home

vs_professional.exe

Microsoft Visual Studio 11 Professional Beta

Microsoft Corporation

This is a setup program which is used to install the application. This is installed with Microsoft Visual Studio 11 Professional Beta. The file has been seen being downloaded from go.microsoft.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Visual Studio 11 Professional Beta

Version:
11.0.50214

MD5:
829679449bc24bdaefb11613f44cbaab

SHA-1:
60cd88e8bb70e37747b01a333038d7a34de35bbe

SHA-256:
4911d19a52d8613f11f50db80b0913c642d5b4904d1632cd662b95937319ef99

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 10:40:11 AM UTC  (today)

File size:
1.2 MB (1,218,512 bytes)

Product version:
11.0.50214

Copyright:
Copyright (c) Microsoft Corporation. All rights reserved.

Original file name:
vs_professional.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\vs_professional.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
11/1/2011 11:39:17 PM

Valid to:
2/1/2013 11:49:17 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
611AF5EA00000000006A

File PE Metadata
Compilation timestamp:
1/12/2012 2:28:07 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:ebFgYIbjpL1jzMdnxDTVIb2X8BZcYc+bnUtZ:3YIXpdzMvSb+4ZjcOU3

Entry address:
0x438B

Entry point:
E8, AC, 14, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 8B, 00, 81, 38, 63, 73, 6D, E0, 75, 2A, 83, 78, 10, 03, 75, 24, 8B, 40, 14, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 05, E8, 01, 15, 00, 00, 33, C0, 5D, C2, 04, 00, 68, 95, 43, 40, 00, FF, 15, A0, 11, 40, 00, 33, C0, C3, 8B, FF, 55, 8B, EC, 57, BF, E8, 03, 00, 00, 57, FF, 15, A8, 11, 40, 00, FF, 75, 08, FF, 15, A4, 11, 40, 00, 81, C7, E8, 03, 00, 00, 81, FF, 60, EA, 00...
 
[+]

Code size:
288.5 KB (295,424 bytes)

The file vs_professional.exe has been discovered within the following program.

Microsoft Visual Studio 11 Professional Beta  by Microsoft Corporation
19% remove it
 
Powered by Should I Remove It?

The file vs_professional.exe has been seen being distributed by the following 5 URLs.

http://go.microsoft.com/.../?linkid=237581&clcid=0x409

http://go.microsoft.com/?linkid=9801131

http://www.microsoft.com/click/.../Redirect2.ashx?CR_EAC=300039347&CR_CC=200069604&CR_ID=21c9be8c-d5e7-46d3-a6fa-52789ea553ec

http://click.email.microsoftemail.com/?qs=607b90b14ed9b2732a4de28ed3499e072dddd182708248f2575bdb9791538ccc48de22f261ba10d9ead24cc63f21b87a

http://download.microsoft.com/download/B/F/1/.../vs_professional.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.