MSVCR90.DLL

Microsoft Visual Studio 2008

Beijing ELEX Technology Co.,Ltd

MSVCR90.DLL is the runtime components of Visual C++ Libraries required to run applications developed with Visual C++ and is recompiled by Beijing ELEX Technology Co.,Ltd. While the file properties state the file is developed by 'Microsoft Corporation', this is not the case and it is designed just to look like a legitimate Microsoft system file. The module MSVCR90.DLL, “Microsoft® C Runtime Library” by Beijing ELEX Technology Co.,Ltd has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:
Microsoft Corporation  (signed by Beijing ELEX Technology Co.,Ltd)

Product:
Microsoft® Visual Studio® 2008

Description:
Microsoft® C Runtime Library

Version:
9.00.21022.8

MD5:
bf2a0fab0b1e0d0fdc17ef3a4cfdcc5c

SHA-1:
6f2b533d6666cb32bb15ef1b116837b6aab5b897

SHA-256:
655314c205f200ef0f0af96622d5c5ff501f22a529c85aabfccd690d8c515489

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
This is the runtime components of Visual C++ Libraries required to run applications developed with Visual C++. While the file itself is not dangerous, it is part of a program that has been detected.

Analysis date:
12/24/2024 3:31:05 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ELEX (M)
17.2.25.6

File size:
637.4 KB (652,720 bytes)

Product version:
9.00.21022.8

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
MSVCR90.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\oopa!\msvcr90.dll

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
6/13/2011 9:00:00 PM

Valid to:
6/12/2012 8:59:59 PM

Subject:
CN="Beijing ELEX Technology Co.,Ltd", OU=Strategy Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Beijing ELEX Technology Co.,Ltd", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
48B52693ECDF28866B6A2D36EE57B080

File PE Metadata
Compilation timestamp:
11/7/2007 1:23:42 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x22D40

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, A0, BF, 04, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 36, FE, FF, FF, 83, C4, 0C, 5D, C2, 0C, 00, CC, CC, CC, CC, CC, 8B, FF, 56, 57, 33, F6, BF, 40, BA, 5B, 78, 83, 3C, F5, C4, 70, 5B, 78, 01, 75, 1E, 8D, 04, F5, C0, 70, 5B, 78, 89, 38, 68, A0, 0F, 00, 00, FF, 30, 83, C7, 18, E8, EC, A7, 04, 00, 59, 59, 85, C0, 74, 0C, 46, 83, FE, 24, 7C, D2, 33, C0, 40, 5F, 5E, C3, 83, 24, F5, C0, 70, 5B, 78, 00, 33, C0, EB, F1, CC, CC, CC, CC, CC, 8B, FF, 53, 8B, 1D, 40...
 
[+]

Code size:
598.5 KB (612,864 bytes)

Remove MSVCR90.DLL - Powered by Reason Core Security