home

imqu.app.vshost.exe

Microsoft Visual Studio 2013

Microsoft Corporation

This is a setup program which is used to install the application. This is installed with multiple programs including Microsoft Software. The file has been seen being downloaded from download1633.mediafire.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Visual Studio® 2013

Description:
vshost32.exe

Version:
12.0.21005.1

MD5:
dbd8bc6438e1011ca1b796c7a9c78d78

SHA-1:
9184d63d8335efecf3ea02845fd1f027e7edaa0a

SHA-256:
280fdcaf69c8f7145446c8bc342fa4a0c7ff0abfed111c5f72b520f479fde785

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
6/19/2025 10:46:46 PM UTC  (today)

File size:
23.7 KB (24,224 bytes)

Product version:
12.0.21005.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
vshost32.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/24/2013 11:33:39 PM

Valid to:
4/25/2014 12:33:39 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
10/5/2013 8:05:05 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:G3LPZZWmBWM71q//0GftpBj/NH3HRN7o+lKxCnj:IrBRE8ixNHoRO

Entry address:
0x305E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
4.5 KB (4,608 bytes)

The file imqu.app.vshost.exe has been discovered within the following programs.

MegaZipper  by Fedder Corporation Limited
54% remove it
Microsoft Software  by Microsoft Corporation
2% remove it
 
Powered by Should I Remove It?

The file imqu.app.vshost.exe has been seen being distributed by the following 3 URLs.

http://download1633.mediafire.com/5bq90gkniaqg/.../DarkRP Job Generator.vshost.exe

https://doc-08-5s-docs.googleusercontent.com/docs/securesc/fv2mooik2h8t6cf0akhj53oqmm1r9cip/l7urqf1uv25gr3m2egpfvc3ddcqklq6a/1465365600000/01436485459148413914/.../0B3M7Sgvu5GIbVEx5TWJNRERhMkk?e=download

ftp://tsuts.tskoli.is/tímaverkefni_6_EÞ/tímaverkefni_6_EÞ/bin/.../tímaverkefni_6_EÞ.vshost.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.