General

  • Target
    System.Diagnostics.EventLog.Messages.dll
  • Size 781KB
  • Sample261107-wwdeqaey9j
  • SHA256 8f3def30d41d85e2bd87b2d2e7542d49d625f0b4d96a6dc9b03e0f49bd59b8ef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • System.Diagnostics.EventLog.Messages.dll
    .dll 781KB

System.Diagnostics.EventLog.Messages.dll

  • IMPHASH dae02f32a21e03ce65412f6e56942daa
  • SHA256 8f3def30d41d85e2bd87b2d2e7542d49d625f0b4d96a6dc9b03e0f49bd59b8ef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fd:39:c3:f8:fd:e4:04:eb:f1:ff:23:1a:78:ac:de:4c:3f:37:59:82:3a:3f:22:90:99:ab:06:aa:c1:cd:1c:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
4
Entry point
10578
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.Diagnostics.EventLog.Messages/Release/netstandard2.0/System.Diagnostics.EventLog.Messages.pdb