home

vb_web.exe

Microsoft Visual Basic 2010 Express - ENU

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from download1806.mediafire.com.
Publisher:
Microsoft Corporation

Product:
Microsoft Visual Basic 2010 Express - ENU

Description:
Microsoft Visual Basic 2010 Express - ENU Setup

Version:
10.0.30319.01

MD5:
6ff1056b47a5b79d3ec65c5fd6f98243

SHA-1:
59497ac100f5011fe538dce7a3b8231bcd29d8d1

SHA-256:
177809ebd18647b696392a2444c1cac03d5c8c768b438e3c68c3822ab0ad1214

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:44:16 AM UTC  (today)

File size:
3.2 MB (3,338,056 bytes)

Product version:
10.0.30319.01

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
vb_web.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\vb_web.exe

File PE Metadata
Compilation timestamp:
12/21/2007 9:26:24 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
98304:s333aSeHhLC9CqlYrUFQmKRA+OnjK1IXD:sXaToBiwz9FW1Iz

Entry address:
0x63FF

Entry point:
87, F1, F2, 89, EA, C6, C4, 96, 80, C7, C8, 8D, 1D, BA, 7F, 9A, D5, C6, C7, AE, 0F, AF, D8, 0F, BF, ED, FE, C3, 86, D2, 56, 84, E2, 59, 8D, 35, E4, 81, 19, F0, F7, C5, EF, F2, 98, 6A, 86, DA, F2, 8D, 01, 2A, DA, F7, C2, 23, C4, 65, 12, 69, E8, 04, 6F, AC, 20, 8B, CB, 8A, F6, 85, F0, 72, 09, 85, C9, F2, C7, C2, 79, 1A, DA, F7, C7, C0, 97, F0, D2, 64, 85, D7, 0D, 3B, E5, 17, FE, B0, 05, E8, 95, 00, 00, 00, 71, 06, 81, C0, AD, 56, 52, 6B, C7, C1, 5D, C2, 02, 2F, 0F, BF, D7, B5, 1F, 81, C5, 04, EE, 00, 00, 4F...
 
[+]

Entropy:
7.9982  (probably packed)

Code size:
33.5 KB (34,304 bytes)

The file vb_web.exe has been seen being distributed by the following URL.

http://download1806.mediafire.com/hfksx0uu22cg/.../vb_web.exe

Scan vb_web.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.