Reason Labs

ucrtbased.dll

Microsoft C Runtime Library

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Microsoft® C Runtime Library

Version:
10.0.10586.15 (th2_release.151119-1817)

MD5:
219a8ee7b2da42376e833e7261bdef88

SHA-1:
5f026fe9f0733979df5e6f2f0ad44616e459c68d

SHA-256:
c28a8c7a35d22ff638cd035fbbe2e22694f007650f619aa6ef2f744ae3753990

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/16/2018 1:42:42 PM UTC  (today)

File size:
1.7 MB (1,804,808 bytes)

Product version:
10.0.10586.15

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
ucrtbase.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\enterprisewdk_dev14_release_th2_release_10586 \Program Files\windows kits\10\bin\arm64\ucrt\ucrtbased.dll

Digital Signature
Authority:
Microsoft Corporation

Valid from:
12/19/2014 10:31:07 AM

Valid to:
3/19/2016 11:31:07 AM

Subject:
CN=Microsoft Windows Kits Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000009550BA8399915A8381000000000095

File PE Metadata
Compilation timestamp:
11/19/2015 8:27:24 PM

OS version:
10.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
12.10

CTPH (ssdeep):
24576:KCb5vZYlVoFto0PZMuOpKek49ehBb8GmTrA3vmQvIZwayL4Hs:pbBJdP40hBb8GmTrds

Entry address:
0x7C5E0

Entry point:
FD, 7B, BD, A9, FD, 03, 00, 91, E0, 13, 00, F9, E1, 13, 00, B9, E2, 0F, 00, F9, E8, 13, 40, B9, 1F, 05, 00, 71, 41, 00, 00, 54, 40, 4C, 04, 94, E2, 0F, 40, F9, E1, 13, 40, B9, E0, 13, 40, F9, 7A, FF, FF, 97, E0, 17, 00, B9, E0, 17, 40, B9, FD, 7B, C3, A8, C0, 03, 5F, D6, 00, 00, 00, 00, FD, 7B, BD, A9, FD, 03, 00, 91, A0, 13, 00, F9, A0, 17, 00, BD, 08, 00, 80, 52, A8, 23, 00, 79, FC, 0E, 00, 94, A8, 13, 40, F9, A8, 0F, 00, F9, AF, 0F, 40, F9, 28, 0B, 00, 90, 08, 99, 42, F9, 00, 01, 3F, D6, A0, 17, 40, BD...
 
[+]

Entropy:
6.0743

Code size:
1.7 MB (1,738,752 bytes)

There are numerous known versions of ucrtbased.dll by Microsoft Corporation.

Clean
ucrtbased.dll  10.0.14951.1001 (rs_prerelease_prs.161015-0140)  (6197b5a1cd1be364c5cf794cf2ce15c76cdd675c)

Clean
ucrtbased.dll  10.0.14951.1001 (rs_prerelease_prs.161015-0140)  (608642a8c58698adb449e438e38024c370958720)

Clean
ucrtbased.dll  10.0.14393.795 (rs1_release_sec.170105-1850)  (af4474233fd576cd0bb56331a391bc733b1a087c)

Clean
ucrtbased.dll  10.0.14393.795 (rs1_release_sec.170105-1850)  (50d59b7ea18dd512060a32202fbdb4334814c2de)

Clean
ucrtbased.dll  10.0.14393.33 (rs1_release_sec.160727-1952)  (e4d7e3c4ece927ec179497211cf570b13312e8c0)

Clean
ucrtbased.dll  10.0.14393.33 (rs1_release_sec.160727-1952)  (48b9daa1dfdeffcea170e1260a8488bc23ee20d9)

Clean
ucrtbased.dll  10.0.14393.33 (rs1_release_sec.160727-1952)  (ece5ea567cca358aa17703f78de39ca6b87123d8)

Clean
ucrtbased.dll  10.0.14393.33 (rs1_release_sec.160727-1952)  (772634bb5089f83181c5e30501e7c6f04b842274)

Clean
ucrtbased.dll  10.0.14393.33 (rs1_release_sec.160727-1952)  (c34c2ced56512e6fb46f98a8c421a842f7d0945d)

Clean
ucrtbased.dll  10.0.14393.33 (rs1_release_sec.160727-1952)  (b5de9e2e0e08a13c7849df41d916509810d8655c)

Clean
ucrtbased.dll  10.0.14393.33 (rs1_release_sec.160727-1952)  (2f926451983a2890f5d68f5b5c947ef66d6bb449)

Clean
ucrtbased.dll  10.0.14393.33 (rs1_release_sec.160727-1952)  (7c6d902c6dc033ad1d3db494fe0be1a3428b30ee)

Clean
ucrtbased.dll  10.0.14388.0 (rs1_release.160709-1635)  (1e0cc7833e19334385a9e793fc19ff01f0f234b3)

Clean
ucrtbased.dll  10.0.14388.0 (rs1_release.160709-1635)  (2248ffd6a4801ebbd545a3df973ee4edc69ddae3)

Clean
ucrtbased.dll  10.0.10240.16384 (th1.150709-1700)  (bad7c28703742df08949eaedb9573f6e988eacc5)

Clean
ntdll.dll  (3a2bae6036ff2d23309a7b93ab562494c50df236)

Clean
rsaenh.dll  (a1c8e3e6ee44dcb68752d44b3b6f4ecce89c388d)

Clean
bcryptprimitives.dll  (f76bb1b4d0ad47f68f8381281f87839304c252ea)

Clean
sqmapi.dll  (2fcd13bd14c631279ce4c5fd96b448d4dded5b11)

Clean
wuapi.dll  (46eed9639adc4e9cc6e2f5db5edf992b031928d8)

Clean
wuauclt.exe  (883d5312d7f6bf03ab56761ff110784e4ba2edec)

Clean
wups2.dll  (9a68d7eed00c944a51c8c53caeb3c9e23db6106b)

Clean
fveapi.dll  (1700a976565404226ff0704e4e2d9d8410bc6721)

Clean
wuaueng.dll  (64a55a014a2de34f86f17cfa31c727e270fcd83f)

Clean
dssenh.dll  (e395683841b965d1f224413f2e3339091f51add8)

Clean
dxwebsetup.exe  (3c8243734cf43dd7bb2332ba05b58ccacfa4377c)

Clean
portqryui.exe  (aa59ac1f61e87fd08ae371743b9aa12e16cc9d9a)

Clean
acpi.sys  (54fb26c69829d3f1d0774d4e608327ffefa34d76)

Clean
atapi.sys  (954d59eaeadc36cb19a224a5dddfa1edcfdc49ce)

Clean
clfs.sys  (df95d1fe3fcc8417da0ae9479612b7be398b36a4)

Clean
cng.sys  (c0f3a5bc240d2d26fa7e23bf27dc5a4876ff5296)

Download Reason Core Security - Powerful anti-malware software