home

MSVCM80.DLL

Microsoft Visual Studio 2005

Microsoft Corporation

Publisher:
Microsoft Corporation

Product:
Microsoft® Visual Studio® 2005

Description:
Microsoft® C Runtime Library

Version:
8.00.50727.762

MD5:
cae6861b19a2a7e5d42fefc4dfdf5ccf

SHA-1:
609b81fbd3acda8c56e2663eda80bfafc9480991

SHA-256:
c4c8c2d251b90d77d1ac75cbd39c3f0b18fc170d5a95d1c13a0266f7260b479d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/14/2024 9:09:54 PM UTC  (today)

File size:
468 KB (479,232 bytes)

Product version:
8.00.50727.762

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
MSVCM80.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\msvcm80.dll

File PE Metadata
Compilation timestamp:
12/2/2006 7:52:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:9Rj8Tfo4zrcq2FXOth6wsjb2fPzatjLhQeRW86ODl1KWOjPQeH:9So4zATQsjyWRhQ+W83D/6QO

Entry address:
0x2540A

Entry point:
FF, 25, 74, 92, 4E, 7C, 03, 30, 01, 00, 0B, 00, 00, 00, 00, 00, 00, 00, 28, 05, 06, 00, 06, 80, 01, 00, 00, 04, 2A, CC, 03, 30, 01, 00, 0D, 00, 00, 00, 00, 00, 00, 00, 28, 05, 06, 00, 06, FE, 13, 80, 0B, 00, 00, 04, 2A, CC, CC, CC, 03, 30, 01, 00, 0D, 00, 00, 00, 00, 00, 00, 00, 28, 05, 06, 00, 06, FE, 13, 80, 0C, 00, 00, 04, 2A, CC, CC, CC, 03, 30, 01, 00, 0C, 00, 00, 00, 00, 00, 00, 00, 7F, 0E, 00, 00, 04, 28, 17, 00, 00, 06, 26, 2A, 03, 30, 01, 00, 0D, 00, 00, 00, 00, 00, 00, 00, 28, 05, 06, 00, 06, FE...
 
[+]

Code size:
160 KB (163,840 bytes)

The file MSVCM80.DLL has been discovered within the following program.

WhiteSmoke  by WhiteSmoke
WhiteSmoke is a toolbar for Intenet Explorer and Firefox. The toolbar collects and stores information about your web browsing habits and sends this information to WhiteSmoke so they can suggest services or provide advertising via the toolbar.
www.whitesmoke.com
80% remove it
 
Powered by Should I Remove It?

The file MSVCM80.DLL has been seen being distributed by the following 3 URLs.

https://onedrive.live.com/download.aspx?cid=33AA3953FA2FBC9C&authKey=!AEV6d1bS2HbS2tc&resid=33AA3953FA2FBC9C!437&ithint=.dll

https://drive.google.com/uc?id=0B-gtFDvPlyoXLURzSFltNy03NVU&export=download

http://famemilsson.se/RND/WheelchairBuilder/ProgTool/.../msvcm80.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.