iexplore.exe

Internet Explorer

Microsoft Corporation

This is the primary executable and GUI (graphical user interface) for the Internet Explorer web browser. It runs as a scheduled task under the Windows Task Scheduler.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Internet Explorer

 
Part of the Windows Operating System

Version:
11.00.9600.16428 (winblue_gdr.131013-1700)

MD5:
4f2aa3e7bd7257e4937e071e3700819e

SHA-1:
0a10ad144e1b74fde27d6c005d270d77430c6b34

SHA-256:
0fc3b64147170716d87f5261c54bbf9d1c8ac3b8123114e82b6a4668545795d1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/3/2016 1:37:25 AM UTC  (today)

File size:
791.2 KB (810,200 bytes)

Product version:
11.00.9600.16428

Copyright:
© Microsoft Corporation. Alle Rechte vorbehalten.

Original file name:
IEXPLORE.EXE.MUI

File type:
Executable application (Win64 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\internet explorer\iexplore.exe

Digital Signature
Authority:
Microsoft Corporation

Valid from:
4/22/2014 7:39:00 PM

Valid to:
7/22/2015 7:39:00 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

File PE Metadata
Compilation timestamp:
5/30/2014 9:03:28 AM

OS version:
6.3

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:VTIGLbMMHMMMvMMZMMMKzb6XmMMMiMMMz8JMMHMMM6MMZMMMeXNMMzMMMUMMVMMu:pMMHMMMvMMZMMMlmMMMiMMMYJMMHMMMp

Entry address:
0x1974

Entry point:
48, 83, EC, 28, E8, E3, FC, FF, FF, 48, 83, C4, 28, EB, 0D, CC, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 70, 10, 48, 89, 78, 18, 4C, 89, 70, 20, 41, 57, 48, 81, EC, B0, 00, 00, 00, 45, 33, F6, 44, 89, 74, 24, 20, 48, 8D, 48, 88, FF, 15, 42, 47, 00, 00, 90, 65, 48, 8B, 04, 25, 30, 00, 00, 00, 48, 8B, 58, 08, 41, 8B, F6, 33, C0, F0, 48, 0F, B1, 1D, 66, 26, 00, 00, 0F, 85, 0D, 0E, 00, 00, BB, 01, 00, 00, 00, 8B, 05, 71, 26, 00, 00, 3B, C3, 0F, 84, 1C, 0E, 00, 00, 8B...
 
[+]

Code size:
11 KB (11,264 bytes)

Scheduled Task
Task name:
0

Trigger:
Registration (Runs on registration)


6 Shell Open Commands
Open type:
ftp

Command:
"C:\Program Files\internet explorer\iexplore.exe" %1

Open type:
giffile

Command:
"C:\Program Files\internet explorer\iexplore.exe" %1

Open type:
htmlfile

Command:
"C:\Program Files\internet explorer\iexplore.exe" %1

Open type:
http

Command:
"C:\Program Files\internet explorer\iexplore.exe" %1

Open type:
https

Command:
"C:\Program Files\internet explorer\iexplore.exe" %1

Open type:
mhtmlfile

Command:
"C:\Program Files\internet explorer\iexplore.exe" %1