home

virtualdesktop-setup.x64.exe

Internet Explorer

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from download.vrdesktop.net.
Publisher:
Microsoft Corporation

Product:
Internet Explorer

Description:
Win32 Cabinet Self-Extractor

Version:
11.00.9600.16384 (winblue_rtm.130821-1623)

MD5:
72a8ec50e0380bd500cdde7227d9bd7c

SHA-1:
b1c1a81f94bffe2eb92496f55c5ae2eb84b288c7

SHA-256:
378c14ecdb2bdc48d7a13d35bd04d55b75bc2ea64da9ba51363423c23650c404

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:13:27 AM UTC  (today)

File size:
17.8 MB (18,665,984 bytes)

Product version:
11.00.9600.16384

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
WEXTRACT.EXE .MUI

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\virtualdesktop-setup.x64.exe

File PE Metadata
Compilation timestamp:
8/21/2013 11:01:48 PM

OS version:
6.3

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
393216:wPIGXUBC1O4Sgz2sfJAfX0E46m2x6y4x0yyDVak3csoVMXbMMzyn/vpVPLCb53IS:wPIGXICs4SgqsBA0AxB4f6T3cnSXbMMv

Entry address:
0x67CC

Entry point:
80, CF, 05, 52, 52, 85, C5, 71, 05, B8, 5B, 7C, 54, 47, 68, 9C, 95, 97, 00, 52, 48, 69, EE, 7D, C8, F8, C2, 86, E0, E8, 0A, 00, 00, 00, 0F, CA, 14, 38, 81, F6, E5, 1E, 00, 00, 0F, B6, FB, 81, FF, CC, 4D, 00, 00, 74, 0C, 48, 1B, D9, 69, E8, 75, 1E, FE, DB, 80, C3, 01, 8D, 1D, F4, 4F, 0A, 5C, 33, D2, 58, 80, E9, 30, BD, B6, C7, D6, F1, 3A, F4, 81, FB, 69, 5D, 00, 00, F6, DD, 88, E6, F6, DE, F7, D1, 68, 8D, 3F, 0D, 00, C6, C2, 0F, 5F, 81, EF, 32, E7, 00, 00, 74, 06, 0F, CA, 85, C5, FE, CE, 8D, 1F, 47, 81, EB...
 
[+]

Entropy:
7.9882  (probably packed)

Code size:
25.5 KB (26,112 bytes)

The file virtualdesktop-setup.x64.exe has been seen being distributed by the following URL.

http://download.vrdesktop.net/.../VirtualDesktop-Setup.x64.exe

Scan virtualdesktop-setup.x64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.