» vs_ultimate.exe
Overview
Analysis
File Details
Programs (1)
Downloads (2)

vs_ultimate.exe

Microsoft Visual Studio Ultimate 2012

Microsoft Corporation

This is installed with Microsoft Visual Studio Ultimate 2012. The file has been seen being downloaded from download.msdn.microsoft.com and multiple other hosts.

File name:

vs_ultimate.exe

Publisher:

Microsoft Corporation (signed and verified)

Product:

Microsoft Visual Studio Ultimate 2012

Version:

11.0.50727.26

MD5:

f565d4417484445541e0c6da230fe718

SHA-1:

777538d4000e5efce098535611af68e540c2e9c6

SHA-256:

578e5955261cc2e38d07a540196dea5bd062cd5577bd2d73f832da19013912fc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/30/2024 4:59:18 AM UTC (today)

File size:

956.5 KB (979,440 bytes)

Product version:

11.0.50727.26

Original file name:

vs_ultimate.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\vs_ultimate.exe

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

1/25/2013 9:33:39 AM

Valid to:

4/25/2014 8:33:39 AM

Subject:

CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata

Compilation timestamp:

5/3/2013 12:57:00 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:eGFsZ9PExxb3sgBEEYCOMBPGD9TtONk4U+VJzEN:HxwgB7DOMBO5T0m4UGJz2

Entry address:

0x474B

Entry point:

E8, AC, 14, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 8B, 00, 81, 38, 63, 73, 6D, E0, 75, 2A, 83, 78, 10, 03, 75, 24, 8B, 40, 14, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 05, E8, 01, 15, 00, 00, 33, C0, 5D, C2, 04, 00, 68, 55, 47, 40, 00, FF, 15, 7C, 11, 40, 00, 33, C0, C3, 8B, FF, 55, 8B, EC, 57, BF, E8, 03, 00, 00, 57, FF, 15, 84, 11, 40, 00, FF, 75, 08, FF, 15, 80, 11, 40, 00, 81, C7, E8, 03, 00, 00, 81, FF, 60, EA, 00... 
[+]

Entropy:

7.4618

Code size:

312.5 KB (320,000 bytes)

The file vs_ultimate.exe has been discovered within the following program.

Microsoft Visual Studio Ultimate 2012 by Microsoft Corporation

Publisher's description - “In Microsoft Visual Studio Ultimate 2012, you’ll find the agile processes, sophisticated management tools, and robust testing infrastructure that are essential for creating fast results and delighted customers.”

www.microsoft.com/visualstudio/eng/products/visual-studio-overview

2% remove it

The file vs_ultimate.exe has been seen being distributed by the following 2 URLs.

http://download.msdn.microsoft.com/.../en_visual_studio_ultimate_2012_x86_web_installer_2599164.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.