System[.]Xml[.]Serialization[.]dll

General

Target
System.Xml.Serialization.dll
Size 15KB
Sample261107-tk9mnsd14p
SHA256 489694401c60905cb6dca8ef0bf738cb609cd45b337126a01c825b913086ba43
MD5 4e81e7e5c2bea37ecfb1a88642f6d3f4
SHA1 235916e7209f36b4a06a4f4d8926b3564b4259ab
SHA512 50e5c195b65998875a21123d4af97879210359ba242b1d763ce280066c9b798e911b146645fea79b155b4f21d1a8b1c754a1dd9ba8dbed2c2940289e49b368fd
SSDEEP 192:otsS70LW77EqHWI5WF+GBTBWseaAWrNPVueTXflYBQXBnX01k9z3AAryI:oqG0LW77EqHWI0lNd1cUthXBnR9zJryI
TLSH
T138723CA6C3AC8213EDD72F70DE58E8833CB897DA5D519A661092F11A18137C8DB32B1D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

System.Xml.Serialization.dll

.dll 15KB

System.Xml.Serialization.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 489694401c60905cb6dca8ef0bf738cb609cd45b337126a01c825b913086ba43
MD5 4e81e7e5c2bea37ecfb1a88642f6d3f4
SHA1 235916e7209f36b4a06a4f4d8926b3564b4259ab
SHA512 50e5c195b65998875a21123d4af97879210359ba242b1d763ce280066c9b798e911b146645fea79b155b4f21d1a8b1c754a1dd9ba8dbed2c2940289e49b368fd
SSDEEP 192:otsS70LW77EqHWI5WF+GBTBWseaAWrNPVueTXflYBQXBnX01k9z3AAryI:oqG0LW77EqHWI0lNd1cUthXBnR9zJryI
TLSH
T138723CA6C3AC8213EDD72F70DE58E8833CB897DA5D519A661092F11A18137C8DB32B1D
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

06:a7:e5:c4:9e:24:f5:e2:34:0d:7e:24:1f:24:84:90:da:64:2b:00:e8:7c:7d:cb:ee:3f:84:f7:1d:10:9c:49

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2026

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:c7:9a:a1:ee:dc:27:e2:f8:b7:00:00:00:00:01:c7

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6F1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1c:09:55:15:d7:c3:59:07:d1:00:01:00:00:02:1c

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

11390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/runtime/artifacts/obj/System.Xml.Serialization/Release/net10.0-windows/System.Xml.Serialization.pdb

System.Xml.Serialization.dll

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

System.Xml.Serialization.dll

mscoree

dotnet