951a276306a0710f6da81692784a050a4c2c6452a753fa4afa124ae35e230a1c

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2053-May-14 15:15:53
Debug artifacts /_/artifacts/obj/MSBuild/Release/net472/MSBuild.pdb
Comments MSBuild.exe
CompanyName Microsoft Corporation
FileDescription MSBuild.exe
FileVersion 18.10.1.42706
InternalName MSBuild.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename MSBuild.exe
ProductName Microsoft® Build Tools®
ProductVersion 18.10.1-1.26427.6+3cd27c13eb422ceea9de6fb84d12684e3bcf3188
Assembly Version 15.1.0.0

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
Info Interesting strings found in the binary: Contains domain names:
  • github.com
  • http://schemas.microsoft.com
  • http://schemas.microsoft.com/developer/msbuild/2003
  • https://aka.ms
  • https://github.com
  • microsoft.com
  • schemas.microsoft.com
Info The PE is digitally signed. Signer: .NET
Issuer: Microsoft Code Signing PCA 2024
Safe VirusTotal score: 0/70 (Scanned on 2026-09-09 18:32:29) All the AVs think this file is safe.

Hashes

MD5 b3ca6468ef92cf55a9f9ea11c41db8d8 🔍
SHA1 5586fd54402edbea3e37fa524e4506afc0bab7ba 🔍
SHA256 951a276306a0710f6da81692784a050a4c2c6452a753fa4afa124ae35e230a1c 🔍
SHA3 084a3d48ac6acf459e521c79446d673409c6a891a7f4d3d6c7c240c3f229d5f2 🔍
SSDeep 6144:ti+yxs0H0BEGQQfcgjPnapTr9WvFMzYHMgnbjR1dPhw+YDkKt01NBcoez32Oy:k/lozapTrwtvsgnbj/wR6OoezGOy 🔍
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2053-May-14 15:15:53
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 48.0
SizeOfCode 0x41e00
SizeOfInitializedData 0x17a00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00043C26 (Section: .text)
BaseOfCode 0x2000
BaseOfData 0x44000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x5e000
SizeOfHeaders 0x200
Checksum 0x5dc36
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 6e0f4d6a46cdeffd36fe4a9ab93130ee 🔍
SHA1 57a84090cb16bf6fc4a3f338289d9af1fa08845e 🔍
SHA256 acb2388e77fe03fd4261a673cbf614825cc0e740a0aba028e94c13c227038e4c 🔍
SHA3 9558a05314feabfa9f2c66d551faac05b75e64cb9186dadddfe33686780e2893 🔍
VirtualSize 0x41c2c
VirtualAddress 0x2000
SizeOfRawData 0x41e00
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.01756

.rsrc

MD5 7b54d5a3d1318ecf3b886095e593c1c1 🔍
SHA1 16eeb77a275664cd33b58967b7a5a2301c42f4a2 🔍
SHA256 e15d349fe0c2963907d06aa859c0321c7f5455a9ccafe53889979dbd51123ab1 🔍
SHA3 8b76fc0710cad5cb9e962a0e685305fa4db2d4cf995167dcab241082aa3c70cc 🔍
VirtualSize 0x17678
VirtualAddress 0x44000
SizeOfRawData 0x17800
PointerToRawData 0x42000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.36946

.reloc

MD5 40858ae4c74fee00817977d59865a17a 🔍
SHA1 bb1b906c1410f1c94e70d09adea12009878a5985 🔍
SHA256 c065cb01a2ddb35ff2a85bc3b1a2657e5690b30c295ac7b22965027349e14d3d 🔍
SHA3 4d54c9f70eb99dac75dfb8e9a42fb168b6c08a7cc93361bc4381615adf3eac85 🔍
VirtualSize 0xc
VirtualAddress 0x5c000
SizeOfRawData 0x200
PointerToRawData 0x59800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.10191

Imports

mscoree.dll _CorExeMain

Delayed Imports

1

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x871d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98486
Detected Filetype PNG graphic file
MD5 d22afe1215712779a192ca4e5f45dd1c 🔍
SHA1 bf26b7211ef6dcdb4a4ebe93e42a6cc5a1f5aa7c 🔍
SHA256 e26dbbb9c0fca6a83cc67186744c1695bf327dba07fa34d5c1116748d32adf02 🔍
SHA3 670a2337e9406e7dfc6413e92aabdb76dc8a8b14fae4081ad44dce64a4297ca4 🔍

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.58852
MD5 a08e5cfb3ae190475591e92155cfb8e6 🔍
SHA1 6864f48d250fe8cf6605ba6f1398374ae438aec4 🔍
SHA256 7cfd33ba7b72801c6517598405479a6d3093122fcfc8f90236854d72affd6a50 🔍
SHA3 db1c2b76249a28bb59b40a5e174f55f724103221150c866886504534aa1ba4a7 🔍

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x3a48
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.53181
MD5 a1024e4ecdc001346c13752d76bfebc4 🔍
SHA1 e2a589948ef74e68fbe6513a628abe8f1732041c 🔍
SHA256 d99bf4b0ac138bdf77cd37e5797b3d6c866ee19f2f798b2995e9139fec3b1440 🔍
SHA3 8697e657fef5394426bd57c57d857f74b5940a78dbcefca0c6ac6a7c50730c09 🔍

