vs_installershell.exe
Summary
Microsoft Visual Studio Installer
vs_installershell.exe is the 3037th most commonly executed Windows program in EchoTrail's dataset, observed 91 times across enterprise environments. It typically runs from C:\Program Files (x86)\Microsoft Visual Studio\Installer and it is most often launched by cmd.exe.
3037th
most commonly executed Windows program
91
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\Microsoft Visual Studio\Installer100%
Top Hashes (SHA256)
- fc493682e19820992ca359f59f4306ec4f25da576ade9eff4fffa70dc5faac3c57.81%
- 908a525991d09042ea0ee0adb59dfbda1b24d264ec3a1bade0b5cbb4939d732428.12%
- b4361410f88d2e8a053c7aff4cb180c7c017674def4e38100e7dfe44fe49781e14.06%
Process Ancestry
Top Grandparents
- vs_installershell.exe58.14%
- vs_installer.exe23.26%
- runonce.exe4.65%
- devenv.exe2.33%
- explorer.exe2.33%
Top Parents
- cmd.exe48.35%
- vs_installershell.exe36.26%
- vs_installer.exe14.29%
- runonce.exe1.1%
Top Children
- cmd.exe27.85%
- fsutil.exe26.48%
- WMIC.exe21.92%
- vs_installershell.exe15.07%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about vs_installershell.exe
Rocky answers questions about vs_installershell.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.