msvcp140_codecvt_ids[.]dll

Resubmissions

25/06/2026, 11:41

260625-ntkr1sbt9m

25/06/2026, 10:48

260625-mwhj1abs5m3

Sharing

Copy URL Twitter E-mail

General

Target
msvcp140_codecvt_ids.dll
Size 29KB
Sample260625-ntkr1sbt9m
SHA256 024e16380ae3722e164b48fb69b560f19b311d50921090dea4d1897f81c87591
MD5 16297b3597570f321f971fd3143d0c23
SHA1 8e26c7671c760f856e44bd8c093b71c837b1e5d0
SHA512 ac91c46f5f4737b50f60047bd145350d09fed77c0c7b4a866f6064a926f0da73854286cf02d9310e6131744c47050cba5eaaa503e29b695fbce8356dc5660980
SSDEEP 384:K5JDjJc3ZJBgjKOoWiUEWLegQgKSt+eIoP6zaHeR9zdj+SRvsHRN7K6zaHeR9zdx:mJO3ZrbyjzleWC9zAuwGC9zv
TLSH
T1D6D25AD6EA284442ED9A2C7062F8D5537D3DA7E34D5090632B92F9081C97BC6FE3422E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

msvcp140_codecvt_ids.dll

.dll 29KB

msvcp140_codecvt_ids.dll

IMPHASH 72e793c2d219d77e6e25707a25ef03fb
SHA256 024e16380ae3722e164b48fb69b560f19b311d50921090dea4d1897f81c87591
MD5 16297b3597570f321f971fd3143d0c23
SHA1 8e26c7671c760f856e44bd8c093b71c837b1e5d0
SHA512 ac91c46f5f4737b50f60047bd145350d09fed77c0c7b4a866f6064a926f0da73854286cf02d9310e6131744c47050cba5eaaa503e29b695fbce8356dc5660980
SSDEEP 384:K5JDjJc3ZJBgjKOoWiUEWLegQgKSt+eIoP6zaHeR9zdj+SRvsHRN7K6zaHeR9zdx:mJO3ZrbyjzleWC9zAuwGC9zv
TLSH
T1D6D25AD6EA284442ED9A2C7062F8D5537D3DA7E34D5090632B92F9081C97BC6FE3422E
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

31:0a:06:ca:bf:32:db:e2:32:ff:7c:5b:25:86:9e:04:b5:f8:5f:cc:de:ae:12:80:50:c1:4b:cf:5a:d5:9c:31

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 10, 2023

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

31:0a:06:ca:bf:32:db:e2:32:ff:7c:5b:25:86:9e:04:b5:f8:5f:cc:de:ae:12:80:50:c1:4b:cf:5a:d5:9c:31

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 10, 2023

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:e5:ce:9e:eb:de:4d:48:35:f4:00:00:00:00:00:e5

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 2, 2023 - Jan 31, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 1, 2013 - May 1, 2028

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:ba:1f:3f:19:f7:c1:75:bd:7c:00:01:00:00:01:ba

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:3c:2b:0a:49:d9:d2:91:7e:ac:00:00:00:00:03:3c

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 16, 2023 - Jan 31, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Minor OS version

Major OS version

Entry point

6208

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\binaries\x86ret\bin\i386\\msvcp140_codecvt_ids.i386.pdb

msvcp140_codecvt_ids.dll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

generic