
0x2891

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, DC, 10, 00, 01, 8B, F0, 8A, 06, 3C, 22, 75, 14, 8A, 46, 01, 46, 84, C0, 74, 04, 3C, 22, 75, F4, 80, 3E, 22, 75, 0D, 46, EB, 0A, 3C, 20, 7E, 06, 46, 80, 3E, 20, 7F, FA, 8A, 06, 84, C0, 74, 07, 3C, 20, 7F, 03, 46, EB, F3, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, D8, 10, 00, 01, F6, 45, E8, 01, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF, 15, 60, 11, 00, 01, 50, E8, 0E, 00, 00, 00, 8B, F0, 56, FF, 15, D0, 10, 00, 01, 8B, C6, 5E, C9, C3, 56, 33, F6...
 
[+]

Entropy:
7.9996

Developed / compiled with:
Microsoft Visual C++

Code size:
34 KB (34,816 bytes)

The file boie8_enus_bo0077_xp.exe has been discovered within the following program.

Windows Internet Explorer 8  by Microsoft Corporation
Windows IE8 (Internet Explorer 8) is a web browser from Microsoft. IE8 contains many new features, including WebSlices and Accelerators (Accelerators are a form of selection-based search which allow a user to invoke an online service from any other page using only the mouse).
www.microsoft.com/ie
5% remove it
 
Powered by Should I Remove It?

The file boie8_enus_bo0077_xp.exe has been seen being distributed by the following 3 URLs.

http://view.atdmt.com/action/SMG_MRTINX_WOL_WinXP_NonIE8_FD_OIE8?href=http://g.msn.com/.../101

http://download.microsoft.com/download/5/F/3/5F347AAA-D158-4050-B68D-957773EBD4A0/BOIE8/OIE8/MARKETING/.../BOIE8_ENUS_BO0077_XP.EXE

http://g.msn.com/.../101

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.