home

vbsetup.exe

Microsoft Visual Basic 2008 Express Edition - ENU

Microsoft Corporation

This is a setup and installation application. This is installed with multiple programs including MSDN Library for Microsoft Visual Studio 2008 Express Editions and Microsoft Visual Basic 2008 Express Edition - ENU. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Visual Basic 2008 Express Edition - ENU

Description:
Microsoft Visual Basic 2008 Express Edition - ENU Setup

Version:
9.0.21022.08

MD5:
1027dc53e8cb3608a32322257bd8ac4c

SHA-1:
d3e533a1cc7a1be8afa42b23f76d8661e18a8b6d

SHA-256:
6de6f9483989f5491eb2a210b21987730eb1d3f0a10f853945d0de16584a8419

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/25/2024 12:29:08 AM UTC  (today)

File size:
2.6 MB (2,701,304 bytes)

Product version:
9.0.21022.08

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
vb_web.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\vbsetup.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
8/23/2007 2:23:13 AM

Valid to:
2/23/2009 1:33:13 AM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
Compilation timestamp:
6/1/2005 6:46:51 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:YQWrr0h6AOzhTQN5KDOZpLREYmX0ZZbvVoKRoXPShkp5tU:Yvr0h68N5rRrmXarbR/hkp5G

Entry address:
0x5972

Entry point:
E9, 26, FA, FF, FF, 8B, 44, 24, 04, EB, 17, 80, F9, 3B, 75, 0C, 84, C9, 74, 14, 40, 8A, 08, 80, F9, 0A, 75, F4, 80, 38, 20, 7F, 09, 40, 8A, 08, 84, C9, 75, E3, 33, C0, C2, 04, 00, 8B, 4C, 24, 04, EB, 05, 84, C0, 74, 11, 41, 8A, 01, 3C, 0A, 75, F5, 41, 51, E8, C0, FF, FF, FF, C2, 04, 00, 33, C0, EB, F9, 53, 8B, 5C, 24, 0C, 56, 8B, 74, 24, 0C, 57, C6, 03, 00, EB, 0C, 56, E8, CB, FF, FF, FF, 8B, F0, 85, F6, 74, 2D, 80, 3E, 5B, 75, EF, 8D, 46, 01, EB, 0A, 84, C9, 74, 1F, 80, F9, 20, 7E, 0A, 40, 8A, 08, 80, F9...
 
[+]

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
30.5 KB (31,232 bytes)

The file vbsetup.exe has been discovered within the following programs.

Microsoft Visual Basic 2008 Express Edition - ENU  by Microsoft Corporation
Publisher's description - “Express Edition products are designed for hobbyists, students, and novice developers. As such, they lack the full breadth of features found in higher-end Visual Studio.”
www.microsoft.com/visualstudio/eng/products/visual-studio-express-products
5% remove it
MSDN Library for Microsoft Visual Studio 2008 Express Editions  by Microsoft Corporation
8% remove it
 
Powered by Should I Remove It?

The file vbsetup.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1464039303&Signature=SPI7zK3SNKzO7snQxm2dBb8GQUpOz~sjfawnxksDlpWHlQSq1~30KKYq-NKMBtBuvEy~MkjWet1m0T3hqd052s3sZVPuSFYi6Ku2ZOkKm8xzRCZ4Oaq8zyVBQZoKAoMCwd98mBxdWuEotVsRY5H25wK6nbFdvLcKGTroCJu6pqI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1476848408&Signature=CVLAswdgHBmvuyiX-SFzR7~nqe1aFZQ6ILBSFK4pedrFb3Nk3eEdnKZqynpuC3IgqNBsw5FUGKYXPL1ZM28BLPjrvRbuR16AjpIq8d-KDLdJfmA3zvZ4sXki7gmMe7lK8Qy4lLaADdxtiIHa6sCNM~OmMjqCkPjsH1AkWmFMKBA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1422957933&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=V~~Gw8HOeRF9uvtdCBxh6foMUFzbuQn1ZZtsY6yB-vjD3v6NMm847eIasmF3htZyFFLQcxW5s2PrcTb1jVGzvZgZL52uopozDQ2Dq9dIxGkS7dKtK6-5R0CaoPAHPP5qoNQ~LXDludHLvSB93NvLihq0hO58EkdjvFY53xuBNys_&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1478445238&Signature=DYlfdTBr9z2Y~hmoTBsJnvnoU5XLtmjAQZE8jq28DaiWG~4sc6b79ZNJC~0LMyHhL2RD58qf1LHZObzj5UJGOEE1Wkaw-kLKdzLH44CsqxSb85Bx7tCVr4Fi7VRoeIHa5Zg8QKWgt6e1ncg48QyR0D5Io6D34DcVchArjo6uBpo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://microsoft-visual-basic.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6aOoaGilpw=

