General

  • Target
    System.Private.Xml.dll
  • Size 7.4MB
  • Sample261107-vslfgszxcx
  • SHA256 d71e72a7a9de324352edd281a46466b51bd0bdd2831b1573f8d3bae8bd2dd4a6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • System.Private.Xml.dll
    .dll 7.4MB

System.Private.Xml.dll

  • SHA256 d71e72a7a9de324352edd281a46466b51bd0bdd2831b1573f8d3bae8bd2dd4a6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
34:5f:3b:ec:6b:22:a1:80:7f:0d:6b:a6:15:46:ac:fc:d6:23:c7:dc:5c:bc:b5:c2:a4:b0:d2:b4:50:b1:af:2b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
System.Private.Xml.ni.pdb /_/src/runtime/artifacts/obj/System.Private.Xml/Release/net10.0-windows/System.Private.Xml.pdb