filenamemfcm90u.dll
size67072 (0x10600)
md5f7a0346122583a263555064844ad314e
typePE32+ executable (DLL) (GUI) x86-64 Mono/.Net assembly, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
109507272
123605162
147307297
150204131
131307298
123507274
10138
1323072920
146307291
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections7
TimeDateStamp0x4a596801
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion9.0
SizeOfCode0x4000
SizeOfInitializedData0xe600
SizeOfUninitializedData0
AddressOfEntryPoint0x45fc
BaseOfCode0x1000
ImageBase0x79570000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion9.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x18000
SizeOfHeaders0x400
CheckSum0x14fd4
Subsystem2
DllCharacteristics0x40
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x388f0x3a00R-X CODE
.nep0x50000x4200x600R-X CODE
.rdata0x60000xb1cf0xb200R-- IDATA
.data0x120000x2b900x800RW- IDATA
.pdata0x150000x1200x200R-- IDATA
.rsrc0x160000x3e00x400R-- IDATA
.reloc0x170000x1ce0x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x111100xbf
IMPORT0x107900x8c
RESOURCE0x160000x3e0
EXCEPTION0x150000x120
SECURITY00
BASERELOC0x170000xd8
DEBUG0x64b00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x60000x410
Delay_IAT00
CLR_Header0x64e00x48
typenamesizecp
VERSION#18920
module_namehintordfunction_name
MSVCR90.dll67void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR90.dll56public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64

?_type_info_dtor_internal_method@type_info@@QEAAXXZ

MSVCR90.dll123__clean_type_info_names_internal
MSVCR90.dll932_unlock
MSVCR90.dll90__CppXcptFilter
MSVCR90.dll573_lock
MSVCR90.dll740_onexit
MSVCR90.dll752_purecall
MSVCR90.dll89__C_specific_handler
MSVCR90.dll226_amsg_exit
MSVCR90.dll301_decode_pointer
MSVCR90.dll312_encoded_null
MSVCR90.dll1196free
MSVCR90.dll104__FrameUnwindFilter
MSVCR90.dll249_cexit
MSVCR90.dll35void __cdecl operator delete[](void * __ptr64)

??_V@YAXPEAX@Z

MSVCR90.dll463_initterm_e
MSVCR90.dll462_initterm
MSVCR90.dll590_malloc_crt
MSVCR90.dll311_encode_pointer
MSVCR90.dll99__CxxFrameHandler3
MSVCR90.dll17void * __ptr64 __cdecl operator new(unsigned __int64)

??2@YAPEAX_K@Z

MSVCR90.dll19void __cdecl operator delete(void * __ptr64)

??3@YAXPEAX@Z

MSVCR90.dll133__dllonexit
mfc90u.dll4006
mfc90u.dll6085
mfc90u.dll5701
mfc90u.dll2784
mfc90u.dll4221
mfc90u.dll4224
mfc90u.dll4009
mfc90u.dll3860
mfc90u.dll2718
mfc90u.dll5933
mfc90u.dll4232
mfc90u.dll6206
mfc90u.dll6233
mfc90u.dll4095
mfc90u.dll2217
mfc90u.dll5964
mfc90u.dll5965
mfc90u.dll2200
mfc90u.dll1339
mfc90u.dll1347
mfc90u.dll5444
mfc90u.dll1770
mfc90u.dll3782
mfc90u.dll379
mfc90u.dll1201
mfc90u.dll1118
mfc90u.dll1103
mfc90u.dll1996
mfc90u.dll1650
mfc90u.dll1651
mfc90u.dll2602
mfc90u.dll2797
mfc90u.dll2904
mfc90u.dll4419
mfc90u.dll2780
mfc90u.dll2919
mfc90u.dll2605
mfc90u.dll2711
mfc90u.dll2598
mfc90u.dll3023
mfc90u.dll3818
mfc90u.dll3819
mfc90u.dll3809
mfc90u.dll2709
mfc90u.dll887
mfc90u.dll588
mfc90u.dll269
mfc90u.dll791
mfc90u.dll4051
mfc90u.dll4596
mfc90u.dll4372
mfc90u.dll3255
mfc90u.dll6088
mfc90u.dll1209
mfc90u.dll6208
mfc90u.dll2028
mfc90u.dll1187
mfc90u.dll2105
mfc90u.dll1657
mfc90u.dll3200
mfc90u.dll3490
mfc90u.dll1326
mfc90u.dll699
mfc90u.dll462
mfc90u.dll3689
mfc90u.dll5333
mfc90u.dll3170
mfc90u.dll3794
mfc90u.dll5346
mfc90u.dll5306
mfc90u.dll1949
mfc90u.dll344
mfc90u.dll4384
mfc90u.dll1654
mfc90u.dll4710
mfc90u.dll1634
mfc90u.dll5107
mfc90u.dll4290
mfc90u.dll1110
mfc90u.dll1109
mfc90u.dll586
KERNEL32.dll1061Sleep
KERNEL32.dll591GetSystemTimeAsFileTime
KERNEL32.dll427GetCurrentProcessId
KERNEL32.dll430GetCurrentThreadId
KERNEL32.dll614GetTickCount
KERNEL32.dll846QueryPerformanceCounter
msvcm90.dll2?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXPE$AAVEventHandler@System@@@Z
msvcm90.dll3?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@@Z
msvcm90.dll5?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVException@System@@0@Z
msvcm90.dll?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6AJPEAX@Z0@Z
msvcm90.dll1?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
msvcm90.dll4?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@PE$AAVException@3@@Z
USER32.dll383GetWindow
USER32.dll79CopyRect
USER32.dll271GetClientRect
USER32.dll615SendMessageW
USER32.dll547PostMessageW
USER32.dll687SetWindowPos
mscoree.dll115_CorDllMain
ordentry_vafunction_name
2560x52f0
2570x5090
2580x5070
2590x5050
2600x5390
2610x50b0
2620x5250
2630x50d0
2640x5230
2650x5370
2660x5330
2670x52b0
2680x5110
2690x52d0
2700x5350
2710x5310
2720x5290
2730x5270
2740x1504
2750x50f0
2790x2788
2800x53b0
2810x53d0AfxmReleaseManagedReferences
module_nameMFCM90U.dll
flags0
timestamp2009-07-12 03:31:49
version0.0
ordinal_base256
nFunctions26
nNames1
Names(1)0x111a0
Functions(26)0x11138
NameOrdinals(1)0x111a4

StringTable 040904b0

CompanyNameMicrosoft Corporation
FileDescriptionMFC Managed Library - Retail Version
FileVersion9.00.30729.4148
InternalNameMFCM90U.DLL
LegalCopyright© Microsoft Corporation. All rights reserved.
ProductNameMicrosoft® Visual Studio® 2008
OriginalFilenameMFCM90U.DLL
ProductVersion9.00.30729.4148

VS_FIXEDFILEINFO

FileVersion9.0.30729.4148
ProductVersion9.0.30729.4148
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d061488BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK