home

MSVCR71.DLL

Microsoft Visual Studio .NET

Microsoft Corporation

MSVCR71.DLL is the runtime components of Visual C++ Libraries required to run applications developed with Visual C++. The file has been seen being downloaded from cfile1.uf.tistory.com and multiple other hosts.
Publisher:
Microsoft Corporation

Product:
Microsoft® Visual Studio .NET

Description:
Microsoft® C Runtime Library

Version:
7.10.3052.4

MD5:
f06f36c0e55e5b4312792d6fcacc8042

SHA-1:
eb7ab63a50007690cf9f10c47f01ae0c2ef8cef7

SHA-256:
2404659784ade7f874feefbb4816db4e42852ede0693fb2a7b45145501ea24cd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 12:46:33 AM UTC  (today)

File size:
340.3 KB (348,416 bytes)

Product version:
7.10.3052.4

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
MSVCR71.DLL

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\initech\shttp\msvcr71.dll

File PE Metadata
Compilation timestamp:
2/21/2003 9:42:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
6144:OcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlE2:Ooz83OtIEzW+/m/AyF7bCrO/E2

Entry address:
0x229F

Entry point:
55, 8B, EC, 8B, 45, 0C, 83, F8, 01, 56, 57, 0F, 84, 50, FB, FF, FF, 33, FF, 3B, C7, 0F, 84, 6A, 54, 00, 00, 83, F8, 02, 75, D2, 68, 8C, 00, 00, 00, 6A, 01, E8, 8C, 00, 00, 00, 8B, F0, 3B, F7, 59, 59, 74, 34, 56, FF, 35, 30, B4, 38, 7C, FF, 15, 14, C9, 38, 7C, 85, C0, 56, 0F, 84, 77, 54, 00, 00, E8, D8, 00, 00, 00, 59, FF, 15, 24, A0, 37, 7C, 83, 4E, 04, FF, 89, 06, 33, C0, 40, 8D, 65, F8, 5F, 5E, 5D, C2, 0C, 00, 33, C0, EB, F3, 68, 0D, 24, 34, 7C, 64, A1, 00, 00, 00, 00, 50, 8B, 44, 24, 10, 89, 6C, 24, 10...
 
[+]

Entropy:
6.5444

Developed / compiled with:
Microsoft Visual C++

Code size:
228 KB (233,472 bytes)

ActiveX Install
Name:
{39461460-2552-4D51-A062-3AB6A7B902E9}


The file MSVCR71.DLL has been seen being distributed by the following 2 URLs.

http://cfile1.uf.tistory.com/.../270FFB3E52C4E877196CA8

http://hwsecter.tistory.com/.../cfile1.uf@270FFB3E52C4E877196CA8.dll

Scan MSVCR71.DLL - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.