home

System.Xml.dll

Microsoft .NET Framework

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® .NET Framework

Description:
.NET Framework

Version:
4.0.30319.1 built by: RTMRel

MD5:
cab6cacf2236e74b3845789c5fd1e6bd

SHA-1:
3beedf758f7f1b9881b3d2de50a10d4b0009470d

SHA-256:
6c13e62f31bb034f82acd06446444611418b15c8be9633a6d4f9189759b1811e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 7:42:41 AM UTC  (today)

File size:
919.8 KB (941,904 bytes)

Product version:
4.0.30319.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
System.Xml.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\reference assemblies\microsoft\framework\.netframework\v4.0\system.xml.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 2:40:29 PM

Valid to:
3/7/2011 2:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
3/18/2010 1:11:03 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:5K4VezRBeB9kix6zJoRzBj/Ki7zN5CgY56Bu28ayc:ZARAB92zJoRtjSi7zN5e5Cu28ayc

Entry address:
0xE53EA

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.5159

Code size:
911.5 KB (933,376 bytes)

The file System.Xml.dll has been discovered within the following programs.

FaceUbe  by FaceUbe
Publisher's description - “Faceube gives you the possibility of populating an unlimited number of accounts in facebook including timeline, pages, and groups either your own or groups where you have a membership.”
61% remove it
FBMatic  by FBMatic
Publisher's description - “Quickly, Easily and Safely automates all Facebook marketing tasks and youtube market. money, extra income, passive income, information on how to earn extra in Facebook.”
fbmatic.com
52% remove it
File Finder Tsunami Lite  by File Finder Tsunami Lite
Publisher's description - “File Finder Tsunami PRO, is a software to search any kind of file hosted in the most famous sharing file websites. You can search for PDFs, software, graphic packages, videos, courses, tutorials, footprints, .edu lists, .”
filefindertsunami.com
46% remove it
 
Powered by Should I Remove It?

The file System.Xml.dll has been seen being distributed by the following URL.

https://doc-0g-5s-docs.googleusercontent.com/docs/securesc/fv2mooik2h8t6cf0akhj53oqmm1r9cip/a02h6grk33g56l8jejnlq2arlbd24n9h/1465365600000/01436485459148413914/.../0B3M7Sgvu5GIbRjBSc19DUXExNUU?e=download

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.