home

en_visual_studio_premium_2013_with_update_2_x86_web_installer_4238021.exe

Microsoft Visual Studio Premium 2013

Microsoft Corporation

This is the uninstaller utility registered in the Windows Control Panel for the program Microsoft Visual Studio Premium 2013 by Microsoft Corporation. This is installed with Microsoft Visual Studio Premium 2013. The file has been seen being downloaded from fp-pr1.ds.microsoft.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Visual Studio Premium 2013

Version:
12.0.30501

MD5:
c093eb4f9fb1d5adb253bb7499a68c1f

SHA-1:
5ac315c4c607845d9386a8366ef2c9223be104b4

SHA-256:
397f19e225588d77cd5a18401d9944925d342c2116436c10baa385ff8049b346

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 4:11:56 PM UTC  (today)

File size:
1.2 MB (1,231,296 bytes)

Product version:
12.0.30501

Copyright:
Copyright (c) Microsoft Corporation. All rights reserved.

Original file name:
vs_premium.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\programmes\en_visual_studio_premium_2013_with_update_2_x86_web_installer_4238021.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/22/2014 1:39:00 PM

Valid to:
7/22/2015 1:39:00 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

File PE Metadata
Compilation timestamp:
4/29/2014 2:27:40 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:iLOsDFncLmKDZOSzOwB2/9FZgyZ8ZVnYxMNS3y9n:QEzOx/PuVZ1YxMs3yB

Entry address:
0x27E1E

Entry point:
E8, 0C, 1F, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 80, 00, 00, 00, 72, 0E, 83, 3D, E8, 6E, 45, 00, 00, 74, 05, E9, 6E, 1F, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74, 06, F3, AB, 85, D2, 74, 0A, 88, 07, 83, C7, 01, 83, EA, 01, 75...
 
[+]

Entropy:
7.5199

Code size:
227 KB (232,448 bytes)

Program Uninstaller
Program name:
Microsoft Visual Studio Premium 2013

Display publisher:
Microsoft Corporation

Display version:
12.0.30501

Uninstall string:
"C:\ProgramData\Package Cache\{ab0b658d-64b4-47db-bf34-8303b96f4eae}\vs_premium.exe" /uninstall


The file en_visual_studio_premium_2013_with_update_2_x86_web_installer_4238021.exe has been discovered within the following program.

Microsoft Visual Studio Premium 2013  by Microsoft Corporation
2% remove it
 
Powered by Should I Remove It?

The file en_visual_studio_premium_2013_with_update_2_x86_web_installer_4238021.exe has been seen being distributed by the following 9 URLs.

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=1073207138&Dir=1&Mode=0&Off=0&TS=E246E3B9-4729-40BA-9FA2-B198572EE8C4&CVN=5,0,0,32

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=1242062599&Dir=1&Mode=0&Off=0&TS=536211DD-75F8-4774-A859-C9F78887C043&CVN=5,0,0,32

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=1693720474&Dir=1&Mode=0&Off=0&TS=79DEF537-F0F4-494E-AC27-92026FC36101&CVN=5,0,0,32

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=251586413&Dir=1&Mode=0&Off=0&TS=8DF401F0-CC88-4880-93E9-CC3F2319CB23&CVN=5,0,0,32

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=1683303857&Dir=1&Mode=0&Off=0&TS=B570035F-A098-4D57-A187-DDFFBB937094&CVN=5,0,0,32

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=1431675557&Dir=1&Mode=0&Off=0&TS=CA238DED-C0E1-4534-B19E-BECECF1C2D5A&CVN=5,0,0,32

http://download.microsoft.com/download/D/9/5/.../vs_premium.exe

http://go.microsoft.com/.../?LinkID=386604&clcid=0x409

https://fp-pr1.ds.microsoft.com/.../FileTransfer.dll?Cmd=1&MN=1594114340&Dir=1&Mode=0&Off=0&TS=4608F71E-2017-44A5-8C6C-A7D84D83C8DA&CVN=5,0,0,32

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.