home

System.Windows.Forms.dll

Microsoft .NET Framework

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® .NET Framework

Description:
.NET Framework

Version:
4.0.30319.1 built by: RTMRel

MD5:
7d65996c70cf024823a16a2c62be370a

SHA-1:
62a8a95f4d6343098e271f1dc8cf09d2c6dea85b

SHA-256:
204e5165c79151c134121b602cf47d0009e3763de92f88b07896ca67fd5c83af

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/5/2024 9:33:41 AM UTC  (today)

File size:
1.6 MB (1,637,736 bytes)

Product version:
4.0.30319.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
System.Windows.Forms.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\reference assemblies\microsoft\framework\.netframework\v4.0\system.windows.forms.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 2:40:29 PM

Valid to:
3/7/2011 2:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
3/18/2010 1:17:17 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:t5Frhtd1jGo3iP5ddoxLrUFclZXZEsPQl6JVVlvDHUOTO+Ha0Q4zEqvliUHWMgb:tXjXjG7g26rVlvDHUIO6a0Q4DvlB1gb

Entry address:
0x18F72A

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.6714

Code size:
1.6 MB (1,628,672 bytes)

The file System.Windows.Forms.dll has been discovered within the following programs.

FaceUbe  by FaceUbe
Publisher's description - “Faceube gives you the possibility of populating an unlimited number of accounts in facebook including timeline, pages, and groups either your own or groups where you have a membership.”
61% remove it
FBMatic  by FBMatic
Publisher's description - “Quickly, Easily and Safely automates all Facebook marketing tasks and youtube market. money, extra income, passive income, information on how to earn extra in Facebook.”
fbmatic.com
52% remove it
File Finder Tsunami Lite  by File Finder Tsunami Lite
Publisher's description - “File Finder Tsunami PRO, is a software to search any kind of file hosted in the most famous sharing file websites. You can search for PDFs, software, graphic packages, videos, courses, tutorials, footprints, .edu lists, .”
filefindertsunami.com
46% remove it
 
Powered by Should I Remove It?

The file System.Windows.Forms.dll has been seen being distributed by the following URL.

https://doc-10-5s-docs.googleusercontent.com/docs/securesc/fv2mooik2h8t6cf0akhj53oqmm1r9cip/dvn2ajud9ptbv8g8n2ta3hddt7163qpq/1465365600000/01436485459148413914/.../0B3M7Sgvu5GIbajRDdkgtR3FqekU?e=download

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.