http://www.towerbitscenter.com/h04zp7YTxqzlGczGKNltaIvgPnheByowVy_ZrCH3TmUyByc3sGu8n4eGEvMgTuYz1R5FWjsJhivIHaXV1jRmMF4dx82D3Yuumm_i46xFDEvYrdffMyuuC47oydgduIt3la33xvrnOsbdU3TsxalysWzJmp61bQBpmFxgqBbpvR7Elw0fneVedkCQfj1YxonCiUJMtEArC0 4JJGgf tofa6URAcIXzZPiHtOjcIOQz qDmyxk6E=-G1wAAESn7rxYlwBj 05h9TZRjeCQA_a3LglZMDl8roiR9Y0VrSVGTlklemGjoNilposh7qpip5WsPLpMjxjTczCIL28 79X4Ew==

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1470646863&Signature=PHNcyLeNpHDuSLbRR0Fm1~HRiqJnQBfnpLqtXQ0qCbDT0sdLWKuEOBLe~tt9u4ek3oIHZtuPsEwx~U~lrbKBefIJAbZnfgxHcfc1wdHOLGERiwMEPrVYoazqEgn52bxRDywNKNtrYvO6NK0GQWvApVVCG9ZZBTizCfRaWiS81tQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1450153978&Signature=P7R7yTwvmxBSad6yOvYvkKTvG3bceZqJFsp4vb6TCt2Oqosc19DCL3jYqurfffyxjuAjQPO2l5q~MO9GI5JnzeQtzRDYO3TQ9Z1dRZWR-Bt~Xn0Zd--jp3P8lxUmXJjkHedqlOf6AomxLCHXXsf2iL2Y0QbxgXe2BGvxifACKiE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

https://dw.uptodown.com/dwn/CrCI9rgoYw2AT9SZjzGZtOpACII-Ux7GjiA9yGqnaFaFhuMe3q6nsLO84_G4Mw1S7TL7KtBDuq7kR-eOODtT6sDWt2O6KvSSpgdB77sevG1r56N3F7jz8w6ZTAuZeG3L/WC6CyOuBBDch1clHIxm6Nc1WCc-BUFxBijkwToWrLxKf0kasz6W-chlUFzI1AelPhZ8iPch2_FrW_tkvrNEcbsteeLYnCvrSh4uRkG7UN7ALpMOQqcSRy_16xtPX5dSF/lwjOHcBIgoFviasL9Tpp_XdHKhlE5KNAa5WHJWATd7mMbZe75NvDdFEk77BbIUyQbT56gse234h0gOUItZaGvuRufNXVlITj4pq5Wzp2ixIXJCeDfPR7uUadA7bzRi7s/.../

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1440942545&Signature=BBQYo106CbrL-DnqbYmj6pD9YUB0Ms8F41IsUZdmjNefHvsK2p3mecn7alB~qtEk0vD8q3fH6RCZLWenBnoUULHr8Lbg0Z6TjoOs9Vuj-VAAfcgYvK395T0IDGS7Ben9os1kwu01Irgui07NQg06~P6aLrRDAIWIPDczNeddQuU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1479477433&Signature=TJ5xi4yWnmUPGvj7FB94bN~JDeZyCt-7cGOJvIN~m0Y0mlRbk9H8wFizz8cSoKVyrdmlW8AFp6giOQ-SJFDXycKBQH9tOQrCZ1DAi8N15292TsnijMv357N2N3kE7S4lQ63ZT2Snf3sj3dTCs260YjX5ex7DXGa6g4Uw7e1OkF4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1450152018&Signature=GsIU~2JPaZLUHUTuT54KTlwrMGj0EW0O1PnqogApPDEEWunKoMvtiuizHog5NtwIL~c-66AS6H-zIVQYNBQKywHQRRTjJn2EQoG1mlcdzpd-PEVZeYuPG1bLb9IPsb406sDZreVpJ7aE-7OzLBPU-r4dj4GXmVXMzHGuZ~oThqs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1446817564&Signature=hWSG5OO8WswSvE11QRfvXDu08Szf6-zw4yYWgODFUFNAuBCL~mDBfj-fIM9pBjMx7nsYfBb4-seaNiRW8F8WF~Kac87HnSshkZPAFRfSMPha1xMPj4JwtATZlRCwmyFtom5gcnL4kLROmd4iLdxPKkOpHBanX~5QTd-G5qQKFzI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

