home

ie9-windows7-x86-heb.exe

Windows Internet Explorer

Microsoft Corporation

This is a setup program which is used to install the application. This is installed with Windows Internet Explorer 8. The file has been seen being downloaded from view.atdmt.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows® Internet Explorer

Description:
‎‎כלי שירות להתקנת Windows Internet Explorer 9

Version:
9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)

MD5:
0f729db96ffdcdf96e6456e6acf759f6

SHA-1:
a5ca764761d4cea440d333cf6321802bd5f42c18

SHA-256:
7f498c7e2233d3acb7b7a90973ee2189b0a2bf03238233e46e59380c032ddc44

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/15/2024 8:34:13 PM UTC  (today)

File size:
17.8 MB (18,714,416 bytes)

Product version:
9.00.8112.16421

Copyright:
‎© Microsoft Corporation. כל הזכויות שמורות.

Original file name:
iesetup.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\internet explorer\ie9-windows7-x86-heb.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/20/2010 1:53:10 AM

Valid to:
10/20/2011 1:53:10 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6108775F00000000004A

File PE Metadata
Compilation timestamp:
3/8/2011 3:00:01 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
393216:mT6/042x90GvO8Lt7ERwscZyIeahFjsNEw1DqqHbuHZMDyqkUK:mWc4e0GvPawsc9ekVsN/JDuHZMjzK

Entry address:
0x1766B

Entry point:
E8, 64, 09, 00, 00, E9, 4D, FD, FF, FF, CC, CC, CC, CC, CC, FF, 25, 90, 13, 00, 01, CC, CC, CC, CC, CC, 3B, 0D, 1C, E0, 01, 01, 75, 03, C2, 00, 00, E9, D5, 09, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 81, EC, D0, 02, 00, 00, A1, 1C, E0, 01, 01, 33, C5, 89, 45, FC, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89, BD, CC, FD, FF, FF, 66, 8C, 95, F8, FD, FF, FF, 66, 8C, 8D, EC, FD, FF, FF, 66, 8C, 9D, C8, FD, FF, FF, 66, 8C, 85...
 
[+]

Entropy:
7.9961  (probably packed)

Code size:
116 KB (118,784 bytes)

The file ie9-windows7-x86-heb.exe has been discovered within the following program.

Windows Internet Explorer 8  by Microsoft Corporation
Windows IE8 (Internet Explorer 8) is a web browser from Microsoft. IE8 contains many new features, including WebSlices and Accelerators (Accelerators are a form of selection-based search which allow a user to invoke an online service from any other page using only the mouse).
www.microsoft.com/ie
5% remove it
 
Powered by Should I Remove It?

The file ie9-windows7-x86-heb.exe has been seen being distributed by the following 2 URLs.

http://view.atdmt.com/action/SMG_MRTINX_WOL_Vista_NonIE9_FD_IE9?href=http://download.microsoft.com/download/3/6/B/.../IE9-Windows7-x86-heb.exe

http://download.microsoft.com/download/3/6/B/.../IE9-Windows7-x86-heb.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.