System[.]Diagnostics[.]Process[.]dll

General

Target
System.Diagnostics.Process.dll
Size 321KB
Sample261107-wt3a3azzhx
SHA256 51a57fbe918f8b68930c090792b718fc0850ea12da869d50b97a3796af29a740
MD5 3910cfd67a4ad211cf6695f5d53a5826
SHA1 fd2191bd2343e84579fb511011ffa771762b1469
SHA512 b7e617d2d3c177725a03e8dde7a9c4a8cfaa8f28a1ecbafc8e32524fe1359bfc4afff06458b242932377f1e313a14afe8319735b41541066e454ad533de5504e
SSDEEP 6144:3QjEAFSuTpqNmlS+LeRqI6GnWv9jb3bG1PjdlGODVvYD:AjEfwpqNmYqeRtnfEKvYD
TLSH
T151647E2DB7881509FF6E52B8A077D802E1BD94822781D7CB0350DEA96F5B7C3A771263
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

System.Diagnostics.Process.dll

.dll 321KB

System.Diagnostics.Process.dll

SHA256 51a57fbe918f8b68930c090792b718fc0850ea12da869d50b97a3796af29a740
MD5 3910cfd67a4ad211cf6695f5d53a5826
SHA1 fd2191bd2343e84579fb511011ffa771762b1469
SHA512 b7e617d2d3c177725a03e8dde7a9c4a8cfaa8f28a1ecbafc8e32524fe1359bfc4afff06458b242932377f1e313a14afe8319735b41541066e454ad533de5504e
SSDEEP 6144:3QjEAFSuTpqNmlS+LeRqI6GnWv9jb3bG1PjdlGODVvYD:AjEfwpqNmYqeRtnfEKvYD
TLSH
T151647E2DB7881509FF6E52B8A077D802E1BD94822781D7CB0350DEA96F5B7C3A771263
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

1c:22:b7:ac:5e:10:30:80:de:4e:5b:7d:55:79:d3:1f:e4:f8:fe:b9:bc:7c:2f:52:c3:88:80:5b:fe:9b:44:45

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2026

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:c7:9a:a1:ee:dc:27:e2:f8:b7:00:00:00:00:01:c7

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:4C1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:18:25:d9:92:05:e2:e7:e5:e4:00:01:00:00:02:18

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.Process.ni.pdb /_/src/runtime/artifacts/obj/System.Diagnostics.Process/Release/net10.0-windows/System.Diagnostics.Process.pdb

Sharing

General

Malware Config

Signatures

File Explorer

System.Diagnostics.Process.dll

generic