home

System.Drawing.dll

Microsoft .NET Framework

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® .NET Framework

Description:
.NET Framework

Version:
4.0.30319.1 built by: RTMRel

MD5:
36fab23d648d9f7d772f312cbd783dba

SHA-1:
25a2e0471f00e2e28fbb73ab1143ee1562e1722c

SHA-256:
a8a134b773bdb25be802c76e3f4990b87c663748e8a71a596de62cd197aaab33

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/25/2024 4:28:04 PM UTC  (today)

File size:
207.8 KB (212,824 bytes)

Product version:
4.0.30319.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
System.Drawing.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\reference assemblies\microsoft\framework\.netframework\v4.0\system.drawing.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 2:40:29 PM

Valid to:
3/7/2011 2:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
3/18/2010 1:13:13 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:XhdyO1VUYVrr78Lp2h+8dbvRY9Bk6ABrdN09CnA0u02z3z5PL95p:XTDgLp2hBYpAEx0WP

Entry address:
0x33BE2

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9304

Code size:
199.5 KB (204,288 bytes)

The file System.Drawing.dll has been discovered within the following programs.

FaceUbe  by FaceUbe
Publisher's description - “Faceube gives you the possibility of populating an unlimited number of accounts in facebook including timeline, pages, and groups either your own or groups where you have a membership.”
61% remove it
FBMatic  by FBMatic
Publisher's description - “Quickly, Easily and Safely automates all Facebook marketing tasks and youtube market. money, extra income, passive income, information on how to earn extra in Facebook.”
fbmatic.com
52% remove it
File Finder Tsunami Lite  by File Finder Tsunami Lite
Publisher's description - “File Finder Tsunami PRO, is a software to search any kind of file hosted in the most famous sharing file websites. You can search for PDFs, software, graphic packages, videos, courses, tutorials, footprints, .edu lists, .”
filefindertsunami.com
46% remove it
 
Powered by Should I Remove It?

The file System.Drawing.dll has been seen being distributed by the following URL.

https://doc-04-5s-docs.googleusercontent.com/docs/securesc/fv2mooik2h8t6cf0akhj53oqmm1r9cip/lobua2o4pgq1csp5h5i5ea0b7aham73v/1465365600000/01436485459148413914/.../0B3M7Sgvu5GIbeE1SdlYxQmF2OTQ?e=download

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.