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.58152
MD5 c137bacfd76e89535f015c3fe2868cb8 🔍
SHA1 54fbcb8690a91816c2aafae8e37a0b8f8062725c 🔍
SHA256 1d8d446db9ad9e9e23d716925f30ff8b3ca75d5a2e8519b156680a09ffefc6e3 🔍
SHA3 ba3137c835b6ef1efe94242906f152106f7561962bfb4b09d946783e65814252 🔍

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x1a68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.80696
MD5 38cb5ed6057c10408bf2049ab0760fe1 🔍
SHA1 7d9a2a168ef8c34464ea49dfa39bc806a75e035d 🔍
SHA256 6d26f019138b2505fdf542ca9b47e5342bf2cf011d1adc38411d927477fe6df1 🔍
SHA3 105c3ca057279be933b3954c7a54c2c87d567d64d80ecbe9cd5ed259e20edfe5 🔍

6

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.13261
MD5 f643d00e2f0bcca6a8dfee03111ad776 🔍
SHA1 ff75eb75e764155514b7d5a27693d41bcae7f10c 🔍
SHA256 0daddabceb8304267e965396455432c51c4581f3663cdb5e099af44ecd528e93 🔍
SHA3 d7306cd185d01eaa62a59d3c799ce554415c4efa0343670991b2997546cffff6 🔍

7

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.79837
MD5 5fbd349d0ccaea78f817c40d1f9c6fe4 🔍
SHA1 fd7ffb721155c0656cf04b55807f0187c46ef589 🔍
SHA256 08c96a9407b9da30d9e96c2634ee4d7f06236834dd2b851ae33f722396442759 🔍
SHA3 fdd9fa0758464a0e587580cd1d78aacb759c82f9c4e573bda044ddb047d04b6e 🔍

8

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x6b8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.43676
MD5 d42b32a080803f7c8ac75d13f63fbd73 🔍
SHA1 f149ed88c9be4ec51eda93439ae3a184e0e8a1dc 🔍
SHA256 1ae1d2f88130c0643a7ebe74f88af53abe5070a017e6beb854c3f16c9f86b4fb 🔍
SHA3 74e8c9aa437c3a63fe4000532e42c2ad6b629e0605127c755409f31a185d7264 🔍

9

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.39183
MD5 f9e9632bea6a5d57bc9f8f9d77952790 🔍
SHA1 95d413343cf3fb8830cd72eb16427d1ad080a2a6 🔍
SHA256 82b050c8ca942f3ab362856b0c6fbac9f13ae960e47d16a50507fb36955c6f6e 🔍
SHA3 e9cadf677edebbc1d290a992df2d691d4caa468aa51642069c0dd52d15e284f4 🔍

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.0303
Detected Filetype Icon file
MD5 5b65504a1c688c5c986e266e436248cb 🔍
SHA1 60a1b3166037ecadc2589286598add20fade22b0 🔍
SHA256 d8d82c0a976f9441833f5d56805b2b78b2c68e4bc7da7fd5f63093e7a4381fa0 🔍
SHA3 3cd434e5435bd44d67fcd08882dd96983cd497cf64c0a2f7542287bee278733f 🔍

1 (#2)

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x3f2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.50881
MD5 904ef2ef1c58ad76c599c51496ba1007 🔍
SHA1 b49412c6fa5d7f77b0135a6e4548503836a6b7ac 🔍
SHA256 9161de2ae976b211adf03826db62fc6387b92698d5c1d7f3b46bd540faa6b7a5 🔍
SHA3 40e806929e132a1dd11814492b6a97ee1100d76b0e2d73a4cf8fec53e64b548d 🔍

1 (#3)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0x65c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.29857
MD5 6a0c7365d214ab7930ee87ff84ee27fc 🔍
SHA1 cf2a30633dcbd0dfb1be0b6b59f782587e250ce4 🔍
SHA256 e8977902e553318a595e7fd179aa8a47bd53ec8bbc84d59cf34e9dc94e59d7ed 🔍
SHA3 43ee4fbb8897a6496d6b503ade4263ef7c0b5faf6e0165cbd9d71876eded3d30 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 18.10.1.42706
ProductVersion 0.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments MSBuild.exe
CompanyName Microsoft Corporation
FileDescription MSBuild.exe
FileVersion (#2) 18.10.1.42706
InternalName MSBuild.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename MSBuild.exe
ProductName Microsoft® Build Tools®
ProductVersion (#2) 18.10.1-1.26427.6+3cd27c13eb422ceea9de6fb84d12684e3bcf3188
Assembly Version 15.1.0.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2087-Dec-17 05:45:56
Version 256.20557
SizeofData 76
AddressOfRawData 0x43b60
PointerToRawData 0x41d60
Referenced File /_/artifacts/obj/MSBuild/Release/net472/MSBuild.pdb

UNKNOWN

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 1.0
SizeofData 39
AddressOfRawData 0x43bac
PointerToRawData 0x41dac

UNKNOWN (#2)

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.