https://dw.uptodown.com/dwn/e2x0WV_7lG3rhgr4WT3957Tc7I4iePuMXdfMx3pZPFdDPliZtuQ7aWHK0xVQ5F5QWbgwpuwJ3ydVC_UWoMcRStPUjPVNHn8kdkDR_vCSYg3XwLNd5zL0SWGa5vC_dy8W/IBV-U5htvtJq9xjvKPA56crFubjvBuukqI0_IJZhcUni8SCpyZRImjRVW20VefWCcAI6txSdM1VFTLWPalh1FahKlJ8kNqjujQJcUg0Vo0eLZPIZGPKpjfDXFJFlEK9Z/2QeXuopEUegykQQp9fV9CYTw6miJ-VqK-fY6WQkSThUw4oIilcPsCGJFaOyaKi9gCuJAQMrAmEkzKW-v6XdVXzBUHgbdk6JpS-CcdtLULilpd28p4JN8jaqwZXKOUcTK/.../

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1476076402&Signature=Ogz4t4Ah-4cQ1ViQQxhG8m-2KgHR3XHJpT0Kqw5T1oBZlFwOwjP8ArlbrKlOFYOdhfqis1pgsO-xOVhtHpD0OAaOLoG9~hQIKwETRIC5ungYkSvkMgC7AbPE7uOP9tB~JP9b-dolb43aJZ5nGkpHEI19-iwNywgRvnE1jVQHwuw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1475710433&Signature=C~Ndyx6MjoJI4fFn1i1WQbbuBghxw4nxWdnxD-~MZMA9K2xon-AVtMUYMaRiRl0lmXtPoriaISV~R~N4-CmznEGqvvxf-IAYDJfCYYqT0ZYqG6vLLx4Lpo7oK0w~x90D0Dmt8AnydR1qo5zbImQm2Y6OHneWEoQZLn0-HhvItsk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1450120012&Signature=Lo1SQy1LeJ5iCdQDSf4zbNHhocm~VR2FhizSi34giNno2Mzjsva~4yAAO608qbV9vlTUB~CDEImZirL4RxmfNLa3HjpwLfeL8ntR7SuzHKA9GV-3TYMounNSNiaf59fM4DdRjEmwkvrlpMHCEDX2BHGL50ntwOeHFw3RRo62Kpc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1475033178&Signature=Bx~FMRLYw2lEnbQ4109vQDnAnGlMEa21JN~8cYDyxJ6UmHxa9X3WjipZmWan5tyTYz5kactcdSsS81h6i9hiRhFCzq4g7R8ZqJbAVgGyC0s55SOK1K~Z5hwIEcxrsp5Qj~-LfOeZcDgGO6jq-buBqRhEIbDdaEPDX4KLyqI-fXY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1461960641&Signature=W3rzDdcuKSaEyjc5vlj73AJIFHyzMThEDSByXQQ9FD~YXZDtnO-vv7J6bkJCwqaS5FsX~RXwhqftMiuNWAntqB7eFfNBWy89Y0KSl2FR2ys7IGQIqiP7J558Q2idQ-v-2h0JxSq6RYfwTforSXLnzL7BfV~8Pnn6Z8ZuN9~TLkY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://microsoft-visual-basic.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6eOpKSlkZw=

https://dw.uptodown.com/dwn/GfsjDPJp6aOJz42aOX9wi8BNhscFtONsPl-29903RBmbFdlR-GlMJ_6ADl4FR79utcZv-d1v-YUhg1O6vYbGlMmeQl_i6E_H9t0IStvek1SsmASRnFi84lM0cA_XZNJl/WxYvssAw4XCno3IqxAZRbWLkN19lVmNpTm6Bh7Rzjwf1AJtgwGo_-ROpkwXZPi4dU1PRoHnjEwG-Uk5GHO4HkMgnpLMiUyMz6NjXBkQYyloBxqRT7HB1hnJA4AgjC0xh/ikGs4SythcL3mR9XjdDQoWgJFpisNCgvDzEvNQ91saehbZg-0LdAWXMcRNQ78I8vDjb4N4-atnVR0VNo3vj5fJ_9Og0Kk2G2gN6yrMpNB8k_i7PY-FXaNqWRvXw4AaEH/.../

