Microsoft.Dtc.PowerShell.ni.pdb
Microsoft.Dtc.PowerShell.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.Dtc.PowerShell.ni.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Microsoft.Dtc.PowerShell.ni.dll
Resource
win10v2004-20240412-en
Target
Microsoft.Dtc.PowerShell.ni.dll
Size
111KB
MD5
5b6316e54cb4cb70c71bc38e4f5ff8cd
SHA1
8b2df31fd242efe859368f295dfb6c9d527bba42
SHA256
5b2f5732203b46af519492096fd1ba37989bc173300128599b8723e33fe07dc6
SHA512
2f9027c208dcdda84770ce9691a6006825857f799336072835a862df4bc5e565c6e44cf841c6a69634d7e545b5aa513705bfe842b8b11827863f2c0fa529b091
SSDEEP
3072:1F26CUkrMuHtSNBh3okiyqjzlySbwGe/:1FIUtuHa3okiRjlPe/
Checks for missing Authenticode signature.
resource |
---|
Microsoft.Dtc.PowerShell.ni.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Microsoft.Dtc.PowerShell.ni.pdb
Microsoft.Dtc.PowerShell.pdb
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