home

msvcr110.dll

Microsoft Visual Studio 2012

RAFO TECHNOLOGY INC

While the file properties state the file is developed by 'Microsoft Corporation', this is not the case and it is designed just to look like a legitimate Microsoft system file. The file msvcr110.dll, “Microsoft® C Runtime Library” by RAFO TECHNOLOGY INC has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Microsoft Corporation  (signed by RAFO TECHNOLOGY INC)

Product:
Microsoft® Visual Studio® 2012

Description:
Microsoft® C Runtime Library

Version:
11.00.51106.1 built by: Q11REL

MD5:
1430090fc1cc158881bb1e2160547e8a

SHA-1:
4998a34a7174335d7039d9d23e93368a24edd49a

SHA-256:
157830d437c1f5733433ab5414dacd8906fb92d8a96e1cb0ec26f0bd3a98273f

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/26/2024 11:18:43 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.RafoTech (M)
17.2.21.17

File size:
845.2 KB (865,504 bytes)

Product version:
11.00.51106.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
msvcr110.dll

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\_@e1bf.tmp

Digital Signature
Signed by:
RAFO TECHNOLOGY INC

Authority:
GlobalSign nv-sa

Valid from:
1/20/2017 12:53:56 AM

Valid to:
4/18/2019 2:50:02 AM

Subject:
CN=RAFO TECHNOLOGY INC, O=RAFO TECHNOLOGY INC, L=Alhambra, S=California, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G3, O=GlobalSign nv-sa, C=BE

Serial number:
189058EB912897C11845508E

File PE Metadata
Compilation timestamp:
11/6/2012 1:35:42 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

Entry address:
0x1013C

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 0F, 84, 09, 79, 01, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 3E, FF, FF, FF, 83, C4, 0C, 5D, C2, 0C, 00, 55, 8B, EC, 56, 8B, 75, 08, 85, F6, 74, 79, 53, 57, 8B, 3D, 18, D0, 0C, 10, 56, FF, D7, 83, 7E, 78, 00, 74, 05, FF, 76, 78, FF, D7, 8B, 86, 80, 00, 00, 00, 85, C0, 74, 03, 50, FF, D7, 83, 7E, 7C, 00, 74, 05, FF, 76, 7C, FF, D7, 8B, 86, 88, 00, 00, 00, 85, C0, 74, 03, 50, FF, D7, 6A, 06, 58, 8D, 5E, 1C, 89, 45, 08, 81, 7B, F8, 90, 88, 0C, 10, 74, 0C, 83, 3B, 00, 74, 07, FF...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
792 KB (811,008 bytes)

Remove msvcr110.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.