ServiceHub[.]RoslynCodeAnalysisServiceS[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ServiceHub.RoslynCodeAnalysisServiceS.exe
Size

17KB
MD5

33123cc66d8aaf8bcfc775e426bd1427
SHA1

c42f118e964000b928b448c7b1c924078975aeee
SHA256

46013f968eb685415f1aad0a006ae85ff21aa54bd89417d5c5ec388da662fac2
SHA512

27175287939efd70ff61e9c4e2f14937fca662c225b7b5ab260a443899859153e8c0cbda027680574fccfad38d561056928b215cd2a18e355a62cc184235a251
SSDEEP

384:qBbZ/gNcHNW86v7tzQbyHRN7i/P/R9zF55FPDAd:keNk65zQbuGPZ9zP2

Score

1^/10

Malware Config

Signatures

Files

ServiceHub.RoslynCodeAnalysisServiceS.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

46:60:20:39:b5:56:6e:c1:80:44:3e:9b:28:5a:11:4f:a9:fd:38:b9:e6:71:c8:ac:68:68:f0:ed:88:25:95:69
Signer

Actual PE Digest

46:60:20:39:b5:56:6e:c1:80:44:3e:9b:28:5a:11:4f:a9:fd:38:b9:e6:71:c8:ac:68:68:f0:ed:88:25:95:69

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

46:60:20:39:b5:56:6e:c1:80:44:3e:9b:28:5a:11:4f:a9:fd:38:b9:e6:71:c8:ac:68:68:f0:ed:88:25:95:69Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 4KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

46:60:20:39:b5:56:6e:c1:80:44:3e:9b:28:5a:11:4f:a9:fd:38:b9:e6:71:c8:ac:68:68:f0:ed:88:25:95:69
Signer

.text
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B