home

ie9-setup-vi.exe

Internet Explorer 9

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from client.web.aol.com.
Publisher:
Microsoft Corporation

Product:
Internet Explorer 9

Description:
Win32 Cabinet Self-Extractor

Version:
9.00.7930.16406 (WIN7_IE9_Beta.100831-2345)

MD5:
3a1188b6661a5a1c4c609db2092e65f5

SHA-1:
e442bcf855ba38bcb19b7a5cf417a52ba509d533

SHA-256:
743da95b0afcfc876984137fcf248c12330647d3803b35a9dea92bec39f63f34

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 10:54:35 PM UTC  (today)

File size:
19.2 MB (20,135,424 bytes)

Product version:
9.00.7930.16406

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
WEXTRACT.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\ie9-setup-vi.exe

File PE Metadata
Compilation timestamp:
9/1/2010 3:42:39 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
393216:fH6vxuYlVHak8+4PReombnPbFsXMrP7WVWfXL59TfbvV15g3Y:CblVHakeYbRxSeFxbv

Entry address:
0x6A92

Entry point:
E8, FD, 02, 00, 00, E9, 4D, FD, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, C4, C2, 00, 01, 75, 03, C2, 00, 00, E9, 79, 03, 00, 00, CC, CC, CC, CC, CC, FF, 25, 74, 12, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, 70, 12, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, 6C, 12, 00, 01, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 8B, 45, 08, 8B, 00, 81, 38, 63, 73, 6D, E0, 75, 2B, 83, 78, 10, 03, 75, 25, 8B, 40, 14, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 06, FF, 15...
 
[+]

Entropy:
7.9993  (probably packed)

Code size:
42 KB (43,008 bytes)

The file ie9-setup-vi.exe has been seen being distributed by the following URL.

http://client.web.aol.com/toolbarfiles/Prod/downloads/customie9/.../ie9-32-setup-vi.exe

Scan ie9-setup-vi.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.