home

ucrtbase.dll

Microsoft C Runtime Library

Nulana LTD

Publisher:
Microsoft Corporation  (signed by Nulana LTD)

Product:
Microsoft® Windows® Operating System

Description:
Microsoft® C Runtime Library

Version:
10.0.10586.15 (th2_release.151119-1817)

MD5:
47001a7b835b6cbc4f635f99fab513f9

SHA-1:
dd7e98d0534330a943f78812ae84d2a9dbbaf1fb

SHA-256:
029341bcea519244b181f81f58280e2f14e4e9a16976e39efdfe6559978a8832

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/26/2025 5:53:04 AM UTC  (today)

File size:
967.2 KB (990,432 bytes)

Product version:
10.0.10586.15

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
ucrtbase.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\remotix\ucrtbase.dll

Digital Signature
Signed by:
Nulana LTD

Authority:
Symantec Corporation

Valid from:
7/3/2016 8:00:00 PM

Valid to:
2/15/2017 6:59:59 PM

Subject:
CN=Nulana LTD, O=Nulana LTD, L=Perm, S=Permskiy Krai, C=RU

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
1A6FCD5D3198552FED906E62D4755045

File PE Metadata
Compilation timestamp:
11/19/2015 11:54:15 PM

OS version:
10.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
12.10

CTPH (ssdeep):
24576:4dX8vuNxBoVnCBuwJBNMsSLvZCRX3fp8Ri8dmxvSZX0ypnBO:++quw5pKZC9l8HBO

Entry address:
0xA960

Entry point:
40, 53, 48, 83, EC, 20, 8B, DA, 83, FA, 01, 74, 0C, 8B, D3, 48, 83, C4, 20, 5B, E9, C7, 03, 00, 00, E8, 46, 43, 02, 00, EB, ED, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 6C, 24, 10, 48, 89, 74, 24, 18, 57, 41, 56, 41, 57, 48, 83, EC, 20, C6, 41, 18, 00, 48, 8B, F1, 48, 85, D2, 0F, 85, 02, 02, 00, 00, 8B, 05, A2, B3, 0D, 00, 85, C0, 75, 27, 0F, 10, 05, 2F, 97, 0D, 00, 0F, 11, 41, 08, 48, 8B, 5C, 24, 40, 48, 8B, C6, 48, 8B, 74, 24, 50, 48, 8B, 6C, 24, 48, 48...
 
[+]

Code size:
680.5 KB (696,832 bytes)

Scan ucrtbase.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.