Microsoft.Build.Engine.dll

  • File Path: C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v4.8\Microsoft.Build.Engine.dll
  • Description: Microsoft.Build.Engine.dll
  • Comments: Flavor=Retail

Hashes

Type Hash
MD5 9AA3369CA17306D81A8F9D715246DE57
SHA1 60A4DD194482C333127F3CCF579CC746ADA6CA33
SHA256 018D0AB92280E77306CAF24149F0D48C1E6B524D05F11E53419F186046DA0CD8
SHA384 8F55A5D8C11A848032E4EC3142791C2CD523AA855DCADB33F25364FE27AF2AA1B0C2FF3AA8C64358E331F2BD82251F49
SHA512 6D6B7B19496FF5FDFF3725FD12CD4DEA2E6495EBC285686AA74E53368A526BBE7BCDCA8C880BC08FACE1E33EFE36B11C51FEF4DFC6419762B4F1B3D8752A8C0D
SSDEEP 3072:B7jf7ZmPiGOA5UXOia8oawaadzaaaaaaaaaaaaaaaaaaaaaaaaanaLaaacaaaaaE:B7jfIPiGLWBxjhpqfxjWFbciQ
IMP DAE02F32A21E03CE65412F6E56942DAA
PESHA1 1C22E4EC28984400EA734818FF6543764C203145
PE256 C9BCE3A0122683A234A717FA4C86B71FD96646320A6B3A07D01DCD2C05AA6115

Signature

  • Status: Signature verified.
  • Serial: 33000001519E8D8F4071A30E41000000000151
  • Thumbprint: 62009AAABDAE749FD47D19150958329BF6FF4B34
  • Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Microsoft.Build.Engine.dll
  • Product Name: Microsoft .NET Framework
  • Company Name: Microsoft Corporation
  • File Version: 4.8.4084.0 built by: NET48REL1
  • Product Version: 4.8.4084.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/018d0ab92280e77306caf24149f0d48c1e6b524d05f11e53419f186046da0cd8/detection

Possible Misuse

The following table contains possible examples of Microsoft.Build.Engine.dll being misused. While Microsoft.Build.Engine.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
atomic-red-team T1127.001.md <blockquote>Adversaries may use MSBuild to proxy execution of code through a trusted Windows utility. MSBuild.exe (Microsoft Build Engine) is a software build platform used by Visual Studio. It handles XML formatted project files that define requirements for loading and building various platforms and configurations.(Citation: MSDN MSBuild) MIT License. © 2018 Red Canary

MIT License. Copyright (c) 2020 Strontic.