vcredist_x86.exe
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 file version info
Program on Windows 3 known copies with hashes
Is it the real vcredist_x86.exe?
C:\ProgramData\Package Cache\{00000000-0000-0000-0000-000000000000}\C:\ProgramData\Package Cache\00000000-0000-0000-0000-000000000000\packages\vcRedistD12\1033\3 known copies
12.0.21005.1 · C:\ProgramData\Package Cache\{00000000-0000-0000-0000-000000000000}\vcredist_x86.exe · signed by Microsoft Corporation
52a0948253c8120a6e1f96f717978270bbd2d07c0ce46c5f2b8b8ffa7a96749412.0.21005.1 · C:\ProgramData\Package Cache\00000000-0000-0000-0000-000000000000\packages\vcRedistD12\1033\vcredist_x86.exe · signed by Microsoft Corporation
bbc26aca42cd311a0e1ea1356852f061d863af047f1891ac9952ab7e7cb8e04f11.0.61030.0 · C:\ProgramData\Package Cache\{00000000-0000-0000-0000-000000000000}\vcredist_x86.exe · signed by Microsoft Corporation
4670e1ecb4b136d81148401cd71737ccf1376c772fa513a3e176b8ce8b8f982dFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.