home

vbasic_web.exe

Microsoft Visual Basic 2010 Express - DEU

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from online.uni-graz.at and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Visual Basic 2010 Express - DEU

Description:
Microsoft Visual Basic 2010 Express - DEU Setup

Version:
10.0.30319.01

MD5:
3318cefcd6ee605c6630ee49fb35bbbd

SHA-1:
a3a74153ea270f19cb92df76071ced80879d2522

SHA-256:
de62141f436f741a0fc03f0a72876481f7b212c1a55dabc78bcac11e56beac6e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/24/2024 2:00:17 AM UTC  (today)

File size:
3.1 MB (3,296,584 bytes)

Product version:
10.0.30319.01

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
vb_web.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\vbasic_web.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 11:40:29 PM

Valid to:
3/7/2011 11:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
12/21/2007 8:26:24 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
98304:oXGTdFnktVBJBgR1jG9b83Tb83LKnLO+xl88D:oWZFnk/GRZGh83TbQLKnq+xD

Entry address:
0x63FF

Entry point:
6A, 28, 68, E0, 25, 00, 01, E8, AD, 01, 00, 00, 66, 81, 3D, 00, 00, 00, 01, 4D, 5A, 75, 28, A1, 3C, 00, 00, 01, 81, B8, 00, 00, 00, 01, 50, 45, 00, 00, 75, 17, 0F, B7, 88, 18, 00, 00, 01, 81, F9, 0B, 01, 00, 00, 74, 21, 81, F9, 0B, 02, 00, 00, 74, 06, 83, 65, E4, 00, EB, 2A, 83, B8, 84, 00, 00, 01, 0E, 76, F1, 33, C9, 39, 88, F8, 00, 00, 01, EB, 11, 83, B8, 74, 00, 00, 01, 0E, 76, DE, 33, C9, 39, 88, E8, 00, 00, 01, 0F, 95, C1, 89, 4D, E4, 83, 65, FC, 00, 6A, 01, FF, 15, CC, 21, 00, 01, 59, 83, 0D, EC, D3...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
33.5 KB (34,304 bytes)

The file vbasic_web.exe has been seen being distributed by the following 12 URLs.

https://online.uni-graz.at/.../LV_TX.wbDisplaySemplanDoc?pStpSplDsNr=37193

http://www.capitalheartlaboratory.com/2 s4fdBasQZFUwJ2 gT32a8E0fZO_RXnBBM6Ywh8K5X_oiyUAJzp_KbT6cW5wf39uOublogwsc3lhOWYwUf6BCJ9j4hIvLHBHDnrBdtwOnofXmmk7oKjpTu FpYlyW0rb_gGvfNfqiSeV6mmj3V1mjlnAXS0n KXf2kO6rTPgVZMJA7 Me D51t5SFth4BlzGsLiHb7 UyuiXwWx2XeFOCbv4JSc9SNTuJ65BZ3OfrSh5t5SCizDdnz6IGMI_YRLsKT32_hd6cbU1GVHj7z4xuoGT20y8LAFvlzj1VezZnzqMXbnLkWtcZ5Nf3LDYb1XZTn7JkVjK XsgODALHdnacBtdYBijuTTADry5VaWrl0OcYqKcanldxDSeb7aiOggby6wP1dbS4sq9qpg26RPdjnFjt5aov2DEo _1M_XS_Qyn_Sb2F07ROt2A68riPEXHinT2Re4J8krg5ozHyUc73pTmFkDSswloDkdjP7iaqWVI1pgFkgoI8lXMozoRAC2JWQFfjlNKpi468_O4qIltFt2Pgnzc4ELYJwS2t9yf9F67r6Vhdw=-G1sAAMSWW0zstz0orXmCH6oKDjlgr3UJ3KLAcWjPERFT3piiDsWkk1cR3UgQjWRzM2VRfZjH7ZZTtIdJ7YszzsBb16ca gU=-e

http://gsf-cf.softonic.com/a3a/741/.../file?SD_used=0&channel=WEB&fdh=no&id_file=98125&instance=softonic_de&type=PROGRAM&Expires=1477253307&Signature=FmveLrw7wrdnVeeRQV74mmame4UhJm55237exsM68ix29KvO0-9876pC2dyBMnMvQipAn80Dtnad3LTStgxqCOX8I3aG2w-2VBe7CdWH8SGo3kLFQ-tb5SZjmNw9I-zxg9ABunjmN1cRGCcHN~Y7dsgkBGi9ddr093TA7g~fmqw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vb_web_2010.exe

http://visual-basic.soft32.com/get/file/id/.../?no_download_manager=true

http://download2147.mediafire.com/lvx4kuve4lxg/.../vb_web.exe

http://download1275.mediafire.com/tc3qsm1ncntg/.../vb_web.exe

http://download.microsoft.com/download/A/3/8/.../vb_web.exe

http://go.microsoft.com/.../?LinkID=188839&clcid=0x407

http://dl-6.one2up.com/onetwo/content/2013/4/.../7b6a03bef9563e19d86760f5617ee1c7.exe

http://go.microsoft.com/?linkid=9709933

http://download.microsoft.com/download/8/3/c/.../vb_web.exe

http://dl.cdn.chip.de/downloads/.../vbasic_web.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.