home

IEExtension.dll

IEExtension

Carnegie Mellon University

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘CMU-SBO Internet Explorer Extension’. This is installed with CMU Security Behavior Observatory (SBO) Client.
Publisher:
CMU-SBO  (signed by Carnegie Mellon University)

Product:
IEExtension

Version:
1.0.0.0

MD5:
0711d88c0a2827413daea913920bebaf

SHA-1:
29aca086eb80af6e01967d0c1a0d6426af66b18d

SHA-256:
39deb75146a53fda5cdff55d11a71bc3a4b0679b2dd63e1c264d0fc25a7a0d03

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 6:38:19 PM UTC  (today)

File size:
14 KB (14,344 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014

Original file name:
IEExtension.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\cmu-sbo\client\ieextension.dll

Digital Signature
Signed by:
Carnegie Mellon University

Authority:
DigiCert Inc

Valid from:
4/28/2013 7:00:00 PM

Valid to:
5/4/2015 7:00:00 AM

Subject:
CN=Carnegie Mellon University, O=Carnegie Mellon University, L=Pittsburgh, S=Pennsylvania, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0F5E646C54F84CABDABA6AE7B49B2A8F

File PE Metadata
Compilation timestamp:
9/5/2014 11:21:37 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:KmR7b8qdtuGH+YaDR37cbOxgR4PHORuLIMV97oNgYMujiTb0v:HR7b8ItABcqxugIMV9y1Mlq

Entry address:
0x3F9E

Entry point:
FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8686

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
8 KB (8,192 bytes)

Internet Explorer BHO
CLSID:
{8a194578-81ea-4850-9911-13ba2d71efbd}

CLSID name:
CMU-SBO Internet Explorer Extension


The file IEExtension.dll has been discovered within the following program.

CMU Security Behavior Observatory (SBO) Client  by Carnegie Mellon University (CMU) Usable Privacy and Security (CUPS) research group
About 6% of users remove it
 
Powered by Should I Remove It?

Scan IEExtension.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.