home

System.ServiceModel.Activation.dll

Microsoft .NET Framework

Microsoft Corporation

The System.ServiceModel.Activation.dll is distributed with version 4.0 of the .NET Framework This assembly is part of version 4.0 of the .NET Framework and was updated as a general distribution release (GDR) delivered via Windows Update. The file has been seen being downloaded from s2.pliki.info.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® .NET Framework

Description:
System.ServiceModel.Activation.dll

Version:
4.0.30319.233 built by: RTMGDR

MD5:
0f7fcdc59c3bd8886900a790835282a8

SHA-1:
5d8ddf7b3039c4349dcf01a77cc33072ea40d39f

SHA-256:
7cf9e73b91e54e58e64ea53bbba43086cf73134ff966e606f0035b850cc94438

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/23/2024 7:23:54 PM UTC  (today)

File size:
171.9 KB (175,992 bytes)

Product version:
4.0.30319.233

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
System.ServiceModel.Activation.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\dotnet40e\windows\microsoft.net\framework\v4.0.30319\system.servicemodel.activation.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
2/21/2011 9:53:12 PM

Valid to:
5/21/2012 10:53:12 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101B29B000000000015

File PE Metadata
Compilation timestamp:
3/30/2011 12:39:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:kByZ/5GYUU6fQ2ETeZGLGUJ49eD9V8LeIF5l:kyYFhfLETcGhzS1j

Entry address:
0x28FBE

Entry point:
FF, 25, 00, 20, 57, 51, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, 00, 01, 00, 01, 00, A0, 00, 00, 80, 20, 00, 00, 80, 10, 00, 00, 00, 38, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, 00, 01, 00, 00, 00, A8, 00, 00, 80, 50, 00, 00, 80, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
156 KB (159,744 bytes)

The file System.ServiceModel.Activation.dll has been seen being distributed by the following URL.

http://s2.pliki.info/.../system.servicemodel.activation.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.