home

vs_enterprise_enu.exe

Visual Studio

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Visual Studio

Description:
Visual Studio Setup Bootstrapper

Version:
14.0.6023

MD5:
b1b6f15920cef294f83ccb5156b86724

SHA-1:
883b0bd773c71f69c6aebe6c15427f7b5c38c724

SHA-256:
775862af25026450f82c96bbca683fbdb6f183005c1ada9c0aa91286c0925eef

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/25/2024 4:46:36 PM UTC  (today)

File size:
208.9 KB (213,920 bytes)

Product version:
14.0.6023

Copyright:
Copyright (c) Microsoft Corporation. All rights reserved.

Original file name:
Bootstra.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\vs_enterprise_enu.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 11:12:45 PM

Valid to:
9/4/2016 11:12:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
6/29/2016 4:41:08 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:YxpU9jqR+1m+7oWAUllYbRLzXKYQ6aS7M4c:YxpU9jqRT+Mb2n

Entry address:
0x51FD

Entry point:
E8, A0, 14, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 33, D2, 8B, C2, 39, 45, 0C, 76, 11, 8B, 4D, 08, 66, 39, 11, 74, 09, 40, 83, C1, 02, 3B, 45, 0C, 72, F2, 5D, C3, 53, 8B, DC, 51, 51, 83, E4, F0, 83, C4, 04, 55, 8B, 6B, 04, 89, 6C, 24, 04, 8B, EC, 83, EC, 28, 56, 57, 8B, 7B, 0C, 33, C0, 0F, B7, 0F, 89, 4D, F8, 66, 3B, C1, 75, 08, 8B, 43, 08, E9, 5C, 02, 00, 00, A1, 28, BB, 41, 00, 83, F8, 01, 0F, 8E, F5, 00, 00, 00, 8B, C7, 25, FF, 0F, 00, 00, 6A, 02, 5E, 3D, F0, 0F, 00, 00, 77, 06, F3, 0F, 6F, 07, EB, 29...
 
[+]

Entropy:
6.0457

Code size:
65 KB (66,560 bytes)

The file vs_enterprise_enu.exe has been seen being distributed by the following 50 URLs.

blob:https://www.visualstudio.com/2dc2b9b5-a084-40a4-8d9b-34b6762b9a86

blob:https://www.visualstudio.com/8b22e320-30f5-4cff-a3a2-3757f456f325

blob:https://www.visualstudio.com/6ca94b37-8c9d-46f3-a560-90bf4bdc999d

blob:https://www.visualstudio.com/e1969bfe-c183-4525-bcd2-b9191914b311

blob:https://www.visualstudio.com/527c1ba2-86b8-44ab-ab76-e89155a80f92

blob:https://www.visualstudio.com/aa31c6b9-5238-4530-9ad6-14be0a6603ff

blob:https://www.visualstudio.com/455a8928-9abe-4ec9-9d6c-0560bb8da542

blob:https://www.visualstudio.com/1e8b848f-395a-4c1b-b9bc-feb46eca7791

blob:https://www.visualstudio.com/e63ed90b-29d7-4b9f-afb8-2aca41a10c83

blob:https://www.visualstudio.com/98fa7796-0b81-4646-8568-d741e84c3ac3

blob:https://www.visualstudio.com/eb0735e4-36a3-4c33-a715-65996f90ea55

blob:https://www.visualstudio.com/ef8e0cfa-28da-4da2-9b89-60ee9f5555a5

blob:https://www.visualstudio.com/f540b2a1-875a-4e52-a09a-7aab1972868d

blob:https://www.visualstudio.com/2d043818-2971-4d43-9b46-fd206270b176

blob:https://www.visualstudio.com/3abf9455-ba38-409f-ad7d-ff630e8c1194

blob:https://www.visualstudio.com/3e0c5470-bd92-4c8e-ab75-41063952972e

blob:https://www.visualstudio.com/092e7739-f137-4007-b760-6b27cac7c46a

blob:https://www.visualstudio.com/657b4b1f-70b9-4202-9305-56290feb3a69

blob:https://www.visualstudio.com/abba6803-9db8-4c3e-a750-95aa00c7fdf2

blob:https://www.visualstudio.com/524a7542-80f6-4d4e-9d6b-1db1ab3e26b7

blob:https://www.visualstudio.com/499a371e-cfb8-4f20-951d-62c652c0ffc5

blob:https://www.visualstudio.com/94bfb6ea-c0ef-45d0-9344-ac992621fe52

blob:https://www.visualstudio.com/dbfbb898-cd59-43dd-b604-b66e260cd6e5

blob:https://www.visualstudio.com/2a4febe3-2073-4313-90d7-d5f40d2e43aa

blob:https://www.visualstudio.com/2d039acf-a8ec-4ccc-8fc6-a672edac0709

blob:https://www.visualstudio.com/a4b5d6d6-5a5e-4c2a-b8c6-1d956e789b28

blob:https://www.visualstudio.com/73f85bb1-5c18-42d8-991f-d48640973ba4

blob:https://www.visualstudio.com/ade2a28c-70f1-4061-bc25-4086fd9f3930

blob:https://www.visualstudio.com/b1349a0f-f795-4113-a46f-e3a736fc4621

blob:https://www.visualstudio.com/858941c4-c412-4cd1-bd11-e4afd8f95f39

Latest 30 of 290 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.