System[.]Security[.]Claims[.]dll

General

Target
System.Security.Claims.dll
Size 97KB
Sample261107-va915adt2x
SHA256 c53c8a7e95d8296f951872fdd2e6334d11c20bffd4322f1a088773bf9dcaa3c2
MD5 13bfda591ab1c833ff922f64c0a02120
SHA1 0843db1499826a40a72cee41745f3455f2a3fd1f
SHA512 47082561733f6789d68e97d5960d90a587da3b9c8b557918f2d405ad326c412d9f0b19c49199d97314864781e9d3d07fc3f00fb4628dd13873f7b3f5471b7a5a
SSDEEP 1536:ZkLkIPoqibMZP32rNYcIfD/90S31IOrOQwQ7rzUU3q2bP67aBvMz8z:Z8NPoqibM532ZYcIfDBD6aKYz
TLSH
T117A3392477EC0216D6FA0E3D85E38409E5B5F9831722C6EF09399A0D5D97BC1D632E2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

System.Security.Claims.dll

.dll 97KB

System.Security.Claims.dll

SHA256 c53c8a7e95d8296f951872fdd2e6334d11c20bffd4322f1a088773bf9dcaa3c2
MD5 13bfda591ab1c833ff922f64c0a02120
SHA1 0843db1499826a40a72cee41745f3455f2a3fd1f
SHA512 47082561733f6789d68e97d5960d90a587da3b9c8b557918f2d405ad326c412d9f0b19c49199d97314864781e9d3d07fc3f00fb4628dd13873f7b3f5471b7a5a
SSDEEP 1536:ZkLkIPoqibMZP32rNYcIfD/90S31IOrOQwQ7rzUU3q2bP67aBvMz8z:Z8NPoqibM532ZYcIfDBD6aKYz
TLSH
T117A3392477EC0216D6FA0E3D85E38409E5B5F9831722C6EF09399A0D5D97BC1D632E2B
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

12:95:7e:b0:53:9b:59:db:aa:b4:1d:47:41:2a:b5:2c:da:cf:6a:57:d7:31:ea:75:2e:79:58:8e:20:e1:c4:c6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2026

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:c7:9a:a1:ee:dc:27:e2:f8:b7:00:00:00:00:01:c7

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6B05-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:11:45:18:39:9b:43:cf:fc:6c:00:01:00:00:02:11

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Claims.ni.pdb /_/src/runtime/artifacts/obj/System.Security.Claims/Release/net10.0/System.Security.Claims.pdb

Sharing

General

Malware Config

Signatures

File Explorer

System.Security.Claims.dll

generic