http://global-shared-files-lw.softonic.com/d3e/533/.../vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1478286551&Signature=BAj2S5PfXWs3B8ZbAqQo3uR2BoQYsI8qWkzjMARITFjTKfQnmZjkhDHM3YdhCrSSZhoyc7ohgAxSiIME1A06rSHVIdDizOcBO4lJbxwZ0d4ondX40MFF3qLmoB5JFWP-Y~tH7aDBtzZMx84yiXGltJovVPVjdhCX3dtLSsXYFv0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1431839710&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=iPucdkuBu2EcSJ1FtXh4VXxbDmHOLmgIu93nVlvDaxKDwbIpQGBf8M4o~sfYv8ssCz2aKbaIpIPcTgp5iCq7Ncy2xOnFfvlvmaBq49kCcYm4nKjoAaBKFwi6J9wplbxYOSwGkkZItARdmtjRBN~lhy6hUqn8gOWZvWEDIsfpod4_&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1478746131&Signature=L1r~0yKk5rzudAlxRt3fJyhTlg~XFwWUZ3trRJmA9Yd151ShslrjK1aYeHMiDbldfHFcTZ8aNSYvp9QjkZTrFJmRR-DV2yN5NvN9OY4a8WEHoiM78nXF~~6t8iwt6GRYJ4aOSXmk72CAaVtjGWdanD6SvXEnHFi7kkzZ3BEKk8k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vbsetup.exe

http://gsf-cf.softonic.com/d3e/533/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&Expires=1429897861&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=GdL-6l2Y5JZ9DfRt7mf4BZaChq9uEpWCLA4MH0gIrRAXe4YEHOdauctk3ceTCA5AKNEcjHSU86dgVC2uLRtFYWt0y1TxbuNlp3rFQe6NqXIN9Hr-Ko3JfNZmXoBhkseROriu3X0JcHlE9vGHD7mdS3QFwd856Id8L4qzcXEb1Mk_&filename=vbsetup.exe

https://dw.uptodown.com/dwn/uAzF4p9XDZeE39FYrpcwLrTYBvWxJLmHGVkjDjLCgiAsUrNqttnfzbomQhINXarkh6hey-tMu8Imwd21Dw5VaMxdA8OxFhQ-VbDgNd4JsfxjWlj8mKc7V4Lrrl97p5zu/Khm26RBkNlpOlW2pOh2iNXN5vXJVFPmxMCn-x0b9DyM5ggFSO6RYTsSOQoTjy7wnye5J0Pym5nLAvuhSqxy00TIEnMbxvm8TUBlqFkTB2YkhOuGf0QGUO3uNuOgYt1Ho/U00SrETJdIUQGpOaAW28DvhMnqEpAlZRosLPMDqVlcK15sSrT1kR7Gwo8AKSPxcmoHcLV5ujidrvkerXT4ajghYtlO0Sz1_4ML7OLuN0qAxraf_YjpzrqTxKeLXY8ZhD/.../

http://global-shared-files-l3.softonic.com/d3e/533/.../file?nvb=20150122031041&nva=20150122151141&token=05fb4d884f664c6aff1a4&SD_used=0&channel=WEB&fdh=no&id_file=52533&instance=softonic_en&type=PROGRAM&filename=vbsetup.exe

http://microsoft-visual-basic.hu.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6aOpKKlmJY=

https://dw.uptodown.com/dwn/IjihV7voVqLsqVYsHyyaICKetfJb8QBbclccohsKnkitIgW_tyf93i2kv4hbm8VdHS6SEtUTnyejvmec9gtdq3oOs9M4EUI2-jz8Su20tp855yLfXj9t1TLR6-V-WcLb/OcJix79Vy42Ius-slCMVPA_XhkvozzpRuh6S1lazQabA9pS-0FAg4a6tsUmnOoo3Uzu_40XUv2A1BS9FUvgrzBVBfJSyCAO2LntHt49CsCwadq_1Qd8GtXxCIwli0w38/GLs9IscEeSddgNwjCLz-HleXH-GKeU6qRP5u-CY9VJc74HL6MCUS1Sw0RwGOxPi639ItKIjNb_ixsVmYbrmYY8wQOxa4f0wo0zGCDCP373WQYfrv5h6kNRT31wteymTf/.../

Latest 30 of 645 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.