home

vstor40_x64.exe

Microsoft Visual Studio 2010 Tools for Office Runtime (x64)

Microsoft Corporation

This is a setup and installation application. The file has been seen being downloaded from cdn.visualbee.net.
Publisher:
Microsoft Corporation

Product:
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)

Description:
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Setup

Version:
10.0.31119.00

MD5:
d64839bec48f764a44b6a0a7b0677594

SHA-1:
ab4e43f5278618f7822ac6c1b4f0347d4c71e950

SHA-256:
35039c915a1d22b934a51e35302e92ea81ec4225e7763e7f8a51d85835f3f34f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 2:39:56 AM UTC  (today)

File size:
3.4 MB (3,574,104 bytes)

Product version:
10.0.31119.00

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
vstor40_x64.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\vstor40_x64.exe

File PE Metadata
Compilation timestamp:
12/21/2007 8:26:24 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
98304:mSrRjfoxJ3PZV0+iDuEZ0NQj7/Q6bA6p3iCAYQ1tQy:dtjMJ3PZXsuEZge7/QeBp3c1G

Entry address:
0x63FF

Entry point:
88, FD, 0F, BF, DE, B7, CD, 81, FD, 56, DE, 00, 00, 78, 05, 0F, BE, D5, 8B, F9, 89, FB, 8D, 15, 70, EA, 82, 00, 69, E8, A9, 20, AD, 71, 0F, AF, FF, FE, C1, 86, E0, 84, D3, 24, 6D, E8, 40, 00, 00, 00, 8D, 05, 26, 82, 29, 9D, FF, C9, 86, E7, F2, 28, C4, B8, 27, 0F, 23, 20, F2, 89, D1, 88, FC, 38, DE, 84, F0, B5, 47, 8B, F2, 0F, B6, CC, 04, F9, 0F, AF, D3, 8D, 1E, 74, 06, 81, E8, 7A, 13, 83, 75, 86, CC, 8D, 0D, 86, D6, C3, 72, FE, C0, 03, EB, 88, F5, F2, 2B, C0, 0F, AF, D2, 0F, B7, D5, F3, 69, FA, 21, C4, 74...
 
[+]

Code size:
33.5 KB (34,304 bytes)

The file vstor40_x64.exe has been seen being distributed by the following URL.

http://cdn.visualbee.net/vstor40_x64.exe

Scan vstor40_x64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.