home

msvcp71.dll

MD5:
1f956b26c1e39a632611ed6ef8a8a52b

SHA-1:
557cd13074d26f992ab4cb5530eb153e2b91deea

SHA-256:
c7007054fd6f82ed52c1c193c72ad727f4e24b56676ea5adac78bd544782d727

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 8:58:21 PM UTC  (today)

File size:
103 KB (105,472 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Documents and Settings\{user}\Local settings\temporary internet files\content.ie5\{random}\msvcp71.dll

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
1536:SZ6H5Z5hJMnmlkSAuTvX5xg5+zOIQkqPoit+xGbjRE39m+543EEq681xOnbvmPmg:YU5Z5j82xAuDJxHaIBqPmf30+5s5nWDt

Entry point:
4D, 53, 43, 46, 00, 00, 00, 00, 00, 9C, 01, 00, 00, 00, 00, 00, 2C, 00, 00, 00, 00, 00, 00, 00, 03, 01, 01, 00, 01, 00, 00, 00, 00, 00, 00, 00, 48, 00, 00, 00, 10, 00, 03, 15, 00, A0, 07, 00, 00, 00, 00, 00, 00, 00, 4A, 3C, C1, 71, 20, 00, 6D, 73, 76, 63, 70, 37, 31, 2E, 64, 6C, 6C, 00, 4A, DE, 10, E5, 50, 32, 00, 80, 5B, 80, 80, 8D, 5A, 10, 00, 3E, 00, 00, 21, 00, 00, 34, 00, 00, 4F, 00, FB, F7, 37, B6, 16, 2B, 8C, A6, 88, 98, 7C, AB, B0, 99, B6, C1, C6, CB, B6, 31, 10, 5F, AF, 59, D8, 11, E5, 4B, D9, 8A...
 
[+]

Entropy:
7.9968  (probably packed)

The file msvcp71.dll has been seen being distributed by the following 4 URLs.

http://mylabs.px.pearsoned.com/SIMrepository/web/.../wxOpIBII7IUdYgP2GP&SessionID=vn5qedntxipy3xki0mofbl5n

http://mylabs.px.pearsoned.com/SIMrepository/.../servecontent.pctp?intAssetID=471&FileMode=3&TokenID=o7BCPvps9Uhg94w5taZmyICUe3yozu4j&SessionID=c3z0pp4oz2ktgrbc2agmo2ei

http://mylabs.px.pearsoned.com/SIMrepository/web/.../UyowKQys8hFMAuMHS&SessionID=2hmgl2x0ezqsc3gqijvtc5el

http://mylabs.px.pearsoned.com/SIMrepository/.../servecontent.pctp?intAssetID=471&FileMode=3&TokenID=8qwGBHbQMcUcXeQOXkQukqJjpIQ1ADRy&SessionID=sqwpozcdci55sfuvrk22oajl

Scan msvcp71.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.