74c5e756644fa1683366a8ec3a95354f1940d5278791a3f19160ee296a44a6e8

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2070-Dec-03 21:46:25
Comments System.Core.dll
CompanyName Mono development team
FileDescription System.Core.dll
FileVersion 4.6.57.0
InternalName System.Core.dll
LegalCopyright (c) Various Mono authors
OriginalFilename System.Core.dll
ProductName Mono Common Language Infrastructure
ProductVersion 4.6.57.0
Assembly Version 4.0.0.0

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
.NET DLL -> Microsoft
Info Cryptographic algorithms detected in the binary: Uses constants related to AES
Suspicious The PE is possibly packed. The PE only has 1 import(s).
Safe VirusTotal score: 0/71 (Scanned on 2026-04-09 14:02:25) All the AVs think this file is safe.

Hashes

MD5 6f9c07e355b7d30fff2dc4034cabf603
SHA1 1b1d7749d087020e7211dcd07e55166a708d8d1e
SHA256 74c5e756644fa1683366a8ec3a95354f1940d5278791a3f19160ee296a44a6e8
SHA3 94e497388df114a34adeeb56acb6b201dd3ac4cfbb24e129b13e01a9bbf18cf5
SSDeep 12288:LBjCHjVd0KgYzOTEj0UYnJY7vFbB7Rp3iJNopu3kQLcQNwxuBueAEdud9deeycH:sVdZoGzFbXMoU3k+cAwQkvKXlmtpVR
Imports Hash dae02f32a21e03ce65412f6e56942daa

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2070-Dec-03 21:46:25
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 8.0
SizeOfCode 0x10e600
SizeOfInitializedData 0x600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0011056E (Section: .text)
BaseOfCode 0x2000
BaseOfData 0x112000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x116000
SizeOfHeaders 0x200
Checksum 0x1142d8
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 ef40b8871a051749c1bb39f81f14f8dd
SHA1 dff222ec488189c5234096121533a6020bdfd0e6
SHA256 bf60bd5213d005cfc434531730505c1b4c0d16ebda1a51e85750cd8614860f98
SHA3 ef2dd1133d1b7636dad263c0f75c006df052395f3dfab7e2c7f0557c9541913f
VirtualSize 0x10e574
VirtualAddress 0x2000
SizeOfRawData 0x10e600
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.87087

.rsrc

MD5 948e201ae97820f8b64d9fd35b389eb7
SHA1 5514bc4512b7eee426c00e8744556f12e2fc41ee
SHA256 bc9790261149e7f972711cf07971d1374b01015f3b73f45a97df0185c8829c4d
SHA3 ccc7c74ed7cc7a13a375e555b4ab2730ca5eb8baf7e80584b51e3e1ba897c8d8
VirtualSize 0x3ec
VirtualAddress 0x112000
SizeOfRawData 0x400
PointerToRawData 0x10e800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.217

.reloc

MD5 98bd06062a76b59dcd6d4e582fd944df
SHA1 7498d09107700dd18c6934d3804e5fbc997f5317
SHA256 c3e5cbc64ec87daa0f11b9fb57e36860d09e6dee1164b54c0fc9bb105b93a821
SHA3 45ccd6b81421d749d3aee69a8d2c0ae84e1942bc8abff70fd3cf86a3a81150a4
VirtualSize 0xc
VirtualAddress 0x114000
SizeOfRawData 0x200
PointerToRawData 0x10ec00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.0815394

Imports

mscoree.dll _CorDllMain

Delayed Imports

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x394
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.37572
MD5 9f92824bc34818f668009117e8925cf0
SHA1 4d0ab4749ba568afef394a9735ac1a3e6fd75da5
SHA256 1b1e045571025679d4e95751da9981bcd1b9d1d20b7b454554e60c1f3389ce24
SHA3 a1b2889245dddd88db12aa03782fed2d2c936a7e00c86fbcca3bc1ed0bf863cd

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 4.6.57.0
ProductVersion 4.6.57.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DLL
Language UNKNOWN
Comments System.Core.dll
CompanyName Mono development team
FileDescription System.Core.dll
FileVersion (#2) 4.6.57.0
InternalName System.Core.dll
LegalCopyright (c) Various Mono authors
OriginalFilename System.Core.dll
ProductName Mono Common Language Infrastructure
ProductVersion (#2) 4.6.57.0
Assembly Version 4.0.0.0
Resource LangID UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.