64-bit
burnmachine scopedownload.visualstudio.microsoft.com · publisher domain- File name
- VC_redist.x64.exe
- SHA-256
- 843068991daaa1f73ad9f6239bce4d0f6a07a51f18c37ea2a867e9beca71295c
by Microsoft Corporation · Proprietary (Freeware)
The Microsoft Visual C++ v14 Redistributable Package (x64).
This is the package behind a whole family of errors: "VCRUNTIME140.dll was not found", "MSVCP140.dll is missing", and programs that refuse to start with no explanation at all. Applications built with Visual C++ need this runtime and many installers forget to include it.
The redistributable listed here is Microsoft's official standalone package with its published hash.
The 2015 through 2022 versions share a single runtime, so the current package covers all of them. Install both the x64 and x86 versions: plenty of 32-bit applications run on 64-bit Windows and need the 32-bit runtime specifically.
Searching for "VCRUNTIME140.dll download" leads to sites distributing individual DLL files, which is one of the oldest malware delivery methods on the web. Install the official redistributable and the DLL arrives with it, correctly registered.
These URLs are the ones Microsoft Corporation declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Microsoft Corporation published. Delete it.
Windows · PowerShell
Get-FileHash "VC_redist.x64.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "VC_redist.x64.exe"Expected output
843068991daaa1f73ad9f6239bce4d0f6a07a51f18c37ea2a867e9beca71295c
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
If a program reported one of these as missing, this is the package it belongs to. Installing it puts the file where it goes, registered properly, which downloading the DLL on its own does not.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Licence declared | Proprietary (Freeware)A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from microsoft.com, which is a domain we have tied to Microsoft Corporation.
Every one of the 2 installers on this page comes with the SHA-256 Microsoft Corporation declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Microsoft.VCRedist.2015+.x64 --exactUpgrade later
winget upgrade --id Microsoft.VCRedist.2015+.x64Why --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Microsoft Visual C++ v14 Redistributable (x64), each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Microsoft Visual C++ v14 Redistributable (x64) version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Microsoft Corporation and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Microsoft Visual C++ v14 Redistributable (x64) — just other entries, each with its own official URL and published hash.