» iisexpress.exe
Overview
Analysis
File Details
Programs (1)

iisexpress.exe

Internet Information Services

Microsoft Corporation

This is installed with IIS 8.0 Express.

File name:

iisexpress.exe

Publisher:

Microsoft Corporation (signed and verified)

Product:

Internet Information Services

Description:

IIS Express Worker Process

Version:

8.5.9748.0 (fbl_srv2_iis_dev(hseiler).140130-1252)

MD5:

b649e5a058a08d03f16f6de9ee7dce24

SHA-1:

a9a6e924bc17429ac9d6d6173f723d021dab509f

SHA-256:

e3d39af13760ed64fa1a2af31c9816ee3d69dcce00a15cc9e0a0064138abeeb9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

11/22/2024 4:16:48 AM UTC (today)

File size:

184.1 KB (188,560 bytes)

Product version:

8.5.9748.0

Original file name:

iisexpress.exe

File type:

Executable application (Win64 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\iis express\iisexpress.exe

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

4/22/2014 10:39:00 AM

Valid to:

7/22/2015 10:39:00 AM

Subject:

CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

33000000CA6CD5321235C4E1550001000000CA

File PE Metadata

Compilation timestamp:

5/22/2014 2:58:46 PM

OS version:

6.3

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

12.10

CTPH (ssdeep):

3072:gVrRDEVDhJipg40w3oh7PR3i3RLchg5O++FL034XiO:srNEVtJiPtoJFihLt3A+4

Entry address:

0xB5C0

Entry point:

48, 83, EC, 28, E8, CB, 05, 00, 00, 48, 83, C4, 28, E9, 0E, FE, FF, FF, CC, CC, CC, CC, CC, CC, FF, 25, F2, 2D, 00, 00, CC, CC, CC, CC, CC, CC, FF, 25, CE, 2D, 00, 00, CC, CC, CC, CC, CC, CC, 48, 83, EC, 28, 4D, 8B, 41, 38, 48, 8B, CA, 49, 8B, D1, E8, 11, 00, 00, 00, B8, 01, 00, 00, 00, 48, 83, C4, 28, C3, CC, CC, CC, CC, CC, CC, CC, 40, 53, 48, 83, EC, 20, 45, 8B, 18, 48, 8B, DA, 4C, 8B, C9, 41, 83, E3, F8, 41, F6, 00, 04, 4C, 8B, D1, 74, 13, 41, 8B, 40, 08, 4D, 63, 50, 04, F7, D8, 4C, 03, D1, 48, 63, C8... 
[+]

Entropy:

7.0529

Code size:

50.5 KB (51,712 bytes)

The file iisexpress.exe has been discovered within the following program.

IIS 8.0 Express by Microsoft Corporation

IIS 8.0 Express enhances your ability to develop and test web applications on Windows by combining the power of IIS 8.0 with the convenience of a lightweight web server like the ASP.NET Development Server (also known as Cassini). IIS Express 8.

www.microsoft.com/en-us/download/details.aspx?id=34679

1% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.