home

vs_ultimate.exe

Microsoft Visual Studio Ultimate 2013

Microsoft Corporation

This is installed with Microsoft Visual Studio Ultimate 2013. The file has been seen being downloaded from download.my.visualstudio.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Visual Studio Ultimate 2013

Version:
12.0.21005.13

MD5:
c414730044eaa3d4a24a8b7e9894c05c

SHA-1:
5a12d60add7100565674dda59012e0a31ea0e369

SHA-256:
07e3fd2b464e0a2d200fad3cb6d3f55b594727e0f9bc3bd1d9ccc19225e981c6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/24/2024 3:37:31 AM UTC  (today)

File size:
1.1 MB (1,128,064 bytes)

Product version:
12.0.21005.13

Copyright:
Copyright (c) Microsoft Corporation. All rights reserved.

Original file name:
vs_ultimate.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\vs_ultimate.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/24/2013 4:33:39 PM

Valid to:
4/24/2014 5:33:39 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
8/2/2013 10:49:50 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:t9jrQQuGirgSRqiIhKol5U/iv+w5iZhQBH00q3I:PvungSKgk5qivAhWUV3I

Entry address:
0x27296

Entry point:
E8, 04, 1F, 00, 00, E9, 89, FE, FF, FF, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 80, 00, 00, 00, 72, 0E, 83, 3D, E8, 5E, 45, 00, 00, 74, 05, E9, 6E, 1F, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74, 06, F3, AB, 85, D2, 74, 0A, 88, 07, 83, C7, 01, 83, EA, 01, 75, F6, 8B, 44, 24, 08, 5F, C3, 8B...
 
[+]

Entropy:
7.4559

Code size:
224 KB (229,376 bytes)

The file vs_ultimate.exe has been discovered within the following program.

Microsoft Visual Studio Ultimate 2013  by Microsoft Corporation
9% remove it
 
Powered by Should I Remove It?

The file vs_ultimate.exe has been seen being distributed by the following 18 URLs.

https://download.my.visualstudio.com/.../en_visual_studio_ultimate_2013_x86_web_installer_3175337.exe

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=1876578769&Dir=1&Mode=0&Off=0&TS=02401C5F-9B6A-42E0-BEC1-4791636050C6&CVN=5,0,0,32

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=2054203007&Dir=1&Mode=0&Off=0&TS=942629FF-5B64-4982-AECA-A4935D66C959&CVN=5,0,0,32

https://doc-10-b4-docs.googleusercontent.com/docs/securesc/pbhba5ljltir5dg2l6j0u6t691mtin7i/ek8kgsts6prjl1ehbrujkj7es6oi9dbu/1384632000000/03928252216838885420/.../0BzN7URf71QOuUElOZlBQZkt2WkE?e=download&h=16653014193614665626&nonce=448c13n2l8esq&user=07794198398681809309&hash=vs5iu1vii3fhu6osmq25sv65nc0fonuq

https://docs.google.com/nonceSigner?nonce=448c13n2l8esq&continue=https://doc-10-b4-docs.googleusercontent.com/docs/securesc/pbhba5ljltir5dg2l6j0u6t691mtin7i/ek8kgsts6prjl1ehbrujkj7es6oi9dbu/1384632000000/03928252216838885420/.../0BzN7URf71QOuUElOZlBQZkt2WkE?e=download&h=16653014193614665626&hash=j851k5b678lnuocoanpufk990anb69q6

https://doc-10-b4-docs.googleusercontent.com/docs/securesc/pbhba5ljltir5dg2l6j0u6t691mtin7i/ek8kgsts6prjl1ehbrujkj7es6oi9dbu/1384632000000/03928252216838885420/.../0BzN7URf71QOuUElOZlBQZkt2WkE?h=16653014193614665626&e=download

https://drive.google.com/uc?id=0BzN7URf71QOuUElOZlBQZkt2WkE&export=download

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=2124019576&Dir=1&Mode=0&Off=0&TS=363AF359-8F16-4413-9CE8-BF492F799798&CVN=5,0,0,32

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=456815582&Dir=1&Mode=0&Off=0&TS=BEF004B7-688E-47C7-A24D-904C2F9CD3D6&CVN=5,0,0,32

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=1608867153&Dir=1&Mode=0&Off=0&TS=56F39153-F3A3-4F74-87D1-1F58E7196C45&CVN=5,0,0,32

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=307061006&Dir=1&Mode=0&Off=0&TS=48611F9D-7E9D-42AB-B47F-6D1026FA5E2F&CVN=5,0,0,32

http://www.gezginler.net/indir/v/.../

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=415840771&Dir=1&Mode=0&Off=0&TS=EC417567-1BB5-46BA-836A-74117D0F9E33&CVN=5,0,0,32

https://go.microsoft.com/.../?LinkID=320677&clcid=0x409

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=356124719&Dir=1&Mode=0&Off=0&TS=776F86B2-7607-4B43-88C4-0FEB72884AB4&CVN=5,0,0,32

http://download.microsoft.com/download/C/F/B/.../vs_ultimate.exe

http://go.microsoft.com/.../?LinkId=320677

http://go.microsoft.com/.../?LinkID=320677&clcid=0x409

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.