home

vbrun60sp6.exe

Microsoft Windows NT Operating System

Microsoft Corporation

This is a setup program which is used to install the application. This is installed with MSDN Library for Microsoft Visual Studio 2008 Express Editions. The file has been seen being downloaded from www.imperiumao.com.ar and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft(R) Windows NT(R) Operating System

Description:
Win32 Cabinet Self-Extractor

Version:
4.71.1015.0

MD5:
899185daa1572ec47ddaefa1b9766136

SHA-1:
644ee1472aee863d5dbea4914dd79ff1d2e062e0

SHA-256:
7f7bc59f453539194c2d38fd68fb2b4beb3c1b5b5273cec1b7dd1150b0ea929d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/23/2024 11:50:21 AM UTC  (today)

File size:
1004.3 KB (1,028,368 bytes)

Product version:
4.71.1015.0

Copyright:
Copyright (C) Microsoft Corp. 1995

Original file name:
WEXTRACT.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\vbrun60sp6.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/24/2003 10:59:14 PM

Valid to:
1/24/2005 10:09:14 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610E7DA7000000000048

File PE Metadata
Compilation timestamp:
7/15/1997 4:48:12 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:YPgqOiGZBLkrfjicJ9hTrqPXotHdOdtXg8ArWc:e3XJmYtUtXg8Aic

Entry address:
0x2723

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 58, 11, 00, 01, 8B, F0, 8A, 06, 3C, 22, 75, 14, 8A, 46, 01, 46, 84, C0, 74, 04, 3C, 22, 75, F4, 80, 3E, 22, 75, 0D, 46, EB, 0A, 3C, 20, 7E, 06, 46, 80, 3E, 20, 7F, FA, 8A, 06, 84, C0, 74, 07, 3C, 20, 7F, 03, 46, EB, F3, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, CC, 10, 00, 01, F6, 45, E8, 01, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF, 15, C8, 10, 00, 01, 50, E8, 0E, 00, 00, 00, 8B, F0, 56, FF, 15, C4, 10, 00, 01, 8B, C6, 5E, C9, C3, 56, 33, F6...
 
[+]

Entropy:
7.9554

Developed / compiled with:
Microsoft Visual C++

Code size:
36 KB (36,864 bytes)

The file vbrun60sp6.exe has been discovered within the following program.

MSDN Library for Microsoft Visual Studio 2008 Express Editions  by Microsoft Corporation
8% remove it
 
Powered by Should I Remove It?

The file vbrun60sp6.exe has been seen being distributed by the following 6 URLs.

http://www.imperiumao.com.ar/.../getfile.php?q=3

http://movashah.ir/.../vbrun60sp6.exe

http://fileserver.imperiumgames.com.ar/vbrun60sp6.exe

http://upload.ksp.or.th/.../vbrun60sp6.exe

http://foro.tierrasdelsur.cc/vbrun60sp6.exe

http://www.karenware.com/.../vbrun60-setup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.