home

MFC90.DLL

Microsoft Visual Studio 2008

Microsoft Corporation

This is installed with multiple programs including XML Notepad 2007 and Windows Live Mesh ActiveX Control for Remote Connections. The file has been seen being downloaded from aldn.altools.co.kr.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Visual Studio® 2008

Description:
MFCDLL Shared Library - Retail Version

Version:
9.00.30729.6161

MD5:
2a8dab7aa50cc8305264683b13b61d6d

SHA-1:
0276006a81034bca19b6e155f609651615ecb392

SHA-256:
8db1eb12ae13e0699fbbe9fde717465c8b3df9e760a74e1b0ba2f7f1ad46b9e4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/15/2024 5:51:48 AM UTC  (today)

File size:
4.9 MB (5,086,536 bytes)

Product version:
9.00.30729.6161

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
MFC90.DLL

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\windows\winsxs\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_044aad0bab1eb146\mfc90.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
2/21/2011 2:53:12 PM

Valid to:
5/21/2012 3:53:12 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101B29B000000000015

File PE Metadata
Compilation timestamp:
4/18/2011 9:40:47 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
98304:W8lRKwMX3wMuHV7grci8/Z58naCh9FLOAkGkzdnEVEFoKG5:W8lRiwMYsaCfFLOyEFoKG5

Entry address:
0x268A6C

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 4B, 03, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 87, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 1D, 60, 12, 00, FF, 15, EF, ED, 02, 00, 4C, 8B, 1D, 08, 61, 12, 00, 4C, 89, 5C, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, 99, 26, 00, 00, 48, 89, 44, 24, 50...
 
[+]

Entropy:
6.5414

Code size:
2.6 MB (2,710,528 bytes)

The file MFC90.DLL has been discovered within the following programs.

Windows 7 USB/DVD Download Tool  by Microsoft Corporation
Publisher's description - “When you choose to download most software from the Microsoft Store, you have the option of using Download Manager or downloading from your browser.”
www.microsoftstore.com/store/msstore/html/pbPage.Help_Win7_usbdvd_dwnTool
6% remove it
Windows Live Mesh ActiveX Control for Remote Connections  by Microsoft Corporation
Windows Live Mesh was a free-to-use Internet-based file synchronization application by Microsoft designed to allow files and folders between two or more computers be in sync with each other on Windows (Vista and later) or the Web via SkyDrive.
www.microsoft.com
1% remove it
Windows Media Center Add-in for Flash  by Microsoft Corporation
Windows Media Center Add-in for Flash is a Media Center add-in that provides the ability to recognize and play Flash files and animations. Various services such as hulu requires the Flash plugin in order to steam this media type.
6% remove it
XML Notepad 2007  by Microsoft Corporation
XML Notepad 2007 provides a simple intuitive user interface for browsing and editing XML documents.
xmlnotepad.codeplex.com
5% remove it
 
Powered by Should I Remove It?

The file MFC90.DLL has been seen being distributed by the following URL.

http://aldn.altools.co.kr/altools/ALSongService/iPod-x64/.../mfc90